{"id":"CVE-2020-29488","aliases":["openSUSE-SU-2022:10212-1"],"status":"published","title":"Security update for xtrabackup","description":"This update for xtrabackup fixes the following issues:\n\nUpdate xtrabackup to version 2.4.26:\n\n- CVE-2020-10997: Information exposure via cmd line output and table history (boo#1170644)\n- CVE-2020-29488: Changes in how absolute paths are handled (boo#1205581)","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2022-11-23T08:37:30Z","modified":"2026-02-04T04:04:19Z","affected":[{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP4","package":"xtrabackup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.26-bp154.2.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"xtrabackup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.26-bp154.2.3.1"}]}],"bundled":2}],"references":[{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/U3RTDTIXGJ3RCHKJUZNBA3BXYPTFKTB7/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1125418","tags":["report"]},{"url":"https://bugzilla.suse.com/1135095","tags":["report"]},{"url":"https://bugzilla.suse.com/1170644","tags":["report"]},{"url":"https://bugzilla.suse.com/1205581","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-29488","tags":["web"]}],"sources":{"osv":[{"id":"openSUSE-SU-2022:10212-1","title":"Security update for xtrabackup","description":"This update for xtrabackup fixes the following issues:\n\nUpdate xtrabackup to version 2.4.26:\n\n- CVE-2020-10997: Information exposure via cmd line output and table history (boo#1170644)\n- CVE-2020-29488: Changes in how absolute paths are handled (boo#1205581)\n","status":"published","published":"2022-11-23T08:37:30Z","modified":"2026-02-04T04:04:19.625636Z","updated_at":"2026-11-02T16:58:32.653274Z"}]}}