DSA-2019-145: Dell EMC ECS Security Update for Multiple Third Party Components

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Impact

High

Details

Affected products: 
Dell EMC ECS versions prior to 3.4.0.0


Summary:  
SUSE Linux components within Dell EMC ECS require a security update to address various vulnerabilities. 

SUSE Linux components are updated for the following vulnerabilities:  
 
CVE-2015-5186    CVE-2018-1120    CVE-2018-14647    CVE-2018-16862
CVE-2018-19407    CVE-2018-19824    CVE-2018-20169    CVE-2019-6974
CVE-2019-7221    CVE-2019-7222
 
For more information about any of the Common Vulnerabilities and Exposures (CVEs) mentioned here, consult the National Vulnerability Database (NVD) at http://nvd.nist.gov/home.cfm. 

To search for a particular CVE, use the database s search utility at http://web.nvd.nist.gov/view/vuln/search.
SUSE Linux components are updated for the following vulnerabilities:  
 
CVE-2015-5186    CVE-2018-1120    CVE-2018-14647    CVE-2018-16862
CVE-2018-19407    CVE-2018-19824    CVE-2018-20169    CVE-2019-6974
CVE-2019-7221    CVE-2019-7222
 
For more information about any of the Common Vulnerabilities and Exposures (CVEs) mentioned here, consult the National Vulnerability Database (NVD) at http://nvd.nist.gov/home.cfm. 

To search for a particular CVE, use the database s search utility at http://web.nvd.nist.gov/view/vuln/search.
Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.

Affected Products & Remediation

The following Dell EMC ECS release addresses these vulnerabilities:   

  • Dell EMC ECS 3.4.0.0

Dell EMC recommends all customers have their ECS systems upgraded at the earliest opportunity by opening a Dell EMC ECS service request.

Link to Request Upgrade: 
https://www.dell.com/support/home



The following Dell EMC ECS release addresses these vulnerabilities:   

  • Dell EMC ECS 3.4.0.0

Dell EMC recommends all customers have their ECS systems upgraded at the earliest opportunity by opening a Dell EMC ECS service request.

Link to Request Upgrade: 
https://www.dell.com/support/home



Related Information

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Legal Disclaimer

Affected Products

Elastic Cloud Storage

Products

ECS Appliance, ECS Appliance Hardware Series, Elastic Cloud Storage, Product Security Information
Article Properties
Article Number: 000001905
Article Type: Dell Security Advisory
Last Modified: 20 Sep 2024
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.