Issued:

2015-04-08

Updated:

2016-05-09

RHBA-2015:0793 - lftp bug fix update

Synopsis

lftp bug fix update

Type/Severity

Bug Fix Advisory

Topic

Updated lftp packages that fix several bugs are now available for Red Hat Enterprise Linux 6.

Description

LFTP is a file transfer utility for File Transfer Protocol (FTP), Secure Shell File Transfer Protocol (SFTP), Hypertext Transfer Protocol (HTTP), and other commonly used protocols. It uses the readline library for input, and provides support for bookmarks, built-in monitoring, job control, and parallel transfer of multiple files at the same time.

• Previously, downloaded files with duplicated names were not renamed even when the "xfer:auto-rename" and "xfer:clobber" options were enabled. To fix this bug, the condition for renaming downloaded files has been modified and they are now renamed as expected. (BZ#619777)

• Prior to this update, the lftp manual page did not contain information on the "xfer:auto-rename" option. The option has been documented and added to the page, where it is now available to users. (BZ#674875)

• Due to a bug in error checking code, lftp could fail to connect to a remote host with an IPv6 address if the local host had only IPv4 connectivity, but the remote host domain name was resolved also to IPv6 addresses. With this update, the code has been amended, and the connectivity problems no longer occur in this situation. (BZ#732863)

• Due to an incorrect evaluation of the length of an uploaded file, the lftp tool became unresponsive after a file transfer in ASCII mode. With this update, the volume of transferred data is recognized correctly and the lftp program no longer hangs in this scenario. (BZ#842322)

• When running lftp in mirror mode on a website, lftp terminated with an error in cases of HTTP 302 redirection. To fix this bug, lftp has been amended and now successfully proceeds to the new location in such situations. (BZ#928307)

• With the "cmd:fail-exit" option enabled, lftp could terminate unexpectedly when any command was executed after the "help" command. With this update, the "help" command has been amended to return correct return code, and lftp no longer exits in this scenario. (BZ#1193617)

Users of lftp are advised to upgrade to these updated packages, which fix these bugs.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258

Affected Products

Updated Packages

• lftp-debuginfo-4.0.9-6.el6.ppc.rpm
• lftp-4.0.9-6.el6.s390.rpm
• lftp-4.0.9-6.el6.ppc64.rpm
• lftp-debuginfo-4.0.9-6.el6.x86_64.rpm
• lftp-debuginfo-4.0.9-6.el6.s390.rpm
• lftp-4.0.9-6.el6.s390x.rpm
• lftp-scripts-4.0.9-6.el6.noarch.rpm
• lftp-debuginfo-4.0.9-6.el6.s390x.rpm
• lftp-4.0.9-6.el6.i686.rpm
• lftp-4.0.9-6.el6.src.rpm
• lftp-debuginfo-4.0.9-6.el6.ppc64.rpm
• lftp-4.0.9-6.el6.ppc.rpm
• lftp-debuginfo-4.0.9-6.el6.i686.rpm
• lftp-4.0.9-6.el6.x86_64.rpm

Fixes

• This content is not included.BZ - 674875
• This content is not included.BZ - 732863
• This content is not included.BZ - 842322

CVEs

(none)

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.