Skip to content
OpenAdvisories
Low USN-4668-4 1 CVE

python-apt vulnerability

Published Jan 11, 2021 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

USN-4668-1 fixed a vulnerability in python-apt. This update provides
the corresponding update for Ubuntu 14.04 ESM.

Original advisory details:

Kevin Backhouse discovered that python-apt incorrectly handled resources. A
local attacker could possibly use this issue to cause python-apt to consume
resources, leading to a denial of service.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS python-apt 0.9.3.5ubuntu3+esm4

Vulnerabilities 1

  • Low 2.0
    CVE-2020-27351

    Various memory and file descriptor leaks in apt-python

    Various memory and file descriptor leaks were found in apt-python files python/arfile.cc, python/tag.cc, python/tarfile.cc, aka GHSL-2020-170. This issue affects: python-apt 1.1.0~beta1 versions prior to 1.1.0~beta1ubuntu0.16.04.10; 1.6.5ubuntu0 versions prio…

    Canonical Python-apt python-apt python-apt Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2020-27351