lftp (4.0.2-1ubuntu0.1) lucid-security; urgency=low
* SECURITY UPDATE: arbitrary file overwrite via dot file download
- debian/patches/CVE-2010-2251.dpatch: don't use server-provided names
in src/{FileAccess,FileCopy,GetJob,commands,resource}.cc.
- This update changes previous behaviour by ignoring the filename
supplied by the server in the Content-Disposition header. To
re-enable previous behaviour, use the new xfer:auto-rename setting.
- CVE-2010-2251
Date: Thu, 02 Sep 2010 15:28:37 -0400
Changed-By: Marc Deslauriers <[email protected]>
Maintainer: Ubuntu Core Developers <[email protected]>
https://launchpad.net/ubuntu/lucid/+source/lftp/4.0.2-1ubuntu0.1
Format: 1.8
Date: Thu, 02 Sep 2010 15:28:37 -0400
Source: lftp
Binary: lftp
Architecture: source
Version: 4.0.2-1ubuntu0.1
Distribution: lucid-security
Urgency: low
Maintainer: Ubuntu Core Developers <[email protected]>
Changed-By: Marc Deslauriers <[email protected]>
Description:
lftp - Sophisticated command-line FTP/HTTP client programs
Changes:
lftp (4.0.2-1ubuntu0.1) lucid-security; urgency=low
.
* SECURITY UPDATE: arbitrary file overwrite via dot file download
- debian/patches/CVE-2010-2251.dpatch: don't use server-provided names
in src/{FileAccess,FileCopy,GetJob,commands,resource}.cc.
- This update changes previous behaviour by ignoring the filename
supplied by the server in the Content-Disposition header. To
re-enable previous behaviour, use the new xfer:auto-rename setting.
- CVE-2010-2251
Checksums-Sha1:
cb748af5af5019b1241cd8e7d660ce773748114f 1162 lftp_4.0.2-1ubuntu0.1.dsc
7e3b59ded86da6916e6bd4388c64135dcedd8176 14333 lftp_4.0.2-1ubuntu0.1.diff.gz
Checksums-Sha256:
c78c3d60d9fbfc522b8ac137537123094de3ad8a4cfbb02d6a984eb41239c54b 1162
lftp_4.0.2-1ubuntu0.1.dsc
d1ff9df32a1544f7bc4b241f3870edf38b5afe0f93847a372f083ec8f318eac1 14333
lftp_4.0.2-1ubuntu0.1.diff.gz
Files:
a5f76a996c9e576d10bf7feeaf409950 1162 net optional lftp_4.0.2-1ubuntu0.1.dsc
b8eaaa8956251f2aef43d311e938d64f 14333 net optional
lftp_4.0.2-1ubuntu0.1.diff.gz
Original-Maintainer: Noèl Köthe <[email protected]>
--
Lucid-changes mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/lucid-changes
