Описание
ELSA-2020-0201: python-reportlab security update (IMPORTANT)
[3.4.0-6.el8_1_0.2]
- Fix Requires for doc subpackage
- Resolves: #1788556
[3.4.0-6.el8_1_0.1]
- Do not eval strings passed to toColor
- Resolves: #1788555
Обновленные пакеты
Oracle Linux 8
Oracle Linux x86_64
python3-reportlab
3.4.0-6.el8_1.2
Связанные CVE
Связанные уязвимости
ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with '<span color="' followed by arbitrary Python code.
ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with '<span color="' followed by arbitrary Python code.
ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with '<span color="' followed by arbitrary Python code.
ReportLab through 3.5.26 allows remote code execution because of toCol ...
