Skip to content

Conversation

miss-islington
Copy link
Contributor

GH-128840: Limit the number of parts in IPv6 address parsing
Limit length of IP address string to 39


(cherry picked from commit 47f1161)

Co-authored-by: Seth Michael Larson [email protected]
Co-authored-by: Hugo van Kemenade [email protected]
Co-authored-by: Serhiy Storchaka [email protected]
Co-authored-by: Gregory P. Smith [email protected]

…ythonGH-128841)

pythonGH-128840: Limit the number of parts in IPv6 address parsing
Limit length of IP address string to 39

---------
(cherry picked from commit 47f1161)

Co-authored-by: Seth Michael Larson <[email protected]>
Co-authored-by: Hugo van Kemenade <[email protected]>
Co-authored-by: Serhiy Storchaka <[email protected]>
Co-authored-by: Gregory P. Smith <[email protected]>
@gpshead
Copy link
Member

gpshead commented May 28, 2025

This needs a backport of #134836 applied on top of it before merging.

@ambv ambv removed the DO-NOT-MERGE label Jun 3, 2025
@ambv
Copy link
Contributor

ambv commented Jun 3, 2025

It will be quicker to land this and then apply the fix as a separate PR, like in 3.12 - 3.15.

@ambv ambv merged commit c0e2658 into python:3.10 Jun 3, 2025
15 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
type-security A security issue
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants