OESA-2023-1456
Dashboard / Vulnerabilities / OESA-2023-1456
Summary: python-reportlab security update
Details: The ReportLab Toolkit. An Open Source Python library for generating PDFs and graphics. Security Fix(es): Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file.(CVE-2023-33733)
References: https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1456, https://nvd.nist.gov/vuln/detail/CVE-2023-33733
Affected packages
Package
Name: python-reportlab
Purl: pkg:rpm/openEuler/python-reportlab&distro=openEuler-20.03-LTS-SP1
Affected ranges
Type: ECOSYSTEM
Events:
Introduced- 0
Fixed -3.6.10-2.oe1
Affected versions
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
