Knowledge Base

The VMware Knowledge Base provides support solutions, error messages and troubleshooting guides
 
Search the VMware Knowledge Base (KB)   View by Article ID
 

Remediating steps on important updates to VMware Horizon Workspace Server regarding CVE-2014-0224 (2082181)

Purpose

The VMware Horizon Workspace Server requires an update to resolve a security issue found in the OpenSSL 1.0.1 library. 

This article describes VMware Horizon Workspace Server security updates of OpenSSL components.

The patch must be applied immediately to fix the important security vulnerability reported in CVE-2014-0224. For more information on this vulnerability, see the VMware Security Advisory
 
This article applies to these releases:
  • Horizon Workspace Server 1.5.0
  • Horizon Workspace Server 1.8.0
  • Horizon Workspace Server 1.8.1

If you have already upgraded your server to Horizon Workspace 1.8.2 or Workspace Portal 2.0, you can ignore this article.

Resolution

The Horizon Workspace Server patch must be applied immediately to fix the important security vulnerability reported in CVE­2014­0224.

This patch updates the Open SSL library to version 1.0.1h.
 
Product Name
Version
Patch file
Checksum
Horizon Workspace Server
1.5.0
horizon-nginx-rpm-1.5.0.0-1876270.x86_64.rpm
MD5 = d94ebd3fd3f4338630d438947e0b85a5
SHA1 = 60b4ee96aad42b14ab315d335c95a57b2c273067
Horizon Workspace Server
1.8.0
or
1.8.1
horizon-nginx-rpm-1.8.2.1820-1876338.x86_64.rpm
MD5 = aa8255834110efdcc6a969ea918fb76f
SHA1 = 04524c2679b86eff5d1322f16b6d2f31e3383a48


To install the patch:
  1. Download the appropriate patch file for Horizon Workspace Server version. To download the patch, see:
  2. Copy the patch file to all gateway-va machines in your Horizon Workspace vApp.
  3. Login to gateway-va machine as a root.
  4. Run this command to install the required software:

    rpm –U patch_file_name

  5. Restart the nginx service using this command:

    etc/rc.d/nginx restart

  6. Repeat Steps 2 to 5 for all gateway-va machines in your Horizon Workspace vApp.

Request a Product Feature

To request a new product feature or to provide feedback on a VMware product, please visit the Request a Product Feature page.

Feedback

  • 0 Ratings

Did this article help you?
This article resolved my issue.
This article did not resolve my issue.
This article helped but additional information was required to resolve my issue.
What can we do to improve this information? (4000 or fewer characters)
  • 0 Ratings
Actions
KB: