SUSE-SU-2019:2941-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2019/suse-su-20192941-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:2941-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2019:2941-1
Upstream
Related
Published
2019-11-12T09:04:16Z
Modified
2026-02-04T03:16:40Z
Summary
Security update for libseccomp
Details

This update for libseccomp fixes the following issues:

Update to new upstream release 2.4.1:

  • Fix a BPF generation bug where the optimizer mistakenly identified duplicate BPF code blocks.

Updated to 2.4.0 (bsc#1128828 CVE-2019-9893):

  • Update the syscall table for Linux v5.0-rc5
  • Added support for the SCMP_ACT_KILL_PROCESS action
  • Added support for the SCMP_ACT_LOG action and SCMP_FLTATR_CTL_LOG attribute
  • Added explicit 32-bit (SCMP_AX_32(...)) and 64-bit (SCMP_AX_64(...)) argument comparison macros to help protect against unexpected sign extension
  • Added support for the parisc and parisc64 architectures
  • Added the ability to query and set the libseccomp API level via seccomp_api_get(3) and seccomp_api_set(3)
  • Return -EDOM on an endian mismatch when adding an architecture to a filter
  • Renumber the pseudo syscall number for subpage_prot() so it no longer conflicts with spu_run()
  • Fix PFC generation when a syscall is prioritized, but no rule exists
  • Numerous fixes to the seccomp-bpf filter generation code
  • Switch our internal hashing function to jhash/Lookup3 to MurmurHash3
  • Numerous tests added to the included test suite, coverage now at ~92%
  • Update our Travis CI configuration to use Ubuntu 16.04
  • Numerous documentation fixes and updates

Update to release 2.3.3:

  • Updated the syscall table for Linux v4.15-rc7

Update to release 2.3.2:

  • Achieved full compliance with the CII Best Practices program
  • Added Travis CI builds to the GitHub repository
  • Added code coverage reporting with the '--enable-code-coverage' configure flag and added Coveralls to the GitHub repository
  • Updated the syscall tables to match Linux v4.10-rc6+
  • Support for building with Python v3.x
  • Allow rules with the -1 syscall if the SCMP_FLTATR_API_TSKIP attribute is set to true
  • Several small documentation fixes
  • ignore make check error for ppc64/ppc64le, bypass bsc#1142614
References

Affected packages

SUSE:Enterprise Storage 5
libseccomp

Package

Name
libseccomp
Purl
pkg:rpm/suse/libseccomp&distro=SUSE%20Enterprise%20Storage%205

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.4.1-11.3.2

Ecosystem specific 

{
    "binaries":  [
        {
            "libseccomp2":  "2.4.1-11.3.2",
            "libseccomp2-32bit":  "2.4.1-11.3.2"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:2941-1.json"
SUSE:HPE Helion OpenStack 8
libseccomp

Package

Name
libseccomp
Purl
pkg:rpm/suse/libseccomp&distro=HPE%20Helion%20OpenStack%208

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.4.1-11.3.2

Ecosystem specific 

{
    "binaries":  [
        {
            "libseccomp2":  "2.4.1-11.3.2",
            "libseccomp2-32bit":  "2.4.1-11.3.2"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:2941-1.json"
SUSE:Linux Enterprise Desktop 12 SP4
libseccomp

Package

Name
libseccomp
Purl
pkg:rpm/suse/libseccomp&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.4.1-11.3.2

Ecosystem specific 

{
    "binaries":  [
        {
            "libseccomp2":  "2.4.1-11.3.2",
            "libseccomp2-32bit":  "2.4.1-11.3.2"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:2941-1.json"
SUSE:Linux Enterprise Server 12 SP2-BCL
libseccomp

Package

Name
libseccomp
Purl
pkg:rpm/suse/libseccomp&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.4.1-11.3.2

Ecosystem specific 

{
    "binaries":  [
        {
            "libseccomp2":  "2.4.1-11.3.2",
            "libseccomp2-32bit":  "2.4.1-11.3.2"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:2941-1.json"
SUSE:Linux Enterprise Server 12 SP2-LTSS
libseccomp

Package

Name
libseccomp
Purl
pkg:rpm/suse/libseccomp&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.4.1-11.3.2

Ecosystem specific 

{
    "binaries":  [
        {
            "libseccomp2":  "2.4.1-11.3.2",
            "libseccomp2-32bit":  "2.4.1-11.3.2"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:2941-1.json"
SUSE:Linux Enterprise Server 12 SP3-BCL
libseccomp

Package

Name
libseccomp
Purl
pkg:rpm/suse/libseccomp&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.4.1-11.3.2

Ecosystem specific 

{
    "binaries":  [
        {
            "libseccomp2":  "2.4.1-11.3.2",
            "libseccomp2-32bit":  "2.4.1-11.3.2"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:2941-1.json"
SUSE:Linux Enterprise Server 12 SP3-LTSS
libseccomp

Package

Name
libseccomp
Purl
pkg:rpm/suse/libseccomp&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.4.1-11.3.2

Ecosystem specific 

{
    "binaries":  [
        {
            "libseccomp2":  "2.4.1-11.3.2",
            "libseccomp2-32bit":  "2.4.1-11.3.2"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:2941-1.json"
SUSE:Linux Enterprise Server 12 SP4
libseccomp

Package

Name
libseccomp
Purl
pkg:rpm/suse/libseccomp&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.4.1-11.3.2

Ecosystem specific 

{
    "binaries":  [
        {
            "libseccomp2":  "2.4.1-11.3.2",
            "libseccomp2-32bit":  "2.4.1-11.3.2"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:2941-1.json"
SUSE:Linux Enterprise Server 12 SP5
libseccomp

Package

Name
libseccomp
Purl
pkg:rpm/suse/libseccomp&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.4.1-11.3.2

Ecosystem specific 

{
    "binaries":  [
        {
            "libseccomp2":  "2.4.1-11.3.2",
            "libseccomp2-32bit":  "2.4.1-11.3.2"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:2941-1.json"
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
libseccomp

Package

Name
libseccomp
Purl
pkg:rpm/suse/libseccomp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.4.1-11.3.2

Ecosystem specific 

{
    "binaries":  [
        {
            "libseccomp2":  "2.4.1-11.3.2",
            "libseccomp2-32bit":  "2.4.1-11.3.2"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:2941-1.json"
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
libseccomp

Package

Name
libseccomp
Purl
pkg:rpm/suse/libseccomp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.4.1-11.3.2

Ecosystem specific 

{
    "binaries":  [
        {
            "libseccomp2":  "2.4.1-11.3.2",
            "libseccomp2-32bit":  "2.4.1-11.3.2"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:2941-1.json"
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
libseccomp

Package

Name
libseccomp
Purl
pkg:rpm/suse/libseccomp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.4.1-11.3.2

Ecosystem specific 

{
    "binaries":  [
        {
            "libseccomp2":  "2.4.1-11.3.2",
            "libseccomp2-32bit":  "2.4.1-11.3.2"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:2941-1.json"
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
libseccomp

Package

Name
libseccomp
Purl
pkg:rpm/suse/libseccomp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.4.1-11.3.2

Ecosystem specific 

{
    "binaries":  [
        {
            "libseccomp2":  "2.4.1-11.3.2",
            "libseccomp2-32bit":  "2.4.1-11.3.2"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:2941-1.json"
SUSE:Linux Enterprise Software Development Kit 12 SP4
libseccomp

Package

Name
libseccomp
Purl
pkg:rpm/suse/libseccomp&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.4.1-11.3.2

Ecosystem specific 

{
    "binaries":  [
        {
            "libseccomp-devel":  "2.4.1-11.3.2"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:2941-1.json"
SUSE:Linux Enterprise Software Development Kit 12 SP5
libseccomp

Package

Name
libseccomp
Purl
pkg:rpm/suse/libseccomp&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.4.1-11.3.2

Ecosystem specific 

{
    "binaries":  [
        {
            "libseccomp-devel":  "2.4.1-11.3.2"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:2941-1.json"
SUSE:OpenStack Cloud