Comprehensive data protection for all workloads
Gostev
Chief Product Officer
Posts: 32719
Liked: 7944 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

[PATCH] Veeam Backup & Replication 12.3.2.4165 New Patch Delivery Options

Post by Gostev » 4 people like this post

Folks, just a heads up that the security patch delivery method for our Windows installable software has been evolving based on your feedback about minimizing security patch sizes and this release is therefore very new in that regard.

For 12.3.2 (latest release from a few months ago), there's a choice:

• Patch-only EXE (new) > uncompresses patch content to TEMP before installing it therefore requiring some TEMP space.

• Patch-only ISO (new) > effectively an ISO with uncompressed patch, this installs the patch directly from the ISO so a bit faster and no need for TEMP space (and easier to mount to a VM, won't get blocked by antiviruses etc. etc.)

You will notice that both are quite small relative to what we had before for security patches because we don't rebuild modules that do not change, like we do with maintenance releases. And until now, every security patch came as a new maintenance release.

We will monitor downloads for both delivery options and decide based on the numbers if we need to keep providing both for future security patches. When we used EXE-based patches before they were pretty heavy on our Customer Support due to all the EXE blocking hardware and software, so this will also be a factor to consider. But since we had to create this EXE either way for automated remote backup infrastructure components update, we decided to give it another try. Please do share feedback in case your find EXE extremely useful for certain scenarios.

For 12.3.1 and earlier:

• Full ISO (same as before) > basically the 12.3.2 release ISO with the patch EXE embed and auto installed at the end of deployment.

What we no longer offer starting from this security patch release:

• A dedicated patch ISO for updating 12.3.x deployments (specifically 12.3.1 and 12.3.0). These have been almost the same size as the Full ISO so there's no point to keep creating them.

Thank you for your attention!
ajhskao
Novice
Posts: 9
Liked: 2 times
Joined: Dec 13, 2021 11:09 am
Full Name: Andy Holt
Contact:

Re: [PATCH] Veeam Backup & Replication 12.3.2.4165 New Patch Delivery Options

Post by ajhskao »

Would love to know where to download the 12.3.2 patch EXE or ISO files. In my download portal, I see only the full 14 GB ISO, or (under Product Updates) Veeam Agent downloads. Thanks! :D

<edit> found it - at https://www.veeam.com/kb4696
Gostev
Chief Product Officer
Posts: 32719
Liked: 7944 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: [PATCH] Veeam Backup & Replication 12.3.2.4165 New Patch Delivery Options

Post by Gostev »

Same master KB for 12.3 and all of its past updates > https://www.veeam.com/kb4696

If you are ever lost looking for the latest and greatest, just use the the sticky Current Build topic.
This has the dedicated post for every major release going back 10 years.
ajhskao
Novice
Posts: 9
Liked: 2 times
Joined: Dec 13, 2021 11:09 am
Full Name: Andy Holt
Contact:

Re: [PATCH] Veeam Backup & Replication 12.3.2.4165 New Patch Delivery Options

Post by ajhskao » 1 person likes this post

Thanks. I was also a bit thrown by the fact that the downloads page reports that B&R 12.3.2.4165 is from June 17, 2025 - which is obviously the date of the previous release. :-)

[1] https://www.veeam.com/products/download ... rsion.html
Dima P.
Product Manager
Posts: 14934
Liked: 1825 times
Joined: Feb 04, 2013 2:07 pm
Full Name: Dmitry Popov
Location: Prague
Contact:

Re: [PATCH] Veeam Backup & Replication 12.3.2.4165 New Patch Delivery Options

Post by Dima P. » 2 people like this post

Thanks. I was also a bit thrown by the fact that the downloads page reports that B&R 12.3.2.4165 is from June 17, 2025 - which is obviously the date of the previous release. :-)
[1] https://www.veeam.com/products/download ... rsion.html
Will be fixed in a couple of momements, thank you!
d.artzen
Enthusiast
Posts: 96
Liked: 39 times
Joined: Jan 14, 2022 9:16 am
Full Name: Daniel Artzen
Location: Germany
Contact:

Re: [PATCH] Veeam Backup & Replication 12.3.2.4165 New Patch Delivery Options

Post by d.artzen »

