Hello,
Security scans are being carried out at many customers' sites and are increasingly pointing out third-party software installed by Commvault and missing security updates. Are the third-party components automatically updated by Commvault updates? Can the updates also be installed manually without any problems?
Regards, Thomas
Hi Thomas,
3rd party software Commvault will install is usually VC++ and software of that nature to be at a minimum viable release for Commvault to run. There are additional packages that may be included depending on the agents being installed.
A full list can be found here: https://documentation.commvault.com/2024e/expert/third_party_applications_installed_by_commvault_installer.html
Commvault does not maintain these applications but will upgrade them if a newer release is required when updating Commvault software.
Typically you can upgrade 3rd party software without any impact but it may be best to raise a support incident about a specific package if you are unsure.
Hi
It depends on a package by package basis.
Some as .Net, should be fine to be updated.
For others like Tomcat, updates are not supported outside the version bundled with the product.
The best thing is to check in documentation for the package you are to update, that should give you a good idea of whether updates are supported or now.
In the aforementioned case of .Net, searching for "update .Net” should return the following KB as one of the first results;
https://kb.commvault.com/article/83445
As always, when in doubt, the best would be to raise a case with support before doing any modifications, so we can advise better on your particular case.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
