USN-4668-3
python-apt regression
USN-4668-1 fixed vulnerabilities in python-apt. The update caused a regression when using certain APIs with a file handle. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
Kevin Backhouse discovered that python-apt incorrectly handled resources. A local attacker could possibly use this issue to cause python-apt to consume resources, leading to a denial of service.
What each source reports
OSV No score
python-apt regression
USN-4668-1 fixed vulnerabilities in python-apt. The update caused a regression when using certain APIs with a file handle. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
Kevin Backhouse discovered that python-apt incorrectly handled resources. A local attacker could possibly use this issue to cause python-apt to consume resources, leading to a denial of service.
- Record
USN-4668-3- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
python-aptUbuntu:16.04:LTS |
before 1.1.0~beta1ubuntu0.16.04.11, plus listed versions 1.0.1build11.0.1ubuntu21.1.0~beta11.1.0~beta1build11.1.0~beta1ubuntu0.16.04.1 Show 7 moreShow less1.1.0~beta1ubuntu0.16.04.21.1.0~beta1ubuntu0.16.04.41.1.0~beta1ubuntu0.16.04.51.1.0~beta1ubuntu0.16.04.71.1.0~beta1ubuntu0.16.04.81.1.0~beta1ubuntu0.16.04.91.1.0~beta1ubuntu0.16.04.10 |
1.1.0~beta1ubuntu0.16.04.11 |
python-aptUbuntu:18.04:LTS |
before 1.6.5ubuntu0.5, plus listed versions 1.4.0~beta3build21.4.0~beta3ubuntu11.6.0~rc2ubuntu11.6.0~rc2ubuntu21.6.0 Show 9 moreShow less1.6.11.6.21.6.31.6.3ubuntu11.6.41.6.5ubuntu0.11.6.5ubuntu0.21.6.5ubuntu0.31.6.5ubuntu0.4 |
1.6.5ubuntu0.5 |
python-aptUbuntu:20.04:LTS |
before 2.0.0ubuntu0.20.04.3, plus listed versions 1.9.0ubuntu11.9.0ubuntu31.9.0ubuntu51.9.3ubuntu21.9.5 Show 7 moreShow less1.9.5build11.9.71.9.81.9.102.0.02.0.0ubuntu0.20.04.12.0.0ubuntu0.20.04.2 |
2.0.0ubuntu0.20.04.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-4668-3 is a vulnerability with no CVSS score yet in python-apt, published January 4, 2021. No source lists public exploit code. Fixed in python-apt 1.1.0~beta1ubuntu0.16.04.11.