Skip to content
OpenAdvisories
High ELSA-2023-5616 1 CVE

Important: python-reportlab security update (Oracle Linux 7)

Published Oct 11, 2023 · Updated Oct 11, 2023

Ecosystem: Oracle Linux

Summary

[2.5-11]
- Do not evaluate unichar element
- Resolves: RHEL-7011

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 7 python-reportlab 0:2.5-11.el7_9
Oracle Linux · 7 python-reportlab-docs 0:2.5-11.el7_9

Vulnerabilities 1

  • Critical 9.8
    CVE-2019-19450

    ReportLab vulnerable to remote code execution via paraparser

    paraparser in ReportLab before 3.5.31 allows remote code execution because start_unichar in paraparser.py evaluates untrusted user input in a unichar element in a crafted XML document with '<unichar code="' followed by arbitrary Python code, a similar issue t…

    reportlab python-reportlab python-reportlab Debian Ubuntu PyPI