Skip to content

[security] CVE-2021-29921: ipaddress Should not reject IPv4 addresses with leading zeroes as ambiguously octal #80565

Description

@TV4Fun
mannequin
BPO 36384
Nosy @ncoghlan, @vstinner, @ericvsmith, @tiran, @ned-deily, @ambv, @mgorny, @Julian, @serhiy-storchaka, @zooba, @pablogsal, @miss-islington, @TV4Fun, @gcbirzan, @achraf-mer
PRs
  • bpo-36384: Remove check for leading zeroes in IPv4 addresses #12577
  • bpo-36384: Leading zeros in IPv4 addresses are no longer tolerated #25099
  • [3.9] bpo-36384: Leading zeros in IPv4 addresses are no longer tolerated (GH-25099) #25815
  • [3.8] bpo-36384: Leading zeros in IPv4 addresses are no longer tolerated (GH-25099) #27801
  • bpo-36384: [doc] Mention CVE-2021-29921 fix in 3.8.12 #27824
  • [3.8] bpo-36384: [doc] Correct typos in CVE-2021-29921 fix description #27825
  • [3.10] bpo-36384: [doc] Mention CVE-2021-29921 fix in 3.8.12 (GH-27824) #27826
  • [3.9] bpo-36384: [doc] Mention CVE-2021-29921 fix in 3.8.12 (GH-27824) #27827
  • Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.

    Show more details

    GitHub fields:

    assignee = None
    closed_at = <Date 2021-05-25.10:26:41.541>
    created_at = <Date 2019-03-20.23:40:09.514>
    labels = ['type-security', 'deferred-blocker', '3.8', '3.9', '3.10', 'library']
    title = '[security] CVE-2021-29921: ipaddress Should not reject IPv4 addresses with leading zeroes as ambiguously octal'
    updated_at = <Date 2021-08-19.09:20:50.963>
    user = 'https://github.com/TV4Fun'

    bugs.python.org fields:

    activity = <Date 2021-08-19.09:20:50.963>
    actor = 'lukasz.langa'
    assignee = 'none'
    closed = True
    closed_date = <Date 2021-05-25.10:26:41.541>
    closer = 'pablogsal'
    components = ['Library (Lib)']
    creation = <Date 2019-03-20.23:40:09.514>
    creator = 'Joel Croteau'
    dependencies = []
    files = []
    hgrepos = []
    issue_num = 36384
    keywords = ['patch', '3.8regression', '3.9regression']
    message_count = 40.0
    messages = ['338514', '338694', '339204', '339205', '339206', '339210', '339211', '339572', '389826', '389847', '390046', '390128', '390331', '390340', '390353', '390361', '392423', '392572', '392684', '392692', '392696', '392697', '394162', '394316', '394322', '394327', '394379', '394380', '394390', '399784', '399798', '399801', '399803', '399804', '399805', '399809', '399893', '399895', '399898', '399899']
    nosy_count = 18.0
    nosy_names = ['ncoghlan', 'vstinner', 'eric.smith', 'christian.heimes', 'ned.deily', 'pmoody', 'docs@python', 'lukasz.langa', 'mgorny', 'Julian', 'python-dev', 'serhiy.storchaka', 'steve.dower', 'pablogsal', 'miss-islington', 'Joel Croteau', 'gc2', 'achraf-mer']
    pr_nums = ['12577', '25099', '25815', '27801', '27824', '27825', '27826', '27827']
    priority = 'deferred blocker'
    resolution = 'fixed'
    stage = 'resolved'
    status = 'closed'
    superseder = None
    type = 'security'
    url = 'https://bugs.python.org/issue36384'
    versions = ['Python 3.8', 'Python 3.9', 'Python 3.10']

    Metadata

    Metadata

    Assignees

    No one assigned

      Labels

      Projects

      No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions