DSA-2025-075: Security Update for Dell Data Protection Advisor for Multiple Component Vulnerabilities

Pre-requisites: 

• This workaround applies to Dell Data Protection Advisor (DPA), version 19.11 and later.
• The HP Disk Array and HP Virtual Tape Library (VTL) endpoints must not be actively monitored by DPA.
• The script must be executed by a user with system access and privileges to perform operations such as read, execute and delete files or execute shell or batch scripts.
• The absolute paths to the _install and _uninstall directories of DPA on the host’s file system must be prepared and noted in advance, as they will be required during script execution. 
• The appropriate script file for your operating system has been downloaded. The script helps remove OpenSSL 1.0.2 dependent libraries affected by CVE-2024-5535 and CVE-2023-3446.
  • Linux: Unbundle_openssl_102_Libs_From_DPA.sh
  • Windows: Unbundle_Openssl_102_Libs_From_DPA.bat 

For Linux: 

1. Extract UnbundleScript_Openssl_102_Libs.zip to a temporary folder, using one either gunzip or unzip command.
2. Grant execute permission to the script using the following CLI command: 

     # chmod 0777 unbundle_openssl_102_Libs_From_DPA 

3. Execute the script and when prompted, provide the absolute path where _install and _uninstall DPA folders are present. Example: </opt/emc/dpa/>.

Note: Post execution the script will automatically remove libssl.so.1.0.0, libcrypto.so.1.0.0, dpaagent_modhparray, and dpaagent_modhpvls and exit. 

For Windows: 

1. Extract UnbundleScript_Openssl_102_Libs.zip to a temporary folder using 7Zip software or any Windows supported zip software.  
2. Execute the script and when prompted, provide the absolute path where _install and _uninstall DPA folders are present. Example: <C:\Program Files\EMC\DPA>.

Note: Post execution of the script will automatically remove libeay32.dll, ssleay32.dll, dpaagent_modhparray.exe, dpaagent_modhpvls.exe and exit.