DSA-2023-330: Security Update for Multiple Third-Party Component Vulnerabilities within Dell Hybrid Client
Summary: Dell Hybrid Client remediation is available for multiple third-party security vulnerabilities that could be exploited by malicious users to compromise the affected system.
This article applies to
This article does not apply to
Impact
Critical
Details
| Third-party Component | CVEs | More Information |
|---|---|---|
| OpenSSL | CVE-2023-0464, CVE-2023-0466, CVE-2023-0465 | See NVD link below for individual scores for each CVE. https://nvd.nist.gov/  |
| SSSD | CVE-2022-4254 | |
| Samba | CVE-2022-45141 | |
| Sequelize | CVE-2023-25813, CVE-2023-22580, CVE-2023-22578, CVE-2023-22579 | |
| Sqlite3 | CVE-2022-43441 |
Affected Products & Remediation
| Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|
| Precision 3260 | Dell Hybrid Client | Version 2.5 and prior |
Version 2.5.00.01 | Precision 3260(Ubuntu 20.04) Precision 3260(Ubuntu 22.04) |
| Latitude 3330 | Dell Hybrid Client | Version 2.5 and prior |
Version 2.5.00.01 | Latitude 3330(Ubuntu 20.04) Latitude 3330(Ubuntu 22.04) |
| OptiPlex 5400 All-in-One | Dell Hybrid Client | Version 2.5 and prior |
Version 2.5.00.01 | OptiPlex 5400 All-in-One(Ubuntu 20.04) OptiPlex 5400 All-in-One(Ubuntu 22.04) |
| OptiPlex 3000 Thin Client | Dell Hybrid Client | Version 2.5 and prior |
Version 2.5.00.01 | OptiPlex 3000 Thin Client(Ubuntu 20.04) OptiPlex 3000 Thin Client(Ubuntu 22.04) |
| Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|
| Precision 3260 | Dell Hybrid Client | Version 2.5 and prior |
Version 2.5.00.01 | Precision 3260(Ubuntu 20.04) Precision 3260(Ubuntu 22.04) |
| Latitude 3330 | Dell Hybrid Client | Version 2.5 and prior |
Version 2.5.00.01 | Latitude 3330(Ubuntu 20.04) Latitude 3330(Ubuntu 22.04) |
| OptiPlex 5400 All-in-One | Dell Hybrid Client | Version 2.5 and prior |
Version 2.5.00.01 | OptiPlex 5400 All-in-One(Ubuntu 20.04) OptiPlex 5400 All-in-One(Ubuntu 22.04) |
| OptiPlex 3000 Thin Client | Dell Hybrid Client | Version 2.5 and prior |
Version 2.5.00.01 | OptiPlex 3000 Thin Client(Ubuntu 20.04) OptiPlex 3000 Thin Client(Ubuntu 22.04) |
Revision History
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2023-09-27 | Initial Release |
Related Information
Legal Disclaimer
Affected Products
Latitude 3330, OptiPlex 3000 Thin Client, OptiPlex 5400 All-In-One, Precision 3260 CompactArticle Properties
Article Number: 000217322
Article Type: Dell Security Advisory
Last Modified: 27 Sep 2023
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.