DSA-2025-184: Security Update for Dell Data Lakehouse Multiple Third-Party Component Vulnerabilities

Oversigt: Dell Data Lakehouse remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.

Denne artikel gælder for Denne artikel gælder ikke for Denne artikel er ikke knyttet til et bestemt produkt. Det er ikke alle produktversioner, der er identificeret i denne artikel.
Udforsk andre ressourcer

Virkning

Critical

Oplysninger

Third-party Component

CVEs

More Information

busybox

CVE-2023-42363, CVE-2023-42364, CVE-2023-42365, CVE-2023-42366

https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.

json-path v2.8.0

CVE-2023-51074

https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.

derby

CVE-2018-1313, CVE-2022-46337

https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.

glib2

CVE-2024-52533

https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.

go

CVE-2022-41716, CVE-2023-29402, CVE-2023-29404, CVE-2023-29405, CVE-2023-39323, CVE-2023-45285

https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.

Intel(R) TDX Module

CVE-2024-27457

https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.

Intel(R) Xeon(R) processor

CVE-2024-23919, CVE-2024-25565, CVE-2024-31068, CVE-2024-34023, CVE-2024-34170, CVE-2024-36242, CVE-2024-38660, CVE-2024-38665

https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.

java

CVE-2024-20918, CVE-2024-20926, CVE-2024-20952

https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.

Apache Log4j SMTP

CVE-2020-9488

https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.

Bouncy Castle Java Cryptography APIs

CVE-2024-30172

https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.

iq80 Snappy

CVE-2024-36124

https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.

EDK2

CVE-2024-38796

https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.

Dell Technologies anbefaler, at alle kunder tager hensyn til både CVSS-basisresultatet og alle relevante tidsmæssige og miljømæssige resultater, som kan have betydning for den potentielle alvorsgrad, der er forbundet med en bestemt sikkerhedsrisiko.

Berørte produkter og udbedring

Product

Affected Versions

Remediated Versions

Link

Dell Data Lakehouse

Versions prior to 1.4.0.0

Version 1.4.0.0 or later

https://www.dell.com/support/product-details/product/dell-data-lakehouse/drivers

Product

Affected Versions

Remediated Versions

Link

Dell Data Lakehouse

Versions prior to 1.4.0.0

Version 1.4.0.0 or later

https://www.dell.com/support/product-details/product/dell-data-lakehouse/drivers

Revisionshistorik

Revision

Date

Description

1.0

2025-04-16

Initial Release

Relaterede oplysninger

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Ansvarsfraskrivelse

Berørte produkter

Data Management, Dell Data Lakehouse
Artikelegenskaber
Artikelnummer: 000308929
Artikeltype: Dell Security Advisory
Senest ændret: 09 sep. 2025
Find svar på dine spørgsmål fra andre Dell-brugere
Supportservices
Kontrollér, om din enhed er dækket af supportservices.