Ubuntu alert USN-8316-1 (cableswig)

From:
             
 
noreply+usn-bot@canonical.com
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8316-1] CableSwig vulnerabilities
Date:
             
 
Thu, 28 May 2026 05:22:39 +0000
Message-ID:
             
 
<E1wSTCZ-0004ey-7N@lists.ubuntu.com>
==========================================================================
Ubuntu Security Notice USN-8316-1
May 27, 2026

cableswig vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 16.04 LTS

Summary:

Several security issues were fixed in CableSwig.

Software Description:
- cableswig: Generate wrappers for Python and Tcl from C++ code

Details:

It was discovered that Expat, vendored in CableSwig, incorrectly handled
certain files. An attacker could possibly use this issue to cause a crash
or execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS
  cableswig                       0.1.0+git20150808-2ubuntu0.1~esm1
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8316-1
  CVE-2022-25235, CVE-2022-25236


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=Y1bm
-----END PGP SIGNATURE-----