Debian DSA-4306-1 : python2.7 - security update
Medium Nessus Plugin ID 117812
Synopsis
The remote Debian host is missing a security-related update.
Description
Multiple security issues were discovered in Python: ElementTree failed to initialise Expat's hash salt, two denial of service issues were found in difflib and poplib and the shutil module was affected by a command injection vulnerability.
Solution
Upgrade the python2.7 packages.
For the stable distribution (stretch), these problems have been fixed in version 2.7.13-2+deb9u3.