Is it by design that there is no "Update Remote components automatically" checkbox when using the patch ISO? The update of proxies, repos and the mount server, in my case the B&R itself, had to be started manually through the backup console after the patch was done.
ajhskao
Novice
Posts: 9
Liked: 2 times
Joined: Dec 13, 2021 11:09 am
Full Name: Andy Holt
Contact:

Re: [PATCH] Veeam Backup & Replication 12.3.2.4165 New Patch Delivery Options

Post by ajhskao »

Sorry, also I was thrown by the fact on that the vuln KB [1], the first obvious download link mentioned is to the 'Veeam Product Latest Version Download Page'. Seeing the word 'download', I went there, downloaded the ISO, copied it to the B&R server, and ran it, only then to find it could not be used for updates.

Thanks :)

[1] https://www.veeam.com/kb4771
[2] https://www.veeam.com/kb4696
Dima P.
Product Manager
Posts: 14934
Liked: 1825 times
Joined: Feb 04, 2013 2:07 pm
Full Name: Dmitry Popov
Location: Prague
Contact:

Re: [PATCH] Veeam Backup & Replication 12.3.2.4165 New Patch Delivery Options

Post by Dima P. »

Hello Daniel,
Is it by design that there is no "Update Remote components automatically" checkbox when using the patch ISO? The update of proxies, repos and the mount server, in my case the B&R itself, had to be started manually through the backup console after the patch was done.
The "Update Remote components automatically" wizard should be displayed after the patch is installed, you need to reopen the product UI to see it. Thank you!
Dima P.
Product Manager
Posts: 14934
Liked: 1825 times
Joined: Feb 04, 2013 2:07 pm
Full Name: Dmitry Popov
Location: Prague
Contact:

Re: [PATCH] Veeam Backup & Replication 12.3.2.4165 New Patch Delivery Options

Post by Dima P. » 1 person likes this post

Sorry, also I was thrown by the fact on that the vuln KB [1], the first download link mentioned is to the 'Veeam Product Latest Version Download Page'. I went there, downloaded the ISO, copied it to the B&R server, and ran it, only then to find it could not be used for updates. The link to the other KB [2] is only mentioned lower down under each CVE section.
Thanks, will pass the feedback to KB team. The detailed instructions are here - Release Information for Veeam Backup & Replication 12.3 and Updates > Download Information
d.artzen
Enthusiast
Posts: 96
Liked: 39 times
Joined: Jan 14, 2022 9:16 am
Full Name: Daniel Artzen
Location: Germany
Contact:

Re: [PATCH] Veeam Backup & Replication 12.3.2.4165 New Patch Delivery Options

Post by d.artzen »

Hi Dima,

yes that wizard opened after I started the console, but that was not what I meant.
I remember in the past when installing updates there was a box in the install wizard that could be checked and then it automatically started the updates of the remote components without opening the backup console. That one does not exist in the patch and I just wanted to know if this was on purpose.
ajhskao
Novice
Posts: 9
Liked: 2 times
Joined: Dec 13, 2021 11:09 am
Full Name: Andy Holt
Contact:

Re: [PATCH] Veeam Backup & Replication 12.3.2.4165 New Patch Delivery Options

Post by ajhskao » 1 person likes this post

Dima P. wrote: Oct 14, 2025 1:23 pm Thanks, will pass the feedback to KB team. The detailed instructions are here - Release Information for Veeam Backup & Replication 12.3 and Updates > Download Information
Thanks. I edited my post, since what I said wasn't quite true. I really did skim through the vuln KB, and then quickly started the download the usual way, since I saw the CVSS 9.9 score. :lol:
FCU_JE
Enthusiast
Posts: 35
Liked: 11 times
Joined: Oct 09, 2024 6:17 pm
Contact:

Re: [PATCH] Veeam Backup & Replication 12.3.2.4165 New Patch Delivery Options

Post by FCU_JE »

I have a question - how does the VBR installation ISO when it's already patching the same major.minor.release version? For example if I have 12.3.2.3617 installed and I download/mount the latest 12.3.2.4165 ISO which includes the latest patch, what would happen if I run through that? Will it perform a ""repair"" installation and will I get the latest 4165 build patches?

