[SECURITY] [DLA 1636-1] aria2 security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Package : aria2
Version : 1.18.8-1+deb8u1
CVE ID : CVE-2019-3500
Debian Bug : 918058
It was discovered that aria2 (the lightweight command-line download
utility) can store passed user credentials in a log file when using
the --log option. This might allow local users to obtain sensitive
information by reading this file.
For Debian 8 "Jessie", this problem has been fixed in version
1.18.8-1+deb8u1.
We recommend that you upgrade your aria2 packages.
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
iQEzBAEBCgAdFiEEUFZhdgIWqBhwqCvuZYVUZx9w0DQFAlxGyVcACgkQZYVUZx9w
0DTykwf/T7Cx+DoLczq3h95EvLnIeFnRzTUMXIzSiTvI1MP7+r6aSd4xI7OMqIvC
Vu/gmiIg5iqerDtJdTAx9gp/DYgB/UNru4bkLQSz3g8LddBMzxQ484mVTPrGGtsK
0jMUnBnb0lkaZ/VkHm4BW2z5LF+oIF/Fw4ziQw548w0OLbN+UuvGPZfPKoNwQA61
qobFqFIpzL5WAbFbfiYaQOq7NEtvSYTtU1cDaSgn0ykqbN2bVcZkSTNv0LKc/ONh
kcTIoJ1VSNQQOqoIg5Fe4GeIwiARQv2psJrFCeRzj/LDisR4KzQqGK+KqaloXgpG
ZKdsDmpMiRXM9DvZ+DQ/4DVALzeYWA==
=p51B
-----END PGP SIGNATURE-----
Reply to: