Critical

VMSA-2026-0008.1 — Apply KB 460732 on 9.1.1 or KB 460734 on 5.2.x, 9.0.x and 9.1.0, keep SDDC Manager reachable only from trusted admin hosts, and subscribe to the advisory so you see the patch the day it lands.

Details →

Lab online · 1 · 78 posts

The Small
Human Cloud

Blog articles, news and useful information on VMware Cloud Foundation, automation and PowerShell — all from the home lab, where everything gets broken and rebuilt first.

Topology · mgmt domain All systems nominal
vcf-operations vcf-automation vcfms sddc-manager vcenter nsx-manager esx-01 esx-02 esx-03 esx-04 vsan-datastore 4 hosts · healthy
Blog posts
78
vExpert since
2020
In IT since
2008
Days since I broke the lab
22

Latest News from the Web

All briefings →
Weekday edition

vsphere provider 2.18.0 lands, bringing Supervisor namespaces fully into Terraform

  • Keep the Brotli workaround on SDDC Manager, and get the ESX logging fix in by tomorrow. VMSA-2026-0008.1 still shows "Patch pending" for every SDDC Manager version, so KB 460732 on 9.1.1 (or KB 460734 on 5.2.x, 9.0.x and 9.1.0) is what's protecting you. Press reports put the US federal deadlines at today for the Brotli flaw and tomorrow, 11 November, for ESX CVE-2026-41709, whose fixed builds are in the VMSA-2026-0006 matrix.
  • Rewrite storage_policies as storage_policy blocks before you move to vsphere provider 2.18.0. The 2.18.0 release replaces the attribute on vsphere_namespace and its data source, and PR #2789 says Terraform will fail at plan or apply on the old schema rather than change anything. Keep ~> 2.17 pinned until the namespace code is updated, then take the release for its new zone, permission and network options.
  • If you have Alpine-based jump hosts or containers running sshd, patch OpenSSH now. The "SSHole" flaw CVE-2026-123158 only affects musl-based builds with PAM disabled, Alpine's default server setup among them, per The Hacker News. Press reports say CISA added it to its KEV catalogue on 9 November with a 12 November federal deadline (tech-insider). Broadcom hasn't published a statement on it.
  • Security No new VMSA
  • Releases & KBs All quiet
  • Terraform & Packer vsphere 2.18.0 is out
  • Next deadline Today
Read today's Latest Tech News →

Code Projects

VMware Explore 2024 Hackathon Winning team

Project and code from the Las Vegas hackathon at VMware Explore 2024.

Explore · Las Vegas 2024 Repo ↗

Simplify VCF Deployment & Operations with Terraform

Session code with examples for deploying VCF and common post-bring-up tasks.

Explore session · 2024 Watch ↗ Repo ↗

Automating VCF Day 1 Operations

Session code covering Day 1 actions via the API and PowerVCF.

Explore session · 2024 Watch ↗ Repo ↗

Presentations

Every slide deck and demo from the events I've been lucky enough to present at.

Decks & demo code Repo ↗
Thanks for visiting

Let's talk tech!

Questions, ideas, or just want to talk VCF? Drop me an email or find me on the socials.

Email me →