The VMware Knowledge Base provides support solutions, error messages and troubleshooting guides
VMware ESXi 5.0, Patch ESXi500-201212101-SG: Updates VMware ESXi 5.0 esx-base vib (2033767)
Release Date: December 20, 2012
|Build||For build information, see KB 2033751.|
|Host Reboot Required||Yes|
|Virtual Machine Migration or Shutdown Required||No|
838809, 876112, 903971, 905362, 922247
|Related CVE numbers||CVE-2009-5029, CVE-2009-5064, CVE-2010-0830, CVE-2011-1089 , CVE-2011-4609, CVE-2012-0864, CVE-2010-4180, CVE-2010-4252, CVE-2011-0014, CVE-2011-4108 , CVE-2011-4109, CVE-2011-4576, CVE-2011-4577, CVE-2011-4619, CVE-2012-0050, and CVE-2011-3048|
For more information on patch and update classification, see KB 2014447.
Summaries and Symptoms
This patch updates the esx-base VIB to resolve the following security issues:
- PR 838809: The ESX Server glibc packages is updated to version glibc-2.5-81.el5_8.1 to resolve multiple security issues.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2009-5029, CVE-2009-5064, CVE-2010-0830, CVE-2011-1089 , CVE-2011-4609, and CVE-2012-0864 to these issues.
- PR 876112: The ESX userworld OpenSSL library is updated from version 0.9.8p to version 0.9.8t to resolve multiple security issues.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2010-4180, CVE-2010-4252, CVE-2011-0014, CVE-2011-4108 , CVE-2011-4109, CVE-2011-4576, CVE-2011-4577, CVE-2011-4619, and CVE-2012-0050 to these issues.
- PR 903971: Third Party Library libpng is updated to version 1.2.49, which resolves a security issue.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2011-3048 to this issue.
- PR 905362: If you set a non-zero time out value for SSH & ESXi Shell, the SSH & ESXi Shell gets disabled after reaching the time out value. But, if you re-enable SSH or ESXi Shell without changing the timeout setting, the SSH & ESXi Shell does not timeout.
- PR 922247: This patch updates the glibc package for ESX service console to glibc-2.5-81.el5_8.7. This fixes multiple security issues in glibc which could result in remote code execution.
None beyond the required patch bundles and reboot information listed in the table above.
Patch Download and Installation
The typical way to apply patches to ESXi hosts is through the VMware Update Manager. For details, see the Installing and Administering VMware vSphere Update Manager.
Request a Product Feature
To request a new product feature or to provide feedback on a VMware product, please visit the Request a Product Feature page.