VMware ESX Server 2.1.2 Security Update (for 2.1.x systems)

Released 1/18/05 TAR File

This patch includes updates for ESX Server 2.1.x  that addresses the following security vulnerabilities:

• mod_ssl security exploit CAN-2004-0885 (See Knowledge Base Article 1555 for details.)
• mod_ssl security exploit CAN-2004-0700 (See Knowledge Base Article 1429 for details.)
  
• Linux security exploit CAN-2004-0415 (See Knowledge Base Article 1431 for details.)
  

In addition, this update removes a limitation on using more than 30 LUNs simultaneously.

There are a separate security updates for ESX Server 2.0.1 and 1.5.2 available as the VMware ESX Server 2.0.1 Patch 1 Security Update and VMware ESX Server 1.5.2 Patch 6 Security Update.

Note: This update only works if you have ESX Server 2.1, 2.1.1 or 2.1.2. Please make sure that one of these versions is installed before applying the patch. The installer will log the name of this patch and information on the updated components in the file /var/log/vmkernel-version.

Installing the Update

This update will require a reboot of your ESX server to take effect. You must shutdown your virtual machines before installing the patch.

1. Log in as root into the ESX Server service console.
2. Your path variable should contain /usr/bin:/bin.
3. Download the tar file into the temporary directory /tmp, on your ESX service console.
4. Change directory to /tmp.
5. Verify the integrity of the package:
   # md5sum esx-2.1.2-10921-upgrade.tar.gz

   The md5 checksum output should match the following:
   aabf2272a91b4e3dde15242ec22de372 esx-2.1.2-10921-upgrade.tar.gz

6. Extract the compressed tar archive:
   # tar -xvzf esx-2.1.2-10921-upgrade.tar.gz
7. Change directories to the newly created directory /tmp/esx-2.1.2-10921-upgrade:
   # cd esx-2.1.2-10921-upgrade
8. Run the driver installer:
   # /usr/bin/perl ./upgrade.pl
9. The system updates have now been installed. A reboot prompt displays:
   Reboot the server now [y/n]?

   This update will not be complete until you reboot the ESX Server. If you enter N, to indicate that you will not reboot at this time, ESX Server displays the warning message "Please reboot the server manually for this update to take effect. Update has been terminated unexpectedly." If you see this message, you must manually reboot the server to complete the driver update.

10. At the reboot prompt, enter Y to reboot the server.