Secure against latest vulnerabilities?

[jcurtiss7492]

I've just read an article outlining the vulnerabilities just announced in CVE-2022-26500, CVE-2022-26501 and CVE-2022-26504. I am currently running Veeam B&R 11.01.1261 P20211211 released on December 22, 2021. The article states that Veeam fixed the vulnerabilities with software version 11.0.1.1261 in November 2021. Can someone confirm this? I was unable to find a knowledge base article about this.

I'm just trying to determine if I need to update to plug the security holes.

Thanks!

[Mildur]

Hi

Your version is affected. But we provided the patches for these vulnerabilities in March 2022:
https://www.veeam.com/kb4288
https://www.veeam.com/kb4290

Please update your environment to the latest patch.

Thank you
Fabian

[jcurtiss7492]

Thanks for the fast reply Fabian! I will patch my installation to the latest version 11.0.1.1261 P20220302.

[Andreas Neufert]

Some background information. The article on the webpage you mentioned was released just lately, but it was addressed already in March.