#Fix for security vulnerabilities in 9.14.1 ?

1 messages · Page 1 of 1 (latest)

green mauve
#

I can see these high security vulnerabilities in AIQ and could not see any patch which fixes these in ONTAP 9.14.1, only one of them can be fixed with 9.14.1P13.

If performing a major upgrade is not an option, do we know if there is a patch planned for 9.14.1 which will include a fix ? or would upgrading to 9.14.1P13 fix all of these vulnerabilities ?

AIQ_risks.png
restive nacelle
#

Generally, if you see a "fix" in a another version, it usually show up in most shipping versions. It simply depends on the patch cycle.

Using NTAP-20250306-004 as an example -> https://security.netapp.com/advisory/ntap-20250306-0004/
I see it is fixed in
9.11.1P20 (Jul 25,2025)
9.12.1P18 (Jun 11,2025)
9.13.1P17 (Jul 16, 2025)
9.15.1P11 (May 30, 2025)
9.16.1P4 (Jun 3, 2025)

The only version missing is 9.14.
Unless it cannot be fixed in 9.14, I would expexct it in the next Patch release. You can also contact NetApp support to make sure they did not "forget" to add to 9.14

NetApp Product Security

NetApp is an industry leader in developing and implementing product security standards. Learn how we can help you maintain the confidentiality, integrity, and availability of your data.