Skip to content
fr Sign in
2.0 Low

CVE-2020-27351 Various memory and file descriptor leaks were found in apt-python files python/arfile.cc, python/tag.cc,…

Description

Various memory and file descriptor leaks were found in apt-python files python/arfile.cc, python/tag.cc, python/tarfile.cc, aka GHSL-2020-170. This issue affects: python-apt 1.1.0~beta1 versions prior to 1.1.0~beta1ubuntu0.16.04.10; 1.6.5ubuntu0 versions prior to 1.6.5ubuntu0.4; 2.0.0ubuntu0 versions prior to 2.0.0ubuntu0.20.04.2; 2.1.3ubuntu1 versions prior to 2.1.3ubuntu1.1;

Affected products and versions

Product Affected versions Fixed in
Python-apt 2.1 2.1.3ubuntu1 → < 2.1.3ubuntu1.1 2.1.3ubuntu1.1
Python-apt 2.0 2.0.0ubuntu0 → < 2.0.0ubuntu0.20.04.2 2.0.0ubuntu0.20.04.2
Python-apt 1.6 1.6.5ubuntu0 → < 1.6.5ubuntu0.4 1.6.5ubuntu0.4

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Python-apt

The 4 CVEs of Python-apt →
CVE-2025-6966 NULL pointer dereference in TagSection.keys() in python-apt on APT-based Linux systems allows a local attacker to… 6.9 Medium CVE-2019-15795 python-apt only checks the MD5 sums of downloaded files in `Version.fetch_binary()` and `Version.fetch_source()` of… 4.7 Medium CVE-2019-15796 Python-apt doesn't check if hashes are signed in `Version.fetch_binary()` and `Version.fetch_source()` of apt/package.py… 4.7 Medium
Track this CVE