action needed
A new upstream version is available: 3.5.32
high
A new upstream version 3.5.32 is available, you should consider packaging it.
1 security issue in buster
high
There is 1 open security issue in buster.
1 important issue:
- CVE-2019-17626: ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with '<span color="' followed by arbitrary Python code.
1 security issue in bullseye
high
There is 1 open security issue in bullseye.
1 important issue:
- CVE-2019-17626: ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with '<span color="' followed by arbitrary Python code.
1 security issue in sid
high
There is 1 open security issue in sid.
1 important issue:
- CVE-2019-17626: ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with '<span color="' followed by arbitrary Python code.
1 security issue in jessie
high
There is 1 open security issue in jessie.
1 important issue:
- CVE-2019-17626: ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with '<span color="' followed by arbitrary Python code.
1 security issue in stretch
high
There is 1 open security issue in stretch.
1 important issue:
- CVE-2019-17626: ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with '<span color="' followed by arbitrary Python code.
testing migrations
-
This package is part of the ongoing testing transition known as python3.8.
Please avoid uploads unrelated to this transition, they would
likely delay it and require supplementary work from the release
managers. On the other hand, if your package has problems
preventing it to migrate to testing, please fix them
as soon as possible.
You can probably find supplementary information in the
debian-release
archives or in the corresponding
release.debian.org
bug.
-
all:
2
-
RC:
0
-
I&N:
2
-
M&W:
0
-
F&P:
0
-
patch:
0
![[bug history graph]](https://qa.debian.org/data/bts/graphs/p/python-reportlab.png){kind=link}