New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bind listeners to localhost in sample configs #261

Closed

githubmanticore opened this issue Aug 21, 2019 · 1 comment

Contributor

githubmanticore commented Aug 21, 2019

Right now, the listens emit to all interfaces, which is a security hazard if the user don't have the server
behind a firewall.

There is already a CVE proposal about this on sphinx (https://blog.wirhabenstil.de/2019/08/19/sphinxsearch-0-0-0-09306-cve-2019-14511/).

This should be applied to the sample configs provided in source code and packages. conf for docker doesn't need any change.

Contributor

manticoresearch commented Aug 23, 2019

Fixed in 023c9b2

manticoresearch closed this as completed

hgfdd mentioned this issue

UPDATE MVA is freezing #305

Open

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment