python

• Author: kikadf
• Vulnerable: 2.7.5-1
• Unaffected: 2.7.5-2arcturus1

Ryan Sleevi discovered that NULL characters in the subject alternate names of SSL cerficates were parsed incorrectly. Ryan Smith-Roberts discovered a buffer overflow in the socket.recvfrom_into() function.

CVEs:

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4238
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1912