DSA-2021-012: Dell EMC Secure Remote Services Virtual Edition Security Update for Multiple Third-Party Component Vulnerabilities
요약: Multiple components within Dell EMC SRS Virtual Edition require a security update to address various vulnerabilities.
이 문서는 다음에 적용됩니다.
이 문서는 다음에 적용되지 않습니다.
이 문서는 특정 제품과 관련이 없습니다.
모든 제품 버전이 이 문서에 나와 있는 것은 아닙니다.
영향
Critical
세부 정보
Multiple components within Dell EMC SRS Virtual Edition require a security update to address various vulnerabilities.
| Third-party Component | CVE(s) | More information |
| JRE | CVE-2020-14664 CVE-2020-14583 CVE-2020-14593 CVE-2020-14562 CVE-2020-14621 CVE-2020-14556 CVE-2020-14573 CVE-2020-14581 CVE-2020-14578 CVE-2020-14579 CVE-2020-14577 |
Refer to: https://www.oracle.com/security-alerts/cpujul2020.html |
| gdk-pixbuf packages | CVE-2017-2870 CVE-2017-2862 CVE-2017-1000422 |
|
| kernel-default and kernel-default-base |
CVE-2017-17852 CVE-2019-15218 CVE-2017-16649 CVE-2019-19462 CVE-2018-12207 CVE-2019-18809 CVE-2019-15924 CVE-2017-17857 CVE-2017-17855 CVE-2019-15216 CVE-2016-4997 CVE-2018-5391 CVE-2019-16234 CVE-2018-13094 CVE-2017-14051 CVE-2019-12818 CVE-2016-7042 CVE-2018-16871 CVE-2018-19407 CVE-2019-3701 CVE-2018-8822 CVE-2018-5390 CVE-2019-11487 CVE-2016-4485 CVE-2016-5244 CVE-2019-12456 CVE-2016-4486 CVE-2017-5753 CVE-2018-1068 CVE-2018-14633 CVE-2019-15220 CVE-2019-15222 CVE-2019-12819 CVE-2019-17056 CVE-2019-19526 CVE-2018-6927 CVE-2019-8912 CVE-2017-15951 CVE-2017-16537 CVE-2017-7477 CVE-2017-7541 CVE-2018-13095 CVE-2018-17182 CVE-2018-19824 CVE-2018-5848 CVE-2018-9363 CVE-2019-13648 CVE-2019-15030 CVE-2019-16232 CVE-2019-20806 CVE-2019-7221 CVE-2020-0305 CVE-2020-10942 CVE-2017-11473 CVE-2017-15265 CVE-2017-16527 CVE-2017-16528 CVE-2017-16529 CVE-2017-16531 CVE-2018-1129 CVE-2018-13093 CVE-2019-13631 CVE-2019-15098 CVE-2019-15118 CVE-2019-16233 CVE-2019-19966 CVE-2019-9503 CVE-2017-17856 CVE-2019-19067 CVE-2019-6974 CVE-2020-10773 CVE-2020-9383 CVE-2018-20169 CVE-2018-7191 CVE-2019-16994 CVE-2020-8649 CVE-2016-6516 CVE-2017-13080 CVE-2017-16647 CVE-2017-16995 CVE-2019-11478 CVE-2019-15292 CVE-2019-19045 CVE-2019-20054 CVE-2020-12769 CVE-2017-16533 CVE-2017-18203 CVE-2017-9076 CVE-2019-15916 CVE-2017-1000255 CVE-2019-11810 CVE-2019-20095 CVE-2019-2024 CVE-2017-16535 CVE-2015-8539 CVE-2016-4558 CVE-2016-4951 CVE-2016-5195 CVE-2019-19058 CVE-2018-7740 CVE-2017-9059 CVE-2016-0723 CVE-2016-4998 CVE-2019-19066 CVE-2019-9458 CVE-2019-0154 CVE-2020-12464 CVE-2020-8647 CVE-2019-9213 CVE-2020-12652 |
|
| Libpq5 and PostgreSQL | CVE-2020-1720 | |
| libicu52_1 and libicu52_1-data | CVE-2020-10531 | |
| Libssh2-1 | CVE-2019-17498 | |
| MozillaFirefox | CVE-2019-11711 | |
| grub2 | CVE-2020-15707 CVE-2020-14310 CVE-2020-14311 CVE-2020-14308 |
|
| ruby2.1 ruby2.1-stdlib |
CVE-2017-0900 CVE-2017-14033 CVE-2020-14344 CVE-2018-8779 CVE-2016-7798 CVE-2019-8324 CVE-2019-8320 CVE-2018-6914 CVE-2019-15845 CVE-2015-9096 |
|
| Libfreebl3 and Mozilla-nss |
CVE-2020-12402 CVE-2019-11715 |
|
| Libadns1 | CVE-2017-9103 CVE-2017-9104 |
|
| python | CVE-2019-18348 | |
| Tack | CVE-2019-17594 | |
| ntp | CVE-2020-15025 |
| Third-party Component | CVE(s) | More information |
| JRE | CVE-2020-14664 CVE-2020-14583 CVE-2020-14593 CVE-2020-14562 CVE-2020-14621 CVE-2020-14556 CVE-2020-14573 CVE-2020-14581 CVE-2020-14578 CVE-2020-14579 CVE-2020-14577 |
Refer to: https://www.oracle.com/security-alerts/cpujul2020.html |
| gdk-pixbuf packages | CVE-2017-2870 CVE-2017-2862 CVE-2017-1000422 |
|
| kernel-default and kernel-default-base |
