NetBSD 9.4 — lftp — multiple vulnerabilities (2 CVEs) — patch and remediation guide
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2007-2348 CVE-2018-10916 Upstream summary: pkgsrc audit-packages flagged lftp<2.5.3 for vulnerability class 'remote-user-shell'. Reference: http://freshmeat.net/releases/87364/ Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]