Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2019-17626 (GCVE-0-2019-17626)
Vulnerability from cvelistv5
Published
2019-10-16 11:29
Modified
2024-08-05 01:47
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- n/a
Summary
ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with '<span color="' followed by arbitrary Python code.
References
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:reportlab:reportlab:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "reportlab",
"vendor": "reportlab",
"versions": [
{
"lessThanOrEqual": "3.5.26",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2019-17626",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-07-19T16:35:28.197886Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-91",
"description": "CWE-91 XML Injection (aka Blind XPath Injection)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-07-22T20:10:56.549Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-05T01:47:13.237Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://bitbucket.org/rptlab/reportlab/issues/199/eval-in-colorspy-leads-to-remote-code"
},
{
"tags": [
"x_transferred"
],
"url": "https://bitbucket.org/rptlab/reportlab/src/default/CHANGES.md"
},
{
"name": "RHSA-2020:0197",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2020:0197"
},
{
"name": "RHSA-2020:0195",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2020:0195"
},
{
"name": "FEDORA-2020-d2fb999600",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZPHP2BJSTP4IYCSJRQINP763IHO6ASL/"
},
{
"name": "RHSA-2020:0230",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2020:0230"
},
{
"name": "RHSA-2020:0201",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2020:0201"
},
{
"name": "FEDORA-2020-f3e0ba2f79",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NSCTOE3DITFICY2XKBYZ5WAF5TSQ52DM/"
},
{
"name": "openSUSE-SU-2020:0160",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00002.html"
},
{
"name": "USN-4273-1",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://usn.ubuntu.com/4273-1/"
},
{
"name": "[debian-lts-announce] 20200220 [SECURITY] [DLA 2112-1] python-reportlab security update",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2020/02/msg00019.html"
},
{
"name": "DSA-4663",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://www.debian.org/security/2020/dsa-4663"
},
{
"name": "GLSA-202007-35",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/202007-35"
},
{
"tags": [
"x_transferred"
],
"url": "https://security.netapp.com/advisory/ntap-20240719-0006/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with \u0027\u003cspan color=\"\u0027 followed by arbitrary Python code."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-07-19T13:06:21.050582",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://bitbucket.org/rptlab/reportlab/issues/199/eval-in-colorspy-leads-to-remote-code"
},
{
"url": "https://bitbucket.org/rptlab/reportlab/src/default/CHANGES.md"
},
{
"name": "RHSA-2020:0197",
"tags": [
"vendor-advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2020:0197"
},
{
"name": "RHSA-2020:0195",
"tags": [
"vendor-advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2020:0195"
},
{
"name": "FEDORA-2020-d2fb999600",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZPHP2BJSTP4IYCSJRQINP763IHO6ASL/"
},
{
"name": "RHSA-2020:0230",
"tags": [
"vendor-advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2020:0230"
},
{
"name": "RHSA-2020:0201",
"tags": [
"vendor-advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2020:0201"
},
{
"name": "FEDORA-2020-f3e0ba2f79",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NSCTOE3DITFICY2XKBYZ5WAF5TSQ52DM/"
},
{
"name": "openSUSE-SU-2020:0160",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00002.html"
},
{
"name": "USN-4273-1",
"tags": [
"vendor-advisory"
],
"url": "https://usn.ubuntu.com/4273-1/"
},
{
"name": "[debian-lts-announce] 20200220 [SECURITY] [DLA 2112-1] python-reportlab security update",
"tags": [
"mailing-list"
],
"url": "https://lists.debian.org/debian-lts-announce/2020/02/msg00019.html"
},
{
"name": "DSA-4663",
"tags": [
"vendor-advisory"
],
"url": "https://www.debian.org/security/2020/dsa-4663"
},
{
"name": "GLSA-202007-35",
"tags": [
"vendor-advisory"
],
"url": "https://security.gentoo.org/glsa/202007-35"
},
{
"url": "https://security.netapp.com/advisory/ntap-20240719-0006/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2019-17626",
"datePublished": "2019-10-16T11:29:38",
"dateReserved": "2019-10-16T00:00:00",
"dateUpdated": "2024-08-05T01:47:13.237Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2019-17626\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2019-10-16T12:15:12.010\",\"lastModified\":\"2024-11-21T04:32:39.353\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with \u0027\u003cspan color=\\\"\u0027 followed by arbitrary Python code.\"},{\"lang\":\"es\",\"value\":\"ReportLab versiones hasta 3.5.26, permite la ejecuci\u00f3n de c\u00f3digo remota debido a la funci\u00f3n toColor(eval(arg)) en el archivo colors.py, como es demostrado por un documento XML dise\u00f1ado con \u0027(span color =\\\"\u0027 seguido de un c\u00f3digo arbitrario de Python.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:P/A:P\",\"baseScore\":7.5,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-91\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-91\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:reportlab:reportlab:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"3.5.26\",\"matchCriteriaId\":\"55A25088-FC46-426E-B3CF-E57459E5DE5F\"}]}]}],\"references\":[{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00002.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2020:0195\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2020:0197\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2020:0201\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2020:0230\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://bitbucket.org/rptlab/reportlab/issues/199/eval-in-colorspy-leads-to-remote-code\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://bitbucket.org/rptlab/reportlab/src/default/CHANGES.md\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2020/02/msg00019.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NSCTOE3DITFICY2XKBYZ5WAF5TSQ52DM/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZPHP2BJSTP4IYCSJRQINP763IHO6ASL/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://security.gentoo.org/glsa/202007-35\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://security.netapp.com/advisory/ntap-20240719-0006/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://usn.ubuntu.com/4273-1/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://www.debian.org/security/2020/dsa-4663\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00002.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2020:0195\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2020:0197\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2020:0201\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2020:0230\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://bitbucket.org/rptlab/reportlab/issues/199/eval-in-colorspy-leads-to-remote-code\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://bitbucket.org/rptlab/reportlab/src/default/CHANGES.md\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2020/02/msg00019.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NSCTOE3DITFICY2XKBYZ5WAF5TSQ52DM/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZPHP2BJSTP4IYCSJRQINP763IHO6ASL/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.gentoo.org/glsa/202007-35\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.netapp.com/advisory/ntap-20240719-0006/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://usn.ubuntu.com/4273-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.debian.org/security/2020/dsa-4663\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://bitbucket.org/rptlab/reportlab/issues/199/eval-in-colorspy-leads-to-remote-code\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://bitbucket.org/rptlab/reportlab/src/default/CHANGES.md\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2020:0197\", \"name\": \"RHSA-2020:0197\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2020:0195\", \"name\": \"RHSA-2020:0195\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZPHP2BJSTP4IYCSJRQINP763IHO6ASL/\", \"name\": \"FEDORA-2020-d2fb999600\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2020:0230\", \"name\": \"RHSA-2020:0230\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2020:0201\", \"name\": \"RHSA-2020:0201\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NSCTOE3DITFICY2XKBYZ5WAF5TSQ52DM/\", \"name\": \"FEDORA-2020-f3e0ba2f79\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00002.html\", \"name\": \"openSUSE-SU-2020:0160\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://usn.ubuntu.com/4273-1/\", \"name\": \"USN-4273-1\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2020/02/msg00019.html\", \"name\": \"[debian-lts-announce] 20200220 [SECURITY] [DLA 2112-1] python-reportlab security update\", \"tags\": [\"mailing-list\", \"x_transferred\"]}, {\"url\": \"https://www.debian.org/security/2020/dsa-4663\", \"name\": \"DSA-4663\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://security.gentoo.org/glsa/202007-35\", \"name\": \"GLSA-202007-35\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20240719-0006/\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-05T01:47:13.237Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 9.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2019-17626\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-07-19T16:35:28.197886Z\"}}}], \"affected\": [{\"cpes\": [\"cpe:2.3:a:reportlab:reportlab:*:*:*:*:*:*:*:*\"], \"vendor\": \"reportlab\", \"product\": \"reportlab\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"3.5.26\"}], \"defaultStatus\": \"unknown\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-91\", \"description\": \"CWE-91 XML Injection (aka Blind XPath Injection)\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-07-19T16:37:04.969Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"n/a\", \"product\": \"n/a\", \"versions\": [{\"status\": \"affected\", \"version\": \"n/a\"}]}], \"references\": [{\"url\": \"https://bitbucket.org/rptlab/reportlab/issues/199/eval-in-colorspy-leads-to-remote-code\"}, {\"url\": \"https://bitbucket.org/rptlab/reportlab/src/default/CHANGES.md\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2020:0197\", \"name\": \"RHSA-2020:0197\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2020:0195\", \"name\": \"RHSA-2020:0195\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZPHP2BJSTP4IYCSJRQINP763IHO6ASL/\", \"name\": \"FEDORA-2020-d2fb999600\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2020:0230\", \"name\": \"RHSA-2020:0230\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2020:0201\", \"name\": \"RHSA-2020:0201\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NSCTOE3DITFICY2XKBYZ5WAF5TSQ52DM/\", \"name\": \"FEDORA-2020-f3e0ba2f79\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00002.html\", \"name\": \"openSUSE-SU-2020:0160\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://usn.ubuntu.com/4273-1/\", \"name\": \"USN-4273-1\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2020/02/msg00019.html\", \"name\": \"[debian-lts-announce] 20200220 [SECURITY] [DLA 2112-1] python-reportlab security update\", \"tags\": [\"mailing-list\"]}, {\"url\": \"https://www.debian.org/security/2020/dsa-4663\", \"name\": \"DSA-4663\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://security.gentoo.org/glsa/202007-35\", \"name\": \"GLSA-202007-35\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20240719-0006/\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with \u0027\u003cspan color=\\\"\u0027 followed by arbitrary Python code.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"text\", \"description\": \"n/a\"}]}], \"providerMetadata\": {\"orgId\": \"8254265b-2729-46b6-b9e3-3dfca2d5bfca\", \"shortName\": \"mitre\", \"dateUpdated\": \"2024-07-19T13:06:21.050582\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2019-17626\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2024-08-05T01:47:13.237Z\", \"dateReserved\": \"2019-10-16T00:00:00\", \"assignerOrgId\": \"8254265b-2729-46b6-b9e3-3dfca2d5bfca\", \"datePublished\": \"2019-10-16T11:29:38\", \"assignerShortName\": \"mitre\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
opensuse-su-2024:11265-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
python36-reportlab-3.5.59-2.6 on GA media
Notes
Title of the patch
python36-reportlab-3.5.59-2.6 on GA media
Description of the patch
These are all security issues fixed in the python36-reportlab-3.5.59-2.6 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-11265
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "python36-reportlab-3.5.59-2.6 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the python36-reportlab-3.5.59-2.6 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-11265",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_11265-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-17626 page",
"url": "https://www.suse.com/security/cve/CVE-2019-17626/"
}
],
"title": "python36-reportlab-3.5.59-2.6 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:11265-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "python36-reportlab-3.5.59-2.6.aarch64",
"product": {
"name": "python36-reportlab-3.5.59-2.6.aarch64",
"product_id": "python36-reportlab-3.5.59-2.6.aarch64"
}
},
{
"category": "product_version",
"name": "python38-reportlab-3.5.59-2.6.aarch64",
"product": {
"name": "python38-reportlab-3.5.59-2.6.aarch64",
"product_id": "python38-reportlab-3.5.59-2.6.aarch64"
}
},
{
"category": "product_version",
"name": "python39-reportlab-3.5.59-2.6.aarch64",
"product": {
"name": "python39-reportlab-3.5.59-2.6.aarch64",
"product_id": "python39-reportlab-3.5.59-2.6.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "python36-reportlab-3.5.59-2.6.ppc64le",
"product": {
"name": "python36-reportlab-3.5.59-2.6.ppc64le",
"product_id": "python36-reportlab-3.5.59-2.6.ppc64le"
}
},
{
"category": "product_version",
"name": "python38-reportlab-3.5.59-2.6.ppc64le",
"product": {
"name": "python38-reportlab-3.5.59-2.6.ppc64le",
"product_id": "python38-reportlab-3.5.59-2.6.ppc64le"
}
},
{
"category": "product_version",
"name": "python39-reportlab-3.5.59-2.6.ppc64le",
"product": {
"name": "python39-reportlab-3.5.59-2.6.ppc64le",
"product_id": "python39-reportlab-3.5.59-2.6.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "python36-reportlab-3.5.59-2.6.s390x",
"product": {
"name": "python36-reportlab-3.5.59-2.6.s390x",
"product_id": "python36-reportlab-3.5.59-2.6.s390x"
}
},
{
"category": "product_version",
"name": "python38-reportlab-3.5.59-2.6.s390x",
"product": {
"name": "python38-reportlab-3.5.59-2.6.s390x",
"product_id": "python38-reportlab-3.5.59-2.6.s390x"
}
},
{
"category": "product_version",
"name": "python39-reportlab-3.5.59-2.6.s390x",
"product": {
"name": "python39-reportlab-3.5.59-2.6.s390x",
"product_id": "python39-reportlab-3.5.59-2.6.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "python36-reportlab-3.5.59-2.6.x86_64",
"product": {
"name": "python36-reportlab-3.5.59-2.6.x86_64",
"product_id": "python36-reportlab-3.5.59-2.6.x86_64"
}
},
{
"category": "product_version",
"name": "python38-reportlab-3.5.59-2.6.x86_64",
"product": {
"name": "python38-reportlab-3.5.59-2.6.x86_64",
"product_id": "python38-reportlab-3.5.59-2.6.x86_64"
}
},
{
"category": "product_version",
"name": "python39-reportlab-3.5.59-2.6.x86_64",
"product": {
"name": "python39-reportlab-3.5.59-2.6.x86_64",
"product_id": "python39-reportlab-3.5.59-2.6.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "python36-reportlab-3.5.59-2.6.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python36-reportlab-3.5.59-2.6.aarch64"
},
"product_reference": "python36-reportlab-3.5.59-2.6.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python36-reportlab-3.5.59-2.6.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python36-reportlab-3.5.59-2.6.ppc64le"
},
"product_reference": "python36-reportlab-3.5.59-2.6.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python36-reportlab-3.5.59-2.6.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python36-reportlab-3.5.59-2.6.s390x"
},
"product_reference": "python36-reportlab-3.5.59-2.6.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python36-reportlab-3.5.59-2.6.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python36-reportlab-3.5.59-2.6.x86_64"
},
"product_reference": "python36-reportlab-3.5.59-2.6.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python38-reportlab-3.5.59-2.6.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python38-reportlab-3.5.59-2.6.aarch64"
},
"product_reference": "python38-reportlab-3.5.59-2.6.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python38-reportlab-3.5.59-2.6.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python38-reportlab-3.5.59-2.6.ppc64le"
},
"product_reference": "python38-reportlab-3.5.59-2.6.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python38-reportlab-3.5.59-2.6.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python38-reportlab-3.5.59-2.6.s390x"
},
"product_reference": "python38-reportlab-3.5.59-2.6.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python38-reportlab-3.5.59-2.6.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python38-reportlab-3.5.59-2.6.x86_64"
},
"product_reference": "python38-reportlab-3.5.59-2.6.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python39-reportlab-3.5.59-2.6.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python39-reportlab-3.5.59-2.6.aarch64"
},
"product_reference": "python39-reportlab-3.5.59-2.6.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python39-reportlab-3.5.59-2.6.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python39-reportlab-3.5.59-2.6.ppc64le"
},
"product_reference": "python39-reportlab-3.5.59-2.6.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python39-reportlab-3.5.59-2.6.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python39-reportlab-3.5.59-2.6.s390x"
},
"product_reference": "python39-reportlab-3.5.59-2.6.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python39-reportlab-3.5.59-2.6.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python39-reportlab-3.5.59-2.6.x86_64"
},
"product_reference": "python39-reportlab-3.5.59-2.6.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-17626",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-17626"
}
],
"notes": [
{
"category": "general",
"text": "ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with \u0027\u003cspan color=\"\u0027 followed by arbitrary Python code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python36-reportlab-3.5.59-2.6.aarch64",
"openSUSE Tumbleweed:python36-reportlab-3.5.59-2.6.ppc64le",
"openSUSE Tumbleweed:python36-reportlab-3.5.59-2.6.s390x",
"openSUSE Tumbleweed:python36-reportlab-3.5.59-2.6.x86_64",
"openSUSE Tumbleweed:python38-reportlab-3.5.59-2.6.aarch64",
"openSUSE Tumbleweed:python38-reportlab-3.5.59-2.6.ppc64le",
"openSUSE Tumbleweed:python38-reportlab-3.5.59-2.6.s390x",
"openSUSE Tumbleweed:python38-reportlab-3.5.59-2.6.x86_64",
"openSUSE Tumbleweed:python39-reportlab-3.5.59-2.6.aarch64",
"openSUSE Tumbleweed:python39-reportlab-3.5.59-2.6.ppc64le",
"openSUSE Tumbleweed:python39-reportlab-3.5.59-2.6.s390x",
"openSUSE Tumbleweed:python39-reportlab-3.5.59-2.6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-17626",
"url": "https://www.suse.com/security/cve/CVE-2019-17626"
},
{
"category": "external",
"summary": "SUSE Bug 1154370 for CVE-2019-17626",
"url": "https://bugzilla.suse.com/1154370"
},
{
"category": "external",
"summary": "SUSE Bug 1215560 for CVE-2019-17626",
"url": "https://bugzilla.suse.com/1215560"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python36-reportlab-3.5.59-2.6.aarch64",
"openSUSE Tumbleweed:python36-reportlab-3.5.59-2.6.ppc64le",
"openSUSE Tumbleweed:python36-reportlab-3.5.59-2.6.s390x",
"openSUSE Tumbleweed:python36-reportlab-3.5.59-2.6.x86_64",
"openSUSE Tumbleweed:python38-reportlab-3.5.59-2.6.aarch64",
"openSUSE Tumbleweed:python38-reportlab-3.5.59-2.6.ppc64le",
"openSUSE Tumbleweed:python38-reportlab-3.5.59-2.6.s390x",
"openSUSE Tumbleweed:python38-reportlab-3.5.59-2.6.x86_64",
"openSUSE Tumbleweed:python39-reportlab-3.5.59-2.6.aarch64",
"openSUSE Tumbleweed:python39-reportlab-3.5.59-2.6.ppc64le",
"openSUSE Tumbleweed:python39-reportlab-3.5.59-2.6.s390x",
"openSUSE Tumbleweed:python39-reportlab-3.5.59-2.6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python36-reportlab-3.5.59-2.6.aarch64",
"openSUSE Tumbleweed:python36-reportlab-3.5.59-2.6.ppc64le",
"openSUSE Tumbleweed:python36-reportlab-3.5.59-2.6.s390x",
"openSUSE Tumbleweed:python36-reportlab-3.5.59-2.6.x86_64",
"openSUSE Tumbleweed:python38-reportlab-3.5.59-2.6.aarch64",
"openSUSE Tumbleweed:python38-reportlab-3.5.59-2.6.ppc64le",
"openSUSE Tumbleweed:python38-reportlab-3.5.59-2.6.s390x",
"openSUSE Tumbleweed:python38-reportlab-3.5.59-2.6.x86_64",
"openSUSE Tumbleweed:python39-reportlab-3.5.59-2.6.aarch64",
"openSUSE Tumbleweed:python39-reportlab-3.5.59-2.6.ppc64le",
"openSUSE Tumbleweed:python39-reportlab-3.5.59-2.6.s390x",
"openSUSE Tumbleweed:python39-reportlab-3.5.59-2.6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-17626"
}
]
}
opensuse-su-2020:0160-1
Vulnerability from csaf_opensuse
Published
2020-02-04 09:13
Modified
2020-02-04 09:13
Summary
Security update for python-reportlab
Notes
Title of the patch
Security update for python-reportlab
Description of the patch
This update for python-reportlab fixes the following issues:
- CVE-2019-17626: Fixed a potential remote code execution because of the lack of input sanitization in toColor() (bsc#1154370).
This update was imported from the SUSE:SLE-15:Update update project.
Patchnames
openSUSE-2020-160
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for python-reportlab",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for python-reportlab fixes the following issues:\n\n- CVE-2019-17626: Fixed a potential remote code execution because of the lack of input sanitization in toColor() (bsc#1154370).\n\nThis update was imported from the SUSE:SLE-15:Update update project.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2020-160",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2020_0160-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2020:0160-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/P6DNCEK2CMM7NMTN5U5RG4TX5UEQWO23/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2020:0160-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/P6DNCEK2CMM7NMTN5U5RG4TX5UEQWO23/"
},
{
"category": "self",
"summary": "SUSE Bug 1154370",
"url": "https://bugzilla.suse.com/1154370"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-17626 page",
"url": "https://www.suse.com/security/cve/CVE-2019-17626/"
}
],
"title": "Security update for python-reportlab",
"tracking": {
"current_release_date": "2020-02-04T09:13:30Z",
"generator": {
"date": "2020-02-04T09:13:30Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2020:0160-1",
"initial_release_date": "2020-02-04T09:13:30Z",
"revision_history": [
{
"date": "2020-02-04T09:13:30Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "python2-reportlab-3.4.0-lp151.3.3.1.i586",
"product": {
"name": "python2-reportlab-3.4.0-lp151.3.3.1.i586",
"product_id": "python2-reportlab-3.4.0-lp151.3.3.1.i586"
}
},
{
"category": "product_version",
"name": "python3-reportlab-3.4.0-lp151.3.3.1.i586",
"product": {
"name": "python3-reportlab-3.4.0-lp151.3.3.1.i586",
"product_id": "python3-reportlab-3.4.0-lp151.3.3.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "python2-reportlab-3.4.0-lp151.3.3.1.x86_64",
"product": {
"name": "python2-reportlab-3.4.0-lp151.3.3.1.x86_64",
"product_id": "python2-reportlab-3.4.0-lp151.3.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "python3-reportlab-3.4.0-lp151.3.3.1.x86_64",
"product": {
"name": "python3-reportlab-3.4.0-lp151.3.3.1.x86_64",
"product_id": "python3-reportlab-3.4.0-lp151.3.3.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.1",
"product": {
"name": "openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-reportlab-3.4.0-lp151.3.3.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:python2-reportlab-3.4.0-lp151.3.3.1.i586"
},
"product_reference": "python2-reportlab-3.4.0-lp151.3.3.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-reportlab-3.4.0-lp151.3.3.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:python2-reportlab-3.4.0-lp151.3.3.1.x86_64"
},
"product_reference": "python2-reportlab-3.4.0-lp151.3.3.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-reportlab-3.4.0-lp151.3.3.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:python3-reportlab-3.4.0-lp151.3.3.1.i586"
},
"product_reference": "python3-reportlab-3.4.0-lp151.3.3.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-reportlab-3.4.0-lp151.3.3.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:python3-reportlab-3.4.0-lp151.3.3.1.x86_64"
},
"product_reference": "python3-reportlab-3.4.0-lp151.3.3.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-17626",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-17626"
}
],
"notes": [
{
"category": "general",
"text": "ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with \u0027\u003cspan color=\"\u0027 followed by arbitrary Python code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:python2-reportlab-3.4.0-lp151.3.3.1.i586",
"openSUSE Leap 15.1:python2-reportlab-3.4.0-lp151.3.3.1.x86_64",
"openSUSE Leap 15.1:python3-reportlab-3.4.0-lp151.3.3.1.i586",
"openSUSE Leap 15.1:python3-reportlab-3.4.0-lp151.3.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-17626",
"url": "https://www.suse.com/security/cve/CVE-2019-17626"
},
{
"category": "external",
"summary": "SUSE Bug 1154370 for CVE-2019-17626",
"url": "https://bugzilla.suse.com/1154370"
},
{
"category": "external",
"summary": "SUSE Bug 1215560 for CVE-2019-17626",
"url": "https://bugzilla.suse.com/1215560"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:python2-reportlab-3.4.0-lp151.3.3.1.i586",
"openSUSE Leap 15.1:python2-reportlab-3.4.0-lp151.3.3.1.x86_64",
"openSUSE Leap 15.1:python3-reportlab-3.4.0-lp151.3.3.1.i586",
"openSUSE Leap 15.1:python3-reportlab-3.4.0-lp151.3.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:python2-reportlab-3.4.0-lp151.3.3.1.i586",
"openSUSE Leap 15.1:python2-reportlab-3.4.0-lp151.3.3.1.x86_64",
"openSUSE Leap 15.1:python3-reportlab-3.4.0-lp151.3.3.1.i586",
"openSUSE Leap 15.1:python3-reportlab-3.4.0-lp151.3.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-02-04T09:13:30Z",
"details": "important"
}
],
"title": "CVE-2019-17626"
}
]
}
opensuse-su-2024:14160-1
Vulnerability from csaf_opensuse
Published
2024-07-12 00:00
Modified
2024-07-12 00:00
Summary
python310-reportlab-4.0.7-1.3 on GA media
Notes
Title of the patch
python310-reportlab-4.0.7-1.3 on GA media
Description of the patch
These are all security issues fixed in the python310-reportlab-4.0.7-1.3 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-14160
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "python310-reportlab-4.0.7-1.3 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the python310-reportlab-4.0.7-1.3 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-14160",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_14160-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-17626 page",
"url": "https://www.suse.com/security/cve/CVE-2019-17626/"
}
],
"title": "python310-reportlab-4.0.7-1.3 on GA media",
"tracking": {
"current_release_date": "2024-07-12T00:00:00Z",
"generator": {
"date": "2024-07-12T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:14160-1",
"initial_release_date": "2024-07-12T00:00:00Z",
"revision_history": [
{
"date": "2024-07-12T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "python310-reportlab-4.0.7-1.3.aarch64",
"product": {
"name": "python310-reportlab-4.0.7-1.3.aarch64",
"product_id": "python310-reportlab-4.0.7-1.3.aarch64"
}
},
{
"category": "product_version",
"name": "python311-reportlab-4.0.7-1.3.aarch64",
"product": {
"name": "python311-reportlab-4.0.7-1.3.aarch64",
"product_id": "python311-reportlab-4.0.7-1.3.aarch64"
}
},
{
"category": "product_version",
"name": "python312-reportlab-4.0.7-1.3.aarch64",
"product": {
"name": "python312-reportlab-4.0.7-1.3.aarch64",
"product_id": "python312-reportlab-4.0.7-1.3.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "python310-reportlab-4.0.7-1.3.ppc64le",
"product": {
"name": "python310-reportlab-4.0.7-1.3.ppc64le",
"product_id": "python310-reportlab-4.0.7-1.3.ppc64le"
}
},
{
"category": "product_version",
"name": "python311-reportlab-4.0.7-1.3.ppc64le",
"product": {
"name": "python311-reportlab-4.0.7-1.3.ppc64le",
"product_id": "python311-reportlab-4.0.7-1.3.ppc64le"
}
},
{
"category": "product_version",
"name": "python312-reportlab-4.0.7-1.3.ppc64le",
"product": {
"name": "python312-reportlab-4.0.7-1.3.ppc64le",
"product_id": "python312-reportlab-4.0.7-1.3.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "python310-reportlab-4.0.7-1.3.s390x",
"product": {
"name": "python310-reportlab-4.0.7-1.3.s390x",
"product_id": "python310-reportlab-4.0.7-1.3.s390x"
}
},
{
"category": "product_version",
"name": "python311-reportlab-4.0.7-1.3.s390x",
"product": {
"name": "python311-reportlab-4.0.7-1.3.s390x",
"product_id": "python311-reportlab-4.0.7-1.3.s390x"
}
},
{
"category": "product_version",
"name": "python312-reportlab-4.0.7-1.3.s390x",
"product": {
"name": "python312-reportlab-4.0.7-1.3.s390x",
"product_id": "python312-reportlab-4.0.7-1.3.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "python310-reportlab-4.0.7-1.3.x86_64",
"product": {
"name": "python310-reportlab-4.0.7-1.3.x86_64",
"product_id": "python310-reportlab-4.0.7-1.3.x86_64"
}
},
{
"category": "product_version",
"name": "python311-reportlab-4.0.7-1.3.x86_64",
"product": {
"name": "python311-reportlab-4.0.7-1.3.x86_64",
"product_id": "python311-reportlab-4.0.7-1.3.x86_64"
}
},
{
"category": "product_version",
"name": "python312-reportlab-4.0.7-1.3.x86_64",
"product": {
"name": "python312-reportlab-4.0.7-1.3.x86_64",
"product_id": "python312-reportlab-4.0.7-1.3.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "python310-reportlab-4.0.7-1.3.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python310-reportlab-4.0.7-1.3.aarch64"
},
"product_reference": "python310-reportlab-4.0.7-1.3.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python310-reportlab-4.0.7-1.3.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python310-reportlab-4.0.7-1.3.ppc64le"
},
"product_reference": "python310-reportlab-4.0.7-1.3.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python310-reportlab-4.0.7-1.3.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python310-reportlab-4.0.7-1.3.s390x"
},
"product_reference": "python310-reportlab-4.0.7-1.3.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python310-reportlab-4.0.7-1.3.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python310-reportlab-4.0.7-1.3.x86_64"
},
"product_reference": "python310-reportlab-4.0.7-1.3.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python311-reportlab-4.0.7-1.3.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python311-reportlab-4.0.7-1.3.aarch64"
},
"product_reference": "python311-reportlab-4.0.7-1.3.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python311-reportlab-4.0.7-1.3.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python311-reportlab-4.0.7-1.3.ppc64le"
},
"product_reference": "python311-reportlab-4.0.7-1.3.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python311-reportlab-4.0.7-1.3.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python311-reportlab-4.0.7-1.3.s390x"
},
"product_reference": "python311-reportlab-4.0.7-1.3.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python311-reportlab-4.0.7-1.3.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python311-reportlab-4.0.7-1.3.x86_64"
},
"product_reference": "python311-reportlab-4.0.7-1.3.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python312-reportlab-4.0.7-1.3.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python312-reportlab-4.0.7-1.3.aarch64"
},
"product_reference": "python312-reportlab-4.0.7-1.3.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python312-reportlab-4.0.7-1.3.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python312-reportlab-4.0.7-1.3.ppc64le"
},
"product_reference": "python312-reportlab-4.0.7-1.3.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python312-reportlab-4.0.7-1.3.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python312-reportlab-4.0.7-1.3.s390x"
},
"product_reference": "python312-reportlab-4.0.7-1.3.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python312-reportlab-4.0.7-1.3.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python312-reportlab-4.0.7-1.3.x86_64"
},
"product_reference": "python312-reportlab-4.0.7-1.3.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-17626",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-17626"
}
],
"notes": [
{
"category": "general",
"text": "ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with \u0027\u003cspan color=\"\u0027 followed by arbitrary Python code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python310-reportlab-4.0.7-1.3.aarch64",
"openSUSE Tumbleweed:python310-reportlab-4.0.7-1.3.ppc64le",
"openSUSE Tumbleweed:python310-reportlab-4.0.7-1.3.s390x",
"openSUSE Tumbleweed:python310-reportlab-4.0.7-1.3.x86_64",
"openSUSE Tumbleweed:python311-reportlab-4.0.7-1.3.aarch64",
"openSUSE Tumbleweed:python311-reportlab-4.0.7-1.3.ppc64le",
"openSUSE Tumbleweed:python311-reportlab-4.0.7-1.3.s390x",
"openSUSE Tumbleweed:python311-reportlab-4.0.7-1.3.x86_64",
"openSUSE Tumbleweed:python312-reportlab-4.0.7-1.3.aarch64",
"openSUSE Tumbleweed:python312-reportlab-4.0.7-1.3.ppc64le",
"openSUSE Tumbleweed:python312-reportlab-4.0.7-1.3.s390x",
"openSUSE Tumbleweed:python312-reportlab-4.0.7-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-17626",
"url": "https://www.suse.com/security/cve/CVE-2019-17626"
},
{
"category": "external",
"summary": "SUSE Bug 1154370 for CVE-2019-17626",
"url": "https://bugzilla.suse.com/1154370"
},
{
"category": "external",
"summary": "SUSE Bug 1215560 for CVE-2019-17626",
"url": "https://bugzilla.suse.com/1215560"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python310-reportlab-4.0.7-1.3.aarch64",
"openSUSE Tumbleweed:python310-reportlab-4.0.7-1.3.ppc64le",
"openSUSE Tumbleweed:python310-reportlab-4.0.7-1.3.s390x",
"openSUSE Tumbleweed:python310-reportlab-4.0.7-1.3.x86_64",
"openSUSE Tumbleweed:python311-reportlab-4.0.7-1.3.aarch64",
"openSUSE Tumbleweed:python311-reportlab-4.0.7-1.3.ppc64le",
"openSUSE Tumbleweed:python311-reportlab-4.0.7-1.3.s390x",
"openSUSE Tumbleweed:python311-reportlab-4.0.7-1.3.x86_64",
"openSUSE Tumbleweed:python312-reportlab-4.0.7-1.3.aarch64",
"openSUSE Tumbleweed:python312-reportlab-4.0.7-1.3.ppc64le",
"openSUSE Tumbleweed:python312-reportlab-4.0.7-1.3.s390x",
"openSUSE Tumbleweed:python312-reportlab-4.0.7-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python310-reportlab-4.0.7-1.3.aarch64",
"openSUSE Tumbleweed:python310-reportlab-4.0.7-1.3.ppc64le",
"openSUSE Tumbleweed:python310-reportlab-4.0.7-1.3.s390x",
"openSUSE Tumbleweed:python310-reportlab-4.0.7-1.3.x86_64",
"openSUSE Tumbleweed:python311-reportlab-4.0.7-1.3.aarch64",
"openSUSE Tumbleweed:python311-reportlab-4.0.7-1.3.ppc64le",
"openSUSE Tumbleweed:python311-reportlab-4.0.7-1.3.s390x",
"openSUSE Tumbleweed:python311-reportlab-4.0.7-1.3.x86_64",
"openSUSE Tumbleweed:python312-reportlab-4.0.7-1.3.aarch64",
"openSUSE Tumbleweed:python312-reportlab-4.0.7-1.3.ppc64le",
"openSUSE Tumbleweed:python312-reportlab-4.0.7-1.3.s390x",
"openSUSE Tumbleweed:python312-reportlab-4.0.7-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-07-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-17626"
}
]
}
rhsa-2020:0197
Vulnerability from csaf_redhat
Published
2020-01-21 19:26
Modified
2025-07-31 11:47
Summary
Red Hat Security Advisory: python-reportlab security update
Notes
Topic
An update for python-reportlab is now available for Red Hat Enterprise Linux 6.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Python-reportlab is a library used for generation of PDF documents.
