Article Number: 000153842
Critical
Summary:
Libcurl within Dell EMC Isilon OneFS requires multiple security updates to address various vulnerabilities.
The components are updated for the following vulnerabilities:
libcurl
CVE-2018-16890
CVE-2019-3822
CVE-2019-3823
For more information about any of the Common Vulnerabilities and Exposures (CVEs) mentioned here, consult the National Vulnerability Database (NVD) at http://nvd.nist.gov/home.cfm.
To search for a particular CVE, use the database s search utility at http://web.nvd.nist.gov/view/vuln/search.
The components are updated for the following vulnerabilities:
libcurl
CVE-2018-16890
CVE-2019-3822
CVE-2019-3823
For more information about any of the Common Vulnerabilities and Exposures (CVEs) mentioned here, consult the National Vulnerability Database (NVD) at http://nvd.nist.gov/home.cfm.
To search for a particular CVE, use the database s search utility at http://web.nvd.nist.gov/view/vuln/search.
Affected products:
Dell EMC Isilon OneFS versions 8.2.0 and earlier
Remediation:
For Dell EMC Isilon OneFS versions 8.2.0, 8.1.2, and 8.1.0.4, the fix for this issue is included with the September 2019 Rollup Patch, as well as all future Rollup Patches. For more information and to obtain a Rollup patch, see the Current Isilon OneFS Patches document.
Dell EMC recommends all customers apply the patches at the earliest opportunity.
Affected products:
Dell EMC Isilon OneFS versions 8.2.0 and earlier
Remediation:
For Dell EMC Isilon OneFS versions 8.2.0, 8.1.2, and 8.1.0.4, the fix for this issue is included with the September 2019 Rollup Patch, as well as all future Rollup Patches. For more information and to obtain a Rollup patch, see the Current Isilon OneFS Patches document.
Dell EMC recommends all customers apply the patches at the earliest opportunity.
PowerScale OneFS
PowerScale OneFS, Product Security Information
22 May 2021
4
Dell Security Advisory