Wind River Support Network

HomeDefectsLIN1022-2441

Fixed

LIN1022-2441 : Security Advisory - xdg-utils - CVE-2022-4055

Created: Nov 18, 2022 Updated: Mar 9, 2025

Resolved Date: Oct 8, 2024

Found In Version: 10.22.33.1

Fix Version: 10.22.33.19

Severity: Standard

Applicable for: Wind River Linux LTS 22

Component/s: Userspace

Description

xdg-utils: improper parse of mailto URIs allows bypass of Thunderbird security mechanism for attachments

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2022-4055

CREATE(Triage):(User=admin) CVE-2022-4055 (https://nvd.nist.gov/vuln/detail/CVE-2022-4055)

CVEs

CVE-2022-4055