traceroute-2.1.0-18.el9

エラータID: AXSA:2024-7857:01

Release date: 
Wednesday, May 29, 2024 - 23:41
Subject: 
traceroute-2.1.0-18.el9
Affected Channels: 
MIRACLE LINUX 9 for x86_64
Severity: 
Moderate
Description: 

The traceroute utility displays the route used by IP packets on their way to a specified network (or Internet) host.

Security Fix(es):

* traceroute: improper command line parsing (CVE-2023-46316)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the MIRACLE LINUX 9.4 Release Notes linked from the References section.

CVE-2023-46316
In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. traceroute-2.1.0-18.el9.src.rpm
    MD5: 73dbbcdcaa46fcba138201fa483920b5
    SHA-256: 6ce3a708f6f090f92f9b2187154d0143cf0bdc9cb2e13e630af1030514e75d6a
    Size: 84.12 kB

Asianux Server 9 for x86_64
  1. traceroute-2.1.0-18.el9.x86_64.rpm
    MD5: cf62cb92449d890fce8b6ae5ca43e7c5
    SHA-256: 0684e8922fad945a5e11ee63cb5c12974e5f7af076c5ce247a9bbb5bd0b6eeee
    Size: 55.70 kB