python26: fix CVE-2013-4238