.NET updates on Veeam Server

[Zew]

The vuln audit shows .NET needs updating on our Veeam server.
I updated to the latest 12.1 build. Removed some older builds of ASP.NET core that were no longer needed.
I see it still shows as needing .NET updates.
Veeam server has ASP.NET 6.0.25, latest builds of .net (https://dotnet.microsoft.com/en-us/download/dotnet/6.0) shows 6.0.27
This community posthttps://community.veeam.com/cyber-secur ... ities-6297 shows the same concept when 6.0.24 needed updating to 6.0.25
This KB (which is old)https://www.veeam.com/kb4410 seems to show the same type of steps.

What's the best way to get my server compliant without breaking functionality.

[Mildur]

Hi Zew

If you are running v12.1 then you can just update to the latest version of .NET 6.0 and reboot your server. All of our integration plugins on Veeam Backup & Replication v12.1 do support .NET 6.0 and later.

We will also update our installation ISO if there are new security related .NET 6.0 updates.
Keeping .NET maintained on existing backup server is done through windows updates or manual updates through the server administrator.

Thanks,
Fabian

[Zew]

Thanks,

I manually downloaded and installed both:
ASP.NET Core 6.0.27
.NET Desktop Runtime 6.0.27

Both installs required no reboot. Everything still works, thanks.

[Mildur]

Thank you for your feedback.
We plan to include the new .Net version in the next ISO (with patch 12.1.2) This will make sure that new deployments will have .NET 6.0.27 from the beginning.

Best,
Fabian

[DLN]

Hi Fabian
I'm sorry to hijack this post.
Any eta on how the next patch will be released?

[Mildur]

No ETA yet.
If the question is for the .NET update, then you can manually update .NET on existing servers. Installing a Veeam patch won‘t update .NET.

For all other product related questions please use a new topic (or support for technical issues)

Best,
Fabian