VMware ESXi 6.5, Patch Release ESXi650-201803402-BG - Updates cpu-microcode VIB
search cancel

VMware ESXi 6.5, Patch Release ESXi650-201803402-BG - Updates cpu-microcode VIB

book

Article ID: 325261

calendar_today

Updated On:

Products

VMware vSphere ESXi

Issue/Introduction

Release date: March 20, 2018

Patch CategoryBugfix
Patch SeverityImportant
Host Reboot RequiredYes
Virtual Machine Migration or Shutdown RequiredYes
Affected HardwareN/A
Affected SoftwareN/A
VIBs Included
  • VMware_bootbank_cpu-microcode_6.5.0-1.41.7967591
PRs Fixed N/A
Related CVE numbersN/A


NOTE: If you have added the workaround step mentioned in KB 52345, the workaround will not be removed automatically if you apply the cpu-microcode VIB alone. You must also apply the VIBs in bulletin ESXi650-201803401-BG to remove the workaround.


Resolution

Summaries and Symptoms

This patch updates the cpu-microcode VIB to resolve the following issue:

  • This ESXi patch provides part of the hypervisor-assisted guest mitigation of CVE-2017-5715 for guest operating systems. For important details on this mitigation, see VMware Security Advisory VMSA-2018-0004.3.

Patch Download and Installation

The typical way to apply patches to ESXi hosts is through the VMware vSphere Update Manager. For details, see the Installing and Administering VMware vSphere Update Manager.
 
ESXi hosts can be updated by manually downloading the patch ZIP file from the VMware download page and installing the VIB by using the esxcli software vib command. Additionally, the system can be updated using the image profile and the esxcli software profile command. For details, see the vSphere Command-Line Interface Concepts and Examples and the vSphere Upgrade Guide.