Описание
Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| python-reportlab | fixed | 3.6.13-1 | package | |
| python-reportlab | not-affected | buster | package |
Примечания
https://docs.reportlab.com/releases/notes/whats-new-3613/
https://github.com/c53elyas/CVE-2023-33733
Introduced by: https://hg.reportlab.com/hg-public/reportlab/rev/51a521ad7dd3 (3.5.34)
This was introduced when fixing CVE-2019-17626. The version in Debian Buster
uses a simpler fix in 3.5.13-1+deb10u1 and is not affected.
Fixed by: https://hg.reportlab.com/hg-public/reportlab/rev/1c39d2db15bb (3.6.13)
Связанные уязвимости
Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file.
Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file.
Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file.