Security Fix(es):
* python-reportlab: code injection in colors.py allows attacker to execute code (CVE-2019-17626)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for python-reportlab is now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Python-reportlab is a library used for generation of PDF documents.\n\nSecurity Fix(es):\n\n* python-reportlab: code injection in colors.py allows attacker to execute code (CVE-2019-17626)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2020:0197",
"url": "https://access.redhat.com/errata/RHSA-2020:0197"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1769661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1769661"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0197.json"
}
],
"title": "Red Hat Security Advisory: python-reportlab security update",
"tracking": {
"current_release_date": "2025-07-31T11:47:10+00:00",
"generator": {
"date": "2025-07-31T11:47:10+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2020:0197",
"initial_release_date": "2020-01-21T19:26:01+00:00",
"revision_history": [
{
"date": "2020-01-21T19:26:01+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2020-01-21T19:26:01+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-07-31T11:47:10+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "python-reportlab-0:2.3-3.el6_10.1.i686",
"product": {
"name": "python-reportlab-0:2.3-3.el6_10.1.i686",
"product_id": "python-reportlab-0:2.3-3.el6_10.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-reportlab@2.3-3.el6_10.1?arch=i686"
}
}
},
{
"category": "product_version",
"name": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686",
"product": {
"name": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686",
"product_id": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-reportlab-debuginfo@2.3-3.el6_10.1?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "python-reportlab-0:2.3-3.el6_10.1.x86_64",
"product": {
"name": "python-reportlab-0:2.3-3.el6_10.1.x86_64",
"product_id": "python-reportlab-0:2.3-3.el6_10.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-reportlab@2.3-3.el6_10.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64",
"product": {
"name": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64",
"product_id": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-reportlab-debuginfo@2.3-3.el6_10.1?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "python-reportlab-0:2.3-3.el6_10.1.src",
"product": {
"name": "python-reportlab-0:2.3-3.el6_10.1.src",
"product_id": "python-reportlab-0:2.3-3.el6_10.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-reportlab@2.3-3.el6_10.1?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "python-reportlab-docs-0:2.3-3.el6_10.1.noarch",
"product": {
"name": "python-reportlab-docs-0:2.3-3.el6_10.1.noarch",
"product_id": "python-reportlab-docs-0:2.3-3.el6_10.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-reportlab-docs@2.3-3.el6_10.1?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "python-reportlab-0:2.3-3.el6_10.1.ppc64",
"product": {
"name": "python-reportlab-0:2.3-3.el6_10.1.ppc64",
"product_id": "python-reportlab-0:2.3-3.el6_10.1.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-reportlab@2.3-3.el6_10.1?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64",
"product": {
"name": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64",
"product_id": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-reportlab-debuginfo@2.3-3.el6_10.1?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.3-3.el6_10.1.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:python-reportlab-0:2.3-3.el6_10.1.i686"
},
"product_reference": "python-reportlab-0:2.3-3.el6_10.1.i686",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.3-3.el6_10.1.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:python-reportlab-0:2.3-3.el6_10.1.ppc64"
},
"product_reference": "python-reportlab-0:2.3-3.el6_10.1.ppc64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.3-3.el6_10.1.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:python-reportlab-0:2.3-3.el6_10.1.src"
},
"product_reference": "python-reportlab-0:2.3-3.el6_10.1.src",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.3-3.el6_10.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:python-reportlab-0:2.3-3.el6_10.1.x86_64"
},
"product_reference": "python-reportlab-0:2.3-3.el6_10.1.x86_64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686"
},
"product_reference": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64"
},
"product_reference": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64"
},
"product_reference": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-docs-0:2.3-3.el6_10.1.noarch as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.10.z:python-reportlab-docs-0:2.3-3.el6_10.1.noarch"
},
"product_reference": "python-reportlab-docs-0:2.3-3.el6_10.1.noarch",
"relates_to_product_reference": "6Client-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.3-3.el6_10.1.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.i686"
},
"product_reference": "python-reportlab-0:2.3-3.el6_10.1.i686",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.3-3.el6_10.1.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.ppc64"
},
"product_reference": "python-reportlab-0:2.3-3.el6_10.1.ppc64",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.3-3.el6_10.1.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.src"
},
"product_reference": "python-reportlab-0:2.3-3.el6_10.1.src",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.3-3.el6_10.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.x86_64"
},
"product_reference": "python-reportlab-0:2.3-3.el6_10.1.x86_64",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686"
},
"product_reference": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64"
},
"product_reference": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64"
},
"product_reference": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-docs-0:2.3-3.el6_10.1.noarch as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional-6.10.z:python-reportlab-docs-0:2.3-3.el6_10.1.noarch"
},
"product_reference": "python-reportlab-docs-0:2.3-3.el6_10.1.noarch",
"relates_to_product_reference": "6Client-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.3-3.el6_10.1.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:python-reportlab-0:2.3-3.el6_10.1.i686"
},
"product_reference": "python-reportlab-0:2.3-3.el6_10.1.i686",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.3-3.el6_10.1.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:python-reportlab-0:2.3-3.el6_10.1.ppc64"
},
"product_reference": "python-reportlab-0:2.3-3.el6_10.1.ppc64",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.3-3.el6_10.1.src as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:python-reportlab-0:2.3-3.el6_10.1.src"
},
"product_reference": "python-reportlab-0:2.3-3.el6_10.1.src",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.3-3.el6_10.1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:python-reportlab-0:2.3-3.el6_10.1.x86_64"
},
"product_reference": "python-reportlab-0:2.3-3.el6_10.1.x86_64",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686"
},
"product_reference": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64"
},
"product_reference": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64"
},
"product_reference": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-docs-0:2.3-3.el6_10.1.noarch as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.10.z:python-reportlab-docs-0:2.3-3.el6_10.1.noarch"
},
"product_reference": "python-reportlab-docs-0:2.3-3.el6_10.1.noarch",
"relates_to_product_reference": "6Server-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.3-3.el6_10.1.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.i686"
},
"product_reference": "python-reportlab-0:2.3-3.el6_10.1.i686",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.3-3.el6_10.1.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.ppc64"
},
"product_reference": "python-reportlab-0:2.3-3.el6_10.1.ppc64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.3-3.el6_10.1.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.src"
},
"product_reference": "python-reportlab-0:2.3-3.el6_10.1.src",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.3-3.el6_10.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.x86_64"
},
"product_reference": "python-reportlab-0:2.3-3.el6_10.1.x86_64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686"
},
"product_reference": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64"
},
"product_reference": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64"
},
"product_reference": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-docs-0:2.3-3.el6_10.1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.10.z:python-reportlab-docs-0:2.3-3.el6_10.1.noarch"
},
"product_reference": "python-reportlab-docs-0:2.3-3.el6_10.1.noarch",
"relates_to_product_reference": "6Server-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.3-3.el6_10.1.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:python-reportlab-0:2.3-3.el6_10.1.i686"
},
"product_reference": "python-reportlab-0:2.3-3.el6_10.1.i686",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.3-3.el6_10.1.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:python-reportlab-0:2.3-3.el6_10.1.ppc64"
},
"product_reference": "python-reportlab-0:2.3-3.el6_10.1.ppc64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.3-3.el6_10.1.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:python-reportlab-0:2.3-3.el6_10.1.src"
},
"product_reference": "python-reportlab-0:2.3-3.el6_10.1.src",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.3-3.el6_10.1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:python-reportlab-0:2.3-3.el6_10.1.x86_64"
},
"product_reference": "python-reportlab-0:2.3-3.el6_10.1.x86_64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686"
},
"product_reference": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64"
},
"product_reference": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64"
},
"product_reference": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-docs-0:2.3-3.el6_10.1.noarch as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.10.z:python-reportlab-docs-0:2.3-3.el6_10.1.noarch"
},
"product_reference": "python-reportlab-docs-0:2.3-3.el6_10.1.noarch",
"relates_to_product_reference": "6Workstation-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.3-3.el6_10.1.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.i686"
},
"product_reference": "python-reportlab-0:2.3-3.el6_10.1.i686",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.3-3.el6_10.1.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.ppc64"
},
"product_reference": "python-reportlab-0:2.3-3.el6_10.1.ppc64",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.3-3.el6_10.1.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.src"
},
"product_reference": "python-reportlab-0:2.3-3.el6_10.1.src",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.3-3.el6_10.1.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.x86_64"
},
"product_reference": "python-reportlab-0:2.3-3.el6_10.1.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686"
},
"product_reference": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64"
},
"product_reference": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64"
},
"product_reference": "python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-docs-0:2.3-3.el6_10.1.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional-6.10.z:python-reportlab-docs-0:2.3-3.el6_10.1.noarch"
},
"product_reference": "python-reportlab-docs-0:2.3-3.el6_10.1.noarch",
"relates_to_product_reference": "6Workstation-optional-6.10.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-17626",
"cwe": {
"id": "CWE-95",
"name": "Improper Neutralization of Directives in Dynamically Evaluated Code (\u0027Eval Injection\u0027)"
},
"discovery_date": "2019-10-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1769661"
}
],
"notes": [
{
"category": "description",
"text": "A code injection vulnerability in python-reportlab allows an attacker to execute code while parsing a color attribute. An application that uses python-reportlab to parse untrusted input files may be vulnerable to this flaw and allow remote code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python-reportlab: code injection in colors.py allows attacker to execute code",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability will not be fixed in Red Hat Quay because it only affects a non-supported feature which is disabled behind a feature flag.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.10.z:python-reportlab-0:2.3-3.el6_10.1.i686",
"6Client-6.10.z:python-reportlab-0:2.3-3.el6_10.1.ppc64",
"6Client-6.10.z:python-reportlab-0:2.3-3.el6_10.1.src",
"6Client-6.10.z:python-reportlab-0:2.3-3.el6_10.1.x86_64",
"6Client-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686",
"6Client-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64",
"6Client-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64",
"6Client-6.10.z:python-reportlab-docs-0:2.3-3.el6_10.1.noarch",
"6Client-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.i686",
"6Client-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.ppc64",
"6Client-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.src",
"6Client-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.x86_64",
"6Client-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686",
"6Client-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64",
"6Client-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64",
"6Client-optional-6.10.z:python-reportlab-docs-0:2.3-3.el6_10.1.noarch",
"6Server-6.10.z:python-reportlab-0:2.3-3.el6_10.1.i686",
"6Server-6.10.z:python-reportlab-0:2.3-3.el6_10.1.ppc64",
"6Server-6.10.z:python-reportlab-0:2.3-3.el6_10.1.src",
"6Server-6.10.z:python-reportlab-0:2.3-3.el6_10.1.x86_64",
"6Server-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686",
"6Server-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64",
"6Server-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64",
"6Server-6.10.z:python-reportlab-docs-0:2.3-3.el6_10.1.noarch",
"6Server-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.i686",
"6Server-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.ppc64",
"6Server-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.src",
"6Server-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.x86_64",
"6Server-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686",
"6Server-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64",
"6Server-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64",
"6Server-optional-6.10.z:python-reportlab-docs-0:2.3-3.el6_10.1.noarch",
"6Workstation-6.10.z:python-reportlab-0:2.3-3.el6_10.1.i686",
"6Workstation-6.10.z:python-reportlab-0:2.3-3.el6_10.1.ppc64",
"6Workstation-6.10.z:python-reportlab-0:2.3-3.el6_10.1.src",
"6Workstation-6.10.z:python-reportlab-0:2.3-3.el6_10.1.x86_64",
"6Workstation-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686",
"6Workstation-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64",
"6Workstation-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64",
"6Workstation-6.10.z:python-reportlab-docs-0:2.3-3.el6_10.1.noarch",
"6Workstation-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.i686",
"6Workstation-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.ppc64",
"6Workstation-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.src",
"6Workstation-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.x86_64",
"6Workstation-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686",
"6Workstation-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64",
"6Workstation-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64",
"6Workstation-optional-6.10.z:python-reportlab-docs-0:2.3-3.el6_10.1.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-17626"
},
{
"category": "external",
"summary": "RHBZ#1769661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1769661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-17626",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-17626"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-17626",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17626"
}
],
"release_date": "2019-10-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-01-21T19:26:01+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-6.10.z:python-reportlab-0:2.3-3.el6_10.1.i686",
"6Client-6.10.z:python-reportlab-0:2.3-3.el6_10.1.ppc64",
"6Client-6.10.z:python-reportlab-0:2.3-3.el6_10.1.src",
"6Client-6.10.z:python-reportlab-0:2.3-3.el6_10.1.x86_64",
"6Client-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686",
"6Client-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64",
"6Client-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64",
"6Client-6.10.z:python-reportlab-docs-0:2.3-3.el6_10.1.noarch",
"6Client-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.i686",
"6Client-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.ppc64",
"6Client-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.src",
"6Client-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.x86_64",
"6Client-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686",
"6Client-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64",
"6Client-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64",
"6Client-optional-6.10.z:python-reportlab-docs-0:2.3-3.el6_10.1.noarch",
"6Server-6.10.z:python-reportlab-0:2.3-3.el6_10.1.i686",
"6Server-6.10.z:python-reportlab-0:2.3-3.el6_10.1.ppc64",
"6Server-6.10.z:python-reportlab-0:2.3-3.el6_10.1.src",
"6Server-6.10.z:python-reportlab-0:2.3-3.el6_10.1.x86_64",
"6Server-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686",
"6Server-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64",
"6Server-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64",
"6Server-6.10.z:python-reportlab-docs-0:2.3-3.el6_10.1.noarch",
"6Server-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.i686",
"6Server-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.ppc64",
"6Server-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.src",
"6Server-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.x86_64",
"6Server-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686",
"6Server-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64",
