Ubuntu alert USN-4273-1 (python-reportlab)
| From: | Marc Deslauriers <marc.deslauriers@canonical.com> | |
| To: | "ubuntu-security-announce@lists.ubuntu.com" <ubuntu-security-announce@lists.ubuntu.com> | |
| Subject: | [USN-4273-1] ReportLab vulnerability | |
| Date: | Thu, 6 Feb 2020 15:11:40 -0500 | |
| Message-ID: | <a99f8f31-4977-5ad4-9baf-b0683af85288@canonical.com> |
========================================================================== Ubuntu Security Notice USN-4273-1 February 06, 2020 python-reportlab vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 19.10 - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: ReportLab could be made to run programs as your login if it opened a specially crafted file. Software Description: - python-reportlab: library to create PDF documents Details: It was discovered that ReportLab incorrectly handled certain XML documents. If a user or automated system were tricked into processing a specially crafted document, a remote attacker could possibly use this issue to execute arbitrary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 19.10: python-reportlab 3.5.23-1ubuntu0.1 python3-reportlab 3.5.23-1ubuntu0.1 Ubuntu 18.04 LTS: python-reportlab 3.4.0-3ubuntu0.1 python3-reportlab 3.4.0-3ubuntu0.1 Ubuntu 16.04 LTS: python-reportlab 3.3.0-1ubuntu0.1 python3-reportlab 3.3.0-1ubuntu0.1 In general, a standard system update will make all the necessary changes. References: https://usn.ubuntu.com/4273-1 CVE-2019-17626 Package Information: https://launchpad.net/ubuntu/+source/python-reportlab/3.5... https://launchpad.net/ubuntu/+source/python-reportlab/3.4... https://launchpad.net/ubuntu/+source/python-reportlab/3.3... -- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security...