CVE-2019-13313:
libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to osinfo-install-script via the command line.
Standards version of the package is outdated.
wishlist
The package should be updated to follow the last version of Debian Policy
(Standards-Version 4.5.1 instead of
4.2.1).
![[bug history graph]](https://qa.debian.org/data/bts/graphs/libo/libosinfo.png){kind=link}