2019-07-02 (Update 3) Imageprofile ESXi-6.5.0-1-standard (Build 13932383) includes the following updated VIBs: Name Version Vendor Summary Category Severity. For this example, we will be patching VMware ESXi 6.5 with patch ESXi601-SG. Additional patches can be applied in the same manner. Read the release notes or security advisories before patching as other components (ie. VCenter) may need to be patched first. Power off all virtual machines or vMotion them to a different ESX host. Place the ESX host into maintenance mode. Right-click on the ESX host, select Enter Maintenance Mode, and click Yes. Right-click on the ESX host and select Remediate Critical Host Patches and Non-Critical Host Patches baselines and click Next. How do i patch my esxi 6.5 hypervisor? I see in 'packages' category that i have updates to install, but when i push 'Install update' i have to ' Enter the URL or datastore path of the VIB below', but i haven't tis url.

Release Date: MAY 28, 2020

Build Details

Download Filename:	ESXi650-202005001.zip
Build:	16207673
Download Size:	343.3 MB
md5sum:	273fbaf2d20172ad0b6f61f11933d38b
sha1checksum:	08cc768779b7f6a0805cbae5953d034f380ab626
Host Reboot Required:	Yes
Virtual Machine Migration or Shutdown Required:	Yes

Bulletins

Bulletin ID	Category	Severity
ESXi650-202005401-SG	Security	Important

Rollup Bulletin

This rollup bulletin contains the latest VIBs with all the fixes since the initial release of ESXi 6.5.

Bulletin ID	Category	Severity
ESXi650-202005001	Security	Important

Image Profiles

VMware patch and update releases contain general and critical image profiles. Application of the general release image profile applies to new bug fixes.

Image Profile Name

ESXi-6.5.0-20200504001-standard

ESXi-6.5.0-20200504001-no-tools

For more information about the individual bulletins, see the Download Patches page and the Resolved Issues section.

Patch Download and Installation

The typical way to apply patches to ESXi hosts is through the VMware vSphere Update Manager. For details, see the About Installing and Administering VMware vSphere Update Manager.

ESXi hosts can be updated by manually downloading the patch ZIP file from the VMware download page and installing the VIB by using the esxcli software vib command. Additionally, the system can be updated using the image profile and the esxcli software profile command.

For more information, see the vSphere Command-Line Interface Concepts and Examples and the vSphere Upgrade Guide.

Resolved Issues

The resolved issues are grouped as follows.

ESXi650-202005401-SG

Patch Category	Security
Patch Severity	Important
Host Reboot Required	Yes
Virtual Machine Migration or Shutdown Required	Yes
Affected Hardware	N/A
Affected Software	N/A
VIBs Included	VMware_bootbank_vsanhealth_6.5.0-3.126.15965596 VMware_bootbank_esx-tboot_6.5.0-3.126.16207673 VMware_bootbank_esx-base_6.5.0-3.126.16207673 VMware_bootbank_vsan_6.5.0-3.126.15965595
PRs Fixed	N/A
Related CVE numbers	CVE-2020-3958

This patch updates the esx-base, vsan, esx-tboot and vsanhealth VIBs to update the following issue:

ESXi has a denial-of-service vulnerability in the shader functionality. Attackers with non-administrative access to a virtual machine might exploit this issue to fail the VMX process of the virtual machine, leading to a denial of service condition. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the identifier CVE-2020-3958 to this issue. For more information, see VMSA-2020-0011.

ESXi-6.5.0-20200504001-standard

Profile Name	ESXi-6.5.0-20200504001-standard
Build	For build information, see the top of the page.
Vendor	VMware, Inc.
Release Date	May 28, 2020
Acceptance Level	PartnerSupported
Affected Hardware	N/A
Affected Software	N/A
Affected VIBs	VMware_bootbank_vsanhealth_6.5.0-3.126.15965596 VMware_bootbank_esx-tboot_6.5.0-3.126.16207673 VMware_bootbank_esx-base_6.5.0-3.126.16207673 VMware_bootbank_vsan_6.5.0-3.126.15965595
PRs Fixed	N/A
Related CVE numbers	CVE-2020-3958

ESXi has a denial-of-service vulnerability in the shader functionality. Attackers with non-administrative access to a virtual machine might exploit this issue to fail the VMX process of the virtual machine, leading to a denial of service condition. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the identifier CVE-2020-3958 to this issue. For more information, see VMSA-2020-0011.

ESXi-6.5.0-20200504001-no-tools

Profile Name	ESXi-6.5.0-20200504001-no-tools
Build	For build information, see the top of the page.
Vendor	VMware, Inc.
Release Date	May 28, 2020
Acceptance Level	PartnerSupported
Affected Hardware	N/A
Affected Software	N/A
Affe

Esxi 6.5 Patch