Integer overflow in _hashopenssl.c in the hashlib module in Python 2.5.2 and earlier might allow context-dependent attackers to defeat cryptographic digests, related to "partial hashlib hashing of data exceeding 4GB."

More... (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-2316)