File percona-xtrabackup-2.1.x-disable-default-version-check.patch of Package xtrabackup.openSUSE_13.1_Update
From: Andreas Stieger <andreas.stieger@gmx.de> Date: Tue, 18 Feb 2014 20:47:12 +0000 Subject: disable automatic version check References: bnc#864194 CVE-2014-2029 https://bugs.launchpad.net/percona-toolkit/+bug/1279502 Upstream: no Prevents transmission of version information to an external host in the default configuration. Can be used by owner of a Percona server (or an attacker who can control this destination for the client) to collect arbitrary MySQL configuration parameters and execute commands (with -v). Now the version check needs to be requested via command line. --- innobackupex.pl | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) Index: percona-xtrabackup-2.1.7/innobackupex.pl =================================================================== --- percona-xtrabackup-2.1.7.orig/innobackupex.pl 2014-01-23 14:59:36.000000000 +0000 +++ percona-xtrabackup-2.1.7/innobackupex.pl 2014-02-18 20:36:39.000000000 +0000 @@ -142,7 +142,7 @@ my $option_rebuild_threads = 0; my $option_debug_sleep_before_unlock = ''; -my $option_version_check = '1'; +my $option_version_check = '0'; my $option_force_non_empty_dirs = ''; @@ -5193,7 +5193,7 @@ This option displays the xtrabackup vers =item --version-check -This option controls if the version check should be executed by innobackupex after connecting to the server on the backup stage. This option is enabled by default, disable with --no-version-check. +This option controls if the version check should be executed by innobackupex after connecting to the server on the backup stage. =back