VMware Cloud Foundation 3.5.1 patch to address multiple Perl vulnerabilities

Products

• VMware Cloud Foundation

Issue/Introduction

This article provides a patched Cloud Builder 3.5.1 ova file that addresses the following Perl vulnerabilities:

CVE-2018-18311
CVE-2018-18312
CVE-2018-18313
CVE-2018-18314

Environment

VMware Cloud Foundation 3.5.x

Resolution

Download vcf-cloudbuild-3.5.1.0-12679667_OVF10.ova. This file is approximately 9GB in size and may take some time to download.
Deploy the Cloud Foundation Builder ova per the instructions in Deploying Cloud Foundation and use the downloaded vcf-cloudbuild-3.5.1.0-12679667_OVF10.ova file as the ova source file.

Additional Information

VMware Cloud Foundation 3.7 includes the fix for these vulnerabilites. Existing VMware Cloud Foundation 3.5.1 deployments can be upgraded to this version.