Provide references for CVE-2014-8991.
Where can I find more information about CVE-2014-8991?
References are available at: http://www.openwall.com/lists/oss-security/2014/11/19/17, http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html, https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725847, http://www.securityfocus.com/bid/71209, http://www.openwall.com/lists/oss-security/2014/11/20/6, https://github.com/pypa/pip/pull/2122.