Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2019:0050-1

Опубликовано: 04 апр. 2019
Источник: suse-cvrf

Описание

Security update for aria2

This update for aria2 fixes the following security issue:

  • CVE-2019-3500: Metadata and potential password leaks via --log= (boo#1120488)

Список пакетов

SUSE Package Hub 15
aria2-1.33.1-bp150.3.7.1
aria2-devel-1.33.1-bp150.3.7.1
aria2-lang-1.33.1-bp150.3.7.1
libaria2-0-1.33.1-bp150.3.7.1
openSUSE Leap 15.0
aria2-1.33.1-bp150.3.7.1
aria2-devel-1.33.1-bp150.3.7.1
aria2-lang-1.33.1-bp150.3.7.1
libaria2-0-1.33.1-bp150.3.7.1

Ссылки

Описание

aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password in a file, which might allow local users to obtain sensitive information by reading this file.

Затронутые продукты
SUSE Package Hub 15:aria2-1.33.1-bp150.3.7.1
SUSE Package Hub 15:aria2-devel-1.33.1-bp150.3.7.1
SUSE Package Hub 15:aria2-lang-1.33.1-bp150.3.7.1
SUSE Package Hub 15:libaria2-0-1.33.1-bp150.3.7.1
Ссылки