VMware Cloud Foundation 3.0.1 patch to address Perl vulnerability CVE-2018-6913

Products

• VMware Cloud Foundation

Issue/Introduction

This article provides a patched Cloud Builder 3.0.1 ova file that addresses the Perl vulnerability described in CVE-2018-6913.

Environment

VMware Cloud Foundation 3.0.x

Resolution

1. Download vcf-cloudbuild-3.0.1.0-12338017_OVF10.ova. This file is approximately 9GB in size and may take some time to download.
2. Deploy the Cloud Foundation Builder ova per the instructions in Deploying Cloud Foundation and use the downloaded vcf-cloudbuild-3.0.1.0-12338017_OVF10.ova file as the ova source file.

Additional Information

VMware Cloud Foundation 3.0.1.1 includes the fix for this vulnerability. Existing VMware Cloud Foundation 3.0.1 deployments can be upgraded to this version.