VMware ESX Server 1.5.2 Patch 5 Security Update

Released 7/28/04 TAR File

In ESX Server, the service console is implemented using a modified Linux distribution. This patch includes a new update for ESX Server 1.5.2 Patch 5 that addresses the following vulnerabilities in the Linux kernel:

• Linux security exploit CAN-2004-0554

• Linux security exploit CAN-2004-0077 (Previously released as patch p7428)
  

• Linux security exploit CAN-2003-0985 (Previously released as patch p7428 and p6994)
  

• Linux security exploit CAN-2003-0961 (Previously released as patch p7428 and p6994)
  

There is a separate security update for ESX Server 2.0.1 available as the VMware ESX Server 2.0.1 Security Update.

Note: This update only works if you have ESX Server 1.5.2 Patch 5, Build 5835. Please make sure that this build is installed before applying the patch. The installer will log the name of this patch and information on the updated components in the file /var/log/vmkernel-version.

Installing the Update

This update will require a reboot of your ESX server to take effect. You must shutdown your virtual machines before installing the patch.

1. Log in as root into the ESX Server 1.5.2 service console.
2. Your path variable should contain /usr/bin.

3. Download the tar file into the temporary directory /tmp, on your ESX service console.

4. Change directory to /tmp.

5. Verify the integrity of the package:
   # md5sum esx152_update_9359.tar.gz

   The md5 checksum output should match the following:
   ac4ace31efb989096918c5f626c5b563 esx152_update_9359.tar.gz

6. Extract the compressed tar archive:
   # tar -xvzf esx152_update_9359.tar.gz

7. Change directories to the newly created directory /tmp/esx152_update_9359:
   # cd esx152_update_9359

8. Run the driver installer:
   # /usr/bin/perl ./esx9359update.pl

9. The drivers are now updated. A reboot prompt displays:
   Reboot the server now [y/n]?

   This update will not be complete until you reboot the ESX Server. If you enter N, to indicate that you will not reboot at this time, ESX Server displays the warning message "Please reboot the server manually for this update to take effect. Update has been terminated unexpectedly." If you see this message, you must manually reboot the server to complete the driver update.

10. At the reboot prompt, enter Y to reboot the server.