The reason I ask is that because of my usual steps of being prepared in the event of a failure of my VBR server, I always have the latest VBR ISO handy. Saves me a step if I can just download one file/ISO.
Gostev
Chief Product Officer
Posts: 32719
Liked: 7944 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: [PATCH] Veeam Backup & Replication 12.3.2.4165 New Patch Delivery Options

Post by Gostev » 1 person likes this post

The full 12.3.2.4165 ISO will plain refuse to do anything if it detects the same major.minor.release version (12.3.2 in this case) already present and will ask you to uninstall it first.

If it detects ANY previous builts (12.3.1 and earlier), it will first install the latest maintenance release (12.3.2.3617) and then automatically run the patch EXE included in the Updates folder to immediately replace all modules affected by the security patch with their new, patched versions.
FCU_JE
Enthusiast
Posts: 35
Liked: 11 times
Joined: Oct 09, 2024 6:17 pm
Contact:

Re: [PATCH] Veeam Backup & Replication 12.3.2.4165 New Patch Delivery Options

Post by FCU_JE »

A new question:

Are Veeam CE users without a business email address intentionally cut off from downloading the latest patch EXEs/ISOs? With my personal account I am unable to download either the EXE or ISO patch - I just land on the "give us your business info" page and cannot proceed.

It's good to know there's a workaround for CE users (uninstall VBR first, then re-install with latest build) but liberating the downloads would be welcome.
Gostev
Chief Product Officer
Posts: 32719
Liked: 7944 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: [PATCH] Veeam Backup & Replication 12.3.2.4165 New Patch Delivery Options

Post by Gostev » 1 person likes this post

Unable to comment on any possible web site experience changes since they are not within R&D responsibility nor anyone asks our opinion when implementing them. You can submit your concern directly to the management team of the responsible department using the vee.am/feedback form.

[UPDATE] Apologies, right after posting this, I suddenly remembered something relevant and that is what we had in our Support Policy like forever, see the quote below. I also remembered how this was already enforced at least once at some point, and how later the enforcement was removed, so probably just another cycle...
4.3. Community, Free and NFR licensed products
We do not provide phone support for Community, Free or NFR licensed products. Email support is provided on a best-effort basis depending on staff availability, but there are no response goals or response guarantees for this service. Access to hot fixes, patches and updates requires an active maintenance contract for at least one deployment of the corresponding product. Users without an active maintenance contract receive fixes by downloading periodic generally available product releases.
kjstech
Expert
Posts: 166
Liked: 19 times
Joined: Jan 17, 2014 4:12 pm
Full Name: Keith S
Contact:

Re: [PATCH] Veeam Backup & Replication 12.3.2.4165 New Patch Delivery Options

Post by kjstech » 1 person likes this post

The full iso just says modify, then gives you an error that the product is already installed.

The patch says this "Couldn't load file or assembly file:///g:\Setup\ServiceOperation.dll' or one of its dependencies. Operation is not supported (Exception from HRESULT: 0x80131515)."

Trying to update from Veeam B&R 12.3.2.3617.

Do I need to open up a case?
Dima P.
Product Manager
Posts: 14934
Liked: 1825 times
Joined: Feb 04, 2013 2:07 pm
Full Name: Dmitry Popov
Location: Prague
Contact:

Re: [PATCH] Veeam Backup & Replication 12.3.2.4165 New Patch Delivery Options

Post by Dima P. » 1 person likes this post

Hello Keith,

Microsoft might be blocking the installation. Try right-clicking the ISO file, selecting 'Properties', checking 'Unblock' under the Security section at the bottom of the window, and then rerun the upgrade. Thank you!
kjstech
Expert
Posts: 166
Liked: 19 times
Joined: Jan 17, 2014 4:12 pm
Full Name: Keith S
Contact:

Re: [PATCH] Veeam Backup & Replication 12.3.2.4165 New Patch Delivery Options

Post by kjstech » 2 people like this post

I was able to copy all the files from the iso that MS mounts when you double click an iso to the Downloads folder and just run it from there. Its running now!
k00laid
Veeam Vanguard
Posts: 235
Liked: 63 times
Joined: Jan 13, 2011 5:42 pm
Full Name: Jim Jones
Location: Hurricane, WV
Contact:

Re: [PATCH] Veeam Backup & Replication 12.3.2.4165 New Patch Delivery Options

Post by k00laid » 2 people like this post

Hi all (especially Gostev and Dima),

Appreciate the efforts both to create the new patching method and especially to shrink the files for deployment. I do have a few pieces of feedback for you though.

