DSA-2021-012: Dell EMC Secure Remote Services Virtual Edition Security Update for Multiple Third-Party Component Vulnerabilities

요약: Multiple components within Dell EMC SRS Virtual Edition require a security update to address various vulnerabilities.

이 문서는 다음에 적용됩니다. 이 문서는 다음에 적용되지 않습니다. 이 문서는 특정 제품과 관련이 없습니다. 모든 제품 버전이 이 문서에 나와 있는 것은 아닙니다.

영향

Critical

세부 정보

Multiple components within Dell EMC SRS Virtual Edition require a security update to address various vulnerabilities. 

Third-party Component CVE(s) More information
JRE CVE-2020-14664
CVE-2020-14583
CVE-2020-14593
CVE-2020-14562
CVE-2020-14621
CVE-2020-14556
CVE-2020-14573
CVE-2020-14581
CVE-2020-14578
CVE-2020-14579
CVE-2020-14577
Refer to:   
https://www.oracle.com/security-alerts/cpujul2020.html
gdk-pixbuf packages CVE-2017-2870
CVE-2017-2862
CVE-2017-1000422
 
kernel-default and

kernel-default-base
CVE-2017-17852
CVE-2019-15218
CVE-2017-16649
CVE-2019-19462
CVE-2018-12207 
CVE-2019-18809
CVE-2019-15924
CVE-2017-17857 
CVE-2017-17855 
CVE-2019-15216
CVE-2016-4997
CVE-2018-5391
CVE-2019-16234
CVE-2018-13094
CVE-2017-14051
CVE-2019-12818 
CVE-2016-7042
CVE-2018-16871
CVE-2018-19407
CVE-2019-3701
CVE-2018-8822
CVE-2018-5390
CVE-2019-11487
CVE-2016-4485
CVE-2016-5244
CVE-2019-12456
CVE-2016-4486
CVE-2017-5753
CVE-2018-1068
CVE-2018-14633
CVE-2019-15220
CVE-2019-15222
CVE-2019-12819 
CVE-2019-17056
CVE-2019-19526
CVE-2018-6927
CVE-2019-8912
CVE-2017-15951
CVE-2017-16537
CVE-2017-7477
CVE-2017-7541
CVE-2018-13095
CVE-2018-17182
CVE-2018-19824
CVE-2018-5848
CVE-2018-9363
CVE-2019-13648
CVE-2019-15030
CVE-2019-16232
CVE-2019-20806
CVE-2019-7221
CVE-2020-0305
CVE-2020-10942
CVE-2017-11473
CVE-2017-15265
CVE-2017-16527
CVE-2017-16528
CVE-2017-16529
CVE-2017-16531 
CVE-2018-1129
CVE-2018-13093
CVE-2019-13631
CVE-2019-15098
CVE-2019-15118
CVE-2019-16233
CVE-2019-19966
CVE-2019-9503
CVE-2017-17856
CVE-2019-19067
CVE-2019-6974
CVE-2020-10773
CVE-2020-9383
CVE-2018-20169
CVE-2018-7191
CVE-2019-16994
CVE-2020-8649
CVE-2016-6516
CVE-2017-13080
CVE-2017-16647
CVE-2017-16995
CVE-2019-11478
CVE-2019-15292
CVE-2019-19045
CVE-2019-20054
CVE-2020-12769
CVE-2017-16533
CVE-2017-18203
CVE-2017-9076
CVE-2019-15916
CVE-2017-1000255
CVE-2019-11810
CVE-2019-20095
CVE-2019-2024
CVE-2017-16535
CVE-2015-8539
CVE-2016-4558
CVE-2016-4951
CVE-2016-5195
CVE-2019-19058
CVE-2018-7740
CVE-2017-9059
CVE-2016-0723
CVE-2016-4998
CVE-2019-19066
CVE-2019-9458
CVE-2019-0154 
CVE-2020-12464
CVE-2020-8647
CVE-2019-9213
CVE-2020-12652
Libpq5 and PostgreSQL CVE-2020-1720  
libicu52_1 and libicu52_1-data CVE-2020-10531  
Libssh2-1 CVE-2019-17498  
MozillaFirefox CVE-2019-11711   
grub2 CVE-2020-15707
CVE-2020-14310
CVE-2020-14311
CVE-2020-14308
 
ruby2.1
ruby2.1-stdlib
CVE-2017-0900
CVE-2017-14033
CVE-2020-14344
CVE-2018-8779
CVE-2016-7798
CVE-2019-8324
CVE-2019-8320
CVE-2018-6914
CVE-2019-15845
CVE-2015-9096
 
Libfreebl3 and
Mozilla-nss
 
CVE-2020-12402
CVE-2019-11715
 
Libadns1 CVE-2017-9103
CVE-2017-9104
 
python CVE-2019-18348  
Tack CVE-2019-17594  
ntp CVE-2020-15025  
Third-party Component CVE(s) More information
JRE CVE-2020-14664
CVE-2020-14583
CVE-2020-14593
CVE-2020-14562
CVE-2020-14621
CVE-2020-14556
CVE-2020-14573
CVE-2020-14581
CVE-2020-14578
CVE-2020-14579
CVE-2020-14577
Refer to:   
https://www.oracle.com/security-alerts/cpujul2020.html
gdk-pixbuf packages CVE-2017-2870
CVE-2017-2862
CVE-2017-1000422
 
