Updated libxml2 service console package
|VMware Security Advisory|
|Synopsis:||Updated libxml2 service console package|
VMware ESX 3.0.2 without patch ESX-1003528
VMware ESX 3.0.1 without patch ESX-1003521
VMware ESX 2.5.5 before Upgrade Patch 6
VMware ESX 2.5.4 before Upgrade Patch 17
NOTE: ESX 3.0.1 is in Extended Support and its end of support (Security and Bug fixes) is 07/31/2008. Users should plan to upgrade to at least 3.0.2 update 1 and preferably the newest release available before the end of extended support.
NOTE: ESX 2.5.4 is in Extended Support and its end of support (Security and Bug fixes) is 10/08/2008. Users should plan to upgrade to at least 2.5.5 and preferably the newest release available before the end of extended support.
ESX Server versions 3.0.0 and prior to 2.5.4 are no longer in Extended Support. Users should upgrade to a supported version of the product.
The VMware Infrastructure Support Life Cycle Policy can be found here: www.vmware.com/support/policies/eos_vi.html
Thanks to the Google security team for identifying and reporting this issue.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2007-6284 to this issue.
ESX 3.5 Patch ESX350-200803214-UG
VMware ESX 3.0.2 patch ESX-1003528
VMware ESX 3.0.1 patch ESX-1003521
ESX 2.5.5 Upgrade Patch 6
ESX 2.5.4 Upgrade Patch 17
2008-04-11 VMSA-2008-0006.1 Added patch information for
ESX 3.0.1, ESX 3.0.2, ESX 3.5
for patch release on 2008-04-10
This Security Advisory is posted to the following lists:
- security-announce at lists.vmware.com
- bugtraq at securityfocus.com
- full-disclosure at lists.grok.org.uk
PGP key at: kb.vmware.com/kb/1055
Security web site
VMware security response policy
General support life cycle policy
VMware Infrastructure support life cycle policy