The remote host is missing updates announced in advisory GLSA 200807-10.
A warning about this issue has been added in version 2.4.1, but the issue is still unfixed. We advise not to use the make_catalog_backup script, but to put all MySQL parameters into a dedicated file readable only by the user running Bacula. http://www.securityspace.com/smysecure/catid.html?in=GLSA%20200807-10 http://bugs.gentoo.org/show_bug.cgi?id=196834
A vulnerability in Bacula may allow local attackers to obtain sensitive information.