File percona-xtrabackup-2.1.x-disable-default-version-check.patch of Package xtrabackup.openSUSE_13.1_Update

From: Andreas Stieger <andreas.stieger@gmx.de>
Date: Tue, 18 Feb 2014 20:47:12 +0000
Subject: disable automatic version check
References: bnc#864194 CVE-2014-2029 https://bugs.launchpad.net/percona-toolkit/+bug/1279502
Upstream: no

Prevents transmission of version information to an external host
in the default configuration.
Can be used by owner of a Percona server (or an attacker who can
control this destination for the client) to collect arbitrary
MySQL configuration parameters and execute commands (with -v).
Now the version check needs to be requested via command line.

---
 innobackupex.pl |    4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

Index: percona-xtrabackup-2.1.7/innobackupex.pl
===================================================================
--- percona-xtrabackup-2.1.7.orig/innobackupex.pl	2014-01-23 14:59:36.000000000 +0000
+++ percona-xtrabackup-2.1.7/innobackupex.pl	2014-02-18 20:36:39.000000000 +0000
@@ -142,7 +142,7 @@ my $option_rebuild_threads = 0;
 
 my $option_debug_sleep_before_unlock = '';
 
-my $option_version_check = '1';
+my $option_version_check = '0';
 
 my $option_force_non_empty_dirs = '';
 
@@ -5193,7 +5193,7 @@ This option displays the xtrabackup vers
 
 =item --version-check
 
-This option controls if the version check should be executed by innobackupex after connecting to the server on the backup stage. This option is enabled by default, disable with --no-version-check.
+This option controls if the version check should be executed by innobackupex after connecting to the server on the backup stage.
 
 =back
 
openSUSE Build Service is sponsored by