"6Server-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64",
"6Server-optional-6.10.z:python-reportlab-docs-0:2.3-3.el6_10.1.noarch",
"6Workstation-6.10.z:python-reportlab-0:2.3-3.el6_10.1.i686",
"6Workstation-6.10.z:python-reportlab-0:2.3-3.el6_10.1.ppc64",
"6Workstation-6.10.z:python-reportlab-0:2.3-3.el6_10.1.src",
"6Workstation-6.10.z:python-reportlab-0:2.3-3.el6_10.1.x86_64",
"6Workstation-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686",
"6Workstation-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64",
"6Workstation-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64",
"6Workstation-6.10.z:python-reportlab-docs-0:2.3-3.el6_10.1.noarch",
"6Workstation-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.i686",
"6Workstation-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.ppc64",
"6Workstation-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.src",
"6Workstation-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.x86_64",
"6Workstation-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686",
"6Workstation-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64",
"6Workstation-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64",
"6Workstation-optional-6.10.z:python-reportlab-docs-0:2.3-3.el6_10.1.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:0197"
},
{
"category": "workaround",
"details": "No known mitigation available.",
"product_ids": [
"6Client-6.10.z:python-reportlab-0:2.3-3.el6_10.1.i686",
"6Client-6.10.z:python-reportlab-0:2.3-3.el6_10.1.ppc64",
"6Client-6.10.z:python-reportlab-0:2.3-3.el6_10.1.src",
"6Client-6.10.z:python-reportlab-0:2.3-3.el6_10.1.x86_64",
"6Client-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686",
"6Client-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64",
"6Client-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64",
"6Client-6.10.z:python-reportlab-docs-0:2.3-3.el6_10.1.noarch",
"6Client-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.i686",
"6Client-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.ppc64",
"6Client-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.src",
"6Client-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.x86_64",
"6Client-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686",
"6Client-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64",
"6Client-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64",
"6Client-optional-6.10.z:python-reportlab-docs-0:2.3-3.el6_10.1.noarch",
"6Server-6.10.z:python-reportlab-0:2.3-3.el6_10.1.i686",
"6Server-6.10.z:python-reportlab-0:2.3-3.el6_10.1.ppc64",
"6Server-6.10.z:python-reportlab-0:2.3-3.el6_10.1.src",
"6Server-6.10.z:python-reportlab-0:2.3-3.el6_10.1.x86_64",
"6Server-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686",
"6Server-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64",
"6Server-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64",
"6Server-6.10.z:python-reportlab-docs-0:2.3-3.el6_10.1.noarch",
"6Server-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.i686",
"6Server-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.ppc64",
"6Server-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.src",
"6Server-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.x86_64",
"6Server-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686",
"6Server-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64",
"6Server-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64",
"6Server-optional-6.10.z:python-reportlab-docs-0:2.3-3.el6_10.1.noarch",
"6Workstation-6.10.z:python-reportlab-0:2.3-3.el6_10.1.i686",
"6Workstation-6.10.z:python-reportlab-0:2.3-3.el6_10.1.ppc64",
"6Workstation-6.10.z:python-reportlab-0:2.3-3.el6_10.1.src",
"6Workstation-6.10.z:python-reportlab-0:2.3-3.el6_10.1.x86_64",
"6Workstation-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686",
"6Workstation-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64",
"6Workstation-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64",
"6Workstation-6.10.z:python-reportlab-docs-0:2.3-3.el6_10.1.noarch",
"6Workstation-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.i686",
"6Workstation-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.ppc64",
"6Workstation-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.src",
"6Workstation-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.x86_64",
"6Workstation-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686",
"6Workstation-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64",
"6Workstation-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64",
"6Workstation-optional-6.10.z:python-reportlab-docs-0:2.3-3.el6_10.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-6.10.z:python-reportlab-0:2.3-3.el6_10.1.i686",
"6Client-6.10.z:python-reportlab-0:2.3-3.el6_10.1.ppc64",
"6Client-6.10.z:python-reportlab-0:2.3-3.el6_10.1.src",
"6Client-6.10.z:python-reportlab-0:2.3-3.el6_10.1.x86_64",
"6Client-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686",
"6Client-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64",
"6Client-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64",
"6Client-6.10.z:python-reportlab-docs-0:2.3-3.el6_10.1.noarch",
"6Client-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.i686",
"6Client-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.ppc64",
"6Client-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.src",
"6Client-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.x86_64",
"6Client-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686",
"6Client-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64",
"6Client-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64",
"6Client-optional-6.10.z:python-reportlab-docs-0:2.3-3.el6_10.1.noarch",
"6Server-6.10.z:python-reportlab-0:2.3-3.el6_10.1.i686",
"6Server-6.10.z:python-reportlab-0:2.3-3.el6_10.1.ppc64",
"6Server-6.10.z:python-reportlab-0:2.3-3.el6_10.1.src",
"6Server-6.10.z:python-reportlab-0:2.3-3.el6_10.1.x86_64",
"6Server-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686",
"6Server-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64",
"6Server-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64",
"6Server-6.10.z:python-reportlab-docs-0:2.3-3.el6_10.1.noarch",
"6Server-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.i686",
"6Server-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.ppc64",
"6Server-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.src",
"6Server-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.x86_64",
"6Server-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686",
"6Server-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64",
"6Server-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64",
"6Server-optional-6.10.z:python-reportlab-docs-0:2.3-3.el6_10.1.noarch",
"6Workstation-6.10.z:python-reportlab-0:2.3-3.el6_10.1.i686",
"6Workstation-6.10.z:python-reportlab-0:2.3-3.el6_10.1.ppc64",
"6Workstation-6.10.z:python-reportlab-0:2.3-3.el6_10.1.src",
"6Workstation-6.10.z:python-reportlab-0:2.3-3.el6_10.1.x86_64",
"6Workstation-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686",
"6Workstation-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64",
"6Workstation-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64",
"6Workstation-6.10.z:python-reportlab-docs-0:2.3-3.el6_10.1.noarch",
"6Workstation-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.i686",
"6Workstation-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.ppc64",
"6Workstation-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.src",
"6Workstation-optional-6.10.z:python-reportlab-0:2.3-3.el6_10.1.x86_64",
"6Workstation-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.i686",
"6Workstation-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.ppc64",
"6Workstation-optional-6.10.z:python-reportlab-debuginfo-0:2.3-3.el6_10.1.x86_64",
"6Workstation-optional-6.10.z:python-reportlab-docs-0:2.3-3.el6_10.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python-reportlab: code injection in colors.py allows attacker to execute code"
}
]
}
rhsa-2020:0230
Vulnerability from csaf_redhat
Published
2020-01-27 08:42
Modified
2025-07-31 11:47
Summary
Red Hat Security Advisory: python-reportlab security update
Notes
Topic
An update for python-reportlab is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Python-reportlab is a library used for generation of PDF documents.
Security Fix(es):
* python-reportlab: code injection in colors.py allows attacker to execute code (CVE-2019-17626)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for python-reportlab is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Python-reportlab is a library used for generation of PDF documents.\n\nSecurity Fix(es):\n\n* python-reportlab: code injection in colors.py allows attacker to execute code (CVE-2019-17626)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2020:0230",
"url": "https://access.redhat.com/errata/RHSA-2020:0230"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1769661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1769661"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0230.json"
}
],
"title": "Red Hat Security Advisory: python-reportlab security update",
"tracking": {
"current_release_date": "2025-07-31T11:47:33+00:00",
"generator": {
"date": "2025-07-31T11:47:33+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2020:0230",
"initial_release_date": "2020-01-27T08:42:21+00:00",
"revision_history": [
{
"date": "2020-01-27T08:42:21+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2020-01-27T08:42:21+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-07-31T11:47:33+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
"product": {
"name": "Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
"product_id": "AppStream-8.0.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_e4s:8.0::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "python-reportlab-0:3.4.0-6.el8_0.2.src",
"product": {
"name": "python-reportlab-0:3.4.0-6.el8_0.2.src",
"product_id": "python-reportlab-0:3.4.0-6.el8_0.2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-reportlab@3.4.0-6.el8_0.2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "python3-reportlab-0:3.4.0-6.el8_0.2.ppc64le",
"product": {
"name": "python3-reportlab-0:3.4.0-6.el8_0.2.ppc64le",
"product_id": "python3-reportlab-0:3.4.0-6.el8_0.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-reportlab@3.4.0-6.el8_0.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python-reportlab-debugsource-0:3.4.0-6.el8_0.2.ppc64le",
"product": {
"name": "python-reportlab-debugsource-0:3.4.0-6.el8_0.2.ppc64le",
"product_id": "python-reportlab-debugsource-0:3.4.0-6.el8_0.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-reportlab-debugsource@3.4.0-6.el8_0.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3-reportlab-debuginfo-0:3.4.0-6.el8_0.2.ppc64le",
"product": {
"name": "python3-reportlab-debuginfo-0:3.4.0-6.el8_0.2.ppc64le",
"product_id": "python3-reportlab-debuginfo-0:3.4.0-6.el8_0.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-reportlab-debuginfo@3.4.0-6.el8_0.2?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "python3-reportlab-0:3.4.0-6.el8_0.2.x86_64",
"product": {
"name": "python3-reportlab-0:3.4.0-6.el8_0.2.x86_64",
"product_id": "python3-reportlab-0:3.4.0-6.el8_0.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-reportlab@3.4.0-6.el8_0.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-reportlab-debugsource-0:3.4.0-6.el8_0.2.x86_64",
"product": {
"name": "python-reportlab-debugsource-0:3.4.0-6.el8_0.2.x86_64",
"product_id": "python-reportlab-debugsource-0:3.4.0-6.el8_0.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-reportlab-debugsource@3.4.0-6.el8_0.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3-reportlab-debuginfo-0:3.4.0-6.el8_0.2.x86_64",
"product": {
"name": "python3-reportlab-debuginfo-0:3.4.0-6.el8_0.2.x86_64",
"product_id": "python3-reportlab-debuginfo-0:3.4.0-6.el8_0.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-reportlab-debuginfo@3.4.0-6.el8_0.2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:3.4.0-6.el8_0.2.src as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
"product_id": "AppStream-8.0.0.Z.E4S:python-reportlab-0:3.4.0-6.el8_0.2.src"
},
"product_reference": "python-reportlab-0:3.4.0-6.el8_0.2.src",
"relates_to_product_reference": "AppStream-8.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debugsource-0:3.4.0-6.el8_0.2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
"product_id": "AppStream-8.0.0.Z.E4S:python-reportlab-debugsource-0:3.4.0-6.el8_0.2.ppc64le"
},
"product_reference": "python-reportlab-debugsource-0:3.4.0-6.el8_0.2.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debugsource-0:3.4.0-6.el8_0.2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
"product_id": "AppStream-8.0.0.Z.E4S:python-reportlab-debugsource-0:3.4.0-6.el8_0.2.x86_64"
},
"product_reference": "python-reportlab-debugsource-0:3.4.0-6.el8_0.2.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-reportlab-0:3.4.0-6.el8_0.2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
"product_id": "AppStream-8.0.0.Z.E4S:python3-reportlab-0:3.4.0-6.el8_0.2.ppc64le"
},
"product_reference": "python3-reportlab-0:3.4.0-6.el8_0.2.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-reportlab-0:3.4.0-6.el8_0.2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
"product_id": "AppStream-8.0.0.Z.E4S:python3-reportlab-0:3.4.0-6.el8_0.2.x86_64"
},
"product_reference": "python3-reportlab-0:3.4.0-6.el8_0.2.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-reportlab-debuginfo-0:3.4.0-6.el8_0.2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
"product_id": "AppStream-8.0.0.Z.E4S:python3-reportlab-debuginfo-0:3.4.0-6.el8_0.2.ppc64le"
},
"product_reference": "python3-reportlab-debuginfo-0:3.4.0-6.el8_0.2.ppc64le",
"relates_to_product_reference": "AppStream-8.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-reportlab-debuginfo-0:3.4.0-6.el8_0.2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
"product_id": "AppStream-8.0.0.Z.E4S:python3-reportlab-debuginfo-0:3.4.0-6.el8_0.2.x86_64"
},
"product_reference": "python3-reportlab-debuginfo-0:3.4.0-6.el8_0.2.x86_64",
"relates_to_product_reference": "AppStream-8.0.0.Z.E4S"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-17626",
"cwe": {
"id": "CWE-95",
"name": "Improper Neutralization of Directives in Dynamically Evaluated Code (\u0027Eval Injection\u0027)"
},
"discovery_date": "2019-10-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1769661"
}
],
"notes": [
{
"category": "description",
"text": "A code injection vulnerability in python-reportlab allows an attacker to execute code while parsing a color attribute. An application that uses python-reportlab to parse untrusted input files may be vulnerable to this flaw and allow remote code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python-reportlab: code injection in colors.py allows attacker to execute code",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability will not be fixed in Red Hat Quay because it only affects a non-supported feature which is disabled behind a feature flag.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.0.0.Z.E4S:python-reportlab-0:3.4.0-6.el8_0.2.src",
"AppStream-8.0.0.Z.E4S:python-reportlab-debugsource-0:3.4.0-6.el8_0.2.ppc64le",
"AppStream-8.0.0.Z.E4S:python-reportlab-debugsource-0:3.4.0-6.el8_0.2.x86_64",
"AppStream-8.0.0.Z.E4S:python3-reportlab-0:3.4.0-6.el8_0.2.ppc64le",
"AppStream-8.0.0.Z.E4S:python3-reportlab-0:3.4.0-6.el8_0.2.x86_64",
"AppStream-8.0.0.Z.E4S:python3-reportlab-debuginfo-0:3.4.0-6.el8_0.2.ppc64le",
"AppStream-8.0.0.Z.E4S:python3-reportlab-debuginfo-0:3.4.0-6.el8_0.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-17626"
},
{
"category": "external",
"summary": "RHBZ#1769661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1769661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-17626",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-17626"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-17626",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17626"
}
],
"release_date": "2019-10-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-01-27T08:42:21+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.0.0.Z.E4S:python-reportlab-0:3.4.0-6.el8_0.2.src",
"AppStream-8.0.0.Z.E4S:python-reportlab-debugsource-0:3.4.0-6.el8_0.2.ppc64le",
"AppStream-8.0.0.Z.E4S:python-reportlab-debugsource-0:3.4.0-6.el8_0.2.x86_64",
"AppStream-8.0.0.Z.E4S:python3-reportlab-0:3.4.0-6.el8_0.2.ppc64le",
"AppStream-8.0.0.Z.E4S:python3-reportlab-0:3.4.0-6.el8_0.2.x86_64",
"AppStream-8.0.0.Z.E4S:python3-reportlab-debuginfo-0:3.4.0-6.el8_0.2.ppc64le",
"AppStream-8.0.0.Z.E4S:python3-reportlab-debuginfo-0:3.4.0-6.el8_0.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:0230"
},
{
"category": "workaround",
"details": "No known mitigation available.",
"product_ids": [
"AppStream-8.0.0.Z.E4S:python-reportlab-0:3.4.0-6.el8_0.2.src",
"AppStream-8.0.0.Z.E4S:python-reportlab-debugsource-0:3.4.0-6.el8_0.2.ppc64le",
"AppStream-8.0.0.Z.E4S:python-reportlab-debugsource-0:3.4.0-6.el8_0.2.x86_64",
"AppStream-8.0.0.Z.E4S:python3-reportlab-0:3.4.0-6.el8_0.2.ppc64le",
"AppStream-8.0.0.Z.E4S:python3-reportlab-0:3.4.0-6.el8_0.2.x86_64",
"AppStream-8.0.0.Z.E4S:python3-reportlab-debuginfo-0:3.4.0-6.el8_0.2.ppc64le",
"AppStream-8.0.0.Z.E4S:python3-reportlab-debuginfo-0:3.4.0-6.el8_0.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.0.0.Z.E4S:python-reportlab-0:3.4.0-6.el8_0.2.src",
"AppStream-8.0.0.Z.E4S:python-reportlab-debugsource-0:3.4.0-6.el8_0.2.ppc64le",
"AppStream-8.0.0.Z.E4S:python-reportlab-debugsource-0:3.4.0-6.el8_0.2.x86_64",
"AppStream-8.0.0.Z.E4S:python3-reportlab-0:3.4.0-6.el8_0.2.ppc64le",
"AppStream-8.0.0.Z.E4S:python3-reportlab-0:3.4.0-6.el8_0.2.x86_64",
"AppStream-8.0.0.Z.E4S:python3-reportlab-debuginfo-0:3.4.0-6.el8_0.2.ppc64le",
"AppStream-8.0.0.Z.E4S:python3-reportlab-debuginfo-0:3.4.0-6.el8_0.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python-reportlab: code injection in colors.py allows attacker to execute code"
}
]
}
rhsa-2020:0201
Vulnerability from csaf_redhat
Published
2020-01-24 05:54
Modified
2025-07-31 11:47
Summary
Red Hat Security Advisory: python-reportlab security update
Notes
Topic
An update for python-reportlab is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Python-reportlab is a library used for generation of PDF documents.
Security Fix(es):
* python-reportlab: code injection in colors.py allows attacker to execute code (CVE-2019-17626)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for python-reportlab is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Python-reportlab is a library used for generation of PDF documents.\n\nSecurity Fix(es):\n\n* python-reportlab: code injection in colors.py allows attacker to execute code (CVE-2019-17626)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2020:0201",
"url": "https://access.redhat.com/errata/RHSA-2020:0201"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1769661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1769661"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0201.json"
}
],
"title": "Red Hat Security Advisory: python-reportlab security update",
"tracking": {
"current_release_date": "2025-07-31T11:47:26+00:00",
"generator": {
"date": "2025-07-31T11:47:26+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2020:0201",
"initial_release_date": "2020-01-24T05:54:34+00:00",
"revision_history": [
{
"date": "2020-01-24T05:54:34+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2020-01-24T05:54:34+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-07-31T11:47:26+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.1.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "python-reportlab-0:3.4.0-6.el8_1.2.src",
"product": {
"name": "python-reportlab-0:3.4.0-6.el8_1.2.src",
"product_id": "python-reportlab-0:3.4.0-6.el8_1.2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-reportlab@3.4.0-6.el8_1.2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "python3-reportlab-0:3.4.0-6.el8_1.2.ppc64le",
"product": {
"name": "python3-reportlab-0:3.4.0-6.el8_1.2.ppc64le",
"product_id": "python3-reportlab-0:3.4.0-6.el8_1.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-reportlab@3.4.0-6.el8_1.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python-reportlab-debugsource-0:3.4.0-6.el8_1.2.ppc64le",
"product": {
"name": "python-reportlab-debugsource-0:3.4.0-6.el8_1.2.ppc64le",
"product_id": "python-reportlab-debugsource-0:3.4.0-6.el8_1.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-reportlab-debugsource@3.4.0-6.el8_1.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3-reportlab-debuginfo-0:3.4.0-6.el8_1.2.ppc64le",
"product": {
"name": "python3-reportlab-debuginfo-0:3.4.0-6.el8_1.2.ppc64le",
"product_id": "python3-reportlab-debuginfo-0:3.4.0-6.el8_1.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-reportlab-debuginfo@3.4.0-6.el8_1.2?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "python3-reportlab-0:3.4.0-6.el8_1.2.x86_64",
"product": {
"name": "python3-reportlab-0:3.4.0-6.el8_1.2.x86_64",
"product_id": "python3-reportlab-0:3.4.0-6.el8_1.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-reportlab@3.4.0-6.el8_1.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-reportlab-debugsource-0:3.4.0-6.el8_1.2.x86_64",
"product": {
"name": "python-reportlab-debugsource-0:3.4.0-6.el8_1.2.x86_64",
"product_id": "python-reportlab-debugsource-0:3.4.0-6.el8_1.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-reportlab-debugsource@3.4.0-6.el8_1.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3-reportlab-debuginfo-0:3.4.0-6.el8_1.2.x86_64",
"product": {
"name": "python3-reportlab-debuginfo-0:3.4.0-6.el8_1.2.x86_64",
"product_id": "python3-reportlab-debuginfo-0:3.4.0-6.el8_1.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-reportlab-debuginfo@3.4.0-6.el8_1.2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:3.4.0-6.el8_1.2.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.1.0.Z.MAIN.EUS:python-reportlab-0:3.4.0-6.el8_1.2.src"
},
"product_reference": "python-reportlab-0:3.4.0-6.el8_1.2.src",
"relates_to_product_reference": "AppStream-8.1.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debugsource-0:3.4.0-6.el8_1.2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.1.0.Z.MAIN.EUS:python-reportlab-debugsource-0:3.4.0-6.el8_1.2.ppc64le"
},
"product_reference": "python-reportlab-debugsource-0:3.4.0-6.el8_1.2.ppc64le",
"relates_to_product_reference": "AppStream-8.1.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debugsource-0:3.4.0-6.el8_1.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.1.0.Z.MAIN.EUS:python-reportlab-debugsource-0:3.4.0-6.el8_1.2.x86_64"
},
"product_reference": "python-reportlab-debugsource-0:3.4.0-6.el8_1.2.x86_64",
"relates_to_product_reference": "AppStream-8.1.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-reportlab-0:3.4.0-6.el8_1.2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.1.0.Z.MAIN.EUS:python3-reportlab-0:3.4.0-6.el8_1.2.ppc64le"
},
"product_reference": "python3-reportlab-0:3.4.0-6.el8_1.2.ppc64le",
"relates_to_product_reference": "AppStream-8.1.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-reportlab-0:3.4.0-6.el8_1.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.1.0.Z.MAIN.EUS:python3-reportlab-0:3.4.0-6.el8_1.2.x86_64"
},
"product_reference": "python3-reportlab-0:3.4.0-6.el8_1.2.x86_64",
"relates_to_product_reference": "AppStream-8.1.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-reportlab-debuginfo-0:3.4.0-6.el8_1.2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.1.0.Z.MAIN.EUS:python3-reportlab-debuginfo-0:3.4.0-6.el8_1.2.ppc64le"
},
"product_reference": "python3-reportlab-debuginfo-0:3.4.0-6.el8_1.2.ppc64le",
"relates_to_product_reference": "AppStream-8.1.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-reportlab-debuginfo-0:3.4.0-6.el8_1.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.1.0.Z.MAIN.EUS:python3-reportlab-debuginfo-0:3.4.0-6.el8_1.2.x86_64"
},
"product_reference": "python3-reportlab-debuginfo-0:3.4.0-6.el8_1.2.x86_64",
"relates_to_product_reference": "AppStream-8.1.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-17626",
"cwe": {
"id": "CWE-95",
"name": "Improper Neutralization of Directives in Dynamically Evaluated Code (\u0027Eval Injection\u0027)"
},
"discovery_date": "2019-10-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1769661"
}
],
"notes": [
{
"category": "description",
"text": "A code injection vulnerability in python-reportlab allows an attacker to execute code while parsing a color attribute. An application that uses python-reportlab to parse untrusted input files may be vulnerable to this flaw and allow remote code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python-reportlab: code injection in colors.py allows attacker to execute code",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability will not be fixed in Red Hat Quay because it only affects a non-supported feature which is disabled behind a feature flag.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.1.0.Z.MAIN.EUS:python-reportlab-0:3.4.0-6.el8_1.2.src",
"AppStream-8.1.0.Z.MAIN.EUS:python-reportlab-debugsource-0:3.4.0-6.el8_1.2.ppc64le",
"AppStream-8.1.0.Z.MAIN.EUS:python-reportlab-debugsource-0:3.4.0-6.el8_1.2.x86_64",
"AppStream-8.1.0.Z.MAIN.EUS:python3-reportlab-0:3.4.0-6.el8_1.2.ppc64le",
"AppStream-8.1.0.Z.MAIN.EUS:python3-reportlab-0:3.4.0-6.el8_1.2.x86_64",
"AppStream-8.1.0.Z.MAIN.EUS:python3-reportlab-debuginfo-0:3.4.0-6.el8_1.2.ppc64le",
"AppStream-8.1.0.Z.MAIN.EUS:python3-reportlab-debuginfo-0:3.4.0-6.el8_1.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-17626"
},
{
"category": "external",
"summary": "RHBZ#1769661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1769661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-17626",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-17626"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-17626",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17626"
}
],
"release_date": "2019-10-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-01-24T05:54:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.1.0.Z.MAIN.EUS:python-reportlab-0:3.4.0-6.el8_1.2.src",
"AppStream-8.1.0.Z.MAIN.EUS:python-reportlab-debugsource-0:3.4.0-6.el8_1.2.ppc64le",
"AppStream-8.1.0.Z.MAIN.EUS:python-reportlab-debugsource-0:3.4.0-6.el8_1.2.x86_64",
"AppStream-8.1.0.Z.MAIN.EUS:python3-reportlab-0:3.4.0-6.el8_1.2.ppc64le",
"AppStream-8.1.0.Z.MAIN.EUS:python3-reportlab-0:3.4.0-6.el8_1.2.x86_64",
"AppStream-8.1.0.Z.MAIN.EUS:python3-reportlab-debuginfo-0:3.4.0-6.el8_1.2.ppc64le",
"AppStream-8.1.0.Z.MAIN.EUS:python3-reportlab-debuginfo-0:3.4.0-6.el8_1.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:0201"
},
{
"category": "workaround",
"details": "No known mitigation available.",
"product_ids": [
"AppStream-8.1.0.Z.MAIN.EUS:python-reportlab-0:3.4.0-6.el8_1.2.src",
"AppStream-8.1.0.Z.MAIN.EUS:python-reportlab-debugsource-0:3.4.0-6.el8_1.2.ppc64le",
"AppStream-8.1.0.Z.MAIN.EUS:python-reportlab-debugsource-0:3.4.0-6.el8_1.2.x86_64",
"AppStream-8.1.0.Z.MAIN.EUS:python3-reportlab-0:3.4.0-6.el8_1.2.ppc64le",
"AppStream-8.1.0.Z.MAIN.EUS:python3-reportlab-0:3.4.0-6.el8_1.2.x86_64",
"AppStream-8.1.0.Z.MAIN.EUS:python3-reportlab-debuginfo-0:3.4.0-6.el8_1.2.ppc64le",
"AppStream-8.1.0.Z.MAIN.EUS:python3-reportlab-debuginfo-0:3.4.0-6.el8_1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.1.0.Z.MAIN.EUS:python-reportlab-0:3.4.0-6.el8_1.2.src",
"AppStream-8.1.0.Z.MAIN.EUS:python-reportlab-debugsource-0:3.4.0-6.el8_1.2.ppc64le",
"AppStream-8.1.0.Z.MAIN.EUS:python-reportlab-debugsource-0:3.4.0-6.el8_1.2.x86_64",
"AppStream-8.1.0.Z.MAIN.EUS:python3-reportlab-0:3.4.0-6.el8_1.2.ppc64le",
"AppStream-8.1.0.Z.MAIN.EUS:python3-reportlab-0:3.4.0-6.el8_1.2.x86_64",
"AppStream-8.1.0.Z.MAIN.EUS:python3-reportlab-debuginfo-0:3.4.0-6.el8_1.2.ppc64le",
"AppStream-8.1.0.Z.MAIN.EUS:python3-reportlab-debuginfo-0:3.4.0-6.el8_1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python-reportlab: code injection in colors.py allows attacker to execute code"
}
]
}
rhsa-2020:0195
Vulnerability from csaf_redhat
Published
2020-01-21 22:48
Modified
2025-07-31 11:47
Summary
Red Hat Security Advisory: python-reportlab security update
Notes
Topic
An update for python-reportlab is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Python-reportlab is a library used for generation of PDF documents.
Security Fix(es):
* python-reportlab: code injection in colors.py allows attacker to execute code (CVE-2019-17626)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for python-reportlab is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Python-reportlab is a library used for generation of PDF documents.\n\nSecurity Fix(es):\n\n* python-reportlab: code injection in colors.py allows attacker to execute code (CVE-2019-17626)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2020:0195",
"url": "https://access.redhat.com/errata/RHSA-2020:0195"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1769661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1769661"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0195.json"
}
],
"title": "Red Hat Security Advisory: python-reportlab security update",
"tracking": {
"current_release_date": "2025-07-31T11:47:18+00:00",
"generator": {
"date": "2025-07-31T11:47:18+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2020:0195",
"initial_release_date": "2020-01-21T22:48:08+00:00",
"revision_history": [
{
"date": "2020-01-21T22:48:08+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2020-01-21T22:48:08+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-07-31T11:47:18+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.7.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.7.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.7.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.7.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.7.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.7.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "python-reportlab-0:2.5-9.el7_7.1.x86_64",
"product": {
"name": "python-reportlab-0:2.5-9.el7_7.1.x86_64",
"product_id": "python-reportlab-0:2.5-9.el7_7.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-reportlab@2.5-9.el7_7.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64",
"product": {
"name": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64",
"product_id": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-reportlab-debuginfo@2.5-9.el7_7.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-reportlab-docs-0:2.5-9.el7_7.1.x86_64",
"product": {
"name": "python-reportlab-docs-0:2.5-9.el7_7.1.x86_64",
"product_id": "python-reportlab-docs-0:2.5-9.el7_7.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-reportlab-docs@2.5-9.el7_7.1?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "python-reportlab-0:2.5-9.el7_7.1.src",
"product": {
"name": "python-reportlab-0:2.5-9.el7_7.1.src",
"product_id": "python-reportlab-0:2.5-9.el7_7.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-reportlab@2.5-9.el7_7.1?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "python-reportlab-0:2.5-9.el7_7.1.s390x",
"product": {
"name": "python-reportlab-0:2.5-9.el7_7.1.s390x",
"product_id": "python-reportlab-0:2.5-9.el7_7.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-reportlab@2.5-9.el7_7.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x",
"product": {
"name": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x",
"product_id": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-reportlab-debuginfo@2.5-9.el7_7.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python-reportlab-docs-0:2.5-9.el7_7.1.s390x",
"product": {
"name": "python-reportlab-docs-0:2.5-9.el7_7.1.s390x",
"product_id": "python-reportlab-docs-0:2.5-9.el7_7.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-reportlab-docs@2.5-9.el7_7.1?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "python-reportlab-0:2.5-9.el7_7.1.ppc64",
"product": {
"name": "python-reportlab-0:2.5-9.el7_7.1.ppc64",
"product_id": "python-reportlab-0:2.5-9.el7_7.1.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-reportlab@2.5-9.el7_7.1?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64",
"product": {
"name": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64",
"product_id": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-reportlab-debuginfo@2.5-9.el7_7.1?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "python-reportlab-docs-0:2.5-9.el7_7.1.ppc64",
"product": {
"name": "python-reportlab-docs-0:2.5-9.el7_7.1.ppc64",
"product_id": "python-reportlab-docs-0:2.5-9.el7_7.1.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-reportlab-docs@2.5-9.el7_7.1?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "python-reportlab-0:2.5-9.el7_7.1.ppc64le",
"product": {
"name": "python-reportlab-0:2.5-9.el7_7.1.ppc64le",
"product_id": "python-reportlab-0:2.5-9.el7_7.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-reportlab@2.5-9.el7_7.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le",
"product": {
"name": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le",
"product_id": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-reportlab-debuginfo@2.5-9.el7_7.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le",
"product": {
"name": "python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le",
"product_id": "python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-reportlab-docs@2.5-9.el7_7.1?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.5-9.el7_7.1.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64"
},
"product_reference": "python-reportlab-0:2.5-9.el7_7.1.ppc64",
"relates_to_product_reference": "7Client-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.5-9.el7_7.1.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64le"
},
"product_reference": "python-reportlab-0:2.5-9.el7_7.1.ppc64le",
"relates_to_product_reference": "7Client-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.5-9.el7_7.1.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.s390x"
},
"product_reference": "python-reportlab-0:2.5-9.el7_7.1.s390x",
"relates_to_product_reference": "7Client-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.5-9.el7_7.1.src as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.src"
},
"product_reference": "python-reportlab-0:2.5-9.el7_7.1.src",
"relates_to_product_reference": "7Client-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.5-9.el7_7.1.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.x86_64"
},
"product_reference": "python-reportlab-0:2.5-9.el7_7.1.x86_64",
"relates_to_product_reference": "7Client-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64"
},
"product_reference": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64",
"relates_to_product_reference": "7Client-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le"
},
"product_reference": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le",
"relates_to_product_reference": "7Client-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x"
},
"product_reference": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x",
"relates_to_product_reference": "7Client-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64"
},
"product_reference": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64",
"relates_to_product_reference": "7Client-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-docs-0:2.5-9.el7_7.1.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64"
},
"product_reference": "python-reportlab-docs-0:2.5-9.el7_7.1.ppc64",
"relates_to_product_reference": "7Client-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le"
},
"product_reference": "python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le",
"relates_to_product_reference": "7Client-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-docs-0:2.5-9.el7_7.1.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.s390x"
},
"product_reference": "python-reportlab-docs-0:2.5-9.el7_7.1.s390x",
"relates_to_product_reference": "7Client-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-docs-0:2.5-9.el7_7.1.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.x86_64"
},
"product_reference": "python-reportlab-docs-0:2.5-9.el7_7.1.x86_64",
"relates_to_product_reference": "7Client-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.5-9.el7_7.1.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64"
},
"product_reference": "python-reportlab-0:2.5-9.el7_7.1.ppc64",
"relates_to_product_reference": "7Client-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.5-9.el7_7.1.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64le"
},
"product_reference": "python-reportlab-0:2.5-9.el7_7.1.ppc64le",
"relates_to_product_reference": "7Client-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.5-9.el7_7.1.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.s390x"
},
"product_reference": "python-reportlab-0:2.5-9.el7_7.1.s390x",
"relates_to_product_reference": "7Client-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.5-9.el7_7.1.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.src"
},
"product_reference": "python-reportlab-0:2.5-9.el7_7.1.src",
"relates_to_product_reference": "7Client-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.5-9.el7_7.1.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.x86_64"
},
"product_reference": "python-reportlab-0:2.5-9.el7_7.1.x86_64",
"relates_to_product_reference": "7Client-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64"
},
"product_reference": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64",
"relates_to_product_reference": "7Client-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le"
},
"product_reference": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le",
"relates_to_product_reference": "7Client-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x"
},
"product_reference": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x",
"relates_to_product_reference": "7Client-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64"
},
"product_reference": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64",
"relates_to_product_reference": "7Client-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-docs-0:2.5-9.el7_7.1.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64"
},
"product_reference": "python-reportlab-docs-0:2.5-9.el7_7.1.ppc64",
"relates_to_product_reference": "7Client-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le"
},
"product_reference": "python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le",
"relates_to_product_reference": "7Client-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-docs-0:2.5-9.el7_7.1.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.s390x"
},
"product_reference": "python-reportlab-docs-0:2.5-9.el7_7.1.s390x",
"relates_to_product_reference": "7Client-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-docs-0:2.5-9.el7_7.1.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.x86_64"
},
"product_reference": "python-reportlab-docs-0:2.5-9.el7_7.1.x86_64",
"relates_to_product_reference": "7Client-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.5-9.el7_7.1.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64"
},
"product_reference": "python-reportlab-0:2.5-9.el7_7.1.ppc64",
"relates_to_product_reference": "7Server-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.5-9.el7_7.1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64le"
},
"product_reference": "python-reportlab-0:2.5-9.el7_7.1.ppc64le",
"relates_to_product_reference": "7Server-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.5-9.el7_7.1.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.s390x"
},
"product_reference": "python-reportlab-0:2.5-9.el7_7.1.s390x",
"relates_to_product_reference": "7Server-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.5-9.el7_7.1.src as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.src"
},
"product_reference": "python-reportlab-0:2.5-9.el7_7.1.src",
"relates_to_product_reference": "7Server-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.5-9.el7_7.1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.x86_64"
},
"product_reference": "python-reportlab-0:2.5-9.el7_7.1.x86_64",
"relates_to_product_reference": "7Server-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64"
},
"product_reference": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64",
"relates_to_product_reference": "7Server-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le"
},
"product_reference": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le",
"relates_to_product_reference": "7Server-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x"
},
"product_reference": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x",
"relates_to_product_reference": "7Server-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64"
},
"product_reference": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64",
"relates_to_product_reference": "7Server-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-docs-0:2.5-9.el7_7.1.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64"
},
"product_reference": "python-reportlab-docs-0:2.5-9.el7_7.1.ppc64",
"relates_to_product_reference": "7Server-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le"
},
"product_reference": "python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le",
"relates_to_product_reference": "7Server-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-docs-0:2.5-9.el7_7.1.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.s390x"
},
"product_reference": "python-reportlab-docs-0:2.5-9.el7_7.1.s390x",
"relates_to_product_reference": "7Server-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-docs-0:2.5-9.el7_7.1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.x86_64"
},
"product_reference": "python-reportlab-docs-0:2.5-9.el7_7.1.x86_64",
"relates_to_product_reference": "7Server-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.5-9.el7_7.1.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64"
},
"product_reference": "python-reportlab-0:2.5-9.el7_7.1.ppc64",
"relates_to_product_reference": "7Server-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.5-9.el7_7.1.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64le"
},
"product_reference": "python-reportlab-0:2.5-9.el7_7.1.ppc64le",
"relates_to_product_reference": "7Server-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.5-9.el7_7.1.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.s390x"
},
"product_reference": "python-reportlab-0:2.5-9.el7_7.1.s390x",
"relates_to_product_reference": "7Server-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.5-9.el7_7.1.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.src"
},
"product_reference": "python-reportlab-0:2.5-9.el7_7.1.src",
"relates_to_product_reference": "7Server-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.5-9.el7_7.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.x86_64"
},
"product_reference": "python-reportlab-0:2.5-9.el7_7.1.x86_64",
"relates_to_product_reference": "7Server-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64"
},
"product_reference": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64",
"relates_to_product_reference": "7Server-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le"
},
"product_reference": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le",
"relates_to_product_reference": "7Server-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x"
},
"product_reference": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x",
"relates_to_product_reference": "7Server-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64"
},
"product_reference": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64",
"relates_to_product_reference": "7Server-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-docs-0:2.5-9.el7_7.1.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64"
},
"product_reference": "python-reportlab-docs-0:2.5-9.el7_7.1.ppc64",
"relates_to_product_reference": "7Server-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le"
},
"product_reference": "python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le",
"relates_to_product_reference": "7Server-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-docs-0:2.5-9.el7_7.1.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.s390x"
},
"product_reference": "python-reportlab-docs-0:2.5-9.el7_7.1.s390x",
"relates_to_product_reference": "7Server-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-docs-0:2.5-9.el7_7.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.x86_64"
},
"product_reference": "python-reportlab-docs-0:2.5-9.el7_7.1.x86_64",
"relates_to_product_reference": "7Server-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.5-9.el7_7.1.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64"
},
"product_reference": "python-reportlab-0:2.5-9.el7_7.1.ppc64",
"relates_to_product_reference": "7Workstation-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.5-9.el7_7.1.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64le"
},
"product_reference": "python-reportlab-0:2.5-9.el7_7.1.ppc64le",
"relates_to_product_reference": "7Workstation-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.5-9.el7_7.1.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.s390x"
},
"product_reference": "python-reportlab-0:2.5-9.el7_7.1.s390x",
"relates_to_product_reference": "7Workstation-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.5-9.el7_7.1.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.src"
},
"product_reference": "python-reportlab-0:2.5-9.el7_7.1.src",
"relates_to_product_reference": "7Workstation-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.5-9.el7_7.1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.x86_64"
},
"product_reference": "python-reportlab-0:2.5-9.el7_7.1.x86_64",
"relates_to_product_reference": "7Workstation-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64"
},
"product_reference": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64",
"relates_to_product_reference": "7Workstation-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le"
},
"product_reference": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le",
"relates_to_product_reference": "7Workstation-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x"
},
"product_reference": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x",
"relates_to_product_reference": "7Workstation-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64"
},
"product_reference": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64",
"relates_to_product_reference": "7Workstation-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-docs-0:2.5-9.el7_7.1.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64"
},
"product_reference": "python-reportlab-docs-0:2.5-9.el7_7.1.ppc64",
"relates_to_product_reference": "7Workstation-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le"
},
"product_reference": "python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le",
"relates_to_product_reference": "7Workstation-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-docs-0:2.5-9.el7_7.1.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.s390x"
},
"product_reference": "python-reportlab-docs-0:2.5-9.el7_7.1.s390x",
"relates_to_product_reference": "7Workstation-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-docs-0:2.5-9.el7_7.1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.x86_64"
},
"product_reference": "python-reportlab-docs-0:2.5-9.el7_7.1.x86_64",
"relates_to_product_reference": "7Workstation-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.5-9.el7_7.1.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64"
},
"product_reference": "python-reportlab-0:2.5-9.el7_7.1.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.5-9.el7_7.1.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64le"
},
"product_reference": "python-reportlab-0:2.5-9.el7_7.1.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.5-9.el7_7.1.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.s390x"
},
"product_reference": "python-reportlab-0:2.5-9.el7_7.1.s390x",
"relates_to_product_reference": "7Workstation-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.5-9.el7_7.1.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.src"
},
"product_reference": "python-reportlab-0:2.5-9.el7_7.1.src",
"relates_to_product_reference": "7Workstation-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-0:2.5-9.el7_7.1.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.x86_64"
},
"product_reference": "python-reportlab-0:2.5-9.el7_7.1.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64"
},
"product_reference": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le"
},
"product_reference": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x"
},
"product_reference": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x",
"relates_to_product_reference": "7Workstation-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64"
},
"product_reference": "python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-docs-0:2.5-9.el7_7.1.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64"
},
"product_reference": "python-reportlab-docs-0:2.5-9.el7_7.1.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le"
},
"product_reference": "python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-docs-0:2.5-9.el7_7.1.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.s390x"
},
"product_reference": "python-reportlab-docs-0:2.5-9.el7_7.1.s390x",
"relates_to_product_reference": "7Workstation-optional-7.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-docs-0:2.5-9.el7_7.1.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.x86_64"
},
"product_reference": "python-reportlab-docs-0:2.5-9.el7_7.1.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.7.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-17626",
"cwe": {
"id": "CWE-95",
"name": "Improper Neutralization of Directives in Dynamically Evaluated Code (\u0027Eval Injection\u0027)"
},
"discovery_date": "2019-10-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1769661"
}
],
"notes": [
{
"category": "description",
"text": "A code injection vulnerability in python-reportlab allows an attacker to execute code while parsing a color attribute. An application that uses python-reportlab to parse untrusted input files may be vulnerable to this flaw and allow remote code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python-reportlab: code injection in colors.py allows attacker to execute code",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability will not be fixed in Red Hat Quay because it only affects a non-supported feature which is disabled behind a feature flag.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64",
"7Client-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64le",
"7Client-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.s390x",
"7Client-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.src",
"7Client-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.x86_64",
"7Client-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64",
"7Client-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le",
"7Client-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x",
"7Client-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64",
"7Client-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64",
"7Client-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le",
"7Client-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.s390x",
"7Client-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.x86_64",
"7Client-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64",
"7Client-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64le",
"7Client-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.s390x",
"7Client-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.src",
"7Client-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.x86_64",
"7Client-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64",
"7Client-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le",
"7Client-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x",
"7Client-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64",
"7Client-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64",
"7Client-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le",
"7Client-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.s390x",
"7Client-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.x86_64",
"7Server-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64",
"7Server-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64le",
"7Server-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.s390x",
"7Server-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.src",
"7Server-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.x86_64",
"7Server-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64",
"7Server-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le",
"7Server-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x",
"7Server-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64",
"7Server-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64",
"7Server-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le",
"7Server-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.s390x",
"7Server-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.x86_64",
"7Server-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64",
"7Server-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64le",
"7Server-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.s390x",
"7Server-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.src",
"7Server-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.x86_64",
"7Server-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64",
"7Server-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le",
"7Server-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x",
"7Server-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64",
"7Server-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64",
"7Server-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le",
"7Server-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.s390x",
"7Server-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.x86_64",
"7Workstation-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64",
"7Workstation-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64le",
"7Workstation-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.s390x",
"7Workstation-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.src",
"7Workstation-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.x86_64",
"7Workstation-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64",
"7Workstation-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le",
"7Workstation-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x",
"7Workstation-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64",
"7Workstation-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64",
"7Workstation-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le",
"7Workstation-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.s390x",
"7Workstation-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.x86_64",
"7Workstation-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64",
"7Workstation-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64le",
"7Workstation-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.s390x",
"7Workstation-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.src",
"7Workstation-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.x86_64",
"7Workstation-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64",
"7Workstation-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le",
"7Workstation-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x",
"7Workstation-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64",
"7Workstation-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64",
"7Workstation-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le",
"7Workstation-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.s390x",
"7Workstation-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-17626"
},
{
"category": "external",
"summary": "RHBZ#1769661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1769661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-17626",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-17626"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-17626",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17626"
}
],
"release_date": "2019-10-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-01-21T22:48:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64",
"7Client-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64le",
"7Client-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.s390x",
"7Client-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.src",
"7Client-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.x86_64",
"7Client-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64",
"7Client-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le",
"7Client-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x",
"7Client-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64",
"7Client-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64",
"7Client-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le",
