Skip to content
OpenAdvisories
High ELSA-2023-5790 1 CVE

Important: python-reportlab security update (Oracle Linux 8)

Published Oct 19, 2023 · Updated Oct 19, 2023

Ecosystem: Oracle Linux

Summary

[3.4.0-8.1]
- python-reportlab: code injection in paraparser.py allows code execution (CVE-2019-19450)

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 8 python3-reportlab 0:3.4.0-8.el8_8.1

Vulnerabilities 1

  • Critical 9.8
    CVE-2019-19450

    ReportLab vulnerable to remote code execution via paraparser

    paraparser in ReportLab before 3.5.31 allows remote code execution because start_unichar in paraparser.py evaluates untrusted user input in a unichar element in a crafted XML document with '<unichar code="' followed by arbitrary Python code, a similar issue t…

    reportlab python-reportlab python-reportlab Debian Ubuntu PyPI