8000 [3.6] bpo-43285 Make ftplib not trust the PASV response. (GH-24838) (GH-24881) by miss-islington · Pull Request #24882 · python/cpython · GitHub
[go: up one dir, main page]
Skip to content

[3.6] bpo-43285 Make ftplib not trust the PASV response. (GH-24838) (GH-24881) #24882

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 4 commits into from
Mar 16, 2021
Merged

[3.6] bpo-43285 Make ftplib not trust the PASV response. (GH-24838) (GH-24881) #24882

Changes from 1 commit
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
8759ca4
[3.8] bpo-43285 Make ftplib not trust the PASV response. (GH-24838) (…
gpshead Mar 15, 2021
668d22e
Add a What's New entry for 3.6.14.
gpshead Mar 16, 2021
9678422
typo
gpshead Mar 16, 2021
e5fb26d
fix underline
ned-deily Mar 16, 2021
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
typo
  • Loading branch information
@gpshead
gpshead authored Mar 16, 2021
commit 9678422d1ab95cc26e0b536907594c164b1c33c0
2 changes: 1 addition & 1 deletion Doc/whatsnew/3.6.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2478,6 +2478,6 @@ Notable changes in Python 3.6.14

A security fix alters the :class:`ftplib.FTP` behavior to not trust the
IPv4 address sent from the remote server when setting up a passive data
channel. We reuse the ftp servers IP address instead. For unusual code
channel. We reuse the ftp server IP address instead. For unusual code
requiring the old behavior, set a ``trust_server_pasv_ipv4_address``
attribute on your FTP instance to ``True``. (See :issue:`43285`)
0