"7Client-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.s390x",
"7Client-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.x86_64",
"7Client-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64",
"7Client-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64le",
"7Client-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.s390x",
"7Client-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.src",
"7Client-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.x86_64",
"7Client-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64",
"7Client-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le",
"7Client-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x",
"7Client-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64",
"7Client-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64",
"7Client-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le",
"7Client-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.s390x",
"7Client-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.x86_64",
"7Server-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64",
"7Server-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64le",
"7Server-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.s390x",
"7Server-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.src",
"7Server-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.x86_64",
"7Server-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64",
"7Server-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le",
"7Server-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x",
"7Server-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64",
"7Server-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64",
"7Server-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le",
"7Server-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.s390x",
"7Server-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.x86_64",
"7Server-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64",
"7Server-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64le",
"7Server-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.s390x",
"7Server-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.src",
"7Server-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.x86_64",
"7Server-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64",
"7Server-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le",
"7Server-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x",
"7Server-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64",
"7Server-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64",
"7Server-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le",
"7Server-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.s390x",
"7Server-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.x86_64",
"7Workstation-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64",
"7Workstation-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64le",
"7Workstation-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.s390x",
"7Workstation-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.src",
"7Workstation-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.x86_64",
"7Workstation-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64",
"7Workstation-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le",
"7Workstation-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x",
"7Workstation-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64",
"7Workstation-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64",
"7Workstation-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le",
"7Workstation-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.s390x",
"7Workstation-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.x86_64",
"7Workstation-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64",
"7Workstation-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64le",
"7Workstation-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.s390x",
"7Workstation-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.src",
"7Workstation-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.x86_64",
"7Workstation-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64",
"7Workstation-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le",
"7Workstation-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x",
"7Workstation-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64",
"7Workstation-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64",
"7Workstation-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le",
"7Workstation-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.s390x",
"7Workstation-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:0195"
},
{
"category": "workaround",
"details": "No known mitigation available.",
"product_ids": [
"7Client-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64",
"7Client-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64le",
"7Client-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.s390x",
"7Client-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.src",
"7Client-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.x86_64",
"7Client-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64",
"7Client-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le",
"7Client-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x",
"7Client-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64",
"7Client-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64",
"7Client-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le",
"7Client-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.s390x",
"7Client-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.x86_64",
"7Client-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64",
"7Client-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64le",
"7Client-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.s390x",
"7Client-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.src",
"7Client-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.x86_64",
"7Client-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64",
"7Client-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le",
"7Client-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x",
"7Client-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64",
"7Client-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64",
"7Client-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le",
"7Client-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.s390x",
"7Client-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.x86_64",
"7Server-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64",
"7Server-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64le",
"7Server-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.s390x",
"7Server-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.src",
"7Server-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.x86_64",
"7Server-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64",
"7Server-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le",
"7Server-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x",
"7Server-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64",
"7Server-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64",
"7Server-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le",
"7Server-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.s390x",
"7Server-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.x86_64",
"7Server-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64",
"7Server-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64le",
"7Server-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.s390x",
"7Server-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.src",
"7Server-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.x86_64",
"7Server-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64",
"7Server-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le",
"7Server-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x",
"7Server-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64",
"7Server-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64",
"7Server-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le",
"7Server-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.s390x",
"7Server-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.x86_64",
"7Workstation-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64",
"7Workstation-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64le",
"7Workstation-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.s390x",
"7Workstation-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.src",
"7Workstation-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.x86_64",
"7Workstation-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64",
"7Workstation-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le",
"7Workstation-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x",
"7Workstation-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64",
"7Workstation-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64",
"7Workstation-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le",
"7Workstation-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.s390x",
"7Workstation-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.x86_64",
"7Workstation-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64",
"7Workstation-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64le",
"7Workstation-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.s390x",
"7Workstation-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.src",
"7Workstation-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.x86_64",
"7Workstation-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64",
"7Workstation-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le",
"7Workstation-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x",
"7Workstation-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64",
"7Workstation-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64",
"7Workstation-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le",
"7Workstation-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.s390x",
"7Workstation-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64",
"7Client-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64le",
"7Client-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.s390x",
"7Client-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.src",
"7Client-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.x86_64",
"7Client-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64",
"7Client-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le",
"7Client-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x",
"7Client-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64",
"7Client-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64",
"7Client-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le",
"7Client-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.s390x",
"7Client-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.x86_64",
"7Client-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64",
"7Client-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64le",
"7Client-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.s390x",
"7Client-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.src",
"7Client-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.x86_64",
"7Client-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64",
"7Client-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le",
"7Client-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x",
"7Client-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64",
"7Client-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64",
"7Client-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le",
"7Client-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.s390x",
"7Client-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.x86_64",
"7Server-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64",
"7Server-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64le",
"7Server-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.s390x",
"7Server-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.src",
"7Server-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.x86_64",
"7Server-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64",
"7Server-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le",
"7Server-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x",
"7Server-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64",
"7Server-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64",
"7Server-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le",
"7Server-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.s390x",
"7Server-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.x86_64",
"7Server-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64",
"7Server-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64le",
"7Server-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.s390x",
"7Server-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.src",
"7Server-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.x86_64",
"7Server-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64",
"7Server-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le",
"7Server-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x",
"7Server-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64",
"7Server-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64",
"7Server-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le",
"7Server-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.s390x",
"7Server-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.x86_64",
"7Workstation-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64",
"7Workstation-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64le",
"7Workstation-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.s390x",
"7Workstation-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.src",
"7Workstation-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.x86_64",
"7Workstation-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64",
"7Workstation-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le",
"7Workstation-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x",
"7Workstation-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64",
"7Workstation-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64",
"7Workstation-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le",
"7Workstation-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.s390x",
"7Workstation-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.x86_64",
"7Workstation-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64",
"7Workstation-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.ppc64le",
"7Workstation-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.s390x",
"7Workstation-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.src",
"7Workstation-optional-7.7.Z:python-reportlab-0:2.5-9.el7_7.1.x86_64",
"7Workstation-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64",
"7Workstation-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.ppc64le",
"7Workstation-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.s390x",
"7Workstation-optional-7.7.Z:python-reportlab-debuginfo-0:2.5-9.el7_7.1.x86_64",
"7Workstation-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64",
"7Workstation-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.ppc64le",
"7Workstation-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.s390x",
"7Workstation-optional-7.7.Z:python-reportlab-docs-0:2.5-9.el7_7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python-reportlab: code injection in colors.py allows attacker to execute code"
}
]
}
suse-su-2020:0324-1
Vulnerability from csaf_suse
Published
2020-02-05 09:45
Modified
2020-02-05 09:45
Summary
Security update for python-reportlab
Notes
Title of the patch
Security update for python-reportlab
Description of the patch
This update for python-reportlab fixes the following issues:
- CVE-2019-17626: Fixed a potential remote code execution because of the lack of input sanitization in toColor() (bsc#1154370).
Patchnames
SUSE-2020-324,SUSE-SLE-WE-12-SP4-2020-324,SUSE-SLE-WE-12-SP5-2020-324
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for python-reportlab",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for python-reportlab fixes the following issues:\n\n- CVE-2019-17626: Fixed a potential remote code execution because of the lack of input sanitization in toColor() (bsc#1154370).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2020-324,SUSE-SLE-WE-12-SP4-2020-324,SUSE-SLE-WE-12-SP5-2020-324",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2020_0324-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2020:0324-1",
"url": "https://www.suse.com/support/update/announcement/2020/suse-su-20200324-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2020:0324-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2020-February/006451.html"
},
{
"category": "self",
"summary": "SUSE Bug 1154370",
"url": "https://bugzilla.suse.com/1154370"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-17626 page",
"url": "https://www.suse.com/security/cve/CVE-2019-17626/"
}
],
"title": "Security update for python-reportlab",
"tracking": {
"current_release_date": "2020-02-05T09:45:38Z",
"generator": {
"date": "2020-02-05T09:45:38Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2020:0324-1",
"initial_release_date": "2020-02-05T09:45:38Z",
"revision_history": [
{
"date": "2020-02-05T09:45:38Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "python-reportlab-2.7-3.3.1.aarch64",
"product": {
"name": "python-reportlab-2.7-3.3.1.aarch64",
"product_id": "python-reportlab-2.7-3.3.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "python-reportlab-2.7-3.3.1.i586",
"product": {
"name": "python-reportlab-2.7-3.3.1.i586",
"product_id": "python-reportlab-2.7-3.3.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "python-reportlab-2.7-3.3.1.ppc64le",
"product": {
"name": "python-reportlab-2.7-3.3.1.ppc64le",
"product_id": "python-reportlab-2.7-3.3.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "python-reportlab-2.7-3.3.1.s390",
"product": {
"name": "python-reportlab-2.7-3.3.1.s390",
"product_id": "python-reportlab-2.7-3.3.1.s390"
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "python-reportlab-2.7-3.3.1.s390x",
"product": {
"name": "python-reportlab-2.7-3.3.1.s390x",
"product_id": "python-reportlab-2.7-3.3.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "python-reportlab-2.7-3.3.1.x86_64",
"product": {
"name": "python-reportlab-2.7-3.3.1.x86_64",
"product_id": "python-reportlab-2.7-3.3.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Workstation Extension 12 SP4",
"product": {
"name": "SUSE Linux Enterprise Workstation Extension 12 SP4",
"product_id": "SUSE Linux Enterprise Workstation Extension 12 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-we:12:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Workstation Extension 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Workstation Extension 12 SP5",
"product_id": "SUSE Linux Enterprise Workstation Extension 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-we:12:sp5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-2.7-3.3.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12 SP4",
"product_id": "SUSE Linux Enterprise Workstation Extension 12 SP4:python-reportlab-2.7-3.3.1.x86_64"
},
"product_reference": "python-reportlab-2.7-3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-reportlab-2.7-3.3.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12 SP5",
"product_id": "SUSE Linux Enterprise Workstation Extension 12 SP5:python-reportlab-2.7-3.3.1.x86_64"
},
"product_reference": "python-reportlab-2.7-3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 12 SP5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-17626",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-17626"
}
],
"notes": [
{
"category": "general",
"text": "ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with \u0027\u003cspan color=\"\u0027 followed by arbitrary Python code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 12 SP4:python-reportlab-2.7-3.3.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP5:python-reportlab-2.7-3.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-17626",
"url": "https://www.suse.com/security/cve/CVE-2019-17626"
},
{
"category": "external",
"summary": "SUSE Bug 1154370 for CVE-2019-17626",
"url": "https://bugzilla.suse.com/1154370"
},
{
"category": "external",
"summary": "SUSE Bug 1215560 for CVE-2019-17626",
"url": "https://bugzilla.suse.com/1215560"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 12 SP4:python-reportlab-2.7-3.3.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP5:python-reportlab-2.7-3.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 12 SP4:python-reportlab-2.7-3.3.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP5:python-reportlab-2.7-3.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-02-05T09:45:38Z",
"details": "important"
}
],
"title": "CVE-2019-17626"
}
]
}
gsd-2019-17626
Vulnerability from gsd
Modified
2023-12-13 01:23
Details
ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with '<span color="' followed by arbitrary Python code.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2019-17626",
"description": "ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with \u0027\u003cspan color=\"\u0027 followed by arbitrary Python code.",
"id": "GSD-2019-17626",
"references": [
"https://www.suse.com/security/cve/CVE-2019-17626.html",
"https://www.debian.org/security/2020/dsa-4663",
"https://access.redhat.com/errata/RHSA-2020:0230",
"https://access.redhat.com/errata/RHSA-2020:0201",
"https://access.redhat.com/errata/RHSA-2020:0197",
"https://access.redhat.com/errata/RHSA-2020:0195",
"https://ubuntu.com/security/CVE-2019-17626",
"https://advisories.mageia.org/CVE-2019-17626.html",
"https://linux.oracle.com/cve/CVE-2019-17626.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2019-17626"
],
"details": "ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with \u0027\u003cspan color=\"\u0027 followed by arbitrary Python code.",
"id": "GSD-2019-17626",
"modified": "2023-12-13T01:23:44.641006Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2019-17626",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with \u0027\u003cspan color=\"\u0027 followed by arbitrary Python code."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://bitbucket.org/rptlab/reportlab/issues/199/eval-in-colorspy-leads-to-remote-code",
"refsource": "MISC",
"url": "https://bitbucket.org/rptlab/reportlab/issues/199/eval-in-colorspy-leads-to-remote-code"
},
{
"name": "https://bitbucket.org/rptlab/reportlab/src/default/CHANGES.md",
"refsource": "MISC",
"url": "https://bitbucket.org/rptlab/reportlab/src/default/CHANGES.md"
},
{
"name": "RHSA-2020:0197",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2020:0197"
},
{
"name": "RHSA-2020:0195",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2020:0195"
},
{
"name": "FEDORA-2020-d2fb999600",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZZPHP2BJSTP4IYCSJRQINP763IHO6ASL/"
},
{
"name": "RHSA-2020:0230",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2020:0230"
},
{
"name": "RHSA-2020:0201",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2020:0201"
},
{
"name": "FEDORA-2020-f3e0ba2f79",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NSCTOE3DITFICY2XKBYZ5WAF5TSQ52DM/"
},
{
"name": "openSUSE-SU-2020:0160",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00002.html"
},
{
"name": "USN-4273-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/4273-1/"
},
{
"name": "[debian-lts-announce] 20200220 [SECURITY] [DLA 2112-1] python-reportlab security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2020/02/msg00019.html"
},
{
"name": "DSA-4663",
"refsource": "DEBIAN",
"url": "https://www.debian.org/security/2020/dsa-4663"
},
{
"name": "GLSA-202007-35",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/202007-35"
}
]
}
},
"gitlab.com": {
"advisories": [
{
"affected_range": "\u003c=3.5.26",
"affected_versions": "All versions up to 3.5.26",
"cvss_v2": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"cwe_ids": [
"CWE-1035",
"CWE-78",
"CWE-91",
"CWE-937"
],
"date": "2022-06-27",
"description": "ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with \u0027\u003cspan color=\"\u0027 followed by arbitrary Python code.",
"fixed_versions": [
"3.5.28"
],
"identifier": "CVE-2019-17626",
"identifiers": [
"GHSA-qpg2-vx7j-3869",
"CVE-2019-17626"
],
"not_impacted": "All versions after 3.5.26",
"package_slug": "pypi/reportlab",
"pubdate": "2022-05-24",
"solution": "Upgrade to version 3.5.28 or above.",
"title": "XML Injection (aka Blind XPath Injection)",
"urls": [
"https://nvd.nist.gov/vuln/detail/CVE-2019-17626",
"https://access.redhat.com/errata/RHSA-2020:0195",
"https://access.redhat.com/errata/RHSA-2020:0197",
"https://access.redhat.com/errata/RHSA-2020:0201",
"https://access.redhat.com/errata/RHSA-2020:0230",
"https://bitbucket.org/rptlab/reportlab/issues/199/eval-in-colorspy-leads-to-remote-code",
"https://bitbucket.org/rptlab/reportlab/src/default/CHANGES.md",
"https://hg.reportlab.com/hg-public/reportlab/rev/51a521ad7dd3",
"https://lists.debian.org/debian-lts-announce/2020/02/msg00019.html",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NSCTOE3DITFICY2XKBYZ5WAF5TSQ52DM/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZZPHP2BJSTP4IYCSJRQINP763IHO6ASL/",
"https://security.gentoo.org/glsa/202007-35",
"https://usn.ubuntu.com/4273-1/",
"https://www.debian.org/security/2020/dsa-4663",
"http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00002.html",
"https://access.redhat.com/security/cve/cve-2019-17626",
"https://web.archive.org/web/20191016111823/https://bitbucket.org/rptlab/reportlab/issues/199/eval-in-colorspy-leads-to-remote-code",
"https://github.com/advisories/GHSA-qpg2-vx7j-3869"
],
"uuid": "77c52ba8-c560-4ac0-9ccc-0c956d71f110"
}
]
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:reportlab:reportlab:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "3.5.26",
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2019-17626"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with \u0027\u003cspan color=\"\u0027 followed by arbitrary Python code."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-91"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://bitbucket.org/rptlab/reportlab/issues/199/eval-in-colorspy-leads-to-remote-code",
"refsource": "MISC",
"tags": [
"Exploit",
"Issue Tracking",
"Third Party Advisory"
],
"url": "https://bitbucket.org/rptlab/reportlab/issues/199/eval-in-colorspy-leads-to-remote-code"
},
{
"name": "https://bitbucket.org/rptlab/reportlab/src/default/CHANGES.md",
"refsource": "MISC",
"tags": [
"Release Notes",
"Third Party Advisory"
],
"url": "https://bitbucket.org/rptlab/reportlab/src/default/CHANGES.md"
},
{
"name": "RHSA-2020:0197",
"refsource": "REDHAT",
"tags": [],
"url": "https://access.redhat.com/errata/RHSA-2020:0197"
},
{
"name": "RHSA-2020:0195",
"refsource": "REDHAT",
"tags": [],
"url": "https://access.redhat.com/errata/RHSA-2020:0195"
},
{
"name": "FEDORA-2020-d2fb999600",
"refsource": "FEDORA",
"tags": [],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZZPHP2BJSTP4IYCSJRQINP763IHO6ASL/"
},
{
"name": "RHSA-2020:0201",
"refsource": "REDHAT",
"tags": [],
"url": "https://access.redhat.com/errata/RHSA-2020:0201"
},
{
"name": "RHSA-2020:0230",
"refsource": "REDHAT",
"tags": [],
"url": "https://access.redhat.com/errata/RHSA-2020:0230"
},
{
"name": "FEDORA-2020-f3e0ba2f79",
"refsource": "FEDORA",
"tags": [],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NSCTOE3DITFICY2XKBYZ5WAF5TSQ52DM/"
},
{
"name": "openSUSE-SU-2020:0160",
"refsource": "SUSE",
"tags": [],
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00002.html"
},
{
"name": "USN-4273-1",
"refsource": "UBUNTU",
"tags": [],
"url": "https://usn.ubuntu.com/4273-1/"
},
{
"name": "[debian-lts-announce] 20200220 [SECURITY] [DLA 2112-1] python-reportlab security update",
"refsource": "MLIST",
"tags": [],
"url": "https://lists.debian.org/debian-lts-announce/2020/02/msg00019.html"
},
{
"name": "DSA-4663",
"refsource": "DEBIAN",
"tags": [],
"url": "https://www.debian.org/security/2020/dsa-4663"
},
{
"name": "GLSA-202007-35",
"refsource": "GENTOO",
"tags": [],
"url": "https://security.gentoo.org/glsa/202007-35"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"userInteractionRequired": false
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
},
"lastModifiedDate": "2020-07-27T03:15Z",
"publishedDate": "2019-10-16T12:15Z"
}
}
}
fkie_cve-2019-17626
Vulnerability from fkie_nvd
Published
2019-10-16 12:15
Modified
2024-11-21 04:32
Severity ?
