DSA-2020-240: Dell EMC Data Computing Appliance (DCA) Security Update for Multiple Third-Party Component Vulnerabilities

이 문서는 다음에 적용됩니다. 이 문서는 다음에 적용되지 않습니다. 이 문서는 특정 제품과 관련이 없습니다. 모든 제품 버전이 이 문서에 나와 있는 것은 아닙니다.

영향

Critical

세부 정보

Multiple components within Dell EMC DCA require a security update to address various vulnerabilities. 

The components are updated for the following vulnerabilities:      
 

Third-party Component

CVE(s)

More information

Kernel

CVE-2017-18595

See NVD (http://nvd.nist.gov/) for individual scores for each CVE.

CVE-2019-19768

CVE-2020-10711

CVE-2019-19527

CVE-2020-10757

CVE-2020-12653

CVE-2020-12654

JRE Security Vulnerability Oracle July 2020 CPU

CVE-2020-14556

CVE-2020-14577

CVE-2020-14578

CVE-2020-14579

CVE-2020-14583

CVE-2020-14593

CVE-2020-14621


                                

For more information about any of the Common Vulnerabilities and Exposures (CVEs) mentioned here, consult the National Vulnerability Database (NVD) at http://nvd.nist.gov/.  

To search for a particular CVE, use the database s search utility at http://web.nvd.nist.gov/view/vuln/search.

The components are updated for the following vulnerabilities:      
 

Third-party Component

CVE(s)

More information

Kernel

CVE-2017-18595

See NVD (http://nvd.nist.gov/) for individual scores for each CVE.

CVE-2019-19768

CVE-2020-10711

CVE-2019-19527

CVE-2020-10757

CVE-2020-12653

CVE-2020-12654

JRE Security Vulnerability Oracle July 2020 CPU

CVE-2020-14556

CVE-2020-14577

CVE-2020-14578

CVE-2020-14579

CVE-2020-14583

CVE-2020-14593

CVE-2020-14621


                                

For more information about any of the Common Vulnerabilities and Exposures (CVEs) mentioned here, consult the National Vulnerability Database (NVD) at http://nvd.nist.gov/.  

To search for a particular CVE, use the database s search utility at http://web.nvd.nist.gov/view/vuln/search.

Dell Technologies는 모든 고객이 CVSS 기본 점수와 관련 임시 및 환경 점수를 모두 고려할 것을 권장합니다. 이 경우 특정 보안 취약성과 관련된 잠재적인 심각도에 영향을 미칠 수 있습니다.

영향을 받는 제품 및 문제 해결

Affected products:        
Dell EMC Software: Only Dell EMC Data Computing Appliance (DCA) version 4.0.0.0 or 4.1.0.0  can be upgraded to version 4.2.0.0. To upgrade an earlier DCA version, you must migrate to version 4.0.0.0 (THEL7) and then to version 4.2.0.0.
      

Remediation: 
The following Dell EMC DCA release addresses these vulnerabilities:     

  • Dell EMC DCA 4.2.0.0

For Dell EMC DCA 4.2.0.0 and later, the security update is contained in the release 4.2.0.0.

Dell EMC recommends all customers upgrade at the earliest opportunity.

Contact Dell EMC DCA customer support to download the required rpm file and install it.



Affected products:        
Dell EMC Software: Only Dell EMC Data Computing Appliance (DCA) version 4.0.0.0 or 4.1.0.0  can be upgraded to version 4.2.0.0. To upgrade an earlier DCA version, you must migrate to version 4.0.0.0 (THEL7) and then to version 4.2.0.0.
      

Remediation: 
The following Dell EMC DCA release addresses these vulnerabilities:     

  • Dell EMC DCA 4.2.0.0

For Dell EMC DCA 4.2.0.0 and later, the security update is contained in the release 4.2.0.0.

Dell EMC recommends all customers upgrade at the earliest opportunity.

Contact Dell EMC DCA customer support to download the required rpm file and install it.



관련 정보

해당 제품

Data Computing Appliance V3

제품

Data Computing Appliance V1, Data Computing Appliance V2, Data Computing Appliance V3, Product Security Information
문서 속성
문서 번호: 000180943
문서 유형: Dell Security Advisory
마지막 수정 시간: 22 5월 2021
다른 Dell 사용자에게 질문에 대한 답변 찾기
지원 서비스
디바이스에 지원 서비스가 적용되는지 확인하십시오.