diff --git a/backport-CVE-2023-46316.patch b/backport-CVE-2023-46316.patch new file mode 100644 index 0000000000000000000000000000000000000000..1e80e8f11a034c68cf047bb59afb8a349ed12a43 --- /dev/null +++ b/backport-CVE-2023-46316.patch @@ -0,0 +1,68 @@ +Author: Dmitry Butskoy +Description: + Fix command line parsing in wrappers. + +Conflict:NA +Reference:https://udomain.dl.sourceforge.net/project/traceroute/traceroute/traceroute-2.1.3/traceroute-2.1.3.tar.gz + +--- + wrappers/tcptraceroute | 2 +- + wrappers/tracepath | 2 +- + wrappers/traceproto | 2 +- + wrappers/traceroute-nanog | 2 +- + 4 files changed, 4 insertions(+), 4 deletions(-) + +diff --git a/wrappers/tcptraceroute b/wrappers/tcptraceroute +index b4fc810..9063886 100755 +--- a/wrappers/tcptraceroute ++++ b/wrappers/tcptraceroute +@@ -26,7 +26,7 @@ usage () { + } + + +-PARSED=`getopt 'hvdnNi:l:f:Fm:p:q:w:s:t:SAE' "$@"` ++PARSED=`getopt -- 'hvdnNi:l:f:Fm:p:q:w:s:t:SAE' "$@"` + [ $? != 0 ] && exit 2 + + eval set -- "$PARSED" +diff --git a/wrappers/tracepath b/wrappers/tracepath +index 987b998..448f031 100755 +--- a/wrappers/tracepath ++++ b/wrappers/tracepath +@@ -25,7 +25,7 @@ usage () { + } + + +-PARSED=`getopt 'hnbl:' "$@"` ++PARSED=`getopt -- 'hnbl:' "$@"` + [ $? != 0 ] && exit 2 + + eval set -- "$PARSED" +diff --git a/wrappers/traceproto b/wrappers/traceproto +index 988fdc5..5dfd9a7 100755 +--- a/wrappers/traceproto ++++ b/wrappers/traceproto +@@ -38,7 +38,7 @@ warning () { + } + + +-PARSED=`getopt 'cCTfAhvRp:d:D:s:S:m:M:w:W:a:P:F:k:I:H:i:o:t:' "$@"` ++PARSED=`getopt -- 'cCTfAhvRp:d:D:s:S:m:M:w:W:a:P:F:k:I:H:i:o:t:' "$@"` + [ $? != 0 ] && exit 2 + + eval set -- "$PARSED" +diff --git a/wrappers/traceroute-nanog b/wrappers/traceroute-nanog +index 29fd2a4..aac4c83 100755 +--- a/wrappers/traceroute-nanog ++++ b/wrappers/traceroute-nanog +@@ -31,7 +31,7 @@ warning () { + } + + +-PARSED=`getopt 'adnruvAMOPQU$w:S:m:p:q:g:t:s:I:f:T:' "$@"` ++PARSED=`getopt -- 'adnruvAMOPQU$w:S:m:p:q:g:t:s:I:f:T:' "$@"` + [ $? != 0 ] && { + usage + exit 2 +-- +2.27.0 diff --git a/traceroute.spec b/traceroute.spec index 5a31b7fa8ead099b47d7075684cd194a014693f6..607222512598099a32018f782a36df8df13687e9 100644 --- a/traceroute.spec +++ b/traceroute.spec @@ -1,12 +1,14 @@ Name: traceroute Epoch: 3 Version: 2.1.2 -Release: 1 +Release: 2 Summary: A new modern implementation of traceroute(8) utility for Linux systems License: GPL-2.0-or-later URL: http://traceroute.sourceforge.net/ Source0: https://udomain.dl.sourceforge.net/project/traceroute/traceroute/%{name}-%{version}/%{name}-%{version}.tar.gz +Patch0: backport-CVE-2023-46316.patch + Provides: tcptraceroute = 1.5-1 Obsoletes: tcptraceroute < 1.5-1 @@ -57,6 +59,12 @@ popd %{_mandir}/*/* %changelog +* Mon Oct 30 2023 xingwei - 3:2.1.2-2 +- Type:CVE +- CVE:CVE-2023-46316 +- SUG:NA +- DESC:fix CVE-2023-46316 + * Fri Sep 15 2023 xingwei - 3:2.1.2-1 - Type:requirement - Id:NA