Dell Avamar Platform OS Security Patch Rollup 2024R3 Release Notes

Important Information

This document contains release notes and supplemental information for the Dell Avamar Platform OS Security Patch Rollup 2024R3. It lists the common vulnerabilities and exposures (CVEs) addressed in this release and provides critical procedures for maintaining the server environment, specifically regarding the /boot volume.

Cleaning the /boot Volume

If you are applying the OS security patch rollup on an ADS (Avamar Data Store), you may need to free up space on the server's /boot volume. Follow these steps to ensure sufficient space:

• Check Space: Use the command df -h /boot/ to verify current usage.
• Remove kdump files: Use rm /boot/*kdump.
• Remove old kernels: Identify old kernels using rpm -qa |grep kernel-default and remove them using rpm -ev kernel-default-VERSION_OLD kernel-default-base-VERSION_OLD.
• Remove archived files: Use rm /boot/*.gz to remove archived .gz files.
• Backup/Remove Running Kernel (If necessary): If space is still below 80MB, create a backup directory mkdir /usr/local/avamar/var/rollup_bak and move the running kernel files there before proceeding.
• Restore Kernel: After the rollup installation is complete, restore the running kernel files using mv /usr/local/avamar/var/rollup_bak/*-default /boot and remove the backup directory.

Addressed Vulnerabilities

This release addresses a wide range of CVEs across various platforms, including the Avamar server, Avamar combined proxy, NVE (NetWorker Virtual Edition), and NDMP accelerator nodes. Detailed lists of these CVEs are provided in the tables within the full document.