Forum Discussion

soolean's avatar
soolean
Level 4
20 days ago

How to update netbackup agent java version?

The java version used by the netbackup program on my server seems to be vulnerable. 

Is it possible to update this java version?  Or can I install a new version of the agent

Path : /usr/openv/java
Installed version : 1.8.0_131
Fixed version : 1.7.0_241 / 1.8.0_231 / 1.11.0_5 / 1.13.0_1

CVE-2019-2999 CVE-2019-2996 CVE-2019-2992 
CVE-2019-2989 CVE-2019-2988 CVE-2019-2987 
CVE-2019-2983 CVE-2019-2981 CVE-2019-2978 
CVE-2019-2977 

Path : /usr/openv/lib/java/log4j-1.2.17.jar
Installed version : 1.2.17

 

3 Replies

Sort By
  • Nicolai's avatar
    Nicolai
    Moderator
    18 days ago

    For know security issues please have a look at VERITAS SECURITY ALERTS :

    https://www.veritas.com/support/en_US/security

    Just because a Java version is vulnerable, Veritas may use Java in a way where the vulnerability cannot be exploited.

    I general, the Netbackup Java runtime is not customer upgradable.

    You can either:

    1. Upgrade to a later version of Netbackup, where the java vulnerable has been fixed.
    2. If the vulnerabilities is serious enough, download a  EEB where the issues has been fixed. That may be either public downloadable EBB, "private" EBB you only can obtain thru Veritas Support