1. If you are going to change to a new mechanism like the EXE file here it would have been nice to know before we had to use it in anger. I get that things happen but could have been communicated ahead of time.
2. Please be mindful that some of us have to do this in the 10s or 100s of times over when these come. As best I can tell documentation related to silent/automated/unattended installations is being built on the fly after this thing is in the wild. In case anybody else is in need of this this appears to be working for me (HT to @tsmith and @carceneaux for doing some fact finding)

Code: Select all

.\'VeeamBackup&Replication_12.3.2.4165_20251006_patch.exe' /silent /noreboot /accepteula /acceptlicensingpolicy /acceptthirdpartylicenses /acceptrequiredsoftware VBR_AUTO_UPGRADE="1"
Thanks again for getting this out in a timely manner.
Jim Jones, Sr. Product Infrastructure Architect @iland / @1111systems, Veeam Vanguard
Gostev
Chief Product Officer
Posts: 32719
Liked: 7944 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: [PATCH] Veeam Backup & Replication 12.3.2.4165 New Patch Delivery Options

Post by Gostev »

Not sure what you mean here Jim. We still provide ISO option as before, nobody pushes you to start using new EXE approach immediately. In fact, as I explained in the first post, we don't even know if the EXE option survives (consider this our last experiment and its last chance). So it would be premature to invest into integrating this new deployment method into your processes.
kjstech
Expert
Posts: 166
Liked: 19 times
Joined: Jan 17, 2014 4:12 pm
Full Name: Keith S
Contact:

Re: [PATCH] Veeam Backup & Replication 12.3.2.4165 New Patch Delivery Options

Post by kjstech »

I cant imagine doing it for 10's to 100's of Veeam servers.

I have two and both instances behaved exactly the same way. The 1.6 GB upgrade ISO is double clicked in windows explorer. It mounts it to a virtual "G" drive. You cant run the setup from there. I just select all and copy, then paste in the Downloads folder in windows explorer. Then inside the downloads folder run the setup.exe. This is the only way both my servers could update. Technically its an exe update, after I copy it out of the iso. If I run it from the ISO I get that strange HRESULT code.

Been doing veeam in place updates since version 8 days and this is the first release that I can remember that just had one of those quirks.

We are all up to date. Good luck for those patching a large qty of servers!
Gostev
Chief Product Officer
Posts: 32719
Liked: 7944 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: [PATCH] Veeam Backup & Replication 12.3.2.4165 New Patch Delivery Options

Post by Gostev » 1 person likes this post

Actually it's not a Veeam issue or quirk either. The update is as stable as ever, not worse than in version 8 days haha. Just unblock the actual ISO file in Windows Explorer before mounting it. Apparently some Windows versions decide to block the ISO, which results in this weird failure reading the particular file.

Just one more reason to implement Veeam Software Appliance and never have to deal with Windows quirks again!
FCU_JE
Enthusiast
Posts: 35
Liked: 11 times
Joined: Oct 09, 2024 6:17 pm
Contact:

Re: [PATCH] Veeam Backup & Replication 12.3.2.4165 New Patch Delivery Options

Post by FCU_JE » 1 person likes this post

For all those interested in the MoTW behavior, give this a read and ctrl+f for "ISO".

https://news.sophos.com/en-us/2022/10/1 ... -dwindles/

I don't have an official quote from MS, but I would not at all be surprised if they updated ISO handling in Windows to make MoTW a transitive property to files accessed through a mounted ISO.
jhoughes
Veeam Vanguard
Posts: 286
Liked: 121 times
Joined: Apr 20, 2017 4:19 pm
Full Name: Joe Houghes
Location: Castle Rock, CO
Contact:

Re: [PATCH] Veeam Backup & Replication 12.3.2.4165 New Patch Delivery Options

Post by jhoughes » 1 person likes this post

If anyone is having continued issues with your downloaded files, it's the "Attachment Manager" feature within Windows causing the scenario, along with the origin zone (being the "Internet" zone).

