tocsin

Alpine/aria2: high 7.8

aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password in a file, which might allow local users to obtain sensitive information by reading this file.

Action: Upgrade aria2 to 1.33.1-r1 or later.

Affected

introducedfixedlast affected
01.33.1-r1-

Fixed versions

1.33.1-r1

Sources

published · modified · JSON