<div>
It is openssl 0.9.8zc already<br />
ESXi 4.1 does not have later OpenSSL versions<br />
1) ESXi/ESX 4.1 Update 3 - latest bulk patch - required by others.<br />
2)ESXi/ESX 4.1 Patch 11 - patches all SSL vulnerabilities to date<br />
not for ESXi / 3) ESX 4.1 Patch 11a - &nbsp;disables SSL v3 (aka poodle)<br />
<br />
Save vib or zip on some webserver, or upload to some datastore visible to ESXi<br />
Then install with esxcli vib install (-v -z) as vmware guides say.<br />
Yes, 3 reboots., no just two....<br />
<br />
Much easier if you have vcenter and vmware upgrade manager.
</div>


<div>
<div class="content wysiwyg-content">
I need to update the following, however I've never done this on an ESX host before. This host is running customer facing services so need to keep downtime to a minimum. Any advise would be great. OS - ESXi-4.1.0<br />
<br />
<br />
Upgrade to the Dropbear SSH 2012.55 or later.<br />
<br />
OpenSSL 0.9.8 SSL/TLS users (client and/or server) should upgrade to 0.9.8za.<br />
<br />
OpenSSL 1.0.0 SSL/TLS users (client and/or server) should upgrade to 1.0.0m. OpenSSL 1.0.1 SSL/TLS users (client and/or server) should upgrade to 1.0.1h.
</div>
</div>


I need to update the following, however I've never done this on an ESX host before. This host is running customer facing services so need to keep downtime to a minimum. Any advise would be great. OS - ESXi-4.1.0


Upgrade to the Dropbear SSH 2012.55 or later.

OpenSSL 0.9.8 SSL/TLS users (client and/or server) should upgrade to 0.9.8za.

OpenSSL 1.0.0 SSL/TLS users (client and/or server) should upgrade to 1.0.0m. OpenSSL 1.0.1 SSL/TLS users (client and/or server) should upgrade to 1.0.1h.

How to update ESX packages

A vulnerability is a weakness which allows an attacker to reduce a system's information assurance. Vulnerability is the intersection of three elements: a system susceptibility or flaw, attacker access to the flaw, and attacker capability to exploit the flaw. To exploit a vulnerability, an attacker must have at least one applicable tool or technique that can connect to a system weakness, known as the attack surface. Vulnerability management is the cyclical practice of identifying, classifying, remediating, and mitigating vulnerabilities. Other vulnerabilities include security risks, security defects and constructs in programming languages that are difficult to use properly.

Vulnerabilities

Security is the protection of information systems from theft or damage to the hardware, the software, and the information on them, as well as from disruption or misdirection of the services they provide. The main goal of security is protecting assets, and an asset is anything of value and worthy of protection.  Information Security is a discipline of protecting information assets from threats through safeguards to achieve the objectives of confidentiality, integrity, and availability or CIA for short. On the other hand, disclosure, alteration, and disruption (DAD) compromise the security objectives.

Security

The Linux operating system, in all its flavors, has its own share of security flaws that allow intrusions, but there are various mechanisms by which these flaws can be removed, generally divided into two parts: authentication and access control. Authentication is responsible for ensuring that a user requesting access to the system is really the user with the account, while access control is responsible for controlling which resources each account has access to and what kind of access is permitted.