Medium DSA-4306-1 4 CVEs

python2.7 - security update

Published Sep 27, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 9	python2.7	2.7.13-2+deb9u3

Vulnerabilities 4

Medium 6.5

CVE-2018-1061

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the di…

[UNKNOWN] python python3.4 python3.5 Debian Ubuntu Azure Linux Alpine

Jun 19, 2018
Medium 5.3

CVE-2018-14647 EPSS 11%

Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it eas…

The Python Project Python python3.4 python3.5 Debian Ubuntu Alpine

Sep 25, 2018
Medium 4.3

CVE-2018-1060

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3li…

[UNKNOWN] python python3.4 python3.5 Debian Ubuntu Alpine

Jun 18, 2018
Unscored —

CVE-2018-1000802 Public exploit EPSS 20%

Python Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper Neutralization of Special Elements …

python3.4 python2.7 python2.7 Debian Ubuntu

Sep 18, 2018