VMware ESX Server 2.0.1 Security Update

Released 7/28/04 TAR File

In ESX Server, the service console is implemented using a modified Linux distribution. This patch includes a new update for ESX Server 2.0.1 that addresses the following vulnerabilities in the Linux kernel:

• Linux security exploit CAN-2004-0554
• Linux security exploit CAN-2004-0077 (Previously released as patch p7428)
  
• Linux security exploit CAN-2003-0985 (Previously released as patch p7428 and p6994)
  
• Linux security exploit CAN-2003-0961 (Previously released as patch p7428 and p6994)
  

There is a separate security update for ESX Server 1.5.2 available as the VMware ESX Server 1.5.2 Security Update.

Linux Security Update for ESX Server 2.0.1, Build 6403

Note: This update only works if you have ESX Server 2.0.1, Build 6403. Please make sure that this build is installed before applying the patch. The installer will log the name of this patch and information on the updated components in the file /var/log/vmkernel-version.

Installing the Update

This update will require a reboot of your ESX server to take effect. You must shutdown your virtual machines before installing the patch.

1. Log in as root into the ESX Server 2.0.1 service console.
2. Your path variable should contain /usr/bin:/bin.
3. Download the tar file into the temporary directory /tmp, on your ESX service console.
4. Change directory to /tmp.
5. Verify the integrity of the package:
   # md5sum esx201_update_9340.tar.gz

   The md5 checksum output should match the following:
   b8678bcc7af812f0f8b85967975636a3 esx201_update_9340.tar.gz

6. Extract the compressed tar archive:
   # tar -xvzf esx201_update_9340.tar.gz
7. Change directories to the newly created directory /tmp/esx201_update_9340:
   # cd esx201_update_9340
8. Run the driver installer:
   # /usr/bin/perl ./esx9340update.pl
9. The drivers are now updated. A reboot prompt displays:
   Reboot the server now [y/n]?

   This update will not be complete until you reboot the ESX Server. If you enter N, to indicate that you will not reboot at this time, ESX Server displays the warning message "Please reboot the server manually for this update to take effect. Update has been terminated unexpectedly." If you see this message, you must manually reboot the server to complete the driver update.

10. At the reboot prompt, enter Y to reboot the server.