Canonical Python-apt
4 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-6966 | 3.0 – < 3.0.0ubuntu1.1 ; 3.0 – < 3.0.0ubuntu0.25.04.1 ; 2.7 – < 2.7.7ubuntu5.1 ; … | Null-pointer dereference in python-apt TagSection.keys() | MEDIUM 6.9 | 0.1 % | ||
| CVE-2020-27351 | 1.1.0~beta1 – < 1.1.0~beta1ubuntu0.16.04.10 ; 1.6.5ubuntu0 – < 1.6.5ubuntu0.4 ; 2.0.0ubuntu0 – < 2.0.0ubuntu0.20.04.2 ; … | Various memory and file descriptor leaks in apt-python | LOW 2.8 | 0.4 % | ||
| CVE-2019-15796 | 0.8.3 – < 0.8.3ubuntu7.5 ; 0.9.3.5 – < 0.9.3.5ubuntu3+esm2 ; 1.1.0 – < 1.1.0~beta1ubuntu0.16.04.7 ; … | python-apt downloads from untrusted sources | MEDIUM 4.7 | 0.5 % | ||
| CVE-2019-15795 | 0.8.3 – < 0.8.3ubuntu7.5 ; 0.9.3.5 – < 0.9.3.5ubuntu3+esm2 ; 1.1.0 – < 1.1.0~beta1ubuntu0.16.04.7 ; … | python-apt uses MD5 for validation | MEDIUM 4.7 | 0.5 % |