RHBA-2012:1436 - Bug Fix Advisory

Topic

Updated ftp packages that fix three bugs are now available for Red Hat
Enterprise Linux 6.

Description

The ftp packages provide the standard UNIX command line File Transfer Protocol
(FTP) client. FTP is a widely used protocol for transferring files over the
Internet, and for archiving files.

This update fixes the following bugs:

• Previously, the command line width in the ftp client was limited to 200

characters. With this update, the maximum possible length of the FTP command
line is extended to 4296 characters. (BZ#871059)

• Prior to this update, "append", "put", and "send" commands were causing system

memory to leak. The memory holding the ftp command was not freed appropriately.
With this update, the underlying source code has been improved to correctly free
the system resources and the memory leaks are no longer present. (BZ#871071)

• Previously, if a macro longer than 200 characters was defined and then used

after a connection, the ftp client crashed due to a buffer overflow. With this
update, the underlying source code was updated and the buffer that holds memory
for the macro name was extended. It now matches the length of the command line
limit mentioned above. As a result, the ftp client no longer crashes when a
macro with a long name is executed. (BZ#871546)

All users of ftp are advised to upgrade to these updated packages, which fix
these bugs.

Solution

Before applying this update, make sure all previously-released errata relevant
to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red
Hat Network to apply this update are available at
https://access.redhat.com/knowledge/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.2 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.2 i386
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 6.2 s390x
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 6.2 ppc64
• Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.2 x86_64
• Red Hat Storage 2.0 x86_64
• Red Hat Gluster Storage Server for On-premise 2.0 x86_64
• Red Hat Storage for Public Cloud (via RHUI) 2.0 x86_64
• Red Hat Enterprise Linux Server - AUS 6.2 x86_64
• Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.2 i386

Fixes

CVEs

(none)

References

(none)