Bug#730544: [debian-mysql] Bug#730544: static IV used in Percona XtraBackup

2013-11-26 Thread Stewart Smith
Salvatore Bonaccorso car...@debian.org writes: On Tue, Nov 26, 2013 at 12:24:34PM +0100, Thijs Kinkhorst wrote: Upstream discovered and fixed use of a static IV in encrypting backups: A fixed initialization vector (constant string) was used while encrypting the data. This opened the encrypted

Bug#730544: [debian-mysql] Bug#730544: Bug#730544: static IV used in Percona XtraBackup

2013-11-26 Thread Stewart Smith
Stewart Smith stewart.sm...@percona.com writes: Salvatore Bonaccorso car...@debian.org writes: On Tue, Nov 26, 2013 at 12:24:34PM +0100, Thijs Kinkhorst wrote: Upstream discovered and fixed use of a static IV in encrypting backups: A fixed initialization vector (constant string) was used

Bug#730544: static IV used in Percona XtraBackup

2013-11-26 Thread Thijs Kinkhorst
Package: percona-xtrabackup Severity: serious Tags: security fixed-upstream Hi, Upstream discovered and fixed use of a static IV in encrypting backups: A fixed initialization vector (constant string) was used while encrypting the data. This opened the encrypted stream/data to plaintext attacks

Bug#730544: static IV used in Percona XtraBackup

2013-11-26 Thread Salvatore Bonaccorso
Control: retitle -1 percona-xtrabackup: CVE-2013-6394: static IV used in Percona XtraBackup Hi, On Tue, Nov 26, 2013 at 12:24:34PM +0100, Thijs Kinkhorst wrote: Package: percona-xtrabackup Severity: serious Tags: security fixed-upstream Hi, Upstream discovered and fixed use of a static