bpo-36384: [doc] Mention CVE-2021-29921 fix in 3.8.12 (GH-27824) (GH-… · python/cpython@9882025 (original) (raw)

Original file line number Diff line number Diff line change
@@ -2247,3 +2247,16 @@ separator key, with ``&`` as the default. This change also affects
2247 2247 functions internally. For more details, please see their respective
2248 2248 documentation.
2249 2249 (Contributed by Adam Goldschmidt, Senthil Kumaran and Ken Jin in :issue:`42967`.)
2250 +
2251 +Notable changes in Python 3.8.12
2252 +================================
2253 +
2254 +Starting with Python 3.8.12 the :mod:`ipaddress` module no longer accepts
2255 +any leading zeros in IPv4 address strings. Leading zeros are ambiguous and
2256 +interpreted as octal notation by some libraries. For example the legacy
2257 +function :func:`socket.inet_aton` treats leading zeros as octal notation.
2258 +glibc implementation of modern :func:`~socket.inet_pton` does not accept
2259 +any leading zeros.
2260 +
2261 +(Originally contributed by Christian Heimes in :issue:`36384`, and backported
2262 +to 3.8 by Achraf Merzouki.)