DSA-2880-1 | Mondoo Vulnerability Intelligence

DSA-2880-1

UNKNOWN

python2.7 - security update

Published Mar 17, 2014

Modified 12 years ago

Fix available

Details

Multiple security issues were discovered in Python:

CVE-2013-4238

Ryan Sleevi that NULL charactors in the subject alternate names of
SSL cerficates were parsed incorrectly.

CVE-2014-1912

Ryan Smith-Roberts discovered a buffer overflow in the 
socket.recvfrom_into() function.

Affected Packages

python2.7

Debian 7

Fixed in:

2.7.3-6+deb7u2

References

Upstream

Ecosystems

Timeline

PublishedMar 17, 2014

ModifiedMar 17, 2014