Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. 
Join 
VMSA-2008-0019
- http://lists.vmware....008/000046.html
Dec 2 21:08:59 PST 2008 - "VMware Security Advisory
Advisory ID: VMSA-2008-0019
Synopsis: VMware Hosted products and patches for ESX and ESXi resolve a critical security issue and update bzip2
Issue date: 2008-12-02
Updated on: 2008-12-02 (initial release of advisory)
CVE numbers: CVE-2008-4917 CVE-2008-1372
Summary:
Updated VMware Hosted products and patches for ESX and ESXi resolve two security issues. The first is a critical memory corruption vulnerability in virtual device hardware. The second is an updated bzip2 package for the Service Console...
Relevant releases:
VMware Workstation 6.0.5 and earlier,
VMware Workstation 5.5.8 and earlier,
VMware Player 2.0.5 and earlier,
VMware Player 1.0.8 and earlier,
VMware Server 1.0.9 and earlier,
VMware ESXi 3.5 without patch ESXe350-200811401-O-SG
VMware ESX 3.5 without patches ESX350-200811406-SG and
ESX350-200811401-SG
VMware ESX 3.0.3 without patches ESX303-200811404-SG and
ESX303-200811401-BG
VMware ESX 3.0.2 without patches ESX-1006980 and ESX-1006982
NOTE: Extended support for ESX 3.0.2 Update 1 ends on 2009-08-08. Users should plan to upgrade to ESX 3.0.3 and preferably to the newest release available...
Problem Description: Critical Memory corruption vulnerability..."
VMSA-2008-0017.2
- http://lists.vmware....008/000047.html
Dec 2 21:13:08 PST 2008 - "VMware Security Advisory
Advisory ID: VMSA-2008-0017.2
Synopsis: Updated ESX packages for libxml2, ucd-snmp, libtiff
Issue date: 2008-10-31
Updated on: 2008-12-02
CVE numbers: CVE-2008-3281 CVE-2008-0960 CVE-2008-2327 CVE-2008-3529
Summary:
Updated ESX packages for libxml2, ucd-snmp, libtiff.
Relevant releases:
ESX 3.0.3 without patch ESX303-200810503-SG
ESX 3.0.2 without patch ESX-1006968
ESX 2.5.5 before Upgrade Patch 10
ESX 2.5.4 before Upgrade Patch 21...
Problem Description:
Updated ESX Service Console package libxml2..."
// http://secunia.com/advisories/32965/ - http://secunia.com/advisories/32952/
