Alerts This Week
Warning Icon 1 626
Alerts This Week
Warning Icon 1 626

Fedora 39: FEDORA-2024-6ec4e78241 Critical: ReportLab Code Injection

fedora
Calendar Grey April 28, 2024
Dist Fedora Esm H88
Fedora 39 brings crucial updates to the python-reportlab package, enhancing security and improving PDF generation while addressing identified vulnerabilities
Release 4.2.0

Summary

This is the ReportLab PDF Toolkit. It allows rapid creation of rich PDF

documents, and also creation of charts in a variety of bitmap and vector

formats.

Update Information:

Release 4.2.0

Topics%20covered

Topics Covered

security advisory update critical Fedora code injection python-reportlab

Change Log

* Fri Apr 19 2024 Antonio Trande - 4.2.0-1 - Release 4.2.0 * Sat Feb 24 2024 Antonio Trande - 4.1.0-2 - Rebuild for f41 mass rebuild * Tue Feb 13 2024 Antonio Trande - 4.1.0-1 - Release 4.1.0 * Fri Jan 26 2024 Fedora Release Engineering - 4.0.9-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Mon Jan 22 2024 Fedora Release Engineering - 4.0.9-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Tue Jan 16 2024 Antonio Trande - 4.0.9-1 - Release 4.0.9 * Thu Dec 14 2023 Antonio Trande - 4.0.8-2 - Add missing BR package * Thu Dec 14 2023 Antonio Trande - 4.0.8-1 - Release 4.0.8 * Sat Nov 11 2023 Antonio Trande - 4.0.7-1 - Release 4.0.7 * Fri Oct 13 2023 Antonio Trande - 4.0.6-1 - Release 4.0.6 * Tue Sep 26 2023 Antonio Trande - 4.0.5-1 - Release 4.0.5

References


[ 1 ] Bug #2240153 - TRIAGE-CVE-2019-19450 python-reportlab: code injection in paraparser.py allows code execution [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2240153 [ 2 ] Bug #2275924 - python-reportlab-4.2.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2275924

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-6ec4e78241' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: python-reportlab
Product: Fedora 39
Version: 4.2.0
Release: 1.fc39
URL: https://docs.reportlab.com/
Summary: Library for generating PDFs and graphics

Topics%20covered

Topics Covered

security advisory update critical Fedora code injection python-reportlab

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here