Back Linuxsecurity Ubuntu Engrampa Important Code Execution Risk USN-8640-1 CVE-2023
Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges ×
Engrampa could be made to run programs as your login if it opened a specially crafted file. Software Description: - engrampa: archive manager for the MATE environment Details: It was discovered that Engrampa incorrectly handled symbolic links when extracting certain archives. An attacker could possibly use this issue to write arbitrary files and execute arbitrary code.
Engrampa could be made to run programs as your login if it opened a
specially crafted file.
Software Description:
- engrampa: archive manager for the MATE environment
It was discovered that Engrampa incorrectly handled symbolic links when
extracting certain archives. An attacker could possibly use this issue to
write arbitrary files and execute arbitrary code.
The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS engrampa 1.26.0-1ubuntu1+esm1 Available with Ubuntu Pro engrampa-common 1.26.0-1ubuntu1+esm1 Available with Ubuntu Pro Ubuntu 20.04 LTS engrampa 1.24.0-2ubuntu0.1~esm1 Available with Ubuntu Pro engrampa-common 1.24.0-2ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 18.04 LTS engrampa 1.20.0-1ubuntu0.1~esm1 Available with Ubuntu Pro engrampa-common 1.20.0-1ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 16.04 LTS engrampa 1.12.0-2ubuntu0.1+esm1 Available with Ubuntu Pro engrampa-common 1.12.0-2ubuntu0.1+esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.
Ubuntu Security Notice USN-8640-1
Get the latest Linux and open source security news straight to your inbox.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
