Lucene search

K
suseSuseOPENSUSE-SU-2014:0333-1
HistoryMar 06, 2014 - 10:04 a.m.

percona-toolkit,xtrabackup: disable remote version check (important)

2014-03-0610:04:26
lists.opensuse.org
13

EPSS

0.002

Percentile

55.2%

percona-toolkit and xtrabackup were updated:

  • disable automatic version check for all tools
    [bnc#864194] Prevents transmission of version information
    to an external host in the default configuration.
    CVE-2014-2029 Can be used by owner of a Percona Server
    (or an attacker who can control this destination for the
    client) to collect arbitrary MySQL configuration
    parameters and execute commands (with -v). Now the
    version check needs to be requested via command line or
    global/tool specific/user configuration. (–version-check)
  • added /etc/percona-toolkit/percona-toolkit.conf
    configuration directory and template configuration file

EPSS

0.002

Percentile

55.2%