For more information, see VMware Security Advisory VMSA-2021-0002.ĮSXi-6.7.0-20210204001-standard Profile Nameįor build information, see the Build Details table.ĮSXi-6.7.0-20210204001-no-tools Profile NameI run Cisco servers rather than Dell, but the case should be the same, though you may want to confirm with Dell support for your specific use case. The Common Vulnerabilities and Exposures project () has assigned the identifier CVE-2021-21974 to this issue. A malicious actor residing within the same network segment as ESXi, who has access to port 427, might trigger the heap-overflow issue in OpenSLP service, resulting in remote code execution. OpenSLP as used in ESXi has a heap-overflow vulnerability. This patch updates the esx-base, esx-tboot, vsan, and vsanhealth VIBs. Virtual Machine Migration or Shutdown Required The resolved issues are grouped as follows. Additionally, the system can be updated using the image profile and the esxcli software profile update command.įor more information, see the vSphere Command-Line Interface Concepts and Examples and the vSphere Upgrade Guide. For details, see the About Installing and Administering VMware vSphere Update Manager.ĮSXi hosts can be updated by manually downloading the patch ZIP file from the VMware download page and installing VIBs by using the esxcli software vib update command. The typical way to apply patches to ESXi hosts is through the VMware vSphere Update Manager.
Image Profile Nameįor more information about the individual bulletins, see the Download Patches page and the Resolved Issues section. Application of the general release image profile applies to new bug fixes. VMware patch and update releases contain general and critical image profiles.
This rollup bulletin contains the latest VIBs with all the fixes since the initial release of ESXi 6.7. Virtual Machine Migration or Shutdown Required:
0 kommentar(er)
