Knowledge Base

The VMware Knowledge Base provides support solutions, error messages and troubleshooting guides
 
Search the VMware Knowledge Base (KB)   View by Article ID
 

VMware ESXi 5.0 Patch Image Profile ESXi-5.0.0-20121201001s-standard (2033770)

Details

Release date: December 20, 2012
 
 

Profile Name
ESXi-5.0.0-20121201001s-standard
Build
For build information, see KB 2033751.
Vendor
VMware, Inc.
Release Date
December 20, 2012
Acceptance Level
PartnerSupported
Affected Hardware
N/A
Affected Software
N/A
Affected VIBs
VMware: esx-base_5.0.0-1.25.912577
VMware: tools-light_5.0.0-1.25.912577
PRs Fixed
838809, 876112, 903971, 905362, 922247
Related CVE numbers
CVE-2009-5029, CVE-2009-5064, CVE-2010-0830, CVE-2011-1089 , CVE-2011-4609, CVE-2012-0864, CVE-2010-4180, CVE-2010-4252, CVE-2011-0014, CVE-2011-4108 , CVE-2011-4109, CVE-2011-4576, CVE-2011-4577, CVE-2011-4619, CVE-2012-0050, and CVE-2011-3048

 

For information on patch and update classification, see KB 2014447.


Solution

Summaries and Symptoms

This patch updates the esx-base, and tools-light VIBs to resolve multiple issues:
  • PR 838809: The ESXi Server glibc packages is updated to version glibc-2.5-81.el5_8.1 to resolve multiple security issues.
    The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2009-5029, CVE-2009-5064, CVE-2010-0830, CVE-2011-1089 , CVE-2011-4609, and CVE-2012-0864 to these issues.
  • PR 876112: The ESXi userworld OpenSSL library is updated from version 0.9.8p to version 0.9.8t to resolve multiple security issues.
    The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2010-4180, CVE-2010-4252, CVE-2011-0014, CVE-2011-4108 , CVE-2011-4109, CVE-2011-4576, CVE-2011-4577, CVE-2011-4619, and CVE-2012-0050 to these issues.
  • PR 903971: Third Party Library libpng is updated to version 1.2.49, which resolves a security issue.
    The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2011-3048 to this issue.
  • PR 905362: If you set a non-zero time out value for SSH & ESXi Shell, the SSH & ESXi Shell gets disabled after reaching the time out value. But, if you re-enable SSH or ESXi Shell without changing the timeout setting, the SSH & ESXi Shell does not timeout.
  • PR 922247: This patch updates the glibc package for ESXi service console to glibc-2.5-81.el5_8.7. This fixes multiple security issues in glibc which could result in remote code execution.  
Deployment Considerations

None beyond the required patch bundles and reboot information listed in the table above.

Patch Download and Installation
An ESXi system can be updated using the image profile, by using the esxcli software profile command. For details, see the vSphere Command-Line Interface Concepts and Examples and the vSphere Upgrade Guide.For information about image profiles and how it applies to ESXi 5.0 hosts, see Image Profiles of ESXi 5.0 Hosts (KB 2009231). ESXi hosts can also be updated by manually downloading the patch ZIP file from the VMware download page and installing the VIB by using the esxcli software vib command.

Request a Product Feature

To request a new product feature or to provide feedback on a VMware product, please visit the Request a Product Feature page.

Feedback

  • 2 Ratings

Did this article help you?
This article resolved my issue.
This article did not resolve my issue.
This article helped but additional information was required to resolve my issue.
What can we do to improve this information? (4000 or fewer characters)
  • 2 Ratings
Actions
KB: