Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Ubuntu 4273-1: Moderate Severity Python-ReportLab RCE Threat

ubuntu
Calendar Grey February 6, 2020
Dist Ubuntu Esm H88
ReportLab on Ubuntu facilitates script execution via specifically crafted files - make sure to upgrade immediately
ReportLab could be made to run programs as your login if it opened a specially crafted file.

Summary

Topics%20covered

Topics Covered

security advisory remote code execution arbitrary code execution ubuntu python-reportlab

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 19.10: python-reportlab 3.5.23-1ubuntu0.1 python3-reportlab 3.5.23-1ubuntu0.1 Ubuntu 18.04 LTS: python-reportlab 3.4.0-3ubuntu0.1 python3-reportlab 3.4.0-3ubuntu0.1 Ubuntu 16.04 LTS: python-reportlab 3.3.0-1ubuntu0.1 python3-reportlab 3.3.0-1ubuntu0.1 In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4273-1

CVE-2019-17626

February 06, 2020

Topics%20covered

Topics Covered

security advisory remote code execution arbitrary code execution ubuntu python-reportlab

Package Information

https://launchpad.net/ubuntu/+source/python-reportlab/3.5.23-1ubuntu0.1 https://launchpad.net/ubuntu/+source/python-reportlab/3.4.0-3ubuntu0.1 https://launchpad.net/ubuntu/+source/python-reportlab/3.3.0-1ubuntu0.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here