STINNER Victor <vstin...@python.org> added the comment:

> The patch should not have landed in 3.8. At a bare minimum the patch should 
> have been postponed until documentation was updated. Since 3.8 the ipaddresss 
> does not behave as documented. A similar security issue in NPM was published 
> two days ago, CVE-2021-28918.

Link: https://sick.codes/sick-2021-011

----------
nosy: +vstinner

_______________________________________
Python tracker <rep...@bugs.python.org>
<https://bugs.python.org/issue36384>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to