via >> http://www.tecchannel.de/

Über eine Schwachstelle im Network Time Protocol (NTP) des VMware ESXi Server können Angreifer beliebigen Schadcode einspeisen. Ein Patch ist verfübar.

Laut einem Bericht der Sicherheitsexperten von Secunia betrifft die Schwachstelle alle aktuellen Releases des VMware ESXi Server in den Versionen 3.x und 4.x. Die Sicherheitslücke entsteht durch den Einsatz einer anfälligen Version des Network Time Protocol Daemon (NTPD) in ESXi. Diese weist einen Begrenzungsfehler in der Funktion “crypto_recv()” auf über den sich ein Stack-basierter Pufferüberlauf auslösen lässt. VMware bietet seinen Kunden ab sofort einen Patch an, der die hochkritische Sicherheitslücke schließt.



Reblog this post [with Zemanta]

Source: VMware Newsletter >>

Top 5 Planet V12n blog posts week 47

It was very tough to pick a top 5 this time as most posts this week were about vSphere Update 1 and View 4. But I did manage to find 5 excellent articles again. Make sure you read them:

  • Scott Sauer – More Bang for Your Buck with PVSCSI (Part 1)
    So let’s first find out if it’s all that.  We need to do some testing
    to validate the hype.  I created two virtual machines, one with the
    traditional LSI Logic SCSI driver, and one with the new PVSCSI driver. 
    The host is the same for each VM, 4 socket Intel Xeon system with 64 GB
    of RAM, connected to EMC Clariion CX3-80 storage.  The Raid
    configuration is a 4+1 RAID 5 set (10K spindles), with the default
    Clariion Active/Passive MRU setup (No PPVE).  Each VM has 2 vCPU’s and
    4 GB of RAM and both are running 32 bit Microsoft Windows 2003 R2. 
    Both Virtual Machines data disks were formatted using diskpart and the
    tracks were correctly aligned.  Anti-virus real time scanning was
    disabled on both systems.  This test is meant to get as close as
    possible to a standard configuration that we can benchmark from.
  • Arnim van Lieshout – Geographically dispersed cluster design
    Let’s take it back one step and have a look at an active-passive setup.
    These setups have some sort of storage replication in place. The most
    common design I encounter is showed in figure 1. In the main datacenter
    there’s an ESX cluster with some sort of SAN based
    replication/mirroring to a second datacenter. In the second datacenter
    there is a passive ESX cluster available to start-up the virtual
    servers in case of disaster. Let’s use this setup as a starting point
    and turn this active-passive into an active-active setup.
  • Andre Leibovici – Your Organization’s Desktop Virtualization Project – Part 3
    At the time this solution was designed, the numbers of users per CPU
    core could range from 3.8 to 4.2, however for most VDI deployments
    using new processors (Intel Nehalem 5500 and AMD Phenom II) this number
    can be around 6.0 per CPU core, allowing up to 100 virtual desktop
    machines in a single dual-quad server.
  • Scott Drummonds – Another Day, Another Misconfigured Storage
    You will have to size your storage to peak, to average, or somewhere in between. If you size to the average, you are counting on the peaks occurring at different times. If you are wrong, when two workloads peak simultaneously, a bottleneck will form at the array. Also note that sizing to the average in this case (350 IOPS) is insufficient for VM C’s peak of 400 IOPS. You could size to the aggregate peak of 1200 IOPS but unless all of the virtual machines peaked at once the workloads would never consume the available bandwidth.

    All you can do in this case is make a best guess and modify later, as needed. I often suggest that a good start is one third of the way from average to peak which equals 633 IOPS in this case. If we assume 150 IOPS per spindle, that means five spindles for this VMFS volume.

  • Luc Dekens – Scripts for Yellow Bricks’ advise: Thin Provisioning alarm & eagerZeroedThick
    This script will convert an existing thick VMDK to eagerZeroedThick. As you can read in Duncan’s blog entry there is a serious performance improvement to be obtained by doing this.

    Note that the guest needs to be powered off to be able to do the conversion ! This is in fact the case for most of the VirtualDiskManager methods. See also my Thick to Thin with PowerCLI and the SDK entry.

