Technology – Page 11 – Gabbs' Random Thoughts

Virtual Updates 2022-01-10

VMware – CD-ROM vulnerability
This affects VMware Workstation, Fusion, and ESXi
CVE-2021-22045 works against a connected CD-ROM to a Virtual Machine
(but that’s not you, right? No one leaves a CD-ROM attached to a VM….)
This depends on the version of vSphere you are using, and is detailed out, along with the workarounds (such ad disconnect the CD-ROM) in VMware KB 87249
Very nice of them to include the PowerCLI scripts to resolve it…

VMware Visio Stencils for 2022
Because VMware can’t be bothered to release a set of Visio Icons,
Graham Barker has been releasing them annually.
Here’s a link to his blog post.

Virtual Updates 2021-12-27

VMware Products Expiring in 2022
vSphere (vCenter & ESXi) are going end of support Oct 15 2022.
All the vRealize products less than version 8.7 Oct 30, 2022
(Yes, I know that 8.7 isn’t out yet).
Horizon 7 on Oct 15 2022.
Here is a link to the VMware Product Lifecycle Matrix.

Log4j continues…
Many have been implementing workarounds or patches…
Continuing relevant notes….
VMware’s What You Need to Know blog post.
VMware products affected list
VMware products NOT affected list

Virtual Updates 2021-12-13

hmmm….
missed an update on 11-29
Not like me…but with thanksgiving, a few personal things going on…
TOTALLY understandable to me why I missed this update…

vSphere 7.0 Update 3, Update 3a, Update 3b – ALL PULLED!
So I’m starting to the vSphere Update 3.x is worse than vSphere 5.1!
Its been < 40 days.
3 separate Update 3 releases…..all pulled from the web.
WOW!
What a horrible time to be building 4 x new environments for prod.
VMware…you need to fix your QA for the benefit of us all!
VMware KB 86398 goes into this in detail.

Apache Log4j Vulernability!!!
This is going to be impactful to all of us.
A post about the vulnerability, how it works, & some temporary mitigations.
A Github repository to search for the exploit.
…and Log4Shell is another exploitation of it.
Hope those retailers out there are taking an emergency change request!
Well, here’s VMware’s list of affected products….start doing the workarounds!!!
I wonder what kind of week this will be for software vendors…..

Virtual Updates 2021-11-15

Manuals Online
Cool. Found manualslib.com squirrel away as a favorite, and figured I’d share.
A collection of PDF manuals for so many things….
Everything from Singer sewing machines to Bose headphones.

VMware PULLS ESXi 7.0 u3 & u3a
With Update 3 being a month old, and update 3a being 2 weeks old….
BOTH HAVE BEEN PULLED FROM THE VMWARE WEBSITE!!!!
There were multiple issues with both releases.
I just taught a 3 day workshop based on Update 3a, and had nothing but issues…(all minor, but I could not successfully, patch, got a couple PSODs, and had minor operations GUI based issues)
IF YOU HAVE GOTTEN UP TO THIS RELEASE …> PATCH NOW!!!!!
VMware ESXi 7.0 Update 3b Release Notes are here.
VMware vCenter 7.0 Update 3b Release Notes are here.

Virtual Updates 2021-11-01

VMC (VMware Cloud on AWS) – now 15% off
A nice promotion. 15% off on-demand, 1 & 3 year subscriptions.
Driving down the price of public cloud!
Check out the post, and talk to your WEI Account Exec

ESXi 7.0 Update 3 – PSDO
When running UNMAP requests on thin provisioned disks.
I’ve already run into it, and spent my time looking at hardware (as it was a net new deploy)….
VMware Blog post is here.
Good thing Update 3a is out to resolve!

Virtual Updates 2021-10-18

VMware Tanzu Community Edition
This created a lot of excitement for folks when released.
Caught me by surprise.
Essentially, you get Tanzu for vSphere, AWS, Azure, or locally on your machine.
Quickly and easily.
VMware Blog post is here.
William Lam’s post is here. (shows easy installation using Brew/Chocolatey)
William Lam’s post on Minimum vSphere Versions is here.
Main Tanzu Community Edition page.
VMware HOL for Tanzu (just note which ones are community edition)

VMware Skyline PRO
…still part of your S&S, this “free” utility helps you get a handle on your VMware solutions you have deployed.
Already have Skyline? You’ll be upgraded to pro next time you upgrade.
Found a blog post about it here.

Be Careful with Windows Updates on Server 2012 R2
Had a customer get bit by this.
Apparently, in win2012r2, if you apply the VMware SCSI you might get a non-accessible boot device. The reddit thread linked below covers it.
No longer on Windows Update, you still may have a VM that gets it, or has gotten it.
Read the post, and the linked VMware KBs….
I did not have a problem with this in win2016, win2019, or win2022.
Details here, on reddit.

Virtual Updates 2021-10-04

VMworld 2021 – Oct 5-7
Remember, this is another Virtual Event….and it starts tomorrow!
Get registered for free at: VMworld

vCenter 6.5, 6.7, and 7.x – Critical Patch
vCenter has just been patched to handle a critical vulnerability.
VMware Advisory VMSA-2021-0020 is here
On vCenter 7, it does take a bit for the patch to be applied, and the vCenter services to be restarted.
vCenter 6.5 u3q Release Notes are here
vCenter 6.7 u3o Release Notes are here
vCenter 7.0 u2d Release Notes are here

TinkerTry – Credit Freeze & Identity Protection
…and stopping unsolicited junk mail.
Paul Braren, who runs TinkerTry, came up with a great summary of these 3 major topics.
Give it a read.