This hot fix resolves CVE-2023-34043. For more information on the vulnerabilities and their impact on VMware products, see VMSA-2023-0020.
vRealize Operations 8.6 Hot Fix 11 is a public Hot Fix that includes various security changes.
Environment
VMware vRealize Operations 8.6.x
Resolution
vRealize Operations 8.6 Hot Fix 11 includes all the fixes delivered in Patch Releases/Hot Fixes released prior and can be applied to any 8.6.x environment. Note: Upgrading from older versions directly to this Hot Fix is not supported. You must upgrade to 8.6.x before applying this Hot Fix.
Log in to the primary node vRealize Operations Administrator interface of your cluster at https://master-node-FQDN-or-IP-address/admin.
Click Software Update in the left panel.
Click Install a Software Update in the main panel.
Follow the steps in the wizard to locate and install your PAK file.
Install the product update PAK file. Wait for the software update to complete. When it does, the Administrator interface logs you out.
Log back into the primary node Administrator interface. The main Cluster Status page appears and cluster goes online automatically. The status page also displays the Bring Online button, but do not click it.
Clear the browser caches and if the browser page does not refresh automatically, refresh the page. The cluster status changes to Going Online. When the cluster status changes to Online, the upgrade is complete.
Note: If a cluster fails and the status changes to offline during the installation process of a PAK file update then some nodes become unavailable. To fix this, you can access the Administrator interface and manually take the cluster offline and click Finish Installation to continue the installation process.
Click Software Update to check that the update is done. A message indicating that the update completed successfully appears in the main pane.
Once the update is complete delete the snapshots you made before the software update.