File percona-xtrabackup-2.2.x-disable-default-version-check.patch of Package xtrabackup
From: Andreas Stieger <andreas.stieger@gmx.de> Date: Tue, 18 Feb 2014 20:47:12 +0000 Subject: disable automatic version check References: https://bugzilla.novell.com/show_bug.cgi?id=864194 https://bugs.launchpad.net/percona-toolkit/+bug/1279502 Upstream: no Prevents transmission of version information to an external host in the default configuration. Can be used by owner of a Percona server (or an attacker who can control this destination for the client) to collect arbitrary MySQL configuration parameters and execute commands (with -v). Now the version check needs to be requested via command line. --- storage/innobase/xtrabackup/innobackupex.pl | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) Index: percona-xtrabackup-2.2.3/storage/innobase/xtrabackup/innobackupex.pl =================================================================== --- percona-xtrabackup-2.2.3.orig/storage/innobase/xtrabackup/innobackupex.pl 2014-07-06 00:06:29.000000000 +0100 +++ percona-xtrabackup-2.2.3/storage/innobase/xtrabackup/innobackupex.pl 2014-07-06 00:06:42.000000000 +0100 @@ -145,7 +145,7 @@ my $option_rebuild_threads = 0; my $option_debug_sleep_before_unlock = ''; -my $option_version_check = '1'; +my $option_version_check = '0'; my $option_force_non_empty_dirs = ''; @@ -5469,7 +5469,7 @@ This option displays the xtrabackup vers =item --version-check -This option controls if the version check should be executed by innobackupex after connecting to the server on the backup stage. This option is enabled by default, disable with --no-version-check. +This option controls if the version check should be executed by innobackupex after connecting to the server on the backup stage. =back