advisories/24112.adv

type: security
subject: Updated aria2 package fixes security vulnerability
CVE:
 - CVE-2019-3500
src:
  6:
   core:
     - aria2-1.25.0-1.1.mga6
description: |
  It was observed that URL's which gets downloaded via "--log=" attribute
  stores sensitive information. This update fixes that.
references:
 - https://bugs.mageia.org/show_bug.cgi?id=24112
ID: MGASA-2019-0036
1	type: security
2	subject: Updated aria2 package fixes security vulnerability
3	CVE:
4	- CVE-2019-3500
5	src:
6	6:
7	core:
8	- aria2-1.25.0-1.1.mga6
9	description: \|
10	It was observed that URL's which gets downloaded via "--log=" attribute
11	stores sensitive information. This update fixes that.
12	references:
13	- https://bugs.mageia.org/show_bug.cgi?id=24112
14	ID: MGASA-2019-0036