An update for mtr is now available for openEuler-20.03-LTS-SP4,openEuler-22.03-LTS-SP4,openEuler-24.03-LTS-SP1,openEuler-24.03-LTS-SP3,openEuler-24.03-LTS-SP4 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2026-3158 Final 1.0 1.0 2026-07-24 Initial 2026-07-24 2026-07-24 openEuler SA Tool V1.0 2026-07-24 mtr security update An update for mtr is now available for openEuler-20.03-LTS-SP4,openEuler-22.03-LTS-SP4,openEuler-24.03-LTS-SP1,openEuler-24.03-LTS-SP3,openEuler-24.03-LTS-SP4 It is a network diagnostic tool,it has the "ping" and "traceroute" features. It prints information about the route and packets that sent from the host to the specified destination system.This tool can also print the response times and percentage for all network hops between the systems. Security Fix(es): mtr is vulnerable to Out-of-bound read vulnerability in ipinfo_lookup() function. An attacker who can influence the TXT response used for AS lookups can trigger this bug by returning a DNS response that is larger than 512 bytes and uses a crafted compression pointer in the answer NAME field. ipinfo_lookup() function uses the length of the response as the end-of-message boundary for dn_expand() function. The result is a reliable crash. This issue exists in the mtr through version 0.96 and it was fixed in commit 48e1794414d338ce47abc0f27c25ade8788af9c3.(CVE-2026-14461) An update for mtr is now available for openEuler-20.03-LTS-SP4,openEuler-22.03-LTS-SP4,openEuler-24.03-LTS-SP1,openEuler-24.03-LTS-SP3,openEuler-24.03-LTS-SP4. openEuler Security has rated this update as having a security impact of medium. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. Medium mtr https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3158 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-14461 https://nvd.nist.gov/vuln/detail/CVE-2026-14461 openEuler-20.03-LTS-SP4 openEuler-22.03-LTS-SP4 openEuler-24.03-LTS-SP1 openEuler-24.03-LTS-SP3 openEuler-24.03-LTS-SP4 mtr-0.93-6.oe2003sp4.aarch64.rpm mtr-debuginfo-0.93-6.oe2003sp4.aarch64.rpm mtr-debugsource-0.93-6.oe2003sp4.aarch64.rpm mtr-0.95-3.oe2203sp4.aarch64.rpm mtr-debuginfo-0.95-3.oe2203sp4.aarch64.rpm mtr-debugsource-0.95-3.oe2203sp4.aarch64.rpm mtr-0.95-5.oe2403sp1.aarch64.rpm mtr-debuginfo-0.95-5.oe2403sp1.aarch64.rpm mtr-debugsource-0.95-5.oe2403sp1.aarch64.rpm mtr-0.95-5.oe2403sp3.aarch64.rpm mtr-debuginfo-0.95-5.oe2403sp3.aarch64.rpm mtr-debugsource-0.95-5.oe2403sp3.aarch64.rpm mtr-0.95-5.oe2403sp4.aarch64.rpm mtr-debuginfo-0.95-5.oe2403sp4.aarch64.rpm mtr-debugsource-0.95-5.oe2403sp4.aarch64.rpm mtr-0.93-6.oe2003sp4.src.rpm mtr-0.95-3.oe2203sp4.src.rpm mtr-0.95-5.oe2403sp1.src.rpm mtr-0.95-5.oe2403sp3.src.rpm mtr-0.95-5.oe2403sp4.src.rpm mtr-0.93-6.oe2003sp4.x86_64.rpm mtr-debuginfo-0.93-6.oe2003sp4.x86_64.rpm mtr-debugsource-0.93-6.oe2003sp4.x86_64.rpm mtr-0.95-3.oe2203sp4.x86_64.rpm mtr-debuginfo-0.95-3.oe2203sp4.x86_64.rpm mtr-debugsource-0.95-3.oe2203sp4.x86_64.rpm mtr-0.95-5.oe2403sp1.x86_64.rpm mtr-debuginfo-0.95-5.oe2403sp1.x86_64.rpm mtr-debugsource-0.95-5.oe2403sp1.x86_64.rpm mtr-0.95-5.oe2403sp3.x86_64.rpm mtr-debuginfo-0.95-5.oe2403sp3.x86_64.rpm mtr-debugsource-0.95-5.oe2403sp3.x86_64.rpm mtr-0.95-5.oe2403sp4.x86_64.rpm mtr-debuginfo-0.95-5.oe2403sp4.x86_64.rpm mtr-debugsource-0.95-5.oe2403sp4.x86_64.rpm mtr-help-0.93-6.oe2003sp4.noarch.rpm mtr-help-0.95-3.oe2203sp4.noarch.rpm mtr-help-0.95-5.oe2403sp1.noarch.rpm mtr-help-0.95-5.oe2403sp3.noarch.rpm mtr-help-0.95-5.oe2403sp4.noarch.rpm mtr is vulnerable to Out-of-bound read vulnerability in ipinfo_lookup() function. An attacker who can influence the TXT response used for AS lookups can trigger this bug by returning a DNS response that is larger than 512 bytes and uses a crafted compression pointer in the answer NAME field. ipinfo_lookup() function uses the length of the response as the end-of-message boundary for dn_expand() function. The result is a reliable crash. This issue exists in the mtr through version 0.96 and it was fixed in commit 48e1794414d338ce47abc0f27c25ade8788af9c3. 2026-07-24 CVE-2026-14461 openEuler-20.03-LTS-SP4 openEuler-22.03-LTS-SP4 openEuler-24.03-LTS-SP1 openEuler-24.03-LTS-SP3 openEuler-24.03-LTS-SP4 Medium 5.1 AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X mtr security update 2026-07-24 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3158