Bug#905163: lftp: CVE-2018-10916: Exploit in reverse mirror job deletes cwd on source

2018-08-01 Thread Salvatore Bonaccorso
Control: found -1 4.7.4-1 Hi Noel, On Wed, Aug 01, 2018 at 05:46:55AM +0200, Salvatore Bonaccorso wrote: > Source: lftp > Version: 4.8.3-1 > Severity: grave > Tags: patch security upstream > Forwarded: https://github.com/lavv17/lftp/issues/452 > > Hi, > > The following vulnerability was

Bug#905163: lftp: CVE-2018-10916: Exploit in reverse mirror job deletes cwd on source

2018-07-31 Thread Salvatore Bonaccorso
Source: lftp Version: 4.8.3-1 Severity: grave Tags: patch security upstream Forwarded: https://github.com/lavv17/lftp/issues/452 Hi, The following vulnerability was published for lftp, were in cse revers mirror option is used can lead on data loss on source. CVE-2018-10916[0]: Exploit in