tocsin

Debian/sphinxsearch: high 7.5

SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal (in conjunction with CVE-2019-14511) because the mysql client can be used for CALL SNIPPETS and load_file operations

Action: Upgrade sphinxsearch to 2.2.11-3 or later.

Affected

introducedfixedlast affected
02.2.11-3-

Fixed versions

2.2.11-3

Sources

published · modified · JSON