| Release | Version |
|---|---|
| buster | 3.5.13-1+deb10u1 |
| buster (security) | 3.5.13-1+deb10u2 |
| bullseye | 3.5.59-2 |
| bookworm | 3.6.12-1 |
| trixie | 4.1.0-4 |
| sid | 4.1.0-4 |
| Bug | buster | bullseye | bookworm | trixie | sid | Description |
|---|---|---|---|---|---|---|
| CVE-2023-33733 | fixed | vulnerable | vulnerable | fixed | fixed | Reportlab up to v3.6.12 allows attackers to execute arbitrary code via ... |
| Bug | Description |
|---|---|
| CVE-2020-28463 | All versions of package reportlab are vulnerable to Server-side Reques ... |
| CVE-2019-19450 | paraparser in ReportLab before 3.5.31 allows remote code execution bec ... |
| CVE-2019-17626 | ReportLab through 3.5.26 allows remote code execution because of toCol ... |
| DSA / DLA | Description |
|---|---|
| DLA-3590-1 | python-reportlab - security update |
| DSA-4663-1 | python-reportlab - security update |
| DLA-2112-1 | python-reportlab - security update |