- -----------------------------------------------------------------------
Debian LTS Advisory DLA-2488-1              debian-lts@lists.debian.org
https://www.debian.org/lts/security/                      Utkarsh Gupta
December 10, 2020                           https://wiki.debian.org/LTS
- -----------------------------------------------------------------------

Package        : python-apt
Version        : 1.4.2
CVE ID         : CVE-2020-27351

Various memory and file descriptor leaks were discovered in the Python
interface to the APT package management runtime library, which could
result in denial of service.

For Debian 9 stretch, this problem has been fixed in version
1.4.2.

We recommend that you upgrade your python-apt packages.

For the detailed security status of python-apt please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/python-apt

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

Debian LTS: DLA-2488-1: python-apt security update

December 9, 2020
Various memory and file descriptor leaks were discovered in the Python interface to the APT package management runtime library, which could result in denial of service

Summary

For Debian 9 stretch, this problem has been fixed in version
1.4.2.

We recommend that you upgrade your python-apt packages.

For the detailed security status of python-apt please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/python-apt

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
Package : python-apt
Version : 1.4.2
CVE ID : CVE-2020-27351

Related News