Medium DSA-4307-1 4 CVEs

python3.5 - security update

Published Sep 28, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 9	python3.5	3.5.3-1+deb9u1

Vulnerabilities 4

Medium 6.5

CVE-2018-1061

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the di…

[UNKNOWN] python python3.4 python3.5 Debian Ubuntu Azure Linux Alpine

Jun 19, 2018
Medium 5.3

CVE-2018-14647 EPSS 11%

Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it eas…

The Python Project Python python3.4 python3.5 Debian Ubuntu Alpine

Sep 25, 2018
Medium 4.3

CVE-2018-1060

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3li…

[UNKNOWN] python python3.4 python3.5 Debian Ubuntu Alpine

Jun 18, 2018
Unscored —

CVE-2017-1000158

CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringo…

python3.4 python3.5 python2.7 python-py Debian Ubuntu Azure Linux Alpine

Nov 17, 2017