CentOS Errata and Bugfix Advisory 2016:1405 

Upstream details at : https://rhn.redhat.com/errata/RHBA-2016-1405.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( sha256sum Filename ) 

i386:
d8041c3a9f61587a42ff479156751198a57d1fdc970f5a019b43a39a7b61902e  lftp-4.0.9-6.el6_8.2.i686.rpm
f668cb9d616b16b3dd352664110d4df2792075db082f602ce556cfae9ebed7fc  lftp-scripts-4.0.9-6.el6_8.2.noarch.rpm

x86_64:
d8041c3a9f61587a42ff479156751198a57d1fdc970f5a019b43a39a7b61902e  lftp-4.0.9-6.el6_8.2.i686.rpm
e524c9d1cce7b3c0086d2c7872b7493f537a80cbfc6e601ebd973c40e0ef32c7  lftp-4.0.9-6.el6_8.2.x86_64.rpm
f668cb9d616b16b3dd352664110d4df2792075db082f602ce556cfae9ebed7fc  lftp-scripts-4.0.9-6.el6_8.2.noarch.rpm

Source:
1533f445a0e3ed91de9f9eeb70479e9763b25fe7be3f9f69e11a777515c90752  lftp-4.0.9-6.el6_8.2.src.rpm