@ubuntu are you serious?
You've published a *critical* arbitrary code execution advisory for traceroute on the current LTS version of Ubuntu (22.04) and you're only releasing the fix as part of paid "Expanded Security Maintenance" ?
Traceroute has been a standard UNIX/Linux utility since before Ubuntu existed. I understand that, as a company, you need to make money, but this is shameful.
Do bash, sshd, and the kernel fall into ESM next?