Knowledge Base

Search the Knowledge Base: |
Search the Knowledge Base: |
ESX Server 3.0.0, Patch ESX-4809553: Security Updates; Updates to Monitor
Details
|
cd363526aab5fa6c45bf2509cb5ae500
|
|
Summary
-
Fixes a security vulnerability that could allow a guest operating system user with administrative privileges to cause memory corruption in a host process, and thus potentially execute arbitrary code on the host. The Common Vulnerabilities and Exposures project (cve.mitre.org) assigned the following name to this issue: CVE-2007-4496.
Thanks to Rafal Wojtczvk of McAfee for identifying and reporting this issue. -
Fixes a denial of service vulnerability that could allow a guest operating system to cause a host process to become unresponsive or exit unexpectedly. The Common Vulnerabilities and Exposures project (cve.mitre.org) assigned the following name to this issue: CVE-2007-4497.
Thanks to Rafal Wojtczvk of McAfee for identifying and reporting this issue.
This patch also provides the following fix:
-
Fixes an issue where the user cannot delete the snapshot of a powered on virtual machine that has two disks with identical file names and/or on separate data stores. You must also install patch ESX-1000081 to complete the fix for this issue. Patches ESX-4809553 and ESX-1000081 can be installed in any order.
|
Note: There is no update to VMware-esx-tools RPM. But VMware-esx-tools is included with this patch due to dependency requirements. |
Solution
Symptoms
There are no symptoms available for the security fixes.
In systems without this patch, the following symptom might be seen for the snapshot delete issue:
Deleting the snapshot of a virtual machine fails in the following scenario: Create a virtual machine that has two disks with identical names on separate datastores. Take a snapshot of the virtual machine. Deleting the snapshot fails with errors similar to the following:
- Error in the virtual machine's uuid/VM-name/vmware.log : vmx| SNAPSHOT:GetConsolidateList failed 21
- Error in the hostd logs: Failed to do Snapshot op: Error: The virtual disk is used multiple times hostd pulls this error message out of a foundry callback its snapshot callback.
Impact
This patch resolves the symptoms discussed above and improves patch management activities on all ESX Server hosts. Command line usage of the tool has not changed, but custom scripts and third-party utilities could be affected by these changes.
Download Instructions
Download and verify the patch bundle as follows:
- Download patch ESX-4809553 by clicking on the link above.
- Log in to the ESX Server service console as root.
- Create a local depot directory.
# mkdir -p /var/updates
Note: VMware recommends that you use the updates directory.
- Change your working directory to /var/updates .
# cd /var/updates
- Download the tar file into the /var/updates directory.
- Verify the integrity of the downloaded tar file:
# md5sum ESX-4809553.tgz
The md5 checksum output should match the following:
cd363526aab5fa6c45bf2509cb5ae500 ESX-4809553.tgz - Extract the compressed tar archive:
# tar -xvzf ESX-4809553.tgz
- Change to the newly created directory, /var/updates/ESX-4809553:
# cd ESX-4809553
Installation Instructions
Note: All virtual machines on the host must be either shut down or migrated using VMotion before applying the patch.
Once you have downloaded and extracted the archive, and if you are in the directory you created above, install the update using the following command:
# esxupdate update
To run esxupdate from a different directory, you must specify the bundle path in the command:
# esxupdate -r file://<directory>/ESX-4809553 update
for example, if the host is called depot:
# esxupdate -r file:///depot/var/updates/ESX-4809553 update
During the update process, logs appear on the terminal. You can specify the verbosity of esxupdate logs by using the -v option as shown below.
# esxupdate -v 10 file://<directory>/ESX-4809553 update
For more information on using esxupdate, refer to the Patch Management for ESX Server 3 tech note at http://www.vmware.com/pdf/esx3_esxupdate.pdf.
Keywords
Feedback
- KB Article: 4809553
- Updated: Aug 14, 2009
- Products:
VMware ESX - Product Versions:
VMware ESX 3.0.x

