Most recent entries from all

ALSA-2023:5790 — Important: python-reportlab security update

Affected: AlmaLinux:8: python3-reportlab

Python-reportlab is a library used for generation of PDF documents.

Security Fix(es):

* python-reportlab: code injection in paraparser.py allows code execution (CVE-2019-19450)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2023-07027

EUVD-2026-59297

fkie_cve-2019-19450

paraparser in ReportLab before 3.5.31 allows remote code execution because start_unichar in paraparser.py evaluates untrusted user input in a unichar element in a crafted XML document with '<unichar code="' followed by arbitrary Python code, a similar issue to CVE-2019-17626.

GHSA-pj98-2xf6-cff5 — ReportLab vulnerable to remote code execution via paraparser

Affected: PyPI: reportlab

gsd-2019-19450

PYSEC-2026-522 — ReportLab vulnerable to remote code execution via paraparser

Affected: PyPI: reportlab

RHSA-2023:5616 — Red Hat Security Advisory: python-reportlab security update

python-reportlab: code injection in paraparser.py allows code execution

RHSA-2023:5786 — Red Hat Security Advisory: python-reportlab security update

python-reportlab: code injection in paraparser.py allows code execution

SUSE-SU-2023:3972-1 — Security update for python-reportlab

Security update for python-reportlab

UBUNTU-CVE-2019-19450

Affected: Ubuntu:16.04:LTS: python-reportlab, Ubuntu:18.04:LTS: python-reportlab

WID-SEC-W-2023-2629 — Red Hat Enterprise Linux (python-reportlab): Schwachstelle ermöglicht Codeausführung

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux in der Komponente "python-reportlab" ausnutzen, um beliebigen Programmcode auszuführen.