VCF Response to VMSA-2023-0001

Products

• VMware Cloud Foundation

Issue/Introduction

To remediate VMSA-2023-0001 on a VMware Cloud Foundation 4.x environment follow the steps listed in the Workaround Section.

Environment

VMware Cloud Foundation 4.x

Resolution

The issue has been fixed on vRealize Log Insight 8.10.2, please refer to VMware vRealize Log Insight version 8.10 release notes.

Workaround:

To workaround the issue, please follow the below mentioned steps:

1. Starting with VCF version 4.4, the SDDC Manager no longer manages the upgrades of vRealize Log Insight (even if it was originally deployed via SDDC Manager). Refer to VMware Cloud Foundation 4.4 Release Notes for more details.

2. If the user is on a version prior to VCF 4.5, first upgrade to VCF 4.5 or higher.

3. Once on VCF 4.5, upgrade the vRealize Suite Lifecycle Manager in place using the vRSLCM UI. Refer to vRealize Suite Install and Upgrade Paths on VMware Cloud Foundation 4.4 and above for more information on upgrade paths.

4. Use the vRealize Suite Lifecycle Manager to upgrade vRealize Log Insight version 8.10.2 or higher.

Additional Information

For customers that cannot upgrade to VCF 4.5 at this time, please refer to KB90685 for details of a workaround.