Crowdstrike disclosed a serious VM Escape vulnerability – codename VENOM, CVE-2015-3456 which has been around here since 2004. This one is especially serious because it is affecting the VMs in their default configuration and could be also affecting thousands of the VMs in cloud. This vulnerability may allow an attacker… Continue reading
Apparently VMware called off latest patches for ESXi 5.5 released on 30.4.2015, However all of them can be still residing in your Update Manager! There is no official statement from VMware out there yet, but I suggest you do not apply following patches: ESX550-201504101-SG ESX550-201504101-BG ESX550-201504102-BG ESX550-201504104-BG I have found… Continue reading
In the last two years I was participating on the many designs, implementations and reviews of the vSphere on IBM/Lenovo Flex System or PureFlex, if you want to call like that. Therefore today I would like to share with you my preferred way of doing it right from vSphere perspective… Continue reading
IBM has released a flash alert regarding a new behavior introduced in vSphere 5.5 Update2 and vSphere 6.0 where VAAI ATS (Atomic Test and Set or in the other words Hardware accelerated locking) is used for heartbeat I/O. http://www-01.ibm.com/support/docview.wss?uid=ssg1S1005201 According to IBM: Due to the low timeout value for heartbeat… Continue reading
New issue was discovered which may result in corrupted backups leveraging vSphere CBT (Change Block Tracking) for incremental backups. Basically all backup products which use VMware API for Backups ( Virtual Disk Development Kit (VDDK) )are affected. This issue occurs when you expand a virtual disk vmdk file which has… Continue reading
If you decided to go with disk mirroring inside your guest operating system across two SAN LUNs for whatever reason (e.g. you want to bring another level of the protection for your application and your SAN environment does not support “stretch cluster” implementation, no support for synchronous mirroring, budget constrains… Continue reading
You may be aware about recent academic research regarding potential TPS (Transparent Page Sharing) (enabled by default) vulnerability, where you may be able to determine AES encryption key from memory timings. VMware response for this (although they do not believe it can be used in real world): they will disable… Continue reading
Some time ago, after I tried to remove ESXi host from vCenter it was still appearing in vSphere client with alert and I couldn’t remove it again. Someone would say it is just cosmetic issue, but for example storage service was failing from initializing because of it too. VMware support… Continue reading
I’ve got lot of questions from people about integrating IBM Flex System CMM with Active Directory or LDAP authentication, because lets face it – IBM documentation is not the best in the industry and this part is kinda missing there :/ For those of you who worked with IBM BladeCenter… Continue reading
