PT-2022-37625 · Opensuse+3 · Xtrabackup

Published 2022-11-23 · Updated 2022-11-23 · CVE-2020-29488

OSV

This update for xtrabackup fixes the following issues:

Update xtrabackup to version 2.4.26:

• CVE-2020-10997: Information exposure via cmd line output and table history (boo#1170644)
• CVE-2020-29488: Changes in how absolute paths are handled (boo#1205581)

Related Identifiers

CVE-2020-29488

OPENSUSE-SU-2022:10212-1

Affected Products

Xtrabackup

References · 8

• https://osv.dev/vulnerability/openSUSE-SU-2022:10212-1 · Vendor Advisory
• https://bugzilla.suse.com/1170644 · Note
• https://bugzilla.suse.com/1135095 · Note
• https://suse.com/security/cve/CVE-2020-29488 · Note
• https://bugzilla.suse.com/1205581 · Note
• https://bugzilla.suse.com/1125418 · Note
• https://suse.com/security/cve/CVE-2020-10997 · Note
• https://lists.opensuse.org/archives/list/[e-mail]/thread/U3RTDTIXGJ3RCHKJUZNBA3BXYPTFKTB7 · Note