CVE-2017-17852 CVE-2019-15218 CVE-2017-16649 CVE-2019-19462 CVE-2018-12207 CVE-2019-18809 CVE-2019-15924 CVE-2017-17857 CVE-2017-17855 CVE-2019-15216 CVE-2016-4997 CVE-2018-5391 CVE-2019-16234 CVE-2018-13094 CVE-2017-14051 CVE-2019-12818 CVE-2016-7042 CVE-2018-16871 CVE-2018-19407 CVE-2019-3701 CVE-2018-8822 CVE-2018-5390 CVE-2019-11487 CVE-2016-4485 CVE-2016-5244 CVE-2019-12456 CVE-2016-4486 CVE-2017-5753 CVE-2018-1068 CVE-2018-14633 CVE-2019-15220 CVE-2019-15222 CVE-2019-12819 CVE-2019-17056 CVE-2019-19526 CVE-2018-6927 CVE-2019-8912 CVE-2017-15951 CVE-2017-16537 CVE-2017-7477 CVE-2017-7541 CVE-2018-13095 CVE-2018-17182 CVE-2018-19824 CVE-2018-5848 CVE-2018-9363 CVE-2019-13648 CVE-2019-15030 CVE-2019-16232 CVE-2019-20806 CVE-2019-7221 CVE-2020-0305 CVE-2020-10942 CVE-2017-11473 CVE-2017-15265 CVE-2017-16527 CVE-2017-16528 CVE-2017-16529 CVE-2017-16531 CVE-2018-1129 CVE-2018-13093 CVE-2019-13631 CVE-2019-15098 CVE-2019-15118 CVE-2019-16233 CVE-2019-19966 CVE-2019-9503 CVE-2017-17856 CVE-2019-19067 CVE-2019-6974 CVE-2020-10773 CVE-2020-9383 CVE-2018-20169 CVE-2018-7191 CVE-2019-16994 CVE-2020-8649 CVE-2016-6516 CVE-2017-13080 CVE-2017-16647 CVE-2017-16995 CVE-2019-11478 CVE-2019-15292 CVE-2019-19045 CVE-2019-20054 CVE-2020-12769 CVE-2017-16533 CVE-2017-18203 CVE-2017-9076 CVE-2019-15916 CVE-2017-1000255 CVE-2019-11810 CVE-2019-20095 CVE-2019-2024 CVE-2017-16535 CVE-2015-8539 CVE-2016-4558 CVE-2016-4951 CVE-2016-5195 CVE-2019-19058 CVE-2018-7740 CVE-2017-9059 CVE-2016-0723 CVE-2016-4998 CVE-2019-19066 CVE-2019-9458 CVE-2019-0154 CVE-2020-12464 CVE-2020-8647 CVE-2019-9213 CVE-2020-12652 |
|
| Libpq5 and PostgreSQL | CVE-2020-1720 | |
| libicu52_1 and libicu52_1-data | CVE-2020-10531 | |
| Libssh2-1 | CVE-2019-17498 | |
| MozillaFirefox | CVE-2019-11711 | |
| grub2 | CVE-2020-15707 CVE-2020-14310 CVE-2020-14311 CVE-2020-14308 |
|
| ruby2.1 ruby2.1-stdlib |
CVE-2017-0900 CVE-2017-14033 CVE-2020-14344 CVE-2018-8779 CVE-2016-7798 CVE-2019-8324 CVE-2019-8320 CVE-2018-6914 CVE-2019-15845 CVE-2015-9096 |
|
| Libfreebl3 and Mozilla-nss |
CVE-2020-12402 CVE-2019-11715 |
|
| Libadns1 | CVE-2017-9103 CVE-2017-9104 |
|
| python | CVE-2019-18348 | |
| Tack | CVE-2019-17594 | |
| ntp | CVE-2020-15025 |
영향을 받는 제품 및 문제 해결
| Product | Affected Version(s) | Updated Version(s) | Link to Update | |
| Dell EMC SRS Virtual Edition | 3.40.00.08 3.42.10.06 3.44.00.08 3.46.00.04 3.48.00.04 | 3.50.00.06 | The SRS-VE patch is published in SRS SUMA (SUSE Manager) repository and the existing process triggers an Email notification to customer’s SRS-VE primary and secondary contacts. Email notification contains a link to Release notes (along with details of security updates) and a link to update the customer’s VE to the latest patch. Contact Dell EMC SRS Virtual Edition Customer Support for any questions regarding upgrading your Dell EMC SRS Virtual Edition system. | |
| Product | Affected Version(s) | Updated Version(s) | Link to Update | |
| Dell EMC SRS Virtual Edition | 3.40.00.08 3.42.10.06 3.44.00.08 3.46.00.04 3.48.00.04 | 3.50.00.06 | The SRS-VE patch is published in SRS SUMA (SUSE Manager) repository and the existing process triggers an Email notification to customer’s SRS-VE primary and secondary contacts. Email notification contains a link to Release notes (along with details of security updates) and a link to update the customer’s VE to the latest patch. Contact Dell EMC SRS Virtual Edition Customer Support for any questions regarding upgrading your Dell EMC SRS Virtual Edition system. | |
해결 방법 및 완화 방안
.
개정 내역
| Revision | Date | Description |
| 1.0 | 2020-01-21 | Initial Release |
관련 정보
법적 고지 사항
해당 제품
Secure Remote Services Virtual Edition, Product Security Information문서 속성
문서 번호: 000182169
문서 유형: Dell Security Advisory
마지막 수정 시간: 18 9월 2025
다른 Dell 사용자에게 질문에 대한 답변 찾기
지원 서비스
디바이스에 지원 서비스가 적용되는지 확인하십시오.