[issue36384] [security] CVE-2021-29921: ipaddress Should not reject IPv4 addresses with leading zeroes as ambiguously octal

STINNER Victor report at bugs.python.org
Tue May 25 06:55:15 EDT 2021


STINNER Victor <vstinner at python.org> added the comment:

I created https://python-security.readthedocs.io/vuln/ipaddress-ipv4-leading-zeros.html to track this vulnerability.

Python 3.8 is left unchanged (accept leading zeros). Python 3.7 and older are not affected.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue36384>
_______________________________________


More information about the Python-bugs-list mailing list