Red Hat Security AdvisoryRHSA-2023:5616
python-reportlab security update
Released 2023-10-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) python-reportlab-2.5-11.el7_9
- Red Hat Enterprise Linux Client Optional (v. 7) python-reportlab-docs-2.5-11.el7_9
- Red Hat Enterprise Linux Server (v. 7) python-reportlab-2.5-11.el7_9
- Red Hat Enterprise Linux Server Optional (v. 7) python-reportlab-docs-2.5-11.el7_9
- Red Hat Enterprise Linux Workstation (v. 7) python-reportlab-2.5-11.el7_9
- Red Hat Enterprise Linux Workstation Optional (v. 7) python-reportlab-docs-2.5-11.el7_9
Fixes 1 record
Priority MEDIUM 51
paraparser in ReportLab before 3.5.31 allows remote code execution because start_unichar in paraparser.py evaluates untrusted user input in a unichar element in a crafted XML document with '<unichar code="' followed by a…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.05978 · Published 2023-09-20 · Partial fix · 3.5.31 CWE-91
