[Mageia-dev] slight security improvement: should we update aria2 to 1.11.2?

Thierry Vignaud thierry.vignaud at gmail.com
Tue May 24 10:07:07 CEST 2011


We are currently shiping aria2-1.11.1.

However latest version is 1.11.2 which slightly improve security when
using authenticated
media by hiding them from process viewers (ps, ...):

"The username and password specified in command-line are now masked with
"*" immediately after parsed, so that ps cannot show username and password."

Since that does not happen for most users and since we don't provide auth media,
that's not a immediate concern, so should we update for Mageia 1?

See you

More information about the Mageia-dev mailing list