To Customer Support To Customer Support

VMware patches third-party components in vSphere platform

  • 10 September 2014
  • 1 reply
  • 11 views
Jasper_The_Rasper
Rank
Userlevel 7
Badge +54
Lucian Constantin  Sep 10, 2014 VMware has updated third-party libraries and components used by its vSphere server virtualization platform to integrate security patches released in recent months.
The company released vCenter Server 5.5 Update 2 in order to include a patch for a remote code execution vulnerability in the Apache Struts Web framework used inside the product.
The same vCenter Server release updates the Apache Tomcat component to version 7.0.52, originally released in February, which includes fixes for two denial-of-service and one information disclosure vulnerabilities.
Full Article

1 reply

R
Rank
Userlevel 7
The following article is a update:

VMware Fixes Several Vulnerabilities in vSphere Platform

By Eduard Kovacs on December 05, 2014
 
VMware has released software updates to address a series of vulnerabilities affecting the company's popular vSphere virtualization platform.
The list of security bugs includes a cross-site scripting (XSS) flaw, a certificate validation issue, and various vulnerabilities affecting third-party libraries. The impacted products are VMware vCenter Server Appliance 5.1 prior to Update 3, VMware vCenter Server 5.5 prior to Update 2, VMware vCenter Server 5.1 prior to Update 3, VMware vCenter Server 5.0 prior to Update 3c, and VMware ESXi 5.1 without the ESXi510-201412101-SG patch, VMware revealed in an advisory published on Thursday.
 
full article

Reply


Terms & Conditions

© 2004 - Webroot Inc.

We have recently updated our Privacy Policies. We encourage you to read the full terms here.