VMware advisory VMSA-2021-0020

[sergeisokolov]

https://www.vmware.com/security/advisories/VMSA-2021-0020.html

Another critical patch for vCenters 6.7 and 7.0.

Should be safe to update if currently running vCSA 6.7 U3n build 18010531 or 7.0 U2b build 17958471?

[Anjum_IK]

@sergeisokolov 

Good day!

Please let us know which HPE product is managed on vCSA 6.7 currently.

Thanks!

[sergeisokolov]

HPE380 Gen10, OmniStack 4.1.0 U1.

[gustenar · Accepted solution]

@sergeisokolov , 

Reger to the HPE Simplivity Interoperability Guide:

https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=a00117319en_us

As per this document:

A customer may upgrade vCenter to an unlisted patch versiononly when the vCenter major and minor versions are already listed in this document. Unlisted major or minor version updates are not supported.

For example, if vCenter Server 6.5 Update 3e is the latest supported 6.5 version in this document, and VMware releases patch version 6.5 Update 3g to fix a security issue, it is acceptable to upgrade to Update 3g before HPE updates the document.

▪However, if VMware releases a new minor version 6.5 Update 4 and HPE has not yet added Update 4 to this document, a vCenter upgrade to 6.5 Update 4 would not be supported.

oCustomer must accept that new/unlisted patch versions have not yet been qualified by HPE SimpliVity.

Hope it helps.

[fahlis]

Just wanna tell you that I have upgraded vCenter to 7.0 U2d for a customer on 4.1.0 U1 today without any issues. I have colleagues that have upgraded several customers to 6.7 U3o as well.
So HPE might consider to update the Interop guide?
It would at least be good to see som more info on version 7 specifically.