Knowledge Base

The VMware Knowledge Base provides support solutions, error messages and troubleshooting guides

Search the VMware Knowledge Base (KB)

View by Article ID

VMware ESX 4.1, Patch ESX410-201101202-UG: Updates ESX 4.1 VMware-webCenter-esx (1028453)

Details

Product Versions	ESX 4.1
Build	For build information, see KB 1029353.
Patch Classification	Critical
Severity	Critical
Host Reboot Required	No
Virtual Machine Migration or Shutdown Required	No
PRs Fixed	551853, 550671, and 607717
Affected Hardware	N/A
Affected Software	N/A
VIBs Included	VMware-webCenter-esx
Related CVE numbers	CVE-2009-3555, CVE-2010-0082, CVE-2010-0084, CVE-2010-0085, CVE-2010-0087, CVE-2010-0088, CVE-2010-0089, CVE-2010-0090, CVE-2010-0091, CVE-2010-0092, CVE-2010-0093, CVE-2010-0094, CVE-2010-0095, CVE-2010-0837, CVE-2010-0838, CVE-2010-0839, CVE-2010-0840, CVE-2010-0841, CVE-2010-0842, CVE-2010-0843, CVE-2010-0844, CVE-2010-0845, CVE-2010-0846, CVE-2010-0847, CVE-2010-0848, CVE-2010-0849, CVE-2010-0850, CVE-2010-0886, CVE-2009-2693, CVE-2009-2901, CVE-2009-2902, CVE-2009-3548, CVE-2010-2227, and CVE-2010-1157

Solution

Summaries and Symptoms

This patch fixes the following security issues:

The Oracle JRE is updated to version 1.6.0_21, which addresses multiple security issues that existed in earlier releases of Oracle JRE.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the following names to the security issues fixed in JRE 1.6.0_19: CVE-2009-3555, CVE-2010-0082, CVE-2010-0084, CVE-2010-0085, CVE-2010-0087, CVE-2010-0088, CVE-2010-0089, CVE-2010-0090, CVE-2010-0091, CVE-2010-0092, CVE-2010-0093, CVE-2010-0094, CVE-2010-0095, CVE-2010-0837, CVE-2010-0838, CVE-2010-0839, CVE-2010-0840, CVE-2010-0841, CVE-2010-0842, CVE-2010-0843, CVE-2010-0844, CVE-2010-0845, CVE-2010-0846, CVE-2010-0847, CVE-2010-0848, CVE-2010-0849, CVE-2010-0850.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the following name to the security issue fixed in JRE 1.6.0_20: CVE-2010-0886.
The Apache Tomcat is updated to version 6.0.28, which addresses multiple security issues that exist in earlier releases of Tomcat.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the following names to the security issues fixed in Tomcat 6.0.24: CVE-2009-2693, CVE-2009-2901, CVE-2009-2902, CVE-2009-3548.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the following names to the security issues fixed in Tomcat 6.0.28: CVE-2010-2227, CVE-2010-1157.

In addition, this patch resolves an issue where, on a virtual machine running in full-screen mode, the mouse does not function properly in the lower portion of the screen. This issue is not specific to a guest operating system or to any specific hardware. When this issue is encountered, the lower portion of the screen appears to be accessible with the mouse pointer. However, clicks do not result in any response.

Deployment Considerations

None beyond the required patch bundles and reboot information listed in the table above.

Patch Download and Installation

See the VMware vCenter Update Manager Administration Guide for instructions on using Update Manager to download and install patches to automatically update ESX 4.1 hosts.

To update ESX 4.1 hosts without using Update Manager, download the patch ZIP file from http://support.vmware.com/selfsupport/download/ and install the bulletin by using esxupdate from the command line of the host. For more information, see the ESX 4.1 Patch Management Guide.

Request a Product Feature

To request a new product feature or to provide feedback on a VMware product, please visit the Request a Product Feature page.

Feedback

1 2 3 4 5
0 Ratings

1 2 3 4 5
0 Ratings

Actions

Bookmark Document

KB:

Did this article help you?
This article resolved my issue. This article did not resolve my issue. This article helped but additional information was required to resolve my issue.
What can we do to improve this information? (4000 or fewer characters)