In the meantime the only workaround is to downgrade your hosts to ESXi 5.5 GA (without Update 1). But how do you do this without re-installing ESXi?
You cannot do this through Update Manager, but through esxcli as follows.
Enable SSH access on your host, log in to it (e.g. using putty) and run the following commands:
# open firewall for outgoing http requests: esxcli network firewall ruleset set -e true -r httpClient # Install the ESXi 5.5 pre-U1 Heartbleed Fix Image Profile from the VMware Online depot esxcli software profile update -d https://hostupdate.vmware.com/software/VUM/PRODUCTION/main/vmw-depot-index.xml -p ESXi-5.5.0-20140401020s-standard --allow-downgrades # Reboot your host rebootThis will downgrade the host to the ESXi 5.5 GA version plus all security fixes that were released since then including the fix for the Heartbleed bug! If you are interested in a detailed overview of what package versions are included in each ESXi patch level then have a look at my ESXi VIB Matrix!
By the way: If you are not yet on ESXi 5.5 U1 and just want to apply the Heartbleed fix - but not U1 (because of the NFS bug) - then you can use the exact same commands (but may omit the --allow-downgrades option, because it is not needed then).
Another note: If you have 3rd-party VIBs installed then these will not be touched by this procedure. That means it is safe to use this method even if you have installed your hosts with the HP Customized installation ISO or have manually added other additional custom packages.
This post first appeared on the VMware Front Experience Blog and was written by Andreas Peetz. Follow him on Twitter to keep up to date with what he posts.