Package        : libjgraphx-java
Version        : 1.4.1.0-3+deb7u1
CVE ID         : CVE-2017-18197
Debian Bug     : #891796

It was discovered that there was a potential XML External Entity (XXE)
attack in libjgraphx-java, a diagramming library for Java applications.

For Debian 7 "Wheezy", this issue has been fixed in libjgraphx-java version
1.4.1.0-3+deb7u1.

We recommend that you upgrade your libjgraphx-java packages.


Regards,

- -- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

Debian LTS: DLA-1299-1: libjgraphx-java security update

March 4, 2018
It was discovered that there was a potential XML External Entity (XXE) attack in libjgraphx-java, a diagramming library for Java applications

Summary

We recommend that you upgrade your libjgraphx-java packages.


Regards,

- --
,''`.
: :' : Chris Lamb
`. `'` lamby@debian.org / chris-lamb.co.uk
`-



Severity
Package : libjgraphx-java
Version : 1.4.1.0-3+deb7u1
CVE ID : CVE-2017-18197
Debian Bug : #891796

Related News