Veritas NetBackup™ Appliance Release Notes

Last Published:
Product(s): Appliances (3.1.1)

NetBackup Appliance security release content

The following list contains the known security issues that were fixed and that are now included in this release of NetBackup appliance software:

Spectre and Meltdown vulnerabilities

NetBackup Appliance release 3.1.1 includes fixes that are specific to the following variants:

  • Variant 1 - Spectre, CVE-2017-5753

  • Variant 3 - Meltdown, CVE-2017-5754

These fixes address the potential of a local user to install and run a binary to gain access to the memory of other processes.

Veritas recommends that you upgrade all NetBackup appliances to version 3.1.1 as soon as possible to mitigate these vulnerabilities. For more details about these vulnerabilities, see the following article:

https://www.veritas.com/support/en_US/article.100041496

The following describes additional vulnerabilities that have been addressed in version 3.1.1:

  • Apache Struts vulnerability

    CVE-2017-5638

  • WPA2 package updates for KRACK:

    CVE-2017-13077

    CVE-2017-13078

    CVE-2017-13080

    CVE-2017-13082

    CVE-2017-13086

    CVE-2017-13088

  • DNS package updates

    CVE-2017-14491

    CVE-2017-14492

    CVE-2017-14493

    CVE-2017-14494

    CVE-2017-14495

    CVE-2017-14496

  • Java Vulnerabilities

    CVE-2017-10309

    CVE-2017-10274

    CVE-2017-10293

    CVE-2017-10281

    CVE-2017-10347

    CVE-2017-10348

    CVE-2017-10349

    CVE-2017-10350

    CVE-2017-10357

    CVE-2017-10345

    VE-2017-10346

    CVE-2017-10285

  • Miscellaneous

    CVE-2017-8030

    CVE-2017-8046

    CVE-2017-15288

    CVE-2017-5645

    CVE-2017-17485

    CVE-2017-1000253

    CVE-2017-7555

    CVE-2016-10164

    CVE-2017-2625

    CVE-2017-2626

    CVE-2016-10200

    CVE-2017-2647

    CVE-2017-8797

    CVE-2015-8839

    CVE-2015-8970

    CVE-2016-9576

    CVE-2016-7042

    CVE-2016-7097

    CVE-2016-8645

    CVE-2016-9576

    CVE-2016-9588

    CVE-2016-9806

    CVE-2016-10088

    CVE-2016-10147

    CVE-2017-2596

    CVE-2017-2671

    CVE-2017-5970

    CVE-2017-6001

    CVE-2017-6951

    CVE-2017-7187

    CVE-2017-7616

    CVE-2017-7889

    CVE-2017-8890

    CVE-2017-9074

    CVE-2017-9075

    CVE-2017-9076

    CVE-2017-9077

    CVE-2017-9242

    CVE-2014-7970

    CVE-2014-7975

    CVE-2016-6213

    CVE-2016-9604

    CVE-2016-9685

    CVE-2016-10165

    CVE-2016-8399

    CVE-2016-9841

    CVE-2017-1000111

    CVE-2017-1000112

    CVE-2017-10274

    CVE-2017-10281

    CVE-2017-10295

    CVE-2017-7558

    CVE-2017-10355

    CVE-2017-7542

    CVE-2017-10356

    CVE-2017-10388

    CVE-2017-7184

    CVE-2017-12617