Addressing VMSA-2021-0010

[#1]

This thread is created to answer any questions you may have on the latest VMware vulnerability – VMSA-2021-0010

Please review the documentation below, as this may answer any questions you have

• VMware Security Advisory https://www.vmware.com/security/advisories/VMSA-2021-0010.html
  
  
• Please see further information on the VMware Blog VMSA-2021-0010: What You Need to Know
  
  
• In addition, answers to frequently asked questions are contained in the document VMSA-2021-0010-FAQs

Step by step update guides are available at the links below

• Step by step procedure to update vCenter sever 7.0 appliance.
• Step by step procedure to update vCenter sever 6.7 appliance.
• Step by step procedure to update vCenter sever 6.5 appliance.
• Step by step procedure to update windows vcenter server 6.5/6.7

[dkleevmware]

9:21 EDT

[ChethanBH88]

Team,

As per https://kb.vmware.com/s/article/67077 , from vCenter 6.7 U3n to any vCenter 7.x version upgrade is not supported.  Should we wait for the supported vCenter version release?

[wcpoon83]

How about vCenter 7.0 U1? If the environment not ready to upgrade to 7.0 U2, Is there any permanent U1 fixed for this?

[baijup]

@Nathan99 You are right, LCM will see the new patch. You will have to follow the usual update process of VCF environment. First SDDC Manager update, followed by other components, more details in Release Notes 

(4.x) https://docs.vmware.com/en/VMware-Cloud-Foundation/4.2.1/rn/VMware-Cloud-Foundation-421-Release-Note...

(3.x) https://docs.vmware.com/en/VMware-Cloud-Foundation/3.10.2/rn/VMware-Cloud-Foundation-3102-Release-No...

[baijup]

@ChethanBH88 Yes, we need to wait for the supported vCenter Server version release.

[baijup]

@wcpoon83 There is no permanent fix on top of 7.0 U1, upgrade to 7.0 U2b will be needed to fix the issue permanently. Workaround to disable the plugins would be the only feasible option in this scenario.

[wcpoon83]

@baijup 

Why there is no consideration to release the patch for 7.0 U1?

They are customer out there got other software dependency to upgrade to 7.0 U2.

If disable plugin is the only option, then how to use the vCDA? vsan? 
It is very troublesome if vcda, vsan, SRM are use very frequent.

[baijup]

@wcpoon83 vCenter patches are cumulative and as such, are always built on the latest released version. Each release contains all the updates from the previous version including security patches, fixes from known issues etc. 7.0U1d was the last release for U1 and there are no plans for any future update on top of U1.