VMWare vCenter (Virtual Center) 2.5 Update 4

There's a security update for VMWare vCenter (formally Virtual Center) 2.5 available that addresses recently discovered vulnerabilities in Apache Tomcat server. The patch can be foung here. Please be aware that the only update that is on their regular updates page at the time of publishing this blog entry is U3 (ie, not the current latest update).

The following software is affected by this issue:

VMware Product	Product Version	Running on	Replace with/ Apply Patch
VirtualCenter	2.5	Windows	VirtualCenter 2.5 Update 4
VirtualCenter	2.02	Windows	Update pending...
Server	2.x	any affected	patch pending
ESX	3.5	ESX affected	patch pending
ESX	3.0.3	ESX affected	patch pending
ESX	3.0.2	ESX affected	patch pending

Please note that VMWare ESXi is not affected by this vulnerability.

Regards,

The Outspoken Wookie