BPO
Nosy
,
,
,
PRs
bpo-43285 Make ftplib not trust the PASV response. #24838
[3.9] bpo-43285 Make ftplib not trust the PASV response. (GH-24838) #24880
[3.8] bpo-43285 Make ftplib not trust the PASV response. (GH-24838) #24881
[3.6] bpo-43285 Make ftplib not trust the PASV response. (GH-24838) (GH-24881) #24882
[3.7] bpo-43285 Make ftplib not trust the PASV response. (GH-24838) (GH-24881) #24883
bpo-43285: Whats New entry for 3.8.9. #24886
bpo-43285: Add a What's New entry for 3.9.3. #24887
[3.9] bpo-43285: Add a What's New entry for 3.9.3. #24888
[3.8] bpo-43285: Whats New entry for 3.8.9. #24889
Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.
Show more detailsGitHub fields:
assignee=Noneclosed_at=<Date2021-03-16.21:54:25.203>created_at=<Date2021-02-21.11:49:34.689>labels= ['type-security', '3.7', 'library', 'release-blocker'] title='ftplib should not use the host from the PASV response'updated_at=<Date2021-03-16.21:54:25.202>user='https://bugs.python.org/ricexdream'bugs.python.org fields:
activity=<Date2021-03-16.21:54:25.202>actor='ned.deily'assignee='none'closed=Trueclosed_date=<Date2021-03-16.21:54:25.203>closer='ned.deily'components= ['Library (Lib)'] creation=<Date2021-02-21.11:49:34.689>creator='ricexdream'dependencies= [] files= [] hgrepos= [] issue_num=43285keywords= ['patch'] message_count=16.0messages= ['387455', '388267', '388602', '388610', '388757', '388761', '388762', '388763', '388768', '388777', '388812', '388813', '388815', '388882', '388885', '388891'] nosy_count=5.0nosy_names= ['gregory.p.smith', 'giampaolo.rodola', 'ned.deily', 'miss-islington', 'ricexdream'] pr_nums= ['24838', '24880', '24881', '24882', '24883', '24886', '24887', '24888', '24889'] priority='release blocker'resolution='fixed'stage='resolved'status='closed'superseder=Nonetype='security'url='https://bugs.python.org/issue43285'versions= ['Python 3.6', 'Python 3.7']Linked PRs
gh-87451: Apply CVE-2021-4189 PASV fix to ftplib.ftpcp() #149648
[3.15] gh-87451: Apply CVE-2021-4189 PASV fix to ftplib.ftpcp() (GH-149648) #149792
[3.14] gh-87451: Apply CVE-2021-4189 PASV fix to ftplib.ftpcp() (GH-149648) #149793
[3.13] gh-87451: Apply CVE-2021-4189 PASV fix to ftplib.ftpcp() (GH-149648) #149794
[3.12] gh-87451: Apply CVE-2021-4189 PASV fix to ftplib.ftpcp() (GH-149648) #149795
[3.11] gh-87451: Apply CVE-2021-4189 PASV fix to ftplib.ftpcp() (GH-149648) #149796
[3.10] gh-87451: Apply CVE-2021-4189 PASV fix to ftplib.ftpcp() (GH-149648) #149797