DSA-2025-184: Security Update for Dell Data Lakehouse Multiple Third-Party Component Vulnerabilities

Summary: Dell Data Lakehouse remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.

Ця стаття стосується Ця стаття не стосується Ця стаття не стосується якогось конкретного продукту. У цій статті зазначено не всі версії продукту.
Ознайомтеся з іншими ресурсами

Impact

Critical

Details

Third-party Component

CVEs

More Information

busybox

CVE-2023-42363, CVE-2023-42364, CVE-2023-42365, CVE-2023-42366

https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.

json-path v2.8.0

CVE-2023-51074

https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.

derby

CVE-2018-1313, CVE-2022-46337

https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.

glib2

CVE-2024-52533

https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.

go

CVE-2022-41716, CVE-2023-29402, CVE-2023-29404, CVE-2023-29405, CVE-2023-39323, CVE-2023-45285

https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.

Intel(R) TDX Module

CVE-2024-27457

https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.

Intel(R) Xeon(R) processor

CVE-2024-23919, CVE-2024-25565, CVE-2024-31068, CVE-2024-34023, CVE-2024-34170, CVE-2024-36242, CVE-2024-38660, CVE-2024-38665

https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.

java

CVE-2024-20918, CVE-2024-20926, CVE-2024-20952

https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.

Apache Log4j SMTP

CVE-2020-9488

https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.

Bouncy Castle Java Cryptography APIs

CVE-2024-30172

https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.

iq80 Snappy

CVE-2024-36124

https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.

EDK2

CVE-2024-38796

https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.

Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.

Продукти й засоби виправлення, яких це стосується

Product

Affected Versions

Remediated Versions

Link

Dell Data Lakehouse

Versions prior to 1.4.0.0

Version 1.4.0.0 or later

https://www.dell.com/support/product-details/product/dell-data-lakehouse/drivers

Product

Affected Versions

Remediated Versions

Link

Dell Data Lakehouse

Versions prior to 1.4.0.0

Version 1.4.0.0 or later

https://www.dell.com/support/product-details/product/dell-data-lakehouse/drivers

Revision History

Revision

Date

Description

1.0

2025-04-16

Initial Release

Related Information

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Заява про відмову від відповідальності

Продукти, яких це стосується

Data Management, Dell Data Lakehouse
Властивості статті
Article Number: 000308929
Article Type: Dell Security Advisory
Востаннє змінено: 09 вер. 2025
Отримайте відповіді на свої запитання від інших користувачів Dell
Служба підтримки
Перевірте, чи послуги служби підтримки поширюються на ваш пристрій.