[CLSA-2026:1791563013] Fix CVE(s): CVE-2022-4055
Type:
security
Severity:
Important
Release date:
2026-10-09 16:23:45 UTC
Description:
* SECURITY UPDATE: -compose argument injection in run_thunderbird() - debian/patches/CVE-2022-4055.patch: strip ' from to=/cc=/bcc=/attach= and escape , ' and " in subject=/body= in scripts/xdg-email.in - CVE-2022-4055
CVEs fixed:
Updated packages:
  • xdg-utils_1.1.2-1ubuntu2.5+tuxcare.els1_all.deb
    sha:d788c32acc8338c778a2cc31eba803a2a52d1103
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.