Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 573
Alerts This Week
Warning Icon 1 573

Ubuntu 20.10: USN-4668-2 Moderate: Python-Apt DoS Regression Fix

ubuntu
Calendar Grey December 10, 2020
Dist Ubuntu Esm H88
Ubuntu 20.10 python-apt upgrade addresses backward compatibility issues following the earlier notice USN-4668-2
USN-4668-1 introduced a regression in python-apt.

Summary

USN-4668-1 introduced a regression in python-apt.

Software Description:

- python-apt: Python interface to libapt-pkg

Details:

USN-4668-1 fixed vulnerabilities in python-apt. That update caused a

regression by removing information describing the Ubuntu 20.10 release from

the Ubuntu templates. This update fixes the problem by restoring this

information.

We apologize for the inconvenience.

Original advisory details:

Kevin Backhouse discovered that python-apt incorrectly handled

resources. A

local attacker could possibly use this issue to cause python-apt to

consume

resources, leading to a denial of service.

Topics%20covered

Topics Covered

security advisory moderate denial of service Ubuntu python-apt

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.10:
  python3-apt                     2.1.3ubuntu1.2

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4668-2

https://ubuntu.com/security/notices/USN-4668-1

https://bugs.launchpad.net/ubuntu/+source/python-apt/+bug/1907496

December 10, 2020

Topics%20covered

Topics Covered

security advisory moderate denial of service Ubuntu python-apt

Package Information

https://launchpad.net/ubuntu/+source/python-apt/2.1.3ubuntu1.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.