Summary
[4.4.8-12]
- Resolves: #1611641 - CVE-2018-10916 lftp: particular remote file names may lead to current working directory erased
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | lftp | 0:4.4.8-12.el7 |
| Oracle Linux · 7 | lftp-scripts | 0:4.4.8-12.el7 |
Vulnerabilities 1
-
Medium 5.3
It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leadin…