The new Bareos 25.1.1, 24.0.11 and 23.1.8 maintenance releases include an important security fix affecting the Bareos Director, together with several additional bug fixes and improvements.
We recommend upgrading to the latest version of your Bareos branch. In case you would like our experts to help with upgrading or other planning regarding your backup strategy, please contact us.
All three releases include an important security fix for the Bareos Director. We recommend updating systems running one of these Bareos versions.
Security Fix:
- Fixed a stack buffer overflow in BVFS that could be triggered through the
.bvfs_versionscommand and could cause the Bareos Director to crash
More information is available in the Bareos security advisory.
Additional changes in Bareos 25.1.1:
- Updated the
nanoiddependency used by the new WebUI - Fixed several stability and crash issues
- Improved handling in BVFS and the Storage Daemon
- Fixed issues affecting Windows
bconsoleand the Hyper-V plugin - Simplified configuration of the new WebUI
- Enterprise Linux packages are now built with GCC 15
Additional changes in Bareos 24.0.11:
- Fixed issues with Windows
bconsole - Fixed BVFS cache handling
- Fixed an issue in the dplcompat storage backend
- Crash reporting with
btracebackcan now be configured through environment variables - Enterprise Linux packages are now built with GCC 15
Bareos 23.1.8:
- Includes the BVFS security fix
- Enterprise Linux packages are now built with GCC 15
We recommend upgrading to the latest maintenance release available for your Bareos branch.
Release notes: