==========================================================================
Ubuntu Security Notice USN-4644-1
November 24, 2020

igraph vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 18.04 LTS
– Ubuntu 16.04 LTS

Summary:

igraph could be made to crash if it opened a specially crafted file.

Software Description:
– igraph: None

Details:

It was discovered that igraph mishandled certain malformed XML. An attacker
could use this vulnerability to cause a denial of service (crash).

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS:
libigraph0v5 0.7.1-2.1+deb9u1build0.18.04.1

Ubuntu 16.04 LTS:
libigraph0v5 0.7.1-2.1+deb9u1build0.16.04.1

In general, a standard system update will make all the necessary changes.

References:
https://usn.ubuntu.com/4644-1
CVE-2018-20349

Package Information:
https://launchpad.net/ubuntu/+source/igraph/0.7.1-2.1+deb9u1build0.18.04.1
https://launchpad.net/ubuntu/+source/igraph/0.7.1-2.1+deb9u1build0.16.04.1

—–BEGIN PGP SIGNATURE—–

iQIzBAEBCgAdFiEEwZbe96kJeWh2OITRdyg1Qz0oXX0FAl+9cDgACgkQdyg1Qz0o
XX0gZBAAlqxP1uO9GK14ZOAE3KzEZ/3Uc4Xm43AoINrt3qL8WOSuawZll9nxLNjC
mJN3DbhEIoN+7I0CYdjxTlov+PKQXx+VDKJk5diGobyJsjZcaXAf4Hqxnaw0uKQ7
hJ632RN/ysVSBTqKgHHMsTG7H3aDvAgrex5aCqsUUxkWCAmE2VnIVoRAKTZ52T5V
1RoZ2HJzSZS5XFmulAI6Xx+cgdqttsh3h5mTfj/D9AK+rUFngjwyVvRbhqKo/uT9
DYtlZlYBoHiMAedPF9AABkZW3inFk+yjT+wDe+iJWRJW8GbOo8BIsoLGeItwdoUi
Bq5zcWBRsCJAdOuLhiCOtxAdXnxwVVYJqa6JHUt62CQW+ZcDZAgHAw6P2uxPrXGd
a2EVk1m+i+vkCWX/88JhcQmKCNyu+zI/t3DSKWHp7pG6KPn9JBkqcR9cVBOPWZLz
Xk7tC2U4tlrIw3aJ+3LG0L11otfwXy052Nc2F71yWwJMKbq7H/JWP+M2lYTZFViD
SHoQFPPRpYV89bku+4rPoDJyMc5P36QWS3pAgTIWVhmigeblDhdsR8RIm9pdF2e5
XpEqnb/6zJrR5QynUftPfMUgA6tzjAxs1jlNngRZW2Jrlvr/mX3Me7byfD+cTyZM
AvQrOQfGUTCuiBFSlcsht4v0RMMiLH/LUPXg8mQq5vhVQvYCpdE=
=oPhb
—–END PGP SIGNATURE—–
—