Hello community, here is the log from the commit of package xtrabackup for openSUSE:Factory checked in at 2014-02-19 07:52:40 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/xtrabackup (Old) and /work/SRC/openSUSE:Factory/.xtrabackup.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "xtrabackup" Changes: -------- --- /work/SRC/openSUSE:Factory/xtrabackup/xtrabackup.changes 2014-02-02 19:02:55.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.xtrabackup.new/xtrabackup.changes 2014-02-19 07:52:43.000000000 +0100 @@ -1,0 +2,13 @@ +Tue Feb 18 20:48:35 UTC 2014 - andreas.stie...@gmx.de + +- disable automatic version check [bnc#864194] + Prevents transmission of version information to an external host + in the default configuration. + Can be used by owner of a Percona server (or an attacker who can + control this destination for the client) to collect arbitrary + MySQL configuration parameters and execute commands (with -v). + Now the version check needs to be requested via command line +- added patches: + * percona-xtrabackup-2.1.x-disable-default-version-check.patch + +------------------------------------------------------------------- New: ---- percona-xtrabackup-2.1.x-disable-default-version-check.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ xtrabackup.spec ++++++ --- /var/tmp/diff_new_pack.xQ4CzH/_old 2014-02-19 07:52:44.000000000 +0100 +++ /var/tmp/diff_new_pack.xQ4CzH/_new 2014-02-19 07:52:44.000000000 +0100 @@ -32,6 +32,7 @@ Source4: xtrabackup-nodoc.sh Patch0: percona-xtrabackup-2.1.x-nodoc.patch Patch1: percona-xtrabackup-2.1.x-mysql-5.6.15-srv_buf_size.patch +Patch2: percona-xtrabackup-2.1.x-disable-default-version-check.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build # This is to ease migration from Percona's generic packages Provides: percona-xtrabackup = %{version} @@ -81,6 +82,7 @@ %__find mysql-%{MYSQL_56_VERSION} -maxdepth 1 -type d -iname "doc*" -print && exit 1 %patch0 -p1 %patch1 -p1 +%patch2 -p1 %build set -ue ++++++ percona-xtrabackup-2.1.x-disable-default-version-check.patch ++++++ From: Andreas Stieger <andreas.stie...@gmx.de> Date: Tue, 18 Feb 2014 20:47:12 +0000 Subject: disable automatic version check References: https://bugzilla.novell.com/show_bug.cgi?id=864194 https://bugs.launchpad.net/percona-toolkit/+bug/1279502 Upstream: no Prevents transmission of version information to an external host in the default configuration. Can be used by owner of a Percona server (or an attacker who can control this destination for the client) to collect arbitrary MySQL configuration parameters and execute commands (with -v). Now the version check needs to be requested via command line. --- innobackupex.pl | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) Index: percona-xtrabackup-2.1.7/innobackupex.pl =================================================================== --- percona-xtrabackup-2.1.7.orig/innobackupex.pl 2014-01-23 14:59:36.000000000 +0000 +++ percona-xtrabackup-2.1.7/innobackupex.pl 2014-02-18 20:36:39.000000000 +0000 @@ -142,7 +142,7 @@ my $option_rebuild_threads = 0; my $option_debug_sleep_before_unlock = ''; -my $option_version_check = '1'; +my $option_version_check = '0'; my $option_force_non_empty_dirs = ''; @@ -5193,7 +5193,7 @@ This option displays the xtrabackup vers =item --version-check -This option controls if the version check should be executed by innobackupex after connecting to the server on the backup stage. This option is enabled by default, disable with --no-version-check. +This option controls if the version check should be executed by innobackupex after connecting to the server on the backup stage. =back -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org