[ubuntu/xenial-updates] python-apt 1.1.0~beta1ubuntu0.16.04.10 (Accepted)

[Ubuntu Archive Robot]

python-apt (1.1.0~beta1ubuntu0.16.04.10) xenial-security; urgency=high

  * SECURITY UPDATE: various memory and file descriptor leaks (LP: #1899193)
    - python/arfile.cc, python/generic.h, python/tag.cc, python/tarfile.cc:
      fix file descriptor and memory leaks
    - python/apt_instmodule.cc, python/apt_instmodule.h, python/arfile.h:
      Avoid reference cycle with control,data members in apt_inst.DebFile
      objects
    - tests/test_cve_2020_27351.py: Test cases for DebFile (others not easily
      testable)
    - CVE-2020-27351
  * data/templates: Update mirror lists

Date: 2020-12-02 12:22:19.182952+00:00
Changed-By: Julian Andres Klode <julian.klode at canonical.com>
Signed-By: Ubuntu Archive Robot <cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk>
https://launchpad.net/ubuntu/+source/python-apt/1.1.0~beta1ubuntu0.16.04.10
-------------- next part --------------
Sorry, changesfile not available.