DSA-2025-121: Security Update for Cloud Tiering Appliance/VE Multiple Third-Party Component Vulnerabilities
Resumen: Dell Cloud Tiering Appliance/VE remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.
Impacto
Critical
Detalles
| Third-party Component | CVEs | More Information |
| glib2 | CVE-2024-52533 |
See NVD link below for individual scores for each CVE. http://nvd.nist.gov/ |
| javapackages-tools | CVE-2024-28168 |
See NVD link below for individual scores for each CVE. http://nvd.nist.gov/ |
| xen | CVE-2024-45817, CVE-2024-45818, CVE-2024-45819 |
See NVD link below for individual scores for each CVE. http://nvd.nist.gov/ |
| Postgresql17 | CVE-2024-10976, CVE-2024-10977, CVE-2024-10978, CVE-2024-10979 |
See NVD link below for individual scores for each CVE. http://nvd.nist.gov/ |
| kernel-default |
CVE-2021-47416, CVE-2021-47589, CVE-2022-3435, CVE-2022-45934, CVE-2022-48664, CVE-2022-48947, CVE-2022-48956, CVE-2022-48960, CVE-2022-48962, CVE-2022-48967, CVE-2022-48970, CVE-2022-48988, CVE-2022-48991, CVE-2022-48999, CVE-2022-49003, CVE-2022-49014, CVE-2022-49015, CVE-2022-49023, CVE-2022-49025, CVE-2023-28327, CVE-2023-46343, CVE-2023-52881,CVE-2023-52919, CVE-2023-6270, CVE-2024-27043, CVE-2024-42145, CVE-2024-44947, CVE-2024-45016, CVE-2024-46813, CVE-2024-46816, CVE-2024-46817, CVE-2024-46818, CVE-2024-46849, CVE-2024-47668, CVE-2024-47674, CVE-2024-47684, CVE-2024-47706, CVE-2024-47747, CVE-2024-49860, CVE-2024-49867, CVE-2024-49936, CVE-2024-49974, CVE-2024-49982, CVE-2024-49991, CVE-2024-49995, CVE-2024-50047, CVE-2023-52524, CVE-2024-49925, CVE-2024-50089, CVE-2024-50115, CVE-2024-50125, CVE-2024-50127, CVE-2024-50154, CVE-2024-50205, CVE-2024-50208, CVE-2024-50264, CVE-2024-50267, CVE-2024-50279, CVE-2024-50290, CVE-2024-50301, CVE-2024-50302, CVE-2024-53061, CVE-2024-53063, CVE-2024-53142 |
See NVD link below for individual scores for each CVE. http://nvd.nist.gov/ |
| gdb | CVE-2022-4806 |
See NVD link below for individual scores for each CVE. http://nvd.nist.gov/ |
Corrección y productos afectados
| Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
| Cloud Tiering Appliance | CTA and CTA-HA | Versions prior to 13.2.0.2.33 | Version 13.2.0.2.33 or later | https://www.dell.com/support/home/product-support/product/cloud-tiering-applianceve/drivers |
| Cloud Tiering Appliance | CTA/VE and CTA-HA/VE | Versions prior to 13.2.0.2.33 | Version 13.2.0.2.33 or later | https://www.dell.com/support/home/product-support/product/cloud-tiering-applianceve/drivers |
| Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
| Cloud Tiering Appliance | CTA and CTA-HA | Versions prior to 13.2.0.2.33 | Version 13.2.0.2.33 or later | https://www.dell.com/support/home/product-support/product/cloud-tiering-applianceve/drivers |
| Cloud Tiering Appliance | CTA/VE and CTA-HA/VE | Versions prior to 13.2.0.2.33 | Version 13.2.0.2.33 or later | https://www.dell.com/support/home/product-support/product/cloud-tiering-applianceve/drivers |
Historial de revisiones
| Revision | Date | Description |
| 1.0 | 2025-03-11 | Initial Release |