List of Security Fixes and Improvements in Veeam Backup & Replication

List of Security Fixes and Improvements in Veeam Backup & Replication KB ID: 3103 Product: Veeam Backup & Replication | 10 | 11 | 12 | 12.1 | 12.2 Published: 2020-03-02 Last Modified: 2024-09-05 Purpose This article describes all security-related fixes and improvements introduced in each release or update of Veeam Backup & Replication. The goal of this article is to provide our customers' security and compliance teams with detailed information on security improvements between releases, in order to help them make an informed decision on whether it is critical to upgrade from their current Veeam Backup & Replication version to a latter one. Security Fixes and Improvements 12.2.0.334 npgsql upgraded to 6.0.11 libxml upgraded to version 2.13.3 curl upgraded to version 8.8.0 CVE-2024-39718 vulnerability was fixed. CVE-2024-40710 vulnerability was fixed. CVE-2024-40711 vulnerability was fixed. CVE-2024-40712 vulnerability was fixed. CVE-2024-40713 vulnerability was fixed. CVE-2024-40714 vulnerability was fixed. 12.1.2.172 PuTTY updated to version 0.81 VMware Virtual Disk Development Kit (VDDK) was updated to 7.0.3.4 to address CVE-2023-38545. Microsoft .NET 6.0.25 was updated to 6.0.29. Microsoft WebView2 was updated to 123.0.2420.81. PostgreSQL installer was updated to 15.6.1. Curl was updated to 8.5. Vulnerability CVE-2024-29849 in Veeam Backup Enterprise Manager was fixed. Vulnerability CVE-2024-29850 in Veeam Backup Enterprise Manager was fixed. Vulnerability CVE-2024-29851 in Veeam Backup Enterprise Manager was fixed. Vulnerability CVE-2024-29852 in Veeam Backup Enterprise Manager was fixed. 12.1.1.56 PuTTY updated to version 0.80 12.1.0.2131 OpenSSL library updated to 1.0.2zi LZ4 library updated to 1.9.4 curl updated to 8.0.1 Azure Identity package updated to 1.10.2 Stronger backup encryption (see What's New in 12.1 p.7) Enhanced protection for stored credentials (see What's New in 12.1 p.7) 12.0.0.1420 P20230412 OpenSSL Library updated to the newest version (1.0.2z