kernel-default and

kernel-default-base
CVE-2017-17852
CVE-2019-15218
CVE-2017-16649
CVE-2019-19462
CVE-2018-12207 
CVE-2019-18809
CVE-2019-15924
CVE-2017-17857 
CVE-2017-17855 
CVE-2019-15216
CVE-2016-4997
CVE-2018-5391
CVE-2019-16234
CVE-2018-13094
CVE-2017-14051
CVE-2019-12818 
CVE-2016-7042
CVE-2018-16871
CVE-2018-19407
CVE-2019-3701
CVE-2018-8822
CVE-2018-5390
CVE-2019-11487
CVE-2016-4485
CVE-2016-5244
CVE-2019-12456
CVE-2016-4486
CVE-2017-5753
CVE-2018-1068
CVE-2018-14633
CVE-2019-15220
CVE-2019-15222
CVE-2019-12819 
CVE-2019-17056
CVE-2019-19526
CVE-2018-6927
CVE-2019-8912
CVE-2017-15951
CVE-2017-16537
CVE-2017-7477
CVE-2017-7541
CVE-2018-13095
CVE-2018-17182
CVE-2018-19824
CVE-2018-5848
CVE-2018-9363
CVE-2019-13648
CVE-2019-15030
CVE-2019-16232
CVE-2019-20806
CVE-2019-7221
CVE-2020-0305
CVE-2020-10942
CVE-2017-11473
CVE-2017-15265
CVE-2017-16527
CVE-2017-16528
CVE-2017-16529
CVE-2017-16531 
CVE-2018-1129
CVE-2018-13093
CVE-2019-13631
CVE-2019-15098
CVE-2019-15118
CVE-2019-16233
CVE-2019-19966
CVE-2019-9503
CVE-2017-17856
CVE-2019-19067
CVE-2019-6974
CVE-2020-10773
CVE-2020-9383
CVE-2018-20169
CVE-2018-7191
CVE-2019-16994
CVE-2020-8649
CVE-2016-6516
CVE-2017-13080
CVE-2017-16647
CVE-2017-16995
CVE-2019-11478
CVE-2019-15292
CVE-2019-19045
CVE-2019-20054
CVE-2020-12769
CVE-2017-16533
CVE-2017-18203
CVE-2017-9076
CVE-2019-15916
CVE-2017-1000255
CVE-2019-11810
CVE-2019-20095
CVE-2019-2024
CVE-2017-16535
CVE-2015-8539
CVE-2016-4558
CVE-2016-4951
CVE-2016-5195
CVE-2019-19058
CVE-2018-7740
CVE-2017-9059
CVE-2016-0723
CVE-2016-4998
CVE-2019-19066
CVE-2019-9458
CVE-2019-0154 
CVE-2020-12464
CVE-2020-8647
CVE-2019-9213
CVE-2020-12652
Libpq5 and PostgreSQL CVE-2020-1720  
libicu52_1 and libicu52_1-data CVE-2020-10531  
Libssh2-1 CVE-2019-17498  
MozillaFirefox CVE-2019-11711   
grub2 CVE-2020-15707
CVE-2020-14310
CVE-2020-14311
CVE-2020-14308
 
ruby2.1
ruby2.1-stdlib
CVE-2017-0900
CVE-2017-14033
CVE-2020-14344
CVE-2018-8779
CVE-2016-7798
CVE-2019-8324
CVE-2019-8320
CVE-2018-6914
CVE-2019-15845
CVE-2015-9096
 
Libfreebl3 and
Mozilla-nss
 
CVE-2020-12402
CVE-2019-11715
 
Libadns1 CVE-2017-9103
CVE-2017-9104
 
python CVE-2019-18348  
Tack CVE-2019-17594  
ntp CVE-2020-15025  
Dell Technologies는 모든 고객이 CVSS 기본 점수와 관련 임시 및 환경 점수를 모두 고려할 것을 권장합니다. 이 경우 특정 보안 취약성과 관련된 잠재적인 심각도에 영향을 미칠 수 있습니다.

영향을 받는 제품 및 문제 해결

Product Affected Version(s) Updated Version(s) Link to Update  
Dell EMC SRS Virtual Edition 3.40.00.08  3.42.10.06  3.44.00.08  3.46.00.04  3.48.00.04 3.50.00.06 The SRS-VE patch is published in SRS SUMA (SUSE Manager) repository and the existing process triggers an Email notification to customer’s SRS-VE primary and secondary contacts. Email notification contains a link to Release notes (along with details of security updates) and a link to update the customer’s VE to the latest patch. Contact Dell EMC SRS Virtual Edition Customer Support for any questions regarding upgrading your Dell EMC SRS Virtual Edition system.  
 
 
Product Affected Version(s) Updated Version(s) Link to Update  
Dell EMC SRS Virtual Edition 3.40.00.08  3.42.10.06  3.44.00.08  3.46.00.04  3.48.00.04 3.50.00.06 The SRS-VE patch is published in SRS SUMA (SUSE Manager) repository and the existing process triggers an Email notification to customer’s SRS-VE primary and secondary contacts. Email notification contains a link to Release notes (along with details of security updates) and a link to update the customer’s VE to the latest patch. Contact Dell EMC SRS Virtual Edition Customer Support for any questions regarding upgrading your Dell EMC SRS Virtual Edition system.  
 
 

해결 방법 및 완화 방안

.

개정 내역

RevisionDateDescription
1.02020-01-21Initial Release

관련 정보

해당 제품

Secure Remote Services Virtual Edition, Product Security Information
문서 속성
문서 번호: 000182169
문서 유형: Dell Security Advisory
마지막 수정 시간: 18 9월 2025
다른 Dell 사용자에게 질문에 대한 답변 찾기
지원 서비스
디바이스에 지원 서비스가 적용되는지 확인하십시오.