Skip to content
OpenAdvisories
High ALSA-2023:5790 1 CVE

Important: python-reportlab security update

Published Oct 17, 2023 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

Python-reportlab is a library used for generation of PDF documents.

Security Fix(es):

* python-reportlab: code injection in paraparser.py allows code execution (CVE-2019-19450)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
AlmaLinux · 8 python3-reportlab 3.4.0-8.el8_8.1.alma.1

Vulnerabilities 1

  • Critical 9.8
    CVE-2019-19450

    ReportLab vulnerable to remote code execution via paraparser

    paraparser in ReportLab before 3.5.31 allows remote code execution because start_unichar in paraparser.py evaluates untrusted user input in a unichar element in a crafted XML document with '<unichar code="' followed by arbitrary Python code, a similar issue t…

    reportlab python-reportlab python-reportlab Debian Ubuntu PyPI

References

  • report
    https://access.redhat.com/security/cve/CVE-2019-19450
  • report
    https://bugzilla.redhat.com/2239920
  • advisory
    https://errata.almalinux.org/8/ALSA-2023-5790.html