Skip to content
OpenAdvisories
Low USN-4668-1 1 CVE

python-apt vulnerability

Published Dec 9, 2020 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Kevin Backhouse discovered that python-apt incorrectly handled resources. A
local attacker could possibly use this issue to cause python-apt to consume
resources, leading to a denial of service.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS python-apt 1.1.0~beta1ubuntu0.16.04.10
Ubuntu · 18.04 LTS 18.04:LTS python-apt 1.6.5ubuntu0.4
Ubuntu · 20.04 LTS 20.04:LTS python-apt 2.0.0ubuntu0.20.04.2

Vulnerabilities 1

  • Low 2.0
    CVE-2020-27351

    Various memory and file descriptor leaks in apt-python

    Various memory and file descriptor leaks were found in apt-python files python/arfile.cc, python/tag.cc, python/tarfile.cc, aka GHSL-2020-170. This issue affects: python-apt 1.1.0~beta1 versions prior to 1.1.0~beta1ubuntu0.16.04.10; 1.6.5ubuntu0 versions prio…

    Canonical Python-apt python-apt python-apt Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2020-27351