ALAS-2023-452


Amazon Linux 2023 Security Advisory: ALAS-2023-452
Advisory Release Date: 2023-12-06 07:46 Pacific
Advisory Updated Date: 2023-12-14 21:42 Pacific
Severity: Low

Issue Overview:

In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines. (CVE-2023-46316)


Affected Packages:

traceroute


Issue Correction:
Run dnf update traceroute --releasever 2023.3.20231211 to update your system.

New Packages:
aarch64:
    traceroute-debugsource-2.1.3-1.amzn2023.aarch64
    traceroute-2.1.3-1.amzn2023.aarch64
    traceroute-debuginfo-2.1.3-1.amzn2023.aarch64

src:
    traceroute-2.1.3-1.amzn2023.src

x86_64:
    traceroute-debugsource-2.1.3-1.amzn2023.x86_64
    traceroute-2.1.3-1.amzn2023.x86_64
    traceroute-debuginfo-2.1.3-1.amzn2023.x86_64