VMware patches third-party components in vSphere platform

September 10, 2014

VMware has updated third-party libraries and components used by its vSphere server virtualization platform to integrate security patches released in recent months.The company released vCenter Server 5.5 Update 2 in order to include a patch for a remote code execution vulnerability in the Apache Struts Web framework used inside the product.The same vCenter Server release updates the Apache Tomcat component to version 7.0.52, originally released in February, which includes fixes for two denial-of-service and one information disclosure vulnerabilities.VCenter Server 5.5 Update 2 and vCenter Update Manager 5.5 Update 2 change the bundled Java Runtime Environment (JRE) version to 1.7 Update 55 that was released in April. This Java version contains patches for 37 security vulnerabilities.To read this article in full or to leave a comment, please click here

Link: http://www.pcworld.com/article/2605540/vmware-patches-thirdparty-components-in-vsphere-platform.html#tk.rss_all