Updated sphinx packages fix security vulnerability: A vulnerability was found in Sphinx Technologies Sphinx 3.1.1 by default has no authentication and listens on 0.0.0.0, making it exposed to the internet, unless filtered by a firewall or reconfigured to listen to 127.0.0.1 only . MGASA-2020-0087 - Updated sphinx packages fix security vulnerability Publication date: 18 Feb 2020 URL: https://advisories.mageia.org/MGASA-2020-0087.html Type: security Affected Mageia releases: 7 CVE: CVE-2019-14511 Updated sphinx packages fix security vulnerability: A vulnerability was found in Sphinx Technologies Sphinx 3.1.1 by default has no authentication and listens on 0.0.0.0, making it exposed to the internet, unless filtered by a firewall or reconfigured to listen to 127.0.0.1 only (CVE-2019-14511). References: - https://bugs.mageia.org/show_bug.cgi?id=25946 - https://lists.fedoraproject.org/archives/list/
A remote attacker could send a speciallycrafted TCP packet that overflows a buffer, leaving heartbeat toexecute arbitrary code as root.. -------------------------------------------------------------------------- Debian Security Advisory DSA 174-1
Get the latest Linux and open source security news straight to your inbox.