Debian 9897 Published by

Updated libjgraphx-java packages has been released for Debian GNU/Linux 7 LTS



Package : libjgraphx-java
Version : 1.4.1.0-3+deb7u1
CVE ID : CVE-2017-18197
Debian Bug : #891796

It was discovered that there was a potential XML External Entity (XXE)
attack in libjgraphx-java, a diagramming library for Java applications.

For Debian 7 "Wheezy", this issue has been fixed in libjgraphx-java version
1.4.1.0-3+deb7u1.

We recommend that you upgrade your libjgraphx-java packages.