USN-6745-1: Percona XtraBackup vulnerability

Publication date

22 April 2024

Overview

percona-xtrabackup could be made to run programs as your login if it opened a specially crafted file.

Releases

18.04 LTS 16.04 LTS

Packages

It was discovered that in Percona XtraBackup, a local crafted filename
could trigger arbitrary code execution.

In general, a standard system update will make all the necessary changes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release	Package Version
18.04 bionic	percona-xtrabackup – 2.4.9-0ubuntu2+esm1
16.04 xenial	percona-xtrabackup – 2.3.7-0ubuntu0.16.04.2+esm1

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro