Slackware 8.1-9.1: SSA:2003-346-01 Critical: lftp Html Parsing Threat
slackware
December 12, 2003
lftp is a file transfer program that connects to other hosts using FTP, HTTP, and other protocols
Summary
Here are the details from the Slackware 9.1 ChangeLog: Fri Dec 12 11:12:05 PST 2003 patches/packages/lftp-2.6.10-i486-1.tgz: Upgraded to lftp-2.6.10. According to the NEWS file, this includes "security fixes in html parsing code" which could cause a compromise when using lftp to access an untrusted site. (* Security fix *) WHERE TO FIND THE NEW PACKAGE: Updated package for Slackware 8.1: ftp://ftp.slackware.com/pub/slackware/slackware-8.1/patches/packages/lftp-2.6.10-i386-1.tgz Updated package for Slackware 9.0: ftp://ftp.slackware.com/pub/slackware/slackware-9.0/patches/packages/lftp-2.6.10-i386-1.tgz Updated package for Slackware 9.1: ftp://ftp.slackware.com/pub/slackware/slackware-9.1/patches/packages/lftp-2.6.10-i486-1.tgz Updated package for Slackware -current: MD5 SIGNATURES: Slackware 8.1 package: 1e7eae2a8279491d439f4494c8733aa2 lftp-2.6.10-i386-1.tgz Slackware 9.0 package: af80878951917a6683bc3076947f2632 lftp-2.6.10-i386-1.tgz Slackware 9.1
Read the Full Advisory
Topics Covered
Where Find New Packages
MD5 Signatures
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Installation Instructions
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!