USN-3661-1: Batik vulnerability

Publication date

29 May 2018

Overview

Batik could be made to expose sensitive information if it received a specially crafted XML.

Releases

14.04 LTS

Packages

It was discovered that Batik incorrectly handled certain XML.
An attacker could possibly use this to expose sensitive information.

In general, a standard system update will make all the necessary changes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release	Package Version
14.04 trusty	libbatik-java – 1.7.ubuntu-8ubuntu2.14.04.3

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro