OpenSSL library version

[rh18]

Hi

We are using Veeam Backup & Replication v12.0.0.1420 in production with OpenSSL Library v1.0.2
According Openssl release older versions (including 1.1.1, 1.1.0, 1.0.2, 1.0.0 and 0.9. are now out of support and should not be used and the latest stable version are the 3.2& 3.1

We were trying to find the version of OpenSSL Library in Veeam Backup & Replication 12.1.0.2131 but couldn`t find it. Can you support us with more information about this?
And If the version is not up to v3.1 or 3.2 how can we update it? Is there a patch for this?

[Dima P.]

Hello Rexhina,

Within our components we are using the OpenSSL v1.0.2zi the patched version of the vanilla v1.0.2. It coverers latest discovered vulnerabilities which may affect B&R components. You can check the full list of open source components and versions here. Thank you!

[rh18]

Can I have a list of updated / improved vulnerabilities of OpenSSL in Veeam Backup & Replication v12.0.0.1420 ?

[Gostev]

https://www.openssl.org/news/vulnerabilities-1.0.2.html
12.0.0.1420 and 12.0.0.1420 P20230223 contain OpenSSL 1.0.2ze
12.0.0.1420 P20230412 and 12.0.0.1420 P20230718 contain OpenSSL 1.0.2zg
12.1.0.2131 contain OpenSSL 1.0.2zi

[rh18]

Thank you!