VMware OpenSSL (Heartbleed) Security Issue

VMware Security Advisory

VMware Security Advisory VMSA-2014-0004.6 reports that a number of VMware product suffer from the OpenSSL "Heartbleed" security vulnerability.  This includes ESXi 5.5, vCenter Server, VMware Workstation and a number of other products.  Patches are now available for download.

The ESXi 5.5 patch is available for download here: https://www.vmware.com/patchmgr/download.portal

The vCenter Server patch is available for download here: https://my.vmware.com/web/vmware/info/slug/datacenter_cloud_infrastructure/vmware_vsphere/5_5

One can sign up for Security Advisory notifications by visiting: http://www.vmware.com/security/advisories

VMware ESXi 5.5, Patch Release ESXi550-201404001 (2076120)

VMware ESXi 5.5, Patch Release ESXi550-201404001 (2076120)

 http://kb.vmware.com/kb/2076120

Note: This patch includes the fix for the OpenSSL Heartbleed issue.

Patches can be downloaded from here:  http://www.vmware.com/patchmgr/download.portal

VMware ESX(i) 4.x Patches Released - ESXi410-201312001

VMware ESX(i) 4.x Patches (ESXi410-201312001) have been released

• ESXi 4.1 (ESXi410-201404001) - http://kb.vmware.com/kb/2072477
• ESXi 4.0 (ESXi400-201404001) - http://kb.vmware.com/kb/2068805
• ESX 4.1 (ESX410-201404001) - http://kb.vmware.com/kb/2072476
• ESX 4.0 (ESX400-201404001) - http://kb.vmware.com/kb/2068798

Patches can be downloaded from here:  http://www.vmware.com/patchmgr/download.portal