< back to search

shield Security update for lftp

SUSE-SLE-SERVER-12-SP4-2019-642

This update for lftp fixes the following issues: Security issue fixed: - CVE-2018-10916: Fixed an improper file name sanitization which could lead to loss of integrity of the local system (bsc#1103367). Other issue addressed: - The SSH login handling code detects password prompts more reliably (bsc#1120946).

Release Date

Mar 19 2019
References

Bugzilla: 1120946, 1103367
CVEs: CVE-2018-10916
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Server for SAP Applications 12.4 ppc64le

Packages

lftp
Command Line File Transfer Program

4.7.4-3.6.1 lock rpm lock src

SUSE Linux Enterprise Server 12.4 aarch64

Packages

lftp
Command Line File Transfer Program

4.7.4-3.6.1 lock rpm lock src

SUSE Linux Enterprise Server 12.4 x86_64

Packages

lftp
Command Line File Transfer Program

4.7.4-3.6.1 lock rpm lock src

SUSE Linux Enterprise Server 12.4 s390x

Packages

lftp
Command Line File Transfer Program

4.7.4-3.6.1 lock rpm lock src