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with '<span color="' followed by arbitrary Python code.
References
| ▶ | URL | Tags | |
|---|---|---|---|
| cve@mitre.org | http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00002.html | ||
| cve@mitre.org | https://access.redhat.com/errata/RHSA-2020:0195 | ||
| cve@mitre.org | https://access.redhat.com/errata/RHSA-2020:0197 | ||
| cve@mitre.org | https://access.redhat.com/errata/RHSA-2020:0201 | ||
| cve@mitre.org | https://access.redhat.com/errata/RHSA-2020:0230 | ||
| cve@mitre.org | https://bitbucket.org/rptlab/reportlab/issues/199/eval-in-colorspy-leads-to-remote-code | Exploit, Issue Tracking, Third Party Advisory | |
| cve@mitre.org | https://bitbucket.org/rptlab/reportlab/src/default/CHANGES.md | Release Notes, Third Party Advisory | |
| cve@mitre.org | https://lists.debian.org/debian-lts-announce/2020/02/msg00019.html | ||
| cve@mitre.org | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NSCTOE3DITFICY2XKBYZ5WAF5TSQ52DM/ | ||
| cve@mitre.org | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZPHP2BJSTP4IYCSJRQINP763IHO6ASL/ | ||
| cve@mitre.org | https://security.gentoo.org/glsa/202007-35 | ||
| cve@mitre.org | https://security.netapp.com/advisory/ntap-20240719-0006/ | ||
| cve@mitre.org | https://usn.ubuntu.com/4273-1/ | ||
| cve@mitre.org | https://www.debian.org/security/2020/dsa-4663 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00002.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2020:0195 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2020:0197 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2020:0201 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2020:0230 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://bitbucket.org/rptlab/reportlab/issues/199/eval-in-colorspy-leads-to-remote-code | Exploit, Issue Tracking, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://bitbucket.org/rptlab/reportlab/src/default/CHANGES.md | Release Notes, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.debian.org/debian-lts-announce/2020/02/msg00019.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NSCTOE3DITFICY2XKBYZ5WAF5TSQ52DM/ | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZPHP2BJSTP4IYCSJRQINP763IHO6ASL/ | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://security.gentoo.org/glsa/202007-35 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://security.netapp.com/advisory/ntap-20240719-0006/ | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://usn.ubuntu.com/4273-1/ | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://www.debian.org/security/2020/dsa-4663 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:reportlab:reportlab:*:*:*:*:*:*:*:*",
"matchCriteriaId": "55A25088-FC46-426E-B3CF-E57459E5DE5F",
"versionEndIncluding": "3.5.26",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with \u0027\u003cspan color=\"\u0027 followed by arbitrary Python code."
},
{
"lang": "es",
"value": "ReportLab versiones hasta 3.5.26, permite la ejecuci\u00f3n de c\u00f3digo remota debido a la funci\u00f3n toColor(eval(arg)) en el archivo colors.py, como es demostrado por un documento XML dise\u00f1ado con \u0027(span color =\"\u0027 seguido de un c\u00f3digo arbitrario de Python."
}
],
"id": "CVE-2019-17626",
"lastModified": "2024-11-21T04:32:39.353",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
},
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9,
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
]
},
"published": "2019-10-16T12:15:12.010",
"references": [
{
"source": "cve@mitre.org",
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00002.html"
},
{
"source": "cve@mitre.org",
"url": "https://access.redhat.com/errata/RHSA-2020:0195"
},
{
"source": "cve@mitre.org",
"url": "https://access.redhat.com/errata/RHSA-2020:0197"
},
{
"source": "cve@mitre.org",
"url": "https://access.redhat.com/errata/RHSA-2020:0201"
},
{
"source": "cve@mitre.org",
"url": "https://access.redhat.com/errata/RHSA-2020:0230"
},
{
"source": "cve@mitre.org",
"tags": [
"Exploit",
"Issue Tracking",
"Third Party Advisory"
],
"url": "https://bitbucket.org/rptlab/reportlab/issues/199/eval-in-colorspy-leads-to-remote-code"
},
{
"source": "cve@mitre.org",
"tags": [
"Release Notes",
"Third Party Advisory"
],
"url": "https://bitbucket.org/rptlab/reportlab/src/default/CHANGES.md"
},
{
"source": "cve@mitre.org",
"url": "https://lists.debian.org/debian-lts-announce/2020/02/msg00019.html"
},
{
"source": "cve@mitre.org",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NSCTOE3DITFICY2XKBYZ5WAF5TSQ52DM/"
},
{
"source": "cve@mitre.org",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZPHP2BJSTP4IYCSJRQINP763IHO6ASL/"
},
{
"source": "cve@mitre.org",
"url": "https://security.gentoo.org/glsa/202007-35"
},
{
"source": "cve@mitre.org",
"url": "https://security.netapp.com/advisory/ntap-20240719-0006/"
},
{
"source": "cve@mitre.org",
"url": "https://usn.ubuntu.com/4273-1/"
},
{
"source": "cve@mitre.org",
"url": "https://www.debian.org/security/2020/dsa-4663"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00002.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://access.redhat.com/errata/RHSA-2020:0195"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://access.redhat.com/errata/RHSA-2020:0197"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://access.redhat.com/errata/RHSA-2020:0201"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://access.redhat.com/errata/RHSA-2020:0230"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Issue Tracking",
"Third Party Advisory"
],
"url": "https://bitbucket.org/rptlab/reportlab/issues/199/eval-in-colorspy-leads-to-remote-code"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Release Notes",
"Third Party Advisory"
],
"url": "https://bitbucket.org/rptlab/reportlab/src/default/CHANGES.md"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.debian.org/debian-lts-announce/2020/02/msg00019.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NSCTOE3DITFICY2XKBYZ5WAF5TSQ52DM/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZPHP2BJSTP4IYCSJRQINP763IHO6ASL/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://security.gentoo.org/glsa/202007-35"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://security.netapp.com/advisory/ntap-20240719-0006/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://usn.ubuntu.com/4273-1/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://www.debian.org/security/2020/dsa-4663"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-91"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-91"
}
],
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
]
}
ghsa-qpg2-vx7j-3869
Vulnerability from github
Published
2022-05-24 22:00
Modified
2024-10-26 22:32
Severity ?
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.3 (Critical) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
9.3 (Critical) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
VLAI Severity ?
Summary
XML Injection in ReportLab
Details
ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with '<span color="' followed by arbitrary Python code.
{
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "reportlab"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3.5.28"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [
"CVE-2019-17626"
],
"database_specific": {
"cwe_ids": [
"CWE-91"
],
"github_reviewed": true,
"github_reviewed_at": "2022-06-27T16:52:31Z",
"nvd_published_at": "2019-10-16T12:15:00Z",
"severity": "CRITICAL"
},
"details": "ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with \u0027\u003cspan color=\"\u0027 followed by arbitrary Python code.",
"id": "GHSA-qpg2-vx7j-3869",
"modified": "2024-10-26T22:32:16Z",
"published": "2022-05-24T22:00:57Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17626"
},
{
"type": "WEB",
"url": "https://www.debian.org/security/2020/dsa-4663"
},
{
"type": "WEB",
"url": "https://web.archive.org/web/20191016111823/https://bitbucket.org/rptlab/reportlab/issues/199/eval-in-colorspy-leads-to-remote-code"
},
{
"type": "WEB",
"url": "https://usn.ubuntu.com/4273-1"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20240719-0006"
},
{
"type": "WEB",
"url": "https://security.gentoo.org/glsa/202007-35"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZZPHP2BJSTP4IYCSJRQINP763IHO6ASL"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NSCTOE3DITFICY2XKBYZ5WAF5TSQ52DM"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZPHP2BJSTP4IYCSJRQINP763IHO6ASL"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NSCTOE3DITFICY2XKBYZ5WAF5TSQ52DM"
},
{
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2020/02/msg00019.html"
},
{
"type": "WEB",
"url": "https://hg.reportlab.com/hg-public/reportlab/rev/51a521ad7dd3"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/reportlab/PYSEC-2019-117.yaml"
},
{
"type": "ADVISORY",
"url": "https://github.com/advisories/GHSA-qpg2-vx7j-3869"
},
{
"type": "PACKAGE",
"url": "https://github.com/MrBitBucket/reportlab-mirror"
},
{
"type": "WEB",
"url": "https://bitbucket.org/rptlab/reportlab/src/default/CHANGES.md"
},
{
"type": "WEB",
"url": "https://bitbucket.org/rptlab/reportlab/issues/199/eval-in-colorspy-leads-to-remote-code"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/cve-2019-17626"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2020:0230"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2020:0201"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2020:0197"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2020:0195"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00002.html"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"type": "CVSS_V4"
}
],
"summary": "XML Injection in ReportLab"
}
pysec-2019-117
Vulnerability from pysec
Published
2019-10-16 12:15
Modified
2020-07-27 03:15
Details
ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with '<span color="' followed by arbitrary Python code.
Impacted products
| Name | purl | reportlab | pkg:pypi/reportlab |
|---|
Aliases
{
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "reportlab",
"purl": "pkg:pypi/reportlab"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3.5.28"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2.0",
"2.3",
"2.4",
"2.5",
"2.6",
"2.7",
"3.0",
"3.1.8",
"3.1.44",
"3.2.0",
"3.3.0",
"3.4.0",
"3.5.0",
"3.5.1",
"3.5.2",
"3.5.4",
"3.5.5",
"3.5.6",
"3.5.8",
"3.5.9",
"3.5.10",
"3.5.11",
"3.5.12",
"3.5.13",
"3.5.16",
"3.5.17",
"3.5.18",
"3.5.19",
"3.5.20",
"3.5.21",
"3.5.23",
"3.5.26"
]
}
],
"aliases": [
"CVE-2019-17626",
"GHSA-qpg2-vx7j-3869"
],
"details": "ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with \u0027\u003cspan color=\"\u0027 followed by arbitrary Python code.",
"id": "PYSEC-2019-117",
"modified": "2020-07-27T03:15:00Z",
"published": "2019-10-16T12:15:00Z",
"references": [
{
"type": "WEB",
"url": "https://bitbucket.org/rptlab/reportlab/issues/199/eval-in-colorspy-leads-to-remote-code"
},
{
"type": "WEB",
"url": "https://bitbucket.org/rptlab/reportlab/src/default/CHANGES.md"
},
{
"type": "ADVISORY",
"url": "https://access.redhat.com/errata/RHSA-2020:0197"
},
{
"type": "ADVISORY",
"url": "https://access.redhat.com/errata/RHSA-2020:0195"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZZPHP2BJSTP4IYCSJRQINP763IHO6ASL/"
},
{
"type": "ADVISORY",
"url": "https://access.redhat.com/errata/RHSA-2020:0201"
},
{
"type": "ADVISORY",
"url": "https://access.redhat.com/errata/RHSA-2020:0230"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NSCTOE3DITFICY2XKBYZ5WAF5TSQ52DM/"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00002.html"
},
{
"type": "WEB",
"url": "https://usn.ubuntu.com/4273-1/"
},
{
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2020/02/msg00019.html"
},
{
"type": "ADVISORY",
"url": "https://www.debian.org/security/2020/dsa-4663"
},
{
"type": "ADVISORY",
"url": "https://security.gentoo.org/glsa/202007-35"
},
{
"type": "ADVISORY",
"url": "https://github.com/advisories/GHSA-qpg2-vx7j-3869"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…