Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Fedora 10 Update: 2009-10344 Critical Aria2 Buffer Overflow

fedora
Calendar Grey October 8, 2009
Scroller Fedora
-------------------------------------------------------------------------------- Fedora Update Notif
Fixes CVE-2009-3575, A buffer overflow vulnerability described in more detail at https://bugzilla.redhat.com/show_bug.cgi?id=527827

Summary

aria2 is a download utility with resuming and segmented downloading.

Supported protocols are HTTP/HTTPS/FTP/BitTorrent. It also supports Metalink

version 3.0.

Currently it has following features:

- HTTP/HTTPS GET support

- HTTP Proxy support

- HTTP BASIC authentication support

- HTTP Proxy authentication support

- FTP support(active, passive mode)

- FTP through HTTP proxy(GET command or tunneling)

- Segmented download

- Cookie support(currently aria2 ignores "expires")

- It can run as a daemon process.

- BitTorrent protocol support with fast extension.

- Selective download in multi-file torrent

- Metalink version 3.0 support(HTTP/FTP/BitTorrent).

- Limiting download/upload speed

Update Information:

Fixes CVE-2009-3575, A buffer overflow vulnerability described in more detail at https://bugzilla.redhat.com/show_bug.cgi?id=527827

Topics%20covered

Topics Covered

security advisory fedora buffer overflow critical update information software fix aria2

Change Log

* Thu Oct 8 2009 Rahul Sundaram - 1.3.1-2 - Fix spec. Dumb mistake * Thu Oct 8 2009 Rahul Sundaram - 1.3.1-1 - Update to the same version as Fedora 11 that fixes rhbz#52782 * Fri Dec 5 2008 Michał Bentkowski - 1.0.1-2 - New version, 1.0.1 - Forgot to add changelog in last release...

References


[ 1 ] Bug #527827 - CVE-2009-3575 aria2: buffer overflow vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=527827

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update aria2' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: aria2
Product: Fedora 10
Version: 1.3.1
Release: 2.fc10
URL:
Summary: High speed download utility with resuming and segmented downloading

Topics%20covered

Topics Covered

security advisory fedora buffer overflow critical update information software fix aria2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.