Vulnerability found for openssh of the vCenter server

Products

• VMware vCenter Server

Issue/Introduction

• Information is coming from security team there is a vulnerability found in openssh version of the vCenter advising to update openssh

Environment

vSphere vCenter server 8.X

vSphere vCenter server 7.X

VMware ESXi host 8.X

VMware ESXi host7.X

 

Resolution

• Broadcom does not support any modifications or customizations to the underlying operating system and packages included in a VMware-branded virtual appliance.  

This includes adding, updating, or removing of packages, as well as utilizing custom scripts within the operating system of the appliance.  

• All VMware virtual appliances are thoroughly tested and qualified based on the components and versions included, as well as hardened to the best of the vendors' ability using best practices for the industry. Updating or changing any components may result in unexpected behavior of the system.
• If security issues are identified to affect a supported Broadcom product, or the operating system of an appliance, Broadcom will release a patch to address the issues.
• Do not install patches supplied by other vendors.
• In situations where an appliance has been modified by the customer, Broadcom reserves the right to request all modifications be reverted and that the issue be reproduced on the base release that was originally provided.

Additional Information

VMware Virtual Appliances and customizations to operating system and included packages