Control: reopen -1 Control: found -1 2.7.15-6 Hi On Fri, Feb 01, 2019 at 08:51:07AM +0000, Debian Bug Tracking System wrote: > - CVE-2018-14647: _elementtree.c doesn't call XML_SetHashSalt(). > Closes: #921039.
The change https://github.com/python/cpython/commit/18b20bad75b4ff0486940fba4ec680e96e70f3a2 though does not seem to be applied looking at the debdiff from 2.7.15-5 to 2.7.15-6. Can you please recheck, and if I'm wrong please hilight me what am I missing? Regards, Salvatore
