bpo-36384: [doc] Mention CVE-2021-29921 fix in 3.8.12 (GH-27824) · python/cpython@1204dfc (original) (raw)

Original file line number Diff line number Diff line change
@@ -2248,3 +2248,16 @@ separator key, with ``&`` as the default. This change also affects
2248 2248 functions internally. For more details, please see their respective
2249 2249 documentation.
2250 2250 (Contributed by Adam Goldschmidt, Senthil Kumaran and Ken Jin in :issue:`42967`.)
2251 +
2252 +Notable changes in Python 3.8.12
2253 +================================
2254 +
2255 +Starting with Python 3.8.12 the :mod:`ipaddress` module no longer accepts
2256 +any leading zeros in IPv4 address strings. Leading zeros are ambiguous and
2257 +interpreted as octal notation by some libraries. For example the legacy
2258 +function :func:`socket.inet_aton` treats leading zeros as octal notation.
2259 +glibc implementation of modern :func:`~socket.inet_pton` does not accept
2260 +any leading zeros.
2261 +
2262 +(Originally contributed by Christian Heimes in :issue:`36384`, and backported
2263 +to 3.8 by Achraf Merzouki.)