Repository navigation
IPv6 address parsing doesn't limit buffer size #128840
Copy link
Copy link
Closed
Labels
release-blockerstdlibStandard Library Python modules in the Lib/ directoryStandard Library Python modules in the Lib/ directorytype-bugAn unexpected behavior, bug, or errorAn unexpected behavior, bug, or errortype-securityA security issueA security issue
Description
Activity
- addedtype-bugAn unexpected behavior, bug, or errorAn unexpected behavior, bug, or errortype-securityA security issueA security issue
on Jan 14, 2025 - addedstdlibStandard Library Python modules in the Lib/ directoryStandard Library Python modules in the Lib/ directory
on Jan 14, 2025 I do not think this is a security issue.
- added 6 commits that reference this issue
on May 24, 2025 - added a commit that references this issue
on May 26, 2025 29 remaining items
- added 2 commits that reference this issue
on Jun 14, 2025 Backport of fix for this bug to Python 3.6 including rebasing
ipaddressto the 3.8-level using code from phihag/ipaddress#60 is available for review in the branch https://github.com/openSUSE-Python/cpython/tree/opensuse_3.6_gh-128840_parse-IPv6-with-emb-IPv4If anybody is interested in review or comments, I would love to hear from you.
- added 2 commits that reference this issue
on Jul 1, 2025 - added 2 commits that reference this issue
on Sep 18, 2026 - added 2 commits that reference this issue
on Oct 1, 2026
Metadata
Metadata
Assignees
Labels
release-blockerstdlibStandard Library Python modules in the Lib/ directoryStandard Library Python modules in the Lib/ directorytype-bugAn unexpected behavior, bug, or errorAn unexpected behavior, bug, or errortype-securityA security issueA security issue
Projects
- StatusShow more project fieldsDone
Bug report
Bug description:
IPv6 addresses have a maximum length (8 colon-separated parts) but the current implementation doesn't limit the length. Similar issue to django/django@ca2be77
CPython versions tested on:
CPython main branch
Operating systems tested on:
No response
Linked PRs