DSA-2026-152: Dell Secure Connect Gateway Security Update for Multiple Third-Party Component Vulnerabilities.
Riepilogo: Dell Secure Connect Gateway contains remediation for multiple vulnerabilities that could be exploited by malicious users to compromise the affected system.
Impatto
Critical
Dettagli
|
Third-Party Component |
CVE |
More Information |
|
Apache |
CVE-2025-48924 |
|
|
Apache-CXF-Not used |
CVE-2022-46364 |
|
|
Apache-Commons-Compress-1.26.1 |
CVE-2024-25710 |
|
|
Apache-Tomcat-10.1.52 |
CVE-2023-44487 |
|
|
Bouncy-Castle-1.78 |
CVE-2022-45146 |
|
|
Eclipse Jetty-Not-used |
CVE-2023-36478 |
|
|
Logback-1.5.13 |
CVE-2023-6378 |
|
|
Netty-Reactor-Netty-1.1.13 |
CVE-2023-34062 |
|
|
Netty-Reactor-Netty-4.1.125 |
CVE-2025-24970 |
|
|
OWASP-HTML-Sanitizer-20260102.1 |
CVE-2025-66021 |
|
|
Spring-Framework |
CVE-2024-22243 |
|
|
Spring-Framework-6.2.10 |
CVE-2024-22259 |
|
|
apache2-2.4.58-150600.5.44.1 |
CVE-2025-55753 |
|
|
curl-8.14.1-150600.4.31.1 |
CVE-2025-11563 |
|
|
glib2-tools-2.78.6-150600.4.35.1 |
CVE-2025-13601 |
|
|
glibc-2.38-150600.14.43.1 |
CVE-2025-15281 |
|
|
gpg2-2.4.4-150600.3.15.1 |
CVE-2025-68973 |
|
|
jose4j-Not-used |
CVE-2023-51775 |
|
|
json-smart-2.5.2 |
CVE-2023-1370 |
|
|
krb5-1.20.1-150600.11.14.1 |
CVE-2025-3576 |
|
|
libexpat1-2.7.1-150400.3.31.1 |
CVE-2025-59375 |
|
|
libglib-2_0-0-2.78.6-150600.4.35.1 |
CVE-2025-7039 |
|
|
libgnutls30-3.8.3-150600.4.12.1 |
CVE-2025-9820 |
|
|
libopenssl-3-fips-provider-3.1.4-150600.5.42.1 |
CVE-2025-68160 |
|
|
libopenssl-3-fips-provider-3.1.4-150600.5.42.1 |
CVE-2025-15467 |
|
|
libpng16-16-1.6.40-150600.3.12.1 |
CVE-2025-28162 |
|
|
libpq5-18.1-150600.13.3.1 |
CVE-2025-12817 |
|
|
libpython3_11-1_0-3.11.14-150600.3.44.1 |
CVE-2025-11468 |
|
|
libpython3_11-1_0-3.11.14-150600.3.44.1 |
CVE-2025-12781 |
|
|
libpython3_12-1_0-3.12.12-150600.3.43.1 |
CVE-2025-6075 |
|
|
openssh-9.6p1-150600.6.34.1 |
CVE-2025-61984 |
|
|
pgJDBC-42.7.3 |
CVE-2024-1597 |
|
|
OpenSSL 3.1.4 |
CVE-2024-40896 CVE-2025-11187 CVE-2025-15469 CVE-2025-11563 CVE-2025-61984 CVE-2025-48795 CVE-2025-48734 CVE-2025-41249
|
|
|
libxml2 2.12.10 / 2.13.6 |
CVE-2024-55549 CVE-2025-10911 CVE-2025-24855 |
|
|
Libxslt 1.1.38+ |
CVE-2024-56171 |
https://nvd.nist.gov/vuln/search |
|
CVE-2025-7424 |
||
|
CVE-2025-7425 |
||
|
CVE-2025-8732 |
||
|
CVE-2025-24928 |
||
|
OpenSSL Libraries 3.1.4 |
CVE-2025-27113 |
https://nvd.nist.gov/vuln/search |
|
CVE-2025-32414 |
||
|
CVE-2025-32415 |
||
|
CVE-2025-6021 |
Prodotti interessati e correzione
|
Product |
Affected Version |
Updated Version |
Link |
|
Dell Secure Connect Gateway -Appliance |
Versions Prior to 5.34.00.16 |
5.34.00.16 or later |
https://www.dell.com/support/product-details/product/secure-connect-gateway-ve/drivers |
|
Product |
Affected Version |
Updated Version |
Link |
|
Dell Secure Connect Gateway -Appliance |
Versions Prior to 5.34.00.16 |
5.34.00.16 or later |
https://www.dell.com/support/product-details/product/secure-connect-gateway-ve/drivers |
Dell recommends keeping the Secure Connect Gateway Application and Secure Connect Gateway Appliance updated to the latest version.
Cronologia delle revisioni
|
Revision |
Date |
Description |
|
1.0 |
2026-03-23 |
Initial Release |