Home / mailings

PDF

[USN-9074-1] JGraphX vulnerability

Posted on 13 November 2026
Ubuntu Security

==========================================================================Ubuntu Security Notice USN-9074-1
November 12, 2026

libjgraphx-java vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS

Summary:

JGraphX could be made to expose sensitive information if it opened a
specially crafted file.

Software Description:
- libjgraphx-java: Java Swing Diagramming Library

Details:

It was discovered that JGraphX did not disable XML external entity
processing when converting certain XML input to images. An attacker could
possibly use this issue to obtain sensitive information or cause a denial
of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS
libjgraphx-java 2.1.0.7-1ubuntu0.18.04.1~esm1
Available with Ubuntu Pro

Ubuntu 16.04 LTS
libjgraphx-java 2.1.0.7-1ubuntu0.16.04.1~esm1
Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-9074-1
CVE-2017-18197

--===============6615532784786315701==Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature

 

TOP