CVE-2019-15796
1 advisory.
PyPI/python-apt CVE-2019-15796: medium 4.7
python-apt Does Not Check Hash Signature
Action: Upgrade python-apt to 0.8.3ubuntu7.5 or later.
pip install python-apt==0.8.3ubuntu7.5pip install python-apt==0.9.3.5ubuntu3pip install python-apt==1.6.5ubuntu0.1pip install python-apt==1.9.0ubuntu1.2pip install python-apt==1.9.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.8.3ubuntu7.5 | - |
| 0.9.0 | 0.9.3.5ubuntu3 | - |
| 1.2.0 | 1.6.5ubuntu0.1 | - |
| 1.7.0 | 1.9.0ubuntu1.2 | - |
| 1.9.1 | 1.9.5 | - |
Fixed versions
| 0.8.3ubuntu7.5 | 0.9.3.5ubuntu3 | 1.6.5ubuntu0.1 | 1.9.0ubuntu1.2 | 1.9.5 |
Sources
- osv: GHSA-pj65-3pf6-c5q4
- https://nvd.nist.gov/vuln/detail/CVE-2019-15796
- https://github.com/excid3/python-apt
- https://usn.ubuntu.com/4247-1
- https://usn.ubuntu.com/4247-3
CVE-2019-15796 · published · modified · JSON