RHBA-2011:1480 - Bug Fix Advisory

Topic

An updated ftp package that fixes various bugs is now available for Red Hat
Enterprise Linux 5.

Description

The ftp package provides the standard UNIX command line File Transfer Protocol
(FTP) client. FTP is a widely used protocol for transferring files over the
Internet, and for archiving files.

This updated ftp package includes fixes for the following bugs:

• Prior to this update, the value of "cout" was not checked before calling

fclose(cout). As a consequence a segmentation fault could occur if the value of
"cout" was NULL. With this update the code is improved to check that the value
of "cout" is not NULL before calling fclose(cout). As a result a segmentation
fault will no longer occur in the scenario described. (BZ#694757)

• Prior to this update, the "append", "put" and "send" commands caused memory

leaks. Consequently unnecessary residual memory was consumed. With this update,
the code has been improved to free unused memory and the memory leaks no longer
occur. (BZ#735840)

• Prior to this update, the ftp client did not support selecting an active mode

connection from the command line using an option. As a consequence interactive
mode had to be used and therefore it was not possible for scripts to invoke ftp
in active mode. With this update a command line option, "-A", has been added and
as a result active mode can be invoked using scripts. (BZ#531095)

All users of ftp are advised to upgrade to this updated package, which fixes
these bugs.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 531095 - ftp client does not support active mode from command line invocation

CVEs

(none)

References

(none)