Security Advisories are the official notification of security-related vulnerabilities and issues impacting VMware products. Security Advisories outline complete information on how to protect impacted systems. Each advisory contains a detailed description of the security vulnerability, affected systems, threat severity, risk mitigation techniques for fixing the vulnerability and securing the system.
VMware Security Advisories
June 16, 2008 VMSA-2008-0010.1
Updated Tomcat and Java JRE packages for VMware ESX 3.5 and VirtualCenter 2.5
June 4, 2008 VMSA-2008-0009.2
Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues
May 30, 2008 VMSA-2008-0008
Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion resolve critical security issues
April 16, 2008 VMSA-2008-0007.2
Moderate Updated Service Console packages pcre, net-snmp, and OpenPegasus
March 17, 2008 VMSA-2008-0005.1
Several critical security vulnerabilities have been addressed in the newest releases of VMware's hosted product line.
February 21, 2008 VMSA-2008-0003.1
Updated aacraid driver and Samba and Python service console updates
January 7, 2008 VMSA-2008-0002.1
Updated Tomcat and Java JRE packages for VirtualCenter 2.5, VirtualCenter 2.0.2, ESX 3.5, ESX 3.0.2, and ESX 3.0.1.
September 18, 2007 VMSA-2007-0006
Updated versions of all supported hosted products and all ESX 2x products and patches for ESX 30x address critical security updates. Service Console security updates for samba, bind, krb5, vixie-cron, shadow-utils, openldap, pam,...
July 5, 2007 VMSA-2007-0005
Updated Service Console packages (XFree86, UP and SMP kernels, Kerberos libraries) resolve security issues.
May 17, 2007 VMSA-2007-0004.1
Multiple Denial-of-Service issues fixed. A directory traversal vulnerability is also addressed.