Commits on Jul 8, 2024

1. CVE-2024-4032 Fix "private" (non-global) IP address ranges (pythonGH-… …

   …113179) (pythonGH-113186) (pythonGH-118177)
   
   * Fix "private" (non-global) IP address ranges (pythonGH-113179) (pythonGH-113186)
   (pythonGH-118177)
   
   (cherry picked from commit f86b17a)
   
   Co-authored-by: Jakub Stasiak <jakub@stasiak.at>
   (cherry picked from commit 05a1467)
   
   pythongh-113171: pythongh-65056: Fix "private" (non-global) IP address ranges
   (pythonGH-113179) (pythonGH-113186) (pythonGH-118177)
   
   * pythonGH-113171: Fix "private" (non-global) IP address ranges (pythonGH-113179)
   
   The _private_networks variables, used by various is_private
   implementations, were missing some ranges and at the same time had
   overly strict ranges (where there are more specific ranges considered
   globally reachable by the IANA registries).
   
   This patch updates the ranges with what was missing or otherwise
   incorrect.
   
   100.64.0.0/10 is left alone, for now, as it's been made special in [1].
   
   The _address_exclude_many() call returns 8 networks for IPv4, 121
   networks for IPv6.
   
   [1] python#61602
   
   * pythonGH-65056: Improve the IP address' is_global/is_private documentation (pythonGH-113186)
   
   It wasn't clear what the semantics of is_global/is_private are and, when
   one gets to the bottom of it, it's not quite so simple (hence the
   exceptions listed).
   
   (cherry picked from commit 2a4cbf1)
   (cherry picked from commit 40d75c2)
   
   ---------
   
   (cherry picked from commit f86b17a)
   
   Co-authored-by: Jakub Stasiak <jakub@stasiak.at>
   (cherry picked from commit 05a1467)
   
   Add IPv6 addresses to suspignore.csv
   
   That's a lot of semicolons!
   
   (cherry picked from commit e366724)

   

   encukou authored and rickprice committed Jul 8, 2024
   Configuration menu

   • View commit details
   • Copy full SHA for 89f48de
   • Browse repository at this point

   Copy the full SHA

   89f48de View commit details

   Browse the repository at this point in the history