CVE-2016-6225

CVE-2016-6225 affects Percona XtraBackup’s xbcrypt: versions prior to 2.3.6 (and 2.4.x prior to 2.4.5) fail to properly set the initialization vector (IV) for encryption, enabling context-dependent attackers to potentially obtain sensitive data from encrypted backups via a Chosen-Plaintext attack...

Fedora 25 : percona-xtrabackup (2017-6382ea8d57)

Updated to 2.3.6 - Fixes CVE-2016-6225 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 24 : percona-xtrabackup (2017-5a823376be)

Updated to 2.3.6 - Fixes CVE-2016-6225 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

openSUSE Security Update : xtrabackup (openSUSE-2017-131)

This update for xtrabackup fixes the following issues : - CVE-2016-6225: xbcrypt encryption IV not being set properly boo1019858 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : xtrabackup (openSUSE-2017-132)

This update for xtrabackup fixes the following issues : - CVE-2016-6225: xbcrypt encryption IV not being set properly boo1019858 In addition, XtraBackup was updated to 2.3.6 to include the following improvements : - now supports SHA256 passwords - new supports command options for secure connectio...