ALAS2023-2023-452 — Low: traceroute security update (Amazon Linux 2023)

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-46316: In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines.

Fixed packages 3

Release	Package	Fixed in
Amazon Linux · 2023	traceroute	3:2.1.3-1.amzn2023
Amazon Linux · 2023	traceroute-debuginfo	3:2.1.3-1.amzn2023
Amazon Linux · 2023	traceroute-debugsource	3:2.1.3-1.amzn2023

Vulnerabilities 1

Medium 5.5

CVE-2023-46316

In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines.

traceroute traceroute traceroute traceroute Debian Ubuntu Azure Linux Alpine

Oct 24, 2023

References

web
https://alas.aws.amazon.com/cve/html/CVE-2023-46316.html