-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 21 Jan 2019 17:18:53 +0100 Source: aria2 Binary: aria2 Architecture: source amd64 Version: 1.18.8-1+deb8u1 Distribution: jessie-security Urgency: high Maintainer: Patrick Ruckstuhl <patrick@ch.tario.org> Changed-By: Hugo Lefeuvre <hle@debian.org> Description: aria2 - High speed download utility Changes: aria2 (1.18.8-1+deb8u1) jessie-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2019-3500: --log leaking user credentials in local log file. Checksums-Sha1: 5561d0be839a8d4f433237ab329fcc3fc6e9152e 1763 aria2_1.18.8-1+deb8u1.dsc b6ad7064b1ea769e78f6a7dc9787a12cfc1e153f 2150587 aria2_1.18.8.orig.tar.bz2 89bb140a6c93004b3e217bbd30390c458d7083a7 6344 aria2_1.18.8-1+deb8u1.debian.tar.xz 2fe7c82b0817651fd6cbbd8f2bb56b50e447bc9c 1200508 aria2_1.18.8-1+deb8u1_amd64.deb Checksums-Sha256: 39f1ef205c70152e67ddf13909ad2bcd90a2560f1934185e124638ecaa61373c 1763 aria2_1.18.8-1+deb8u1.dsc cbb8d89553b819b1e5f840d18ab870771b9519332dc38ce19ff90ac1e66decd2 2150587 aria2_1.18.8.orig.tar.bz2 160d625d776a25b98f44808aa46f88b793934799584a73b6f9d67557781168c6 6344 aria2_1.18.8-1+deb8u1.debian.tar.xz 4409f3738962b4beed0e9789552bf4a6aa0cd86ad397b8d6ddcccd71c93f2a51 1200508 aria2_1.18.8-1+deb8u1_amd64.deb Files: 9985d5c9bcd7e9ac4829ae0b15475d11 1763 net optional aria2_1.18.8-1+deb8u1.dsc 30a4a6d9ee3122105d21290344a5fbf3 2150587 net optional aria2_1.18.8.orig.tar.bz2 29977975ebd4ce0e16c92aec139b5ab8 6344 net optional aria2_1.18.8-1+deb8u1.debian.tar.xz 6a4a7f9fe12ccaf92e158827bc3378bd 1200508 net optional aria2_1.18.8-1+deb8u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEUFZhdgIWqBhwqCvuZYVUZx9w0DQFAlxGCiEACgkQZYVUZx9w 0DQ0twf/ZXpEyGOwgyoJpIDwUZAhmxSThWqmZ8oEDHjQ76BNpXEO3jXOZ6pBGrqc gj4mRhEXfDv3rU7a2ufuG++tQ2eE869fALzQyUOIX5HmLA1Y8qUjrxi/LL17IFLq C0EhsUl7V008lHZB3047NZl9o+9xNj2br6fD65s7db4qP1QexsBMKDGZa/YTy+Z1 /qcB9ySH/tVwCASmYUIq3ZoMbXZIf+We6pGJI0GEQBRxW68iJxg2GzsFNxqEHz3Z Gv4Ee68qRUWlONY6WiwnRQ2HPIJwDY6m/7ctoG4bB61Ay7jSy37NAqJhJDKD+WE8 Lh21TLyHHP7AEI43QPmP/L/Y0oqmmg== =NBlj -----END PGP SIGNATURE-----