This was added in Windows 10, and you can read more here: https://support.microsoft.com/en-us/top ... 795ae42738

Because its me, I'll let y'all know that

Code: Select all

Unblock-File
exists within PowerShell. 8)
Husband, Father, Solutions Architect, Geek | @DenverVMUG, @DenverPSUG, Denver Veeam UG leader | International Speaker | Veeam Vanguard | Microsoft MVP | vExpert (PRO) | Cisco Champion | ex-Tech Field Day Delegate
xDA
Lurker
Posts: 1
Liked: never
Joined: Oct 14, 2025 4:51 pm
Full Name: M.F.
Contact:

Re: [PATCH] Veeam Backup & Replication 12.3.2.4165 New Patch Delivery Options

Post by xDA »

Hello everyone,

I had the same problem as @kjstech and was able to solve it with the same workaround.

What I noticed, and why I am writing this post, is that I tried to use the .exe patch in the meantime. However, the hash values are incorrect here. According to the download page (https://www.veeam.com/kb4696), the MD5 hash should be “418B87E6ACECD6D810F05D9BFD90ED26,” but it is “08770dfa5d52dcfb0bfd86d1496f2fd2.”

P.S. I tested it on several computers and always got the same result. Can anyone confirm this or, if necessary, someone from the Veeam team correct it?

Thanks

Best regards,
xDA
Gostev
Chief Product Officer
Posts: 32719
Liked: 7944 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: [PATCH] Veeam Backup & Replication 12.3.2.4165 New Patch Delivery Options

Post by Gostev »

@tpayton could you please check?
tpayton
Veeam Software
Posts: 152
Liked: 99 times
Joined: Jan 16, 2013 5:27 pm
Full Name: Tyler Payton
Contact:

Re: [PATCH] Veeam Backup & Replication 12.3.2.4165 New Patch Delivery Options

Post by tpayton » 1 person likes this post

Resolved. Thank you for pointing this out. Previously, the filename and hash values referred to the exe inside the zip file. Before release, the exe was placed into a zip, but the article was not updated with the zip file and its hash values. This has now been fixed.
Tyler Payton
Senior Knowledge Manager / Keeper of the KBs
k00laid
Veeam Vanguard
Posts: 235
Liked: 63 times
Joined: Jan 13, 2011 5:42 pm
Full Name: Jim Jones
Location: Hurricane, WV
Contact:

Re: [PATCH] Veeam Backup & Replication 12.3.2.4165 New Patch Delivery Options

Post by k00laid »

Gostev wrote: Oct 14, 2025 4:03 pm Not sure what you mean here Jim. We still provide ISO option as before, nobody pushes you to start using new EXE approach immediately. In fact, as I explained in the first post, we don't even know if the EXE option survives (consider this our last experiment and its last chance). So it would be premature to invest into integrating this new deployment method into your processes.
The experimental-ness of the EXE was news to me, apologies for not catching that in your post. We were communicated that the EXE was the new way forward and as we had been asking for a smaller option for deployment it was appealing.
Jim Jones, Sr. Product Infrastructure Architect @iland / @1111systems, Veeam Vanguard
Gostev
Chief Product Officer
Posts: 32719
Liked: 7944 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: [PATCH] Veeam Backup & Replication 12.3.2.4165 New Patch Delivery Options

Post by Gostev »

Ah, OK. The new patch-only ISO is also almost 10x smaller than previous ISOs so this is another smaller option that is here to stay.
FCU_JE
Enthusiast
Posts: 35
Liked: 11 times
Joined: Oct 09, 2024 6:17 pm
Contact:

Re: [PATCH] Veeam Backup & Replication 12.3.2.4165 New Patch Delivery Options

Post by FCU_JE »

This man wears two hats.

Still need to fully test it, but I was able to uninstall my personal/home-use Veeam B&R CE instance and re-install with the latest 12.3.2.4165 ISO. So far that looks fine and as expected/normal.

I have access to the patch exe/zip for our licensed/production Veeam B&R server.

I noticed the following when patching my CE instance within the latest full installer ISO download. Users, do with that info what you will.

Code: Select all

PS D:\Updates> Get-FileHash *

Algorithm       Hash                                                                   Path
---------       ----                                                                   ----
SHA256          22F42C610CAEEA532E74A44B474820F03E04BF0BCC08A944C631C11C7119F760       D:\Updates\VeeamBackup&Replication_12.3.2.4165_patch_20251006.exe
Post Reply

Who is online

Users browsing this forum: Amazon [Bot] and 35 guests