Debian LTS Advisory ([SECURITY] [DLA 1937-1] httpie security update)

The remote host is missing an update for the 'httpie' package(s) announced via the DSA-1937-1 advisory.

An open redirect, that allows an attacker to write an arbitrary file with supplied filename and content to the current directory, by redirecting a request from HTTP to a crafted URL pointing to a server in his or hers control, was found and reported in CVE-2019-10751. This was patched upstream and so when `--download` without `--output` results in a redirect, now only the initial URL is considered, not the final one.

'httpie' package(s) on Debian Linux.

Checks if a vulnerable package version is present on the target host.

For Debian 8 'Jessie', this problem has been fixed in version 0.8.0-1+deb8u1. We recommend that you upgrade your httpie packages.