Issued:
2020-01-22
Updated:
2020-01-22

RHSA-2020:0201 - Security Advisory

Synopsis

Important: python-reportlab security update

Type/Severity

Security Advisory: Important

Topic

An update for python-reportlab is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Python-reportlab is a library used for generation of PDF documents.

Security Fix(es):

  • python-reportlab: code injection in colors.py allows attacker to execute code (CVE-2019-17626)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 8 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.1 x86_64
  • Red Hat Enterprise Linux for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.1 ppc64le
  • Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 8.1 ppc64le
  • Red Hat Enterprise Linux Server - Update Services for SAP Solutions 8.1 x86_64

Fixes

  • BZ - 1769661 - CVE-2019-17626 python-reportlab: code injection in colors.py allows attacker to execute code

CVEs

References

Red Hat Enterprise Linux for x86_64 8

SRPM
python-reportlab-3.4.0-6.el8_1.2.src.rpm SHA-256: 5ce957b417a22ddf735689bbb26c45295663b7ae9b4f23e76667780fee4b6572
x86_64
python-reportlab-debugsource-3.4.0-6.el8_1.2.x86_64.rpm SHA-256: 136fdf14a916920685919baac55abd02547273ea8ccb596237a5f3a14fc5a8e5
python3-reportlab-3.4.0-6.el8_1.2.x86_64.rpm SHA-256: 292d6c0eead142d03b71e1a19744f6889f17dd597693e8de850a368c619ea079
python3-reportlab-debuginfo-3.4.0-6.el8_1.2.x86_64.rpm SHA-256: 5cdc26f60cf1e1d12021f801c42c88251efd187537d2853b8d0fcec27a88bd4a

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.1

SRPM
python-reportlab-3.4.0-6.el8_1.2.src.rpm SHA-256: 5ce957b417a22ddf735689bbb26c45295663b7ae9b4f23e76667780fee4b6572
x86_64
python-reportlab-debugsource-3.4.0-6.el8_1.2.x86_64.rpm SHA-256: 136fdf14a916920685919baac55abd02547273ea8ccb596237a5f3a14fc5a8e5
python3-reportlab-3.4.0-6.el8_1.2.x86_64.rpm SHA-256: 292d6c0eead142d03b71e1a19744f6889f17dd597693e8de850a368c619ea079
python3-reportlab-debuginfo-3.4.0-6.el8_1.2.x86_64.rpm SHA-256: 5cdc26f60cf1e1d12021f801c42c88251efd187537d2853b8d0fcec27a88bd4a

Red Hat Enterprise Linux for Power, little endian 8

SRPM
python-reportlab-3.4.0-6.el8_1.2.src.rpm SHA-256: 5ce957b417a22ddf735689bbb26c45295663b7ae9b4f23e76667780fee4b6572
ppc64le
python-reportlab-debugsource-3.4.0-6.el8_1.2.ppc64le.rpm SHA-256: 8c7a4f85917a0bc2e9a89381617e7eafe6f3d1caa0f8d76617ea2495da9ccfc0
python3-reportlab-3.4.0-6.el8_1.2.ppc64le.rpm SHA-256: 78d6d96320457f707779bcd6657c316917ea793e9d75b4383f4c5aa48cc74f43
python3-reportlab-debuginfo-3.4.0-6.el8_1.2.ppc64le.rpm SHA-256: bda14d5409a5186cb217a23439fdcad7a65c3bdc0115a3f4ff79564788f0ef05

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.1

SRPM
python-reportlab-3.4.0-6.el8_1.2.src.rpm SHA-256: 5ce957b417a22ddf735689bbb26c45295663b7ae9b4f23e76667780fee4b6572
ppc64le
python-reportlab-debugsource-3.4.0-6.el8_1.2.ppc64le.rpm SHA-256: 8c7a4f85917a0bc2e9a89381617e7eafe6f3d1caa0f8d76617ea2495da9ccfc0
python3-reportlab-3.4.0-6.el8_1.2.ppc64le.rpm SHA-256: 78d6d96320457f707779bcd6657c316917ea793e9d75b4383f4c5aa48cc74f43
python3-reportlab-debuginfo-3.4.0-6.el8_1.2.ppc64le.rpm SHA-256: bda14d5409a5186cb217a23439fdcad7a65c3bdc0115a3f4ff79564788f0ef05

Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 8.1

SRPM
python-reportlab-3.4.0-6.el8_1.2.src.rpm SHA-256: 5ce957b417a22ddf735689bbb26c45295663b7ae9b4f23e76667780fee4b6572
ppc64le
python-reportlab-debugsource-3.4.0-6.el8_1.2.ppc64le.rpm SHA-256: 8c7a4f85917a0bc2e9a89381617e7eafe6f3d1caa0f8d76617ea2495da9ccfc0
python3-reportlab-3.4.0-6.el8_1.2.ppc64le.rpm SHA-256: 78d6d96320457f707779bcd6657c316917ea793e9d75b4383f4c5aa48cc74f43
python3-reportlab-debuginfo-3.4.0-6.el8_1.2.ppc64le.rpm SHA-256: bda14d5409a5186cb217a23439fdcad7a65c3bdc0115a3f4ff79564788f0ef05

Red Hat Enterprise Linux Server - Update Services for SAP Solutions 8.1

SRPM
python-reportlab-3.4.0-6.el8_1.2.src.rpm SHA-256: 5ce957b417a22ddf735689bbb26c45295663b7ae9b4f23e76667780fee4b6572
x86_64
python-reportlab-debugsource-3.4.0-6.el8_1.2.x86_64.rpm SHA-256: 136fdf14a916920685919baac55abd02547273ea8ccb596237a5f3a14fc5a8e5
python3-reportlab-3.4.0-6.el8_1.2.x86_64.rpm SHA-256: 292d6c0eead142d03b71e1a19744f6889f17dd597693e8de850a368c619ea079
python3-reportlab-debuginfo-3.4.0-6.el8_1.2.x86_64.rpm SHA-256: 5cdc26f60cf1e1d12021f801c42c88251efd187537d2853b8d0fcec27a88bd4a

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.