[Slackbuilds-users] Help on testing netdata 1.45.0

[Lockywolf]

Willy Sudiarto Raharjo <willysr at slackbuilds.org> writes:

> [[PGP Signed Part:Good signature from 3F617144D7238786 Willy Sudiarto Raharjo <willysr at gmail.com> (trust undefined) created at 2024-03-25T23:18:17+0800 using RSA]]
> Hi
>
> i just bumped netdata to 1.45.0 and since this is a major changes compared to
> 1.44.x, if you are using this package, please help by testing the new version (mind
> the new dependencies)
>
> changes/commit can be seen here:
> https://git.slackbuilds.org/slackbuilds/log/?h=netdata
>
> if no major issue, it will be merged on this week's public update

I haven't tested the build for 1.45.0, but I have just built the
previous version on SBo, 1.44.3, and I am quite surprised that it
listens on a public IP by default: 0.0.0.0:19999.

I would consider this to be a security vulnerability.
Could you make it bind to 127.0.0.1 by default, and the user could
adjust the port/ip if they wish.


-- 
Your sincerely,
Vladimir Nikishkin (MiEr, lockywolf)
(Laptop)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://lists.slackbuilds.org/pipermail/slackbuilds-users/attachments/20240402/b910d29f/attachment.asc>