Solution
Please Install the Updated Packages.
Insight
percona-toolkit and xtrabackup were updated:
- disable automatic version check for all tools
[bnc#864194] Prevents transmission of version information to an external host in the default configuration.
CVE-2014-2029 Can be used by owner of a Percona Server (or an attacker who can control this destination for the client) to collect arbitrary MySQL configuration
parameters and execute commands (with -v). Now the version check needs to be requested via command line or global/tool specific/user configuration. (--version-check) - added /etc/percona-toolkit/percona-toolkit.conf
configuration directory and template configuration file
Affected
percona-toolkit,xtrabackup on openSUSE 13.1
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2014-2029 -
CVSS Base Score: 5.8
AV:N/AC:M/Au:N/C:P/I:P/A:N
Related Vulnerabilities