[Secure-testing-team] Bug#719568: python3.2: CVE-2013-4238: Python SSL module does not handle certificates that contain hostnames with NULL bytes

[Salvatore Bonaccorso]

Package: python3.2
Version: 3.2.4-1
Severity: grave
Tags: security upstream patch

Hi,

the following vulnerability was published for pythonX.Y

CVE-2013-4238[0]:
Python SSL module does not handle certificates that contain hostnames with NULL bytes

See also upstream bugreport [1] which contains patches (also including tests).

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] http://security-tracker.debian.org/tracker/CVE-2013-4238
[1] http://bugs.python.org/issue18709

Regards,
Salvatore