ALAS2-2024-2423 — Low: traceroute security update (Amazon Linux 2)

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-46316: In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines.

Fixed packages 2

Release	Package	Fixed in
Amazon Linux · 2	traceroute	3:2.0.22-2.amzn2.0.2
Amazon Linux · 2	traceroute-debuginfo	3:2.0.22-2.amzn2.0.2

Vulnerabilities 1

Medium 5.5

CVE-2023-46316

In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines.

traceroute traceroute traceroute traceroute Debian Ubuntu Azure Linux Alpine

Oct 24, 2023

References

web
https://alas.aws.amazon.com/cve/html/CVE-2023-46316.html