Security Advisory: JetBackup Offsite Archive Integrity

What happened

Backups are only trustworthy if a restore can prove the archive is the one the server wrote. JetBackup‘s offsite archive flow did not fully validate integrity, so an archive altered between write and restore could be accepted — and a backup system that accepts tampered archives quietly defeats its own purpose.

Who is affected

JetBackup installations that replicate archives offsite, where the transfer and storage chain is outside the server’s direct control.

How to apply the fix

• Update JetBackup through its standard update path.
• Run an integrity check over recent offsite archives and confirm restores verify cleanly.

For SharedLicense customers

Licensing is unaffected — this is backup software. Low severity, but it protects the thing you rely on in the worst week of the year; patch it with the next cycle.