VMware ESXi 5.5, Patch ESXi550-201709101-SG: Updates esx-base VIB

Products

• VMware vSphere ESXi

Issue/Introduction

Release date: September 14, 2017

Patch Category	Security
Patch Severity	Critical
Build	For build information, see KB 2150882.
Host Reboot Required	Yes
Virtual Machine Migration or Shutdown Required	Yes
Affected Hardware	N/A
Affected Software	N/A
VIBs Included	VMware_bootbank_esx-base_5.5.0-3.103.6480267
PRs Fixed	1538414, 1769520, 1826010, 1826928, 1878983
Related CVE numbers	NA

Resolution

This patch updates the esx-base VIB to resolve the following issues:

 

·The OpenSSL package is updated to version openssl-1.0.2k.

·The ESXi Network Time Protocol (NTP) package version is updated to ntp-4.2.8p9.

·The libPNG library is updated to libpng-1.6.29.

·The Python library is updated to version 2.7.13.

·The Pixman library is updated to version 0.35.1.

 

Patch Download and Installation

The typical way to apply patches to ESXi hosts is through the VMware vSphere Update Manager. For details, see the Installing and Administering VMware vSphere Update Manager.

 

ESXi hosts can be updated by manually downloading the patch ZIP file from the Broadcom Support page and installing the VIB by using the esxcli software vib command. Additionally, the system can be updated using the image profile and the esxcli software profile command. For details, see the vSphere Command-Line Interface Concepts and Examples and the vSphere Upgrade Guide.