Knowledge Base
The VMware Knowledge Base provides support solutions, error messages and troubleshooting guides

|
VMware ESX 4.0, Patch ESX400-201103403-SG: Updates VMware-webCenter-esx RPM (1032815)
Details
Release date: March 07, 2011
| Patch Classification | Security |
| Build Information | See KB 1032822. |
| Host Reboot Required | No |
| Virtual Machine Migration or Shutdown Required | No |
| PRs Fixed | 601652 |
| Affected Hardware | N/A |
| Affected Software | N/A |
| VIBs Included | VMware-webCenter-esx |
| Related CVE numbers |
CVE-2010-3556, CVE-2010-3566, CVE-2010-3567, CVE-2010-3550, CVE-2010-3561, CVE-2010-3573,
CVE-2010-3565, CVE-2010-3568, CVE-2010-3569, CVE-2009-3555, CVE-2010-1321, CVE-2010-3548, CVE-2010-3551, CVE-2010-3562, CVE-2010-3571, CVE-2010-3554, CVE-2010-3559, CVE-2010-3572, CVE-2010-3553, CVE-2010-3549, CVE-2010-3557, CVE-2010-3541, CVE-2010-3574, CVE-2009-2693, CVE-2009-2901, CVE-2009-2902, CVE-2009-3548, CVE-2010-2227, CVE-2010-1157 |
Solution
Summaries and Symptoms
This patch provides the following updates:
- An updated version of the Oracle (Sun) Java Runtime Environment (JRE). JRE is updated to version 1.5.0_26, which addresses multiple security issues that existed in earlier releases of Oracle (Sun) JRE.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the following names to the security issues fixed in Oracle (Sun) JRE 1.5.0_26: CVE-2010-3556, CVE-2010-3566, CVE-2010-3567, CVE-2010-3550, CVE-2010-3561, CVE-2010-3573, CVE-2010-3565, CVE-2010-3568, CVE-2010-3569, CVE-2009-3555, CVE-2010-1321, CVE-2010-3548, CVE-2010-3551, CVE-2010-3562, CVE-2010-3571, CVE-2010-3554, CVE-2010-3559, CVE-2010-3572, CVE-2010-3553, CVE-2010-3549, CVE-2010-3557, CVE-2010-3541, and CVE-2010-3574.
- An updated version of Apache Tomcat. Apache Tomcat is updated to version 6.0.28, which addresses multiple security issues that existed in earlier releases of Apache Tomcat. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the following names to the security issues fixed in Apache Tomcat 6.0.24: CVE-2009-2693, CVE-2009-2901, CVE-2009-2902, and CVE-2009-3548.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the following names to the security issues fixed in Apache Tomcat 6.0.28: CVE-2010-2227, and CVE-2010-1157.
Deployment Considerations
None beyond the required patch bundles and reboot information listed in the table above.
Patch Download and Installation
See the VMware vCenter Update Manager Administration Guide for instructions on using Update Manager to download and install patches to automatically update ESX 4.0 hosts.
To update ESX 4.0 hosts when not using Update Manager, download the patch ZIP file from http://support.vmware.com/selfsupport/download/ and install the bulletin using esxupdate from the command line of the host. For more information, see the ESX 4 Patch Management Guide.
Request a Product Feature
To request a new product feature or to provide feedback on a VMware product, please visit the Request a Product Feature page.
Actions
KB:
- Updated:
- Categories:
- Languages:
- Product Family:
- Product(s):
- Product Version(s):

