CVE-2019-19450

Synopsis Important: python-reportlab security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for python-reportlab is now available for Red Hat Enterprise Linux 81 Update Services for SAP SolutionsRed H ...

Synopsis Important: python-reportlab security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for python-reportlab is now available for Red Hat Enterprise Linux 84 Advanced Mission Critical Update Suppor ...

Synopsis Important: python-reportlab security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for python-reportlab is now available for Red Hat Enterprise Linux 86 Extended Update SupportRed Hat Product ...

Synopsis Important: python-reportlab security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for python-reportlab is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this u ...

Synopsis Important: python-reportlab security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for python-reportlab is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this u ...

paraparser in ReportLab before 3531 allows remote code execution because start_unichar in paraparserpy evaluates untrusted user input in a unichar element in a crafted XML document with '<unichar code="' followed by arbitrary Python code, a similar issue to CVE-2019-17626 (CVE-2019-19450) ...

DescriptionThe MITRE CVE dictionary describes this issue as: paraparser in ReportLab before 3531 allows remote code execution because start_unichar in paraparserpy evaluates untrusted user input in a unichar element in a crafted XML document with '<unichar code="' followed by arbitrary Python code, a similar issue to CVE-2019-176 ...