You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
IPv6 addresses have a maximum length (8 colon-separated parts) but the current implementation doesn't limit the length. Similar issue to django/django@ca2be77
Activity
pythonGH-128840: Limit the number of parts in IPv6 address parsing
serhiy-storchaka commentedon Jan 15, 2025
I do not think this is a security issue.
gh-128840: Limit the number of parts in IPv6 address parsing (GH-128841)
pythongh-128840: Limit the number of parts in IPv6 address parsing (p…
pythongh-128840: Limit the number of parts in IPv6 address parsing (p…
pythongh-128840: Limit the number of parts in IPv6 address parsing (p…
pythongh-128840: Limit the number of parts in IPv6 address parsing (p…
pythongh-128840: Limit the number of parts in IPv6 address parsing (p…
pythongh-128840: Limit the number of parts in IPv6 address parsing (p…
[3.14] gh-128840: Limit the number of parts in IPv6 address parsing (G…
[3.13] gh-128840: Limit the number of parts in IPv6 address parsing (G…
[3.12] gh-128840: Limit the number of parts in IPv6 address parsing (G…
29 remaining items
update ipaddress to 3.8 equivalent
limit parsing long IPv6 address
mcepl commentedon Jun 14, 2025
Backport of fix for this bug to Python 3.6 including rebasing
ipaddressto the 3.8-level using code from phihag/ipaddress#60 is available for review in the branch https://github.com/openSUSE-Python/cpython/tree/opensuse_3.6_gh-128840_parse-IPv6-with-emb-IPv4If anybody is interested in review or comments, I would love to hear from you.
protect against unrully IPv4-in-IPv6 addresses
protect against unrully IPv4-in-IPv6 addresses
pythongh-128840: Limit the number of parts in IPv6 address parsing (p…
pythongh-128840: Fix parsing long IPv6 addresses with embedded IPv4 a…
pythongh-128840: Limit the number of parts in IPv6 address parsing (p…
pythongh-128840: Fix parsing long IPv6 addresses with embedded IPv4 a…
pythongh-128840: Limit the number of parts in IPv6 address parsing (p…
pythongh-128840: Fix parsing long IPv6 addresses with embedded IPv4 a…
protect against unrully IPv4-in-IPv6 addresses
protect against unrully IPv4-in-IPv6 addresses
protect against unrully IPv4-in-IPv6 addresses
protect against unrully IPv4-in-IPv6 addresses