CVE-2021-20232 for vRealize Suite Lifecycle Manager
book
Article ID: 322702
calendar_today
Updated On:
Products
VMware Aria Suite
Issue/Introduction
The Patch is to address the vulnerability identified against the reported CVE: CVE-2021-20232
Environment
VMware vRealize Suite Lifecycle Manager 8.x
Resolution
Below steps are to address the vulnerability identified against the reported CVE: CVE-2021-20232
Patch Deployment Steps, Change expected and How to confirm Patch has been applied:
- Take necessary backup/snapshot of vRSLCM appliance.
- Download the RPM package from location below.
- ssh to the appliance as root user and copy the RPM to any location.
- Check gnutls version before updating the package using: "rpm -qa | grep gnutls" This should return: gnutls-3.6.15-2.ph3.x86_64
- Run the command "rpm -Uvh gnutls-3.6.15-3.ph3.x86_64.rpm" from the location where RPM has been downloaded.
- After update is completed, check gnutls version again using: "rpm -qa | grep gnutls" This should return: gnutls-3.6.15-3.ph3.x86_64
To Download Patches:
Download the rpm from https://packages.vmware.com/photon/3.0/photon_updates_3.0_x86_64/x86_64/gnutls-3.6.15-3.ph3.x86_64.rpm
Additional Information
Impact/Risks:
CVE-2021-20232 has been determined to affect 8.4.1 release of vRealize Suite Lifecycle Manager.
Feedback
thumb_up
Yes
thumb_down
No