# Percona xtrabackup download has out of date OpenSSL libraries

**URL:** <https://forums.percona.com/t/percona-xtrabackup-download-has-out-of-date-openssl-libraries/30154>\
**Category:** Percona XtraBackup\
**Created:** [May 8, 2024, 8:22pm UTC](https://forums.percona.com/t/percona-xtrabackup-download-has-out-of-date-openssl-libraries/30154 "2024-05-08T20:22:25Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Benjamin\_Slade](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/benjamin_slade/32/16343_2.png) [@Benjamin\_Slade](https://forums.percona.com/u/Benjamin_Slade)\
**Post date:** [May 8, 2024, 8:22pm UTC](https://forums.percona.com/t/percona-xtrabackup-download-has-out-of-date-openssl-libraries/30154/1 "2024-05-08T20:22:25Z")

</div>

When I download percona-xtrabackup-8.0.35-30-Linux-x86\_64.glibc2.17-minimal.tar.gz from the [Software Downloads - Percona](http://percona.com/downloads) web page, from the URL:

[https://downloads.percona.com/downloads/Percona-XtraBackup-8.0/Percona-XtraBackup-8.0.35-30/binary/tarball/percona-xtrabackup-8.0.35-30-Linux-x86\_64.glibc2.17-minimal.tar.gz](https://downloads.percona.com/downloads/Percona-XtraBackup-8.0/Percona-XtraBackup-8.0.35-30/binary/tarball/percona-xtrabackup-8.0.35-30-Linux-x86_64.glibc2.17-minimal.tar.gz)

It seems to contain OpenSSL related library files like libssl.so.1.0.2k and libcrypto.so.1.0.2k which are part of OpenSSL 1.0.2k

But according to the NIST National Vulnerability Database (CVE-2022-1292), OpenSSL 1.0.2k has a critical vulnerability and shouldn’t be used.

Any chance Percona will post an updated prebuilt version of Percona Xtrabackup online for download? (using more recent OpenSSL libraries)

Thanks  
Ben

---

<div class="post-metadata">

**Author:** ![Benjamin\_Slade](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/benjamin_slade/32/16343_2.png) [@Benjamin\_Slade](https://forums.percona.com/u/Benjamin_Slade)\
**Post date:** [May 8, 2024, 8:27pm UTC](https://forums.percona.com/t/percona-xtrabackup-download-has-out-of-date-openssl-libraries/30154/2 "2024-05-08T20:27:43Z")

</div>

[https://nvd.nist.gov/vuln/detail/CVE-2022-1292](https://nvd.nist.gov/vuln/detail/CVE-2022-1292)