Add news entry

hartwork · hartwork · commit 6b4de36a2330 · 2026-01-06T21:59:55.000+01:00
diff --git a/Misc/NEWS.d/next/Library/2026-01-06-21-58-12.gh-issue-143497.k3XVrU.rst b/Misc/NEWS.d/next/Library/2026-01-06-21-58-12.gh-issue-143497.k3XVrU.rst
@@ -0,0 +1,5 @@
+Fix defaults of :class:`ftplib.FTP_TLS` to not leave the data connection
+without TLS and vulnerable to `man-in-the-middle attack
+<https://en.wikipedia.org/wiki/Man-in-the-middle_attack>`_. Also extend the
+documenation of :class:`ftplib.FTP_TLS` and :method:`ftplib.FTP_TLS.prot_c`
+to warn about the security implications. +Patch by Sebastian Pipping.