      
Download VMware Products
 | Privacy
 | Update Feed Preferences 

        Copyright © 2007 VMware, Inc. All rights reserved.


Go to Source



Source: VMware Newsletter >>

Latest Updates

These are the changes or updates made to VMware Compatibility Guide since it was last published:

  • Added support for Windows 7 Enterprise, Professional, Ultimate and Home Premium Editions on ESX 4.0 Update 1
  • Added support for Windows Server 2008 R2 Enterprise, Standard, Datacenter, and Web Server Editions on ESX 4.0 Update 1
  • Added support for Ubuntu 9.10 Server and Desktop on ESX 4.0 Update 1
  • Added support for Debian 5.0.1, 5.0.2, and 5.0.3 on ESX 4.0 Update 1
  • Added support for FreeBSD 7.2 on ESX 4.0 Update 1

Check the VMware Compatibility Guide here: http://www.vmware.com/resources/compatibility/search.php?deviceCategory=software

      
Download VMware Products
 | Privacy
 | Update Feed Preferences 

        Copyright © 2007 VMware, Inc. All rights reserved.


Go to Source



Source: VMware Newsletter >>

Latest Updates

These are the changes or updates made to the Guest Operating System Installation Guide since it was last published:

Added new instructions for the following guests:

  • “Windows Server 2008 R2” on page 19
  • “Oracle Enterprise Linux 4” on page 63
  • “Ubuntu 9.10” on page 115
  • “FreeBSD 7.2” on page 130

Guest/Host OS VMware Compatibility Guide: http://www.vmware.com/resources/compatibility/search.php?deviceCategory=software

Guest Operating System Installation Guide PDF: http://www.vmware.com/pdf/GuestOS_guide.pdf

Guest Operating System Installation Guide HTML: http://pubs.vmware.com/guestnotes/

      
Download VMware Products
 | Privacy
 | Update Feed Preferences 

        Copyright © 2007 VMware, Inc. All rights reserved.


Go to Source



Source: VMware Newsletter >>

IBM, VMware and NSEC Partner to Simplify Computing on the Go

IBM Lotus Symphony Productivity Software Available On Credit Card-Sized, Keepod Devices . ARMONK, N.Y., PALTO ALTO, Calif., and MILAN – November 17, 2009 – IBM (NYSE: IBM), VMware (NYSE: VMW) and Keepod products family manufacturer NSEC, today announced that they have partnered to offer IBM’s Lotus Symphony productivity software suite on Keepod devices for the first time.
IBM’s Lotus Symphony software suite helps users create, edit and share documents, spreadsheets and presentations. Based on an open, secure platform, the intuitive business productivity offering is easy-to-use and free of charge. With today’s news, for the first time, users can access the information they need anytime,…

      
Download VMware Products
 | Privacy
 | Update Feed Preferences 

        Copyright © 2007 VMware, Inc. All rights reserved.


Go to Source



Source: VMware Newsletter >>

VMware to Present at the Credit Suisse First Boston Technology Conference

Palo Alto, Calif., November 17, 2009— VMware, Inc. (NYSE: VMW), the global leader in virtualization solutions from the desktop through the datacenter to the cloud, today announced that Tod Nielsen, chief operating officer of VMware, will present at the Credit Suisse First Boston Technology Conference in Scottsdale, Arizona on December 3, 2009 at 10:00 a.m. MT/ 9:00 a.m. PT.
A live webcast will be available on the Investor Relations page at http://ir.vmware.com. The replay of the webcast will be available for one month.
About VMware VMware delivers solutions for business infrastructure virtualization that enable IT organizations to energize businesses of all sizes. With…

      
Download VMware Products
 | Privacy
 | Update Feed Preferences 

        Copyright © 2007 VMware, Inc. All rights reserved.


Go to Source



© 2010 http://www.vmwarenews.de Creative Commons License
http://www.vmwarenews.de steht unter einer Creative Commons Namensnennung-Weitergabe unter gleichen Bedingungen 3.0 Deutschland Lizenz
Suffusion WordPress theme by Sayontan Sinha