Stray Thoughts

VMWare released a security update pertaining to ESX/ESXi which addresses a number of security vulnerabilities (43 or so) in ESX/ESXi 4.0.

Complete update can be found here : http://lists.vmware.com/pipermail/security-announce/2010/000093.html

resource for hardening vShere : http://blogs.vmware.com/security/2010/04/vsphere-40-hardening-guide-released.html

Tags: vmware, security

VMware Fusion 3.0 gone from Release Candidate to General Availability, so as  VMware Workstation 7.0 and VMware ACE 2.6

New features

• Nested VMs.  This allows you to run ESX with guests inside of workstation
• support for Windows7 (and it's associated new graphics APIs) and Windows Server 2008.
• support for VMs with up to 4 processors and 32GB of memory
• ALSA sound support for Linux
• new "pause" feature, allowing you to pause a VM if you need some temporary processor power for your host or another VM
• a new Virtual Network Editor

More Info

http://www.vmware.com/company/news/releases/fusion3-preorder.html
http://blogs.vmware.com/workstation/2009/10/workstation-7-release-candidate-available.html

Tags: vmware,

VMware has released the following new security advisory, VMSA-2009-0010

This advisory results in updates to

VMware Workstation
VMware Player
VMware ACE

Tags: security, vmware

VMWare released a new security advisory about a vulnerability in the krb5 (Kerberos) package. The vulnerability allows a remote attacker to cause a DoS or potentially execute arbitrary code on the ESX server.

According to the advisory available at http://lists.vmware.com/pipermail/security-announce/2009/000059.html all ESX versions are affected (ESXi is not affected), however, the Kerberos package is not installed by default.

Tags: virtualization, security, vmware

There were two new updates were released today.  The first update addresses issues with openssl, vim, and bind; the second update addresses multiple issues.

The first update is for the VMware ESX 3.0.2 and 3.0.3 release, and the second update applies to the following releases:
   VMware Workstation 6.5.1 and earlier,
   VMware Player 2.5.1 and earlier,
   VMware ACE 2.5.1 and earlier,
   VMware Server 2.0,
   VMware Server 1.0.8 and earlier,
   VMware ESXi 3.5 without patches ESXe350-200811401-O-SG, ESXe350-200903201-O-UG
   VMware ESX 3.5 without patches ESX350-200811401-SG, ESX350-200903201-UG
   VMware ESX 3.0.3 without patch ESX303-200811401-BG
   VMware ESX 3.0.2 without patch ESX-1006980

For full details on both updates, please visit the lists.vmware.com website.

Tags: virtualization, vmware, security