Scientific Linux alert SLSA-2023:5616 (python-reportlab)

From:
             
 
Bonnie King <bonniek@fnal.gov>
To:
             
 
scientific-linux-errata@listserv.fnal.gov
Subject:
             
 
Security ERRATA Important: python-reportlab on SL7 srpm/x86_64
Date:
             
 
Thu, 09 Nov 2023 16:17:26 -0000
Message-ID:
             
 
<20231109161726.6546.48879@50523906fb6c>
Red Hat Security Advisory: python-reportlab security update
Advisory ID:       SLSA-2023:5616
Issue Date:        2023-10-10
CVE Numbers:       CVE-2019-19450
--

Python-reportlab is a library used for generation of PDF documents.

Security Fix(es):

* python-reportlab: code injection in paraparser.py allows code execution (CVE-2019-19450)

---
This content is derived from https://access.redhat.com/errata/RHSA-2023:5616
--

SL7
  srpm
    python-reportlab-0:2.5-11.el7_9.src
  x86_64
    python-reportlab-0:2.5-11.el7_9.x86_64

- Scientific Linux Development Team