Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bind listeners to localhost in sample configs #261

Closed
githubmanticore opened this issue Aug 21, 2019 · 1 comment
Closed

Bind listeners to localhost in sample configs #261

githubmanticore opened this issue Aug 21, 2019 · 1 comment

Comments

@githubmanticore
Copy link
Contributor

@githubmanticore githubmanticore commented Aug 21, 2019

Right now, the listens emit to all interfaces, which is a security hazard if the user don't have the server
behind a firewall.

There is already a CVE proposal about this on sphinx (https://blog.wirhabenstil.de/2019/08/19/sphinxsearch-0-0-0-09306-cve-2019-14511/).

This should be applied to the sample configs provided in source code and packages. conf for docker doesn't need any change.

@manticoresearch

This comment has been minimized.

Copy link
Contributor

@manticoresearch manticoresearch commented Aug 23, 2019

Fixed in 023c9b2

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
2 participants
You can’t perform that action at this time.