DSA-2019-141: Dell EMC Networking OS10 Security Update for Linux Kernel Vulnerabilities

An update is available to address the following security vulnerabilities:

CVE-2019-11477 (SACK Panic)
CVE-2019-11478 (SACK Slowness) 
CVE-2019-11479 (Excess Resource Consumption Due to Low MSS Values) 

For more information about any of the Common Vulnerabilities and Exposures (CVEs) mentioned here, consult the National Vulnerability Database (NVD) at http://nvd.nist.gov/home.cfm  . To search for a particular CVE, use the database’s search utility at http://web.nvd.nist.gov/view/vuln/search  .

Affected products:  

Dell EMC Networking OS10 versions prior to 10.5.0.0.

Resolution:  

The following Dell EMC Networking OS10 version contains a resolution to the vulnerability:

•     Dell EMC Networking OS10 version 10.5.0.0 and later.
  
  Customers can find information how to upgrade to the latest version here:  Dell EMC Networking OS10 Info Hub 

Dell EMC recommends all customers upgrade at the earliest opportunity.