UbuntuUpdates.org

Package "lftp"

Name: lftp

Description:

Sophisticated command-line FTP/HTTP/BitTorrent client programs
Latest version: 4.6.3a-1ubuntu0.1
Release: xenial (16.04)
Level: security
Repository: main
Homepage: http://lftp.yar.ru/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "lftp"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "lftp" in Xenial

Repository Area Version
base main 4.6.3a-1build2
updates main 4.6.3a-1ubuntu0.1

Changelog

Version: 4.6.3a-1ubuntu0.1 2018-08-06 19:06:58 UTC

  lftp (4.6.3a-1ubuntu0.1) xenial-security; urgency=medium

  * SECURITY UPDATE: Incorrectly sanitize remote file names
    - debian/patches/CVE-2018-10196.patch: fix in src/MirrorJob.cc.
    - CVE-2018-10196

 -- <email address hidden> (Leonidas S. Barbosa) Fri, 03 Aug 2018 12:02:03 -0300
CVE-2018-10196 NULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote att


About   -   Send Feedback to @ubuntu_updates