CVE Request -- Python SSL module does not handle certificates that contain hostnames with NULL bytes

[Murray McAllister <mmcallis () redhat com>]

Good morning,

An issue similar to CVE-2013-4073[1] was found in Python:

https://bugs.mageia.org/show_bug.cgi?id=10989
http://bugs.python.org/issue18709

Could a CVE for the Python instance of this flaw please be assigned (if 
one has not already been assigned)?

Thanks.

[1] 
<http://www.ruby-lang.org/en/news/2013/06/27/hostname-check-bypassing-vulnerability-in-openssl-client-cve-2013-4073/>

<https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4073>

--
Murray McAllister / Red Hat Security Response Team