It was discovered that Python did not properly handle XML entity declarations in plist files. An attacker could possibly use this vulnerability to perform an XML External Entity (XXE) injection, resulting in a denial of service or information disclosure.
2.7.6-8ubuntu0.6+esm162.7.12-1ubuntu0~16.04.18+esm63.5.2-2ubuntu0~16.04.13+esm92.7.17-1~18.04ubuntu1.13+esm1