Activity

1. sethmlarson

   added

   type-bugAn unexpected behavior, bug, or errorAn unexpected behavior, bug, or error

   type-securityA security issueA security issue

   on Jan 14, 2025
2. picnixz

   added

   stdlibStandard Library Python modules in the Lib/ directoryStandard Library Python modules in the Lib/ directory

   on Jan 14, 2025
3. sethmlarson

   added a commit that references this issue on Jan 14, 2025

   pythonGH-128840: Limit the number of parts in IPv6 address parsing

   115bec4
4. serhiy-storchaka commented on Jan 15, 2025

   

   serhiy-storchaka

   on Jan 15, 2025

   Member

   More actions

   I do not think this is a security issue.
5. gpshead

   added a commit that references this issue on May 24, 2025

   gh-128840: Limit the number of parts in IPv6 address parsing (GH-128841)

   47f1161
6. miss-islington

   added 6 commits that reference this issue on May 24, 2025

   pythongh-128840: Limit the number of parts in IPv6 address parsing (p…

   c2885f9

   pythongh-128840: Limit the number of parts in IPv6 address parsing (p…

   67fabcd

   pythongh-128840: Limit the number of parts in IPv6 address parsing (p…

   9984c3a

   pythongh-128840: Limit the number of parts in IPv6 address parsing (p…

   d575c30

   pythongh-128840: Limit the number of parts in IPv6 address parsing (p…

   bb72b92

   pythongh-128840: Limit the number of parts in IPv6 address parsing (p…

   ea823ab
7. gpshead

   added 2 commits that reference this issue on May 24, 2025

   [3.14] gh-128840: Limit the number of parts in IPv6 address parsing (G…

   576177d

   [3.13] gh-128840: Limit the number of parts in IPv6 address parsing (G…

   2e30341
8. Yhg1s

   added a commit that references this issue on May 26, 2025

   [3.12] gh-128840: Limit the number of parts in IPv6 address parsing (G…

   d4cf1fa
9. 29 remaining items
10. mcepl

    added 2 commits that reference this issue on Jun 14, 2025

    update ipaddress to 3.8 equivalent

    ed95e09

    limit parsing long IPv6 address

    7e4d49a
11. mcepl commented on Jun 14, 2025

    

    mcepl

    on Jun 14, 2025

    Contributor

    More actions

    Backport of fix for this bug to Python 3.6 including rebasing ipaddress to the 3.8-level using code from phihag/ipaddress#60 is available for review in the branch https://github.com/openSUSE-Python/cpython/tree/opensuse_3.6_gh-128840_parse-IPv6-with-emb-IPv4

    If anybody is interested in review or comments, I would love to hear from you.
12. mcepl

    added 2 commits that reference this issue on Jul 1, 2025

    protect against unrully IPv4-in-IPv6 addresses

    This issue will close once commit 15325b5 is merged into the 'opensuse_3.6' branch.

    15325b5

    protect against unrully IPv4-in-IPv6 addresses

    This issue will close once commit 025187c is merged into the 'opensuse_3.6' branch.

    025187c
13. Pranjal095

    added 2 commits that reference this issue on Jul 12, 2025

    pythongh-128840: Limit the number of parts in IPv6 address parsing (p…

    b546cd0

    pythongh-128840: Fix parsing long IPv6 addresses with embedded IPv4 a…

    5535276
14. taegyunkim

    added 2 commits that reference this issue on Aug 4, 2025

    pythongh-128840: Limit the number of parts in IPv6 address parsing (p…

    9090334

    pythongh-128840: Fix parsing long IPv6 addresses with embedded IPv4 a…

    a1446d1
15. gostak-dd

    added 2 commits that reference this issue on Jun 2, 2026

    pythongh-128840: Limit the number of parts in IPv6 address parsing (p…

    1899b9e

    pythongh-128840: Fix parsing long IPv6 addresses with embedded IPv4 a…

    136b2e9
16. mcepl

    added 2 commits that reference this issue on Sep 18, 2026

    protect against unrully IPv4-in-IPv6 addresses

    cc67cac

    protect against unrully IPv4-in-IPv6 addresses

    4f9217a
17. mcepl

    added 2 commits that reference this issue on Oct 1, 2026

    protect against unrully IPv4-in-IPv6 addresses

    1eb1381

    protect against unrully IPv4-in-IPv6 addresses

    8ec9e2b