https://bugzilla.redhat.com/show_bug.cgi?id=902086 Till Maas <opensource@xxxxxxxxx> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |opensource@xxxxxxxxx --- Comment #133 from Till Maas <opensource@xxxxxxxxx> --- (In reply to jiri vanek from comment #132) > (In reply to Zbigniew Jędrzejewski-Szmek from comment #131) > > - When the daemon is started, is still listens on [::]:9200 and [::]:9300. > > The daemon has to be fixed to not accept commands from the network in the > > default configuration. > > This is default upstream behaviour. Not packaging issue. It is worthy to be > bugged as separate bug and to fix as different issue then pkg review. > updated to 1.4.4. although it really should be fixed, and fixed soon, it > should not be an initial push blocker. Packaging is also about making sure that the packages have sane defaults, even if upstream does not care about them. The right thing to do for Fedora is do keep its users protected and knowingly putting them at risk. FYI, there is an IMHO interesting blog post about the general problem: http://mjg59.dreamwidth.org/34069.html -- You are receiving this mail because: You are on the CC list for the bug. You are always notified about changes to this product and component _______________________________________________ package-review mailing list package-review@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/package-review