VMware ESXi 6.5, Patch Release ESXi650-201803401-BG - Updates esx-base, esx-tboot, vsan, and vsanhealth VIBs
search cancel

VMware ESXi 6.5, Patch Release ESXi650-201803401-BG - Updates esx-base, esx-tboot, vsan, and vsanhealth VIBs

book

Article ID: 326456

calendar_today

Updated On:

Products

VMware

Issue/Introduction

Release date: March 20, 2018

Patch CategoryBugfix
Patch SeverityImportant
Host Reboot RequiredYes
Virtual Machine Migration or Shutdown RequiredYes
Affected HardwareN/A
Affected SoftwareN/A
VIBs Included
  • VMware_bootbank_esx-base_6.5.0-1.41.7967591
  • VMware_bootbank_esx-tboot_6.5.0-1.41.7967591
  • VMware_bootbank_vsan_6.5.0-1.41.7547709
  • VMware_bootbank_vsanhealth_6.5.0-1.41.7547710
PRs Fixed N/A
Related CVE numbersCVE-2017-5715


IMPORTANT: If you use a host profile based on VMware vCenter Server 6.5 Update 1e, there is a small possibility that your existing profile has captured the wrong state for the workaround discussed in KB 52345. Use the following steps to refresh the profile:

  1. Log in to the reference ESXi host as a root user.
  2. From the ESXi Shell, run the command /usr/lib/vmware/misc/bin/ucode_workarounds.py.
  3. Update the host profile from the reference ESXi host with the Copy Settings from Host option.
  4. Check Host Profile compliance and remediate all the ESXi hosts attached to the host profile.


Resolution

Summaries and Symptoms

This patch updates the esx-base, esx-tboot, vsan and vsanhealth VIBs to resolve the following issue:

  • This ESXi patch provides part of the hypervisor-assisted guest mitigation of CVE-2017-5715 for guest operating systems. For important details on this mitigation, see VMware Security Advisory VMSA-2018-0004.3.
Patch Download and Installation

The typical way to apply patches to ESXi hosts is through the VMware vSphere Update Manager. For details, see the Installing and Administering VMware vSphere Update Manager.

ESXi hosts can be updated by manually downloading the patch ZIP file from the VMware download page and installing the VIB by using the esxcli software vib command. Additionally, the system can be updated using the image profile and the esxcli software profile command. For details, see the vSphere Command-Line Interface Concepts and Examples  and the vSphere Upgrade Guide.
Powered by Wolken Software