New patches are available for VMware ESX Server 2.5.4 and 2.5.5. These patches were released on 6/3/08, and the next patch release update is expected at the end of June.
VMware ESX Server 2.5.4 Patch Download Page
[
http://app.connect.vmware.com/e/er.aspx?s=524&lid=2754&elq=67973E43F2EB47F58DA4DFE2BB461998]
Upgrade Patch 19 (Security): fixes various security flaws discovered in the Tk toolkit and in the Kerberos 5 modules; fixes library path vulnerability in vmware-authd; fixes a flaw in unzip; updates the tzdata RPM that provides time zone rule updates
VMware ESX Server 2.5.5 Patch Download Page
[
http://app.connect.vmware.com/e/er.aspx?s=524&lid=2754&elq=67973E43F2EB47F58DA4DFE2BB461998]
Upgrade Patch 8 (Security): fixes various security flaws discovered in the Tk toolkit and in the Kerberos 5 modules; fixes library path vulnerability in vmware-authd; fixes a flaw in unzip; updates the tzdata RPM that provides time zone rule updates