VDB
GCVE-110-MAGEIA-2013-250
GCVE-110-MAGEIA-2013-250
Advisory Published
Updated python packages fix security vulnerability:
Ryan Sleevi of the Google Chrome Security Team has discovered that Python's SSL
module doesn't handle NULL bytes inside subjectAltNames general names. This
could lead to a breach when an application uses ssl.match_hostname() to match
the hostname againt the certificate's subjectAltName's dNSName general names.
(CVE-2013-4238).
Additionally, an issue with installing Python packages with C extensions via
pip and virtualenv has been fixed in Mageia 3 (mga#10102).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | python | 2.7.3-2.4.mga2 (unaffected), 0 (affected) | — |
| Mageia | python | 0 (affected), 2.7.5-1.2.mga3 (unaffected) | — |
Browse GCVE Records
74,267 records in the GCVE database · Updated July 22, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.