Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix CVE-2016-6225 in 2.4 #267

Merged
merged 2 commits into from Nov 22, 2016
Merged

Fix CVE-2016-6225 in 2.4 #267

merged 2 commits into from Nov 22, 2016

Commits on Nov 17, 2016

  1. CVE-2016-6225: xtrabackup encryption is not setting the IV correctly 

    Blueprint checksum-unencrypted-chunk

[https://blueprints.launchpad.net/percona-xtrabackup/+spec/checksum-unencrypted-chunk]

This patch changes xbcrypt format as following:

1. Bump XBCRYPT header version number, current is "XBCRYP03"

2. Append 32-byte SHA256 hash of the plaintext to the payload of each
   chunk

3. Encrypt plaintext payload and hash all together

4. Both original length and encrypted length fields of the chunk header
   are calculated including these extra 32 bytes.
    @gl-sergei
    gl-sergei committed Nov 17, 2016
    Copy the full SHA
    f5e4779 View commit details
    Browse the repository at this point in the history

Commits on Nov 22, 2016

  1. Merge branch '2.3-xb-pxb-186' into 2.4-xb-pxb-186 

    * 2.3-xb-pxb-186:
  CVE-2016-6225: xtrabackup encryption is not setting the IV correctly
    @gl-sergei
    gl-sergei committed Nov 22, 2016
    Copy the full SHA
    c043893 View commit details
    Browse the repository at this point in the history