Article Number: 000215713
DSA-2023-237: Security Update for Dell Data Protection Central for Multiple Vulnerabilities
Summary: Dell Data Protection Central remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.
Article Content
Impact
Critical
Details
| Third-party Component | CVEs | More Information |
|---|---|---|
| SUSE Linux Enterprise Server 12 SP5 | CVE-2019-15601, CVE-2019-5435, CVE-2020-36691, CVE-2020-8169, CVE-2021-22297, CVE-2021-22298, CVE-2021-22890, CVE-2021-22901, CVE-2021-22945, CVE-2021-3923, CVE-2022-27774, CVE-2022-27775, CVE-2022-27778, CVE-2022-27779, CVE-2022-27780, CVE-2022-30115, CVE-2022-32205, CVE-2022-32207, CVE-2022-33972, CVE-2022-35260, CVE-2022-42915, CVE-2022-42916, CVE-2022-43551, CVE-2023-0464, CVE-2023-0465, CVE-2023-0466, CVE-2023-1281, CVE-2023-1390, CVE-2023-1513, CVE-2023-1611, CVE-2023-1670, CVE-2023-1855, CVE-2023-1989, CVE-2023-1990, CVE-2023-1998, CVE-2023-2124, CVE-2023-2162, CVE-2023-21930, CVE-2023-21937, CVE-2023-21938, CVE-2023-21939, CVE-2023-21954, CVE-2023-21967, CVE-2023-21968, CVE-2023-23914, CVE-2023-23915, CVE-2023-24593, CVE-2023-2483, CVE-2023-25153, CVE-2023-25173, CVE-2023-25193, CVE-2023-25652, CVE-2023-25809, CVE-2023-25815, CVE-2023-26551, CVE-2023-27537, CVE-2023-27561, CVE-2023-28319, CVE-2023-28320, CVE-2023-28321, CVE-2023-28322, CVE-2023-28464, CVE-2023-28484, CVE-2023-28642, CVE-2023-28772, CVE-2023-29007, CVE-2023-29383, CVE-2023-29469, CVE-2023-29491, CVE-2023-30630, CVE-2023-30772 | https://www.suse.com/security/cve/  |
Affected Products and Remediation
To upgrade your Dell Data Protection Central system or PowerProtect DP Series Appliance Dell Data Protection Central, see https://www.dell.com/support/kbdoc/000034881/data-protection-central-how-to-install-the-data-protection-central-os-update for installation instructions.
For PowerProtect DP Series (IDPA) Appliances running PowerProtect DP Series below 2.7, the appliance should be first upgraded to any 2.7.x version (Version 2.7.2 is preferred) and then the aforementioned DP Central patch should be applied. For PowerProtect DP Series (IDPA) Appliance running PowerProtect DP Series 2.7.3, the aforementioned DP Central patch should be applied directly.
See the latest ‘Data Protection Central OS Update’ file in https://www.dell.com/support/home/product-support/product/data-protection-central/drivers
See the latest ‘Data Protection Central OS Updates Release Notes’ in https://www.dell.com/support/home/product-support/product/data-protection-central/docs
For PowerProtect DP Series (IDPA) Appliances running PowerProtect DP Series below 2.7, the appliance should be first upgraded to any 2.7.x version (Version 2.7.2 is preferred) and then the aforementioned DP Central patch should be applied. For PowerProtect DP Series (IDPA) Appliance running PowerProtect DP Series 2.7.3, the aforementioned DP Central patch should be applied directly.
See the latest ‘Data Protection Central OS Update’ file in https://www.dell.com/support/home/product-support/product/data-protection-central/drivers
See the latest ‘Data Protection Central OS Updates Release Notes’ in https://www.dell.com/support/home/product-support/product/data-protection-central/docs
NOTE: The DPC version number remains the same in the DPC OS Update distribution that provides the fixes. Examine the /etc/dpc-osupdate file to confirm execution of DPC OS Update; this file will contain the line: version=1.1.14-1
Revision History
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2023-07-11 | Initial Release |
Related Information
Legal Information
Article Properties
Affected Product
Data Protection Central, PowerProtect Data Protection Appliance, PowerProtect Data Protection Software, Integrated Data Protection Appliance Family, Integrated Data Protection Appliance Software
Last Published Date
11 Jul 2023
Version
1
Article Type
Dell Security Advisory