VCF response to VMSA-2023-0007

Products

• VMware Cloud Foundation

Issue/Introduction

To remediate VMSA-2023-0007 on VMware Cloud Foundation 4.x environment follow the steps listed in the Workaround Section.

Environment

VMware Cloud Foundation 4.x

Resolution

The issue has been fixed on VMware Aria Operations for Logs 8.12, please refer to VMware Aria Operations for Logs 8.12 release notes.

Workaround:
To workaround the issue, please follow the below mentioned steps:

Starting with VCF version 4.4, the SDDC Manager no longer manages the upgrades of VMware Aria Operations for Logs (even if it was originally deployed via SDDC Manager). Refer to VMware Cloud Foundation 4.4 Release Notes for more details. Interoperability between VMware Aria products and SDDC manager is located at Interoperability Result

1. Update the environment to VCF 4.5.1 or higher.
2. Upgrade the VMware Aria Suite Lifecycle Manager in place using the VMware Aria Suite Lifecycle Manager UI to version 8.12 or higher.
3. Use the VMware Aria Suite Lifecycle Manager to upgrade VMware Aria Operations for Logs version 8.12 or higher.