https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T10:01:20.716855+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2020-27350 CVE-2020-27350 — apt integer wraparound 2026-09-30T10:01:21.331429+00:00

Affected: Canonical apt

APT had several integer overflows and underflows while parsing .deb packages, aka GHSL-2020-168 GHSL-2020-169, in files apt-pkg/contrib/extracttar.cc, apt-pkg/deb/debfile.cc, and apt-pkg/contrib/arfile.cc. This issue affects: apt 1.2.32ubuntu0 versions prior to 1.2.32ubuntu0.2; 1.6.12ubuntu0 versions prior to 1.6.12ubuntu0.2; 2.0.2ubuntu0 versions prior to 2.0.2ubuntu0.2; 2.1.10ubuntu0 versions prior to 2.1.10ubuntu0.1;

 https://vulnerability.circl.lu/vuln/usn-4667-1 USN-4667-1 — apt vulnerability 2026-09-30T10:01:21.331545+00:00

Affected: Ubuntu:16.04:LTS: apt, Ubuntu:18.04:LTS: apt, Ubuntu:20.04:LTS: apt

Kevin Backhouse discovered that APT incorrectly handled certain packages. A local attacker could possibly use this issue to cause APT to crash or stop responding, resulting in a denial of service.