Summary
It was discovered that Expat, vendored in Swish-e incorrectly handled
certain files. An attacker could possibly use this issue to cause a crash
or execute arbitrary code. (CVE-2022-25235, CVE-2022-25236)
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | swish-e | 2.4.7-4ubuntu0.1~esm1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | swish-e | 2.4.7-5ubuntu1+esm1 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | swish-e | 2.4.7-6ubuntu0.1~esm1 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | swish-e | 2.4.7-6.1ubuntu0.1~esm1 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | swish-e | 2.4.7-6.2ubuntu0.1~esm1 |
| Ubuntu · Pro 26.04 LTS Pro:26.04:LTS | swish-e | 2.4.7-7.1ubuntu0.1~esm1 |