openSUSE Leap 15.0: openSUSE-SU-2019:1110-1 Moderate: lftp File Issue
opensuse
April 2, 2019
An update that solves one vulnerability and has one errata is now available.
Description
This update for lftp fixes the following issues: Security issue fixed:
- CVE-2018-10916: Fixed an improper file name sanitization which could
lead to loss of integrity of the local system (bsc#1103367).
Other issue addressed:
- The SSH login handling code detects password prompts more reliably
(bsc#1120946).
This update was imported from the SUSE:SLE-15:Update update project.
Topics Covered
Patch
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 15.0:
zypper in -t patch openSUSE-2019-1110=1
Package List
- openSUSE Leap 15.0 (x86_64):
lftp-4.8.3-lp150.3.3.1
lftp-debuginfo-4.8.3-lp150.3.3.1
lftp-debugsource-4.8.3-lp150.3.3.1
References
https://www.suse.com/security/cve/CVE-2018-10916.html
https://bugzilla.suse.com/1103367
https://bugzilla.suse.com/1120946
--
PREVIOUS
NEXT
Announcement ID: openSUSE-SU-2019:1110-1
Rating: moderate
Affected Products:
openSUSE Leap 15.0
le.
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!