rpm/percona-toolkit
SHA256
1
0
Fork 0
forked from pool/percona-toolkit
Code Pull Requests Activity

Accepting request 223755 from home:AndreasStieger:branches:server:database

Browse Source 
Percona Toolkit 2.2.7  [bnc#864194] CVE-2014-2029

OBS-URL: https://build.opensuse.org/request/show/223755
OBS-URL: https://build.opensuse.org/package/show/server:database/percona-toolkit?expand=0&rev=31
This commit is contained in:
Andreas Stieger
2014-02-24 19:39:46 +00:00
committed by Git OBS Bridge
parent a22bb1ef7b
commit f12948f7df
5 changed files with 89 additions and 77 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
percona-toolkit.changes
View File

@@ -1,7 +1,19 @@
-------------------------------------------------------------------
Mon Feb 24 19:29:34 UTC 2014 - andreas.stieger@gmx.de
- Percona Toolkit 2.2.7 [bnc#864194] CVE-2014-2029
Improves sanitisation of input and output for commands run when
performing a version check.
As this would still transmit data to an external entity without
prompting, the automatic version check remains disabled in this
package unless requested via command line or global/tool specific
or user configuratoin. (--version-check)
-------------------------------------------------------------------
Sun Feb 16 23:57:34 UTC 2014 - andreas.stieger@gmx.de
- disable automatic version check for all tools [bnc#864194]
- disable automatic version check for all tools
[bnc#864194] CVE-2014-2029
Prevents transmission of version information to an external host
in the default configuration.
Can be used by owner of a Percona Server (or an attacker who can