[ALSA-2024:9188] Low: bpftrace security update
Type:
security
Severity:
low
Release date:
2024-11-18
Description:
BPFtrace is a high-level tracing language for Linux enhanced Berkeley Packet Filter (eBPF) available in recent Linux kernels (4.x). BPFtrace uses LLVM as a backend to compile scripts to BPF-bytecode and makes use of BCC for interacting with the Linux BPF system, as well as existing Linux tracing capabilities: kernel dynamic tracing (kprobes), user-level dynamic tracing (uprobes), and tracepoints. The BPFtrace language is inspired by awk and C, and predecessor tracers such as DTrace and SystemTap Security Fix(es): * bpftrace: unprivileged users can force loading of compromised linux headers (CVE-2024-2313) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 bpftrace-0.21.1-1.el9.aarch64.rpm 210270e8f2025a41c4ac95a44c55d2892ac860cccd03ffc7219422e6967b3dda
ppc64le bpftrace-0.21.1-1.el9.ppc64le.rpm 8269780e2ed8defbf0e942bb79199180ac7570095e8ac0da2954658ef44ed965
s390x bpftrace-0.21.1-1.el9.s390x.rpm 87f993ada4230e368b739cab9b3190546397325941d333e29aaf7f423f494a64
x86_64 bpftrace-0.21.1-1.el9.x86_64.rpm 981a82f4c857f1e4028d1a94a8b86b330ff80ec41ea2b26b131d0db384162939
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.