? Threat of vulnerabilities in VMWare ??

[marvinms]

Are the vulnerabilities in the link of concern to me if I am at 3.5 U 4? (build 143128)

It was release on Friday. I have not gone through it completely yet.

[Texiwill]

Hello,

I would ensure that these two patches are installed for ESX as part of this. You can 'scan for updates'. These could be part of U4 already but always best to look.

ESX 3.5 patch ESX350-200811401-SG (guest virtual device driver)

download3.vmware.com/software/vi/ESX350-200811401-SG.zip

md5sum: 988042ce20ce2381216fbe1862c3e66d

kb.vmware.com/kb/1007501

ESX 3.5 patch ESX350-200903201-UG (VI Client)

download3.vmware.com/software/vi/ESX350-200903201-UG.zip

md5sum: 650fa096cf270ec58d38e9ff41c661aa

kb.vmware.com/kb/1007971

Best regards,
Edward L. Haletky
VMware Communities User Moderator, VMware vExpert 2009
====
Author of the book 'VMWare ESX Server in the Enterprise: Planning and Securing Virtualization Servers', Copyright 2008 Pearson Education.
Blue Gears and SearchVMware Pro Blogs -- Top Virtualization Security Links -- Virtualization Security Round Table Podcast