VYPR

rpm package

opensuse/lftp&distro=openSUSE Leap 15.0

pkg:rpm/opensuse/lftp&distro=openSUSE%20Leap%2015.0

Vulnerabilities (1)

  • CVE-2018-10916Aug 1, 2018
    affected < 4.8.3-lp150.3.3.1fixed 4.8.3-lp150.3.3.1

    It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading to a loss of integrity on the local system when reverse mirroring is used. A remote attacker may trick a user to use reverse mirroring on an attacker controlle