bpo-36384: [doc] Mention CVE-2021-29921 fix in 3.8.12 (GH-27824)

This commit is contained in:
Łukasz Langa 2021-08-19 10:55:49 +02:00 committed by GitHub
parent 942d1a4284
commit 0fd66e46b2
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 18 additions and 0 deletions

View File

@ -132,6 +132,11 @@ write code that handles both IP versions correctly. Address objects are
The above change was also included in Python 3.9 starting with The above change was also included in Python 3.9 starting with
version 3.9.5. version 3.9.5.
.. versionchanged:: 3.8.12
The above change was also included in Python 3.8 starting with
version 3.8.12.
.. attribute:: version .. attribute:: version
The appropriate version number: ``4`` for IPv4, ``6`` for IPv6. The appropriate version number: ``4`` for IPv4, ``6`` for IPv6.

View File

@ -2248,3 +2248,16 @@ separator key, with ``&`` as the default. This change also affects
functions internally. For more details, please see their respective functions internally. For more details, please see their respective
documentation. documentation.
(Contributed by Adam Goldschmidt, Senthil Kumaran and Ken Jin in :issue:`42967`.) (Contributed by Adam Goldschmidt, Senthil Kumaran and Ken Jin in :issue:`42967`.)
Notable changes in Python 3.8.12
================================
Starting with Python 3.8.12 the :mod:`ipaddress` module no longer accepts
any leading zeros in IPv4 address strings. Leading zeros are ambiguous and
interpreted as octal notation by some libraries. For example the legacy
function :func:`socket.inet_aton` treats leading zeros as octal notation.
glibc implementation of modern :func:`~socket.inet_pton` does not accept
any leading zeros.
(Originally contributed by Christian Heimes in :issue:`36384`, and backported
to 3.8 by Achraf Merzouki.)