CVE-2019-3500

CVE-2019-3500 affects the download utility aria2 : when using --log, credentials (HTTP Basic username/password) can be written to a local log file, potentially exposing them to local users. The issue is tied to how aria2 handles logging rather than network flow, with vendor advisories and patch l...