DSA-2019-143: Dell EMC Isilon OneFS Security Update for Embedded iconv Buffer Overflow Vulnerability

iconv within Dell EMC Isilon OneFS was updated to address the following vulnerability:     

• iconv is a libc library function that is used by Isilon OneFS. Depending on the way in which iconv is used, an attacker may be able to create a denial of service, provoke incorrect program behavior, or induce a remote code execution.
  
  CVE-2019-5600

For more information about any of the Common Vulnerabilities and Exposures (CVEs) mentioned here, consult the National Vulnerability Database (NVD) at https://nvd.nist.gov/. 

To search for a particular CVE, use the database s search utility at https://nvd.nist.gov/vuln/search.

Affected products:      
Dell EMC Isilon OneFS versions prior to 8.2.1.


Remediation:      
For Dell EMC Isilon OneFS version 8.2.1, the security update is contained in the release.

For Dell EMC Isilon OneFS versions 8.2.0 and 8.1.2, the fix for this issue is included with the October 2019 Rollup Patch, as well as all future Rollup Patches. For more information and to obtain a Rollup patch, see the Current Isilon OneFS Patches document.

For Dell EMC Isilon version 8.1.0.4 or earlier, it is recommended to upgrade to a newer version of OneFS.

Dell EMC recommends all customers upgrade at the earliest opportunity.