CVE:CVE-2016-6225
CNNVD:CNNVD-201703-1048
Percona XtraBackup是美国Percona公司的一套开源的用来备份MySQL的InnoDB数据库的工具。
Percona XtraBackup 2.3.6之前的版本和2.4.5之前的2.4.x版本中的xbcrypt存在安全漏洞，该漏洞源于程序没有正确设置IV加密。攻击者可利用该漏洞获取加密的备份文件中的敏感信息。
solution:Upgrade percona xtrabackup to a higher version than 2.3.5,2.4.0:rc1,2.4.1,2.4.2,2.4.3,2.4.4,and avoid the version (,2.3.5],2.4.0:rc1,2.4.1,2.4.2,2.4.3,2.4.4; Upgrade opensuse leap to a higher version than 42.1,42.2,and avoid the version 42.1,42.2; Upgrade fedoraproject fedora to a higher version than 24,25,and avoid the version 24,25