DSA-2020-240: Dell EMC Data Computing Appliance (DCA) Security Update for Multiple Third-Party Component Vulnerabilities
この記事は次に適用されます：
この記事は次には適用されません：
この記事は、特定の製品に関連付けられていません。
すべての製品パージョンがこの記事に記載されているわけではありません。
影響
Critical
詳細
Multiple components within Dell EMC DCA require a security update to address various vulnerabilities.
The components are updated for the following vulnerabilities:
| Third-party Component |
CVE(s) |
More information |
| Kernel |
CVE-2017-18595 |
See NVD (http://nvd.nist.gov/) for individual scores for each CVE. |
| CVE-2019-19768 |
||
| CVE-2020-10711 |
||
| CVE-2019-19527 |
||
| CVE-2020-10757 |
||
| CVE-2020-12653 |
||
| CVE-2020-12654 |
||
| JRE Security Vulnerability Oracle July 2020 CPU |
CVE-2020-14556 |
|
| CVE-2020-14577 |
||
| CVE-2020-14578 |
||
| CVE-2020-14579 |
||
| CVE-2020-14583 |
||
| CVE-2020-14593 |
||
| CVE-2020-14621 |
For more information about any of the Common Vulnerabilities and Exposures (CVEs) mentioned here, consult the National Vulnerability Database (NVD) at http://nvd.nist.gov/.
To search for a particular CVE, use the database s search utility at http://web.nvd.nist.gov/view/vuln/search.
The components are updated for the following vulnerabilities:
| Third-party Component |
CVE(s) |
More information |
| Kernel |
CVE-2017-18595 |
See NVD (http://nvd.nist.gov/) for individual scores for each CVE. |
| CVE-2019-19768 |
||
| CVE-2020-10711 |
||
| CVE-2019-19527 |
||
| CVE-2020-10757 |
||
| CVE-2020-12653 |
||
| CVE-2020-12654 |
||
| JRE Security Vulnerability Oracle July 2020 CPU |
CVE-2020-14556 |
|
| CVE-2020-14577 |
||
| CVE-2020-14578 |
||
| CVE-2020-14579 |
||
| CVE-2020-14583 |
||
| CVE-2020-14593 |
||
| CVE-2020-14621 |
For more information about any of the Common Vulnerabilities and Exposures (CVEs) mentioned here, consult the National Vulnerability Database (NVD) at http://nvd.nist.gov/.
To search for a particular CVE, use the database s search utility at http://web.nvd.nist.gov/view/vuln/search.
影響を受ける製品と修復
Affected products:
Dell EMC Software: Only Dell EMC Data Computing Appliance (DCA) version 4.0.0.0 or 4.1.0.0 can be upgraded to version 4.2.0.0. To upgrade an earlier DCA version, you must migrate to version 4.0.0.0 (THEL7) and then to version 4.2.0.0.
Remediation:
The following Dell EMC DCA release addresses these vulnerabilities:
-
Dell EMC DCA 4.2.0.0
For Dell EMC DCA 4.2.0.0 and later, the security update is contained in the release 4.2.0.0.
Dell EMC recommends all customers upgrade at the earliest opportunity.
Contact Dell EMC DCA customer support to download the required rpm file and install it.
Affected products:
Dell EMC Software: Only Dell EMC Data Computing Appliance (DCA) version 4.0.0.0 or 4.1.0.0 can be upgraded to version 4.2.0.0. To upgrade an earlier DCA version, you must migrate to version 4.0.0.0 (THEL7) and then to version 4.2.0.0.
Remediation:
The following Dell EMC DCA release addresses these vulnerabilities:
-
Dell EMC DCA 4.2.0.0
For Dell EMC DCA 4.2.0.0 and later, the security update is contained in the release 4.2.0.0.
Dell EMC recommends all customers upgrade at the earliest opportunity.
Contact Dell EMC DCA customer support to download the required rpm file and install it.
関連情報
法的免責事項
対象製品
Data Computing Appliance V3製品
Data Computing Appliance V1, Data Computing Appliance V2, Data Computing Appliance V3, Product Security Information文書のプロパティ
文書番号: 000180943
文書の種類: Dell Security Advisory
最終更新: 22 5月 2021
質問に対する他のDellユーザーからの回答を見つける
サポート サービス
お使いのデバイスがサポート サービスの対象かどうかを確認してください。