CLSA-2026-1785492652 wget: Fix of 3 CVEs

CVE-2026-15146: validate the address advertised in the FTP PASV/LPSV response against the control connection peer, preventing a malicious FTP server from steering the data connection to an arbitrary host SSRF...

CLSA-2026-1786488345 wget: Fix of CVE-2026-15146

CVE-2026-15146: validate the address advertised in an FTP PASV/LPSV response against the control connection's peer, so a malicious FTP server cannot redirect the data connection to an arbitrary host SSRF...

CLSA-2026-1786033005 Fix CVE(s): CVE-2026-15146

SECURITY UPDATE: SSRF via unvalidated FTP PASV/LPSV response address - debian/patches/CVE-2026-15146.patch: validate the PASV/LPSV response address against the control connection peer in src/ftp-basic.c - CVE-2026-15146...

CLSA-2026-1784899129 Fix CVE(s): CVE-2026-15146

SECURITY UPDATE: SSRF via unvalidated FTP PASV/LPSV response address - debian/patches/CVE-2026-15146.patch: validate the PASV/LPSV response address against the control connection peer in src/ftp-basic.c - CVE-2026-15146...

CLSA-2026-1784815431 Fix CVE(s): CVE-2026-15146

SECURITY UPDATE: SSRF via unvalidated FTP PASV/LPSV response address - debian/patches/CVE-2026-15146.patch: validate the PASV/LPSV response address against the control connection peer in src/ftp-basic.c - CVE-2026-15146...

oftpd LPSV及LPRT命令拒绝服务漏洞

BUGTRAQ ID: 22073 CVECAN ID: CVE-2006-6767 oftpd是一款FTP服务程序。 oftpd在处理畸形的LPSV和LPRT命令参数时存在拒绝服务漏洞，远程攻击者可能利用此漏洞导致进程崩溃。 如果上述命令参数数据中包含有不支持的地址家族的话，就会触发异常失败，导致oftpd终止。 oftpd oftpd 0.3.7 厂商补丁： Gentoo ------ Gentoo已经为此发布了一个安全公告（GLSA 200701-09）以及相应补丁: GLSA 200701-09：oftpd: Denial of Service...