Skip to content

ftplib should not use the host from the PASV response #87451

Closed
@ricexdream

Description

@ricexdream
BPO 43285
Nosy @gpshead, @giampaolo, @ned-deily, @miss-islington
PRs
  • bpo-43285 Make ftplib not trust the PASV response. #24838
  • [3.9] bpo-43285 Make ftplib not trust the PASV response. (GH-24838) #24880
  • [3.8] bpo-43285 Make ftplib not trust the PASV response. (GH-24838) #24881
  • [3.6] bpo-43285 Make ftplib not trust the PASV response. (GH-24838) (GH-24881) #24882
  • [3.7] bpo-43285 Make ftplib not trust the PASV response. (GH-24838) (GH-24881) #24883
  • bpo-43285: Whats New entry for 3.8.9. #24886
  • bpo-43285: Add a What's New entry for 3.9.3. #24887
  • [3.9] bpo-43285: Add a What's New entry for 3.9.3. #24888
  • [3.8] bpo-43285: Whats New entry for 3.8.9. #24889
  • Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.

    Show more details

    GitHub fields:

    assignee = None closed_at = <Date 2021-03-16.21:54:25.203> created_at = <Date 2021-02-21.11:49:34.689> labels = ['type-security', '3.7', 'library', 'release-blocker'] title = 'ftplib should not use the host from the PASV response' updated_at = <Date 2021-03-16.21:54:25.202> user = 'https://bugs.python.org/ricexdream'

    bugs.python.org fields:

    activity = <Date 2021-03-16.21:54:25.202> actor = 'ned.deily' assignee = 'none' closed = True closed_date = <Date 2021-03-16.21:54:25.203> closer = 'ned.deily' components = ['Library (Lib)'] creation = <Date 2021-02-21.11:49:34.689> creator = 'ricexdream' dependencies = [] files = [] hgrepos = [] issue_num = 43285 keywords = ['patch'] message_count = 16.0 messages = ['387455', '388267', '388602', '388610', '388757', '388761', '388762', '388763', '388768', '388777', '388812', '388813', '388815', '388882', '388885', '388891'] nosy_count = 5.0 nosy_names = ['gregory.p.smith', 'giampaolo.rodola', 'ned.deily', 'miss-islington', 'ricexdream'] pr_nums = ['24838', '24880', '24881', '24882', '24883', '24886', '24887', '24888', '24889'] priority = 'release blocker' resolution = 'fixed' stage = 'resolved' status = 'closed' superseder = None type = 'security' url = 'https://bugs.python.org/issue43285' versions = ['Python 3.6', 'Python 3.7']

    Metadata

    Metadata

    Assignees

    No one assigned

      Projects

      No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions