Download Patch ESX-3069097 for VMware ESX Server 3.0.0

Released 12/28/06

Security Fixes

Please refer to KB 1107 for VMware product security alerts. This patch addresses the following security issues:

• A possible security issue with the OpenSSL toolkit and the authentication of ssl certificates. Clients using OpenSSL and connecting to a malicious server can be caused to crash. The patch also addresses an issue when using RSA keys with an exponent of 3 that allows the forging of PKCS #1 v1.5 signatures and prevents OpenSSL from properly verifying X.509 and other certificates. The Common Vulnerabilities and Exposures project (cve.mitre.org) assigned the names CVE-2006-2937, CVE-2006-2940, CVE-2006-3738, CVE-2006-4339 and CVE-2006-4343 to these issues.
• A possible security issue with how the Python function repr() function handles UTF-32/UCS-4 strings. Python applications using this function can open a security vulnerability that could allow the execution of arbitrary code. The Common Vulnerabilities and Exposures project (cve.mitre.org) assigned the name CVE-2006-4980 to this issue.
• Possible security issues with OpenSSH where a signal handler race condition could or an SSH-1 command could be used to create a denial of service. An issue regarding in sshd.c in OpenSSH 3.6.1p2 and 3.7.1p2 where the end of a priveleged sesion is not properly signalled, leaving an avenue to create a denial of service. This patch also addresses a possible vulnerability in the way that scp copies files locally creating a possible avenue to execute arbitrary commands. The Common Vulnerabilities and Exposures project (cve.mitre.org) assigned the names CAN-2004-2069, CVE-2006-0225, CVE-2003-0386, CVE-2006-4924, CVE-2006-5051, and CVE-2006-5794 to these issues.

Applicability

This patch is for ESX Server 3.0.0 only.  For the related patch for ESX Server 3.0.1, please refer to http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html .

View KB 3069097 for more information.

Installing the Patch

Download Instructions

Download and verify the patch bundle as follows :

1. Download patch ESX-3069097 by clicking on the link above.
2. Log into the ESX Server service console as root.
3. Create a local depot directory.

   # mkdir /var/updates

   Note: VMware recommends that you use the updates directory.

4. Change your working directory to /var/updates.

   # cd /var/updates

5. Download the tar file into the /var/updates directory.
6. Verify the integrity of the downloaded tar file:

# md5sum ESX-3069097.tgz

7. The md5 checksum output should match the following:

   ca9947239fffda708f2c94f519df33dc ESX-3069097.tgz

8. Extract the compressed tar archive:

   # tar -xvzf ESX-3069097.tgz

9. Change to the newly created directory, /var/updates/ESX-3069097:

   # cd ESX-3069097

Installation Instructions

Once you have downloaded and extracted the archive, and if you are in the directory you created above, install the update using the following command:

# esxupdate update

If you want to run esxupdate from a different directory, you must specify the bundle path in the command:

For example, if the host is called depot:

During the update process, logs appear on the terminal. You can specify the verbosity of esxupdate logs by using the -v option as shown below.

For more information on using esxupdate, please refer to the Patch Management for ESX Server 3 tech note at http://www.vmware.com/pdf/esx3_esxupdate.pdf.