GCVE-110-MAGEIA-2020-59

Advisory Published

Vulnetix · Advisory published January 28, 2020

A code injection vulnerability in python-reportlab allows an attacker to execute code while parsing a color attribute. An application that uses python-reportlab to parse untrusted input files may be vulnerable to this flaw and allow remote code execution (CVE-2019-17626).

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	python-reportlab	0 (affected), 3.5.34-1.mga7 (unaffected)	—

References

Updated python-reportlab packages fix security vulnerability

advisory

Updated python-reportlab packages fix security vulnerability

issue

Updated python-reportlab packages fix security vulnerability

url

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON