Skip to content
OpenAdvisories
High DSA-5625-1 1 CVE

engrampa - security update

Published Feb 16, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 11 engrampa 1.24.1-1+deb11u1
Debian · 12 engrampa 1.26.0-1+deb12u2

Vulnerabilities 1

  • High 8.2
    CVE-2023-52138

    Path traversal via crafted cpio archives in Engrampa archivers

    Engrampa is an archive manager for the MATE environment. Engrampa is found to be vulnerable to a Path Traversal vulnerability that can be leveraged to achieve full Remote Command Execution (RCE) on the target. While handling CPIO archives, the Engrampa Archiv…

    mate-desktop engrampa engrampa engrampa Debian Ubuntu