RHBA-2015:0793 - Bug Fix Advisory

Topic

Updated lftp packages that fix several bugs are now available for Red Hat
Enterprise Linux 6.

Description

LFTP is a file transfer utility for File Transfer Protocol (FTP), Secure Shell
File Transfer Protocol (SFTP), Hypertext Transfer Protocol (HTTP), and other
commonly used protocols. It uses the readline library for input, and provides
support for bookmarks, built-in monitoring, job control, and parallel transfer
of multiple files at the same time.

• Previously, downloaded files with duplicated names were not renamed even when

the "xfer:auto-rename" and "xfer:clobber" options were enabled. To fix this bug,
the condition for renaming downloaded files has been modified and they are now
renamed as expected. (BZ#619777)

• Prior to this update, the lftp manual page did not contain information on the

"xfer:auto-rename" option. The option has been documented and added to the page,
where it is now available to users. (BZ#674875)

• Due to a bug in error checking code, lftp could fail to connect to a remote

host with an IPv6 address if the local host had only IPv4 connectivity, but the
remote host domain name was resolved also to IPv6 addresses. With this update,
the code has been amended, and the connectivity problems no longer occur in this
situation. (BZ#732863)

• Due to an incorrect evaluation of the length of an uploaded file, the lftp

tool became unresponsive after a file transfer in ASCII mode. With this update,
the volume of transferred data is recognized correctly and the lftp program no
longer hangs in this scenario. (BZ#842322)

• When running lftp in mirror mode on a website, lftp terminated with an error

in cases of HTTP 302 redirection. To fix this bug, lftp has been amended and now
successfully proceeds to the new location in such situations. (BZ#928307)

• With the "cmd:fail-exit" option enabled, lftp could terminate unexpectedly

when any command was executed after the "help" command. With this update, the
"help" command has been amended to return correct return code, and lftp no
longer exits in this scenario. (BZ#1193617)

Users of lftp are advised to upgrade to these updated packages, which
fix these bugs.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x

Fixes

• BZ - 674875 - lftp option xfer:auto-rename not documented
• BZ - 732863 - lftp uses ipv6 addresses even when ipv6 is not available
• BZ - 842322 - lftp hangs using -a ascii mode

CVEs

(none)

References

(none)