Debian/aria2: high 7.8
aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password in a file, which might allow local users to obtain sensitive information by reading this file.
Action: Upgrade aria2 to 1.34.0-4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.34.0-4 | - |
Fixed versions
| 1.34.0-4 |
Sources
published · modified · JSON