Summary: | <net-ftp/lftp-4.0.6 execution of arbitrary code (CVE-2010-2251) | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | Stefan Behte (RETIRED) <craig> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | normal | CC: | dragonheart, jer |
Priority: | High | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | https://bugzilla.redhat.com/show_bug.cgi?id=602836 | ||
Whiteboard: | B2 [glsa] | ||
Package list: | Runtime testing required: | --- |
Description
Stefan Behte (RETIRED)
2010-07-26 15:40:43 UTC
Please remove vulnerable versions. (In reply to comment #1) > Please remove vulnerable versions. We're not done stabilising 4.0.9 yet (bug #327979). Arches, please continue stabilising: =net-ftp/lftp-4.0.9 Target KEYWORDS="alpha amd64 arm hppa ia64 mips ppc ppc64 s390 sparc x86" Stable for PPC. *** Bug 327979 has been marked as a duplicate of this bug. *** alpha/arm/ia64/s390/sparc stable ppc64 done Vulnerable version 4.0.5 is out of the tree. jer: *never* change whiteboard, if you do not know the exact procedure. It's changed to glsa after we filed a glsa request only! GLSA request filed. This issue was resolved and addressed in GLSA 201412-08 at http://security.gentoo.org/glsa/glsa-201412-08.xml by GLSA coordinator Sean Amoss (ackle). |