Willy Sudiarto Raharjo writes:
> [[PGP Signed Part:Good signature from 3F617144D7238786 Willy Sudiarto Raharjo
> (trust undefined) created at 2024-03-25T23:18:17+0800
> using RSA]]
> Hi
>
> i just bumped netdata to 1.45.0 and since this is a major changes compared to
> 1.44.x, if you are using this package, please help by testing the new version
> (mind
> the new dependencies)
>
> changes/commit can be seen here:
> https://git.slackbuilds.org/slackbuilds/log/?h=netdata
>
> if no major issue, it will be merged on this week's public update
I haven't tested the build for 1.45.0, but I have just built the
previous version on SBo, 1.44.3, and I am quite surprised that it
listens on a public IP by default: 0.0.0.0:1.
I would consider this to be a security vulnerability.
Could you make it bind to 127.0.0.1 by default, and the user could
adjust the port/ip if they wish.
--
Your sincerely,
Vladimir Nikishkin (MiEr, lockywolf)
(Laptop)
signature.asc
Description: PGP signature
___
SlackBuilds-users mailing list
SlackBuilds-users@slackbuilds.org
https://lists.slackbuilds.org/mailman/listinfo/slackbuilds-users
Archives - https://lists.slackbuilds.org/pipermail/slackbuilds-users/
FAQ - https://slackbuilds.org/faq/
