diff options
| author | Pablo Galindo <pablogsal@gmail.com> | 2021-04-05 16:38:40 (GMT) |
|---|---|---|
| committer | Pablo Galindo <pablogsal@gmail.com> | 2021-04-05 16:39:49 (GMT) |
| commit | 53e55290cf1972919ce2e83982346ff562ca31e3 (patch) | |
| tree | 0f100d73826824d7fde017007502b37a4a22ea97 /Misc/NEWS.d/next/Security | |
| parent | 57f21db3f629649dbd7c4531078b6a2104896411 (diff) | |
| download | cpython-53e55290cf1972919ce2e83982346ff562ca31e3.zip cpython-53e55290cf1972919ce2e83982346ff562ca31e3.tar.gz cpython-53e55290cf1972919ce2e83982346ff562ca31e3.tar.bz2 | |
Python 3.10.0a7v3.10.0a7
Diffstat (limited to 'Misc/NEWS.d/next/Security')
3 files changed, 0 insertions, 14 deletions
diff --git a/Misc/NEWS.d/next/Security/2021-03-08-23-06-07.bpo-43439.5U3lXm.rst b/Misc/NEWS.d/next/Security/2021-03-08-23-06-07.bpo-43439.5U3lXm.rst deleted file mode 100644 index 5186503..0000000 --- a/Misc/NEWS.d/next/Security/2021-03-08-23-06-07.bpo-43439.5U3lXm.rst +++ /dev/null @@ -1,2 +0,0 @@ -Add audit hooks for :func:`gc.get_objects`, :func:`gc.get_referrers` and -:func:`gc.get_referents`. Patch by Pablo Galindo. diff --git a/Misc/NEWS.d/next/Security/2021-03-13-03-48-14.bpo-43285.g-Hah3.rst b/Misc/NEWS.d/next/Security/2021-03-13-03-48-14.bpo-43285.g-Hah3.rst deleted file mode 100644 index 8312b7e..0000000 --- a/Misc/NEWS.d/next/Security/2021-03-13-03-48-14.bpo-43285.g-Hah3.rst +++ /dev/null @@ -1,8 +0,0 @@ -:mod:`ftplib` no longer trusts the IP address value returned from the server -in response to the PASV command by default. This prevents a malicious FTP -server from using the response to probe IPv4 address and port combinations -on the client network. - -Code that requires the former vulnerable behavior may set a -``trust_server_pasv_ipv4_address`` attribute on their -:class:`ftplib.FTP` instances to ``True`` to re-enable it. diff --git a/Misc/NEWS.d/next/Security/2021-03-24-14-16-56.bpo-42988.P2aNco.rst b/Misc/NEWS.d/next/Security/2021-03-24-14-16-56.bpo-42988.P2aNco.rst deleted file mode 100644 index 4b42dd0..0000000 --- a/Misc/NEWS.d/next/Security/2021-03-24-14-16-56.bpo-42988.P2aNco.rst +++ /dev/null @@ -1,4 +0,0 @@ -CVE-2021-3426: Remove the ``getfile`` feature of the :mod:`pydoc` module which -could be abused to read arbitrary files on the disk (directory traversal -vulnerability). Moreover, even source code of Python modules can contain -sensitive data like passwords. Vulnerability reported by David Schwörer. |