Search the VMware Knowledge Base (KB)
View by Article ID

VMware ESXi 6.0, Patch ESXi600-201601101-SG: Updates esx-base (2135122)

  • 0 Ratings

Details

Release date: January 7, 2016

                                                                                                                                                                                                                                                                                                                                 

Patch Category Security
Patch Severity Important
Build For build information, see KB 2135114.
Host Reboot Required Yes
Virtual Machine Migration or Shutdown Required Yes
Affected Hardware N/A
Affected Software N/A
VIBs Included VMware:esx-base:6.0.0-1.23.3341439
PRs Fixed 1483810, 1488099, 1506512
Related CVE numbers NA

Solution

Summaries and Symptoms

This patch updates the esx-base VIB to resolve the following issues:

  • Support for the Advanced Encryption Standard (AES) with 128/256-bit key length is added for RPC header authentication in the NFS 4.1 Client.

    Note: DES_CBC_MD5 encryption is no longer supported for NFS 4.1 client. If your array does not support “AES encryption”, you need to update your array firmware before running this patch upgrade.

  • The ESXi userworld OpenSSL library is updated to version openssl-1.0.1p.
  • The remote ESXi SSL syslog client uses the SSLv3 protocol that is considered unsecure. This issue is resolved in this release by disabling SSLv3 by default and enabling support for TLS versions 1.0, 1.1, and 1.2 for most of the vSphere Components.

    See Knowledge base article 2136185 for the list of supported TLS protocols.

Patch Download and Installation

The typical way to apply patches to ESXi hosts is through the VMware vSphere Update Manager. For details, see the Installing and Administering VMware vSphere Update Manager.
 
ESXi hosts can be updated by manually downloading the patch ZIP file from the VMware download page and installing the VIB by using the esxcli software vib command. Additionally, the system can be updated using the image profile and the esxcli software profile command. For details, see the vSphere Command-Line Interface Concepts and Examples and the vSphere Upgrade Guide.

Request a Product Feature

To request a new product feature or to provide feedback on a VMware product, please visit the Request a Product Feature page.

Feedback

  • 0 Ratings

Did this article help you?
This article resolved my issue.
This article did not resolve my issue.
This article helped but additional information was required to resolve my issue.

What can we do to improve this information? (4000 or fewer characters)




Please enter the Captcha code before clicking Submit.
  • 0 Ratings
Actions
KB: