psutil (aka python-psutil) through 5.6.5 can have a double free. This occurs because of refcount mishandling within a while or for loop that converts system data into a Python object.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "3.4.2-1ubuntu0.1", "binary_name": "python-psutil" }, { "binary_version": "3.4.2-1ubuntu0.1", "binary_name": "python-psutil-dbg" }, { "binary_version": "3.4.2-1ubuntu0.1", "binary_name": "python-psutil-doc" }, { "binary_version": "3.4.2-1ubuntu0.1", "binary_name": "python3-psutil" }, { "binary_version": "3.4.2-1ubuntu0.1", "binary_name": "python3-psutil-dbg" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "5.4.2-1ubuntu0.1", "binary_name": "python-psutil" }, { "binary_version": "5.4.2-1ubuntu0.1", "binary_name": "python-psutil-dbg" }, { "binary_version": "5.4.2-1ubuntu0.1", "binary_name": "python-psutil-doc" }, { "binary_version": "5.4.2-1ubuntu0.1", "binary_name": "python3-psutil" }, { "binary_version": "5.4.2-1ubuntu0.1", "binary_name": "python3-psutil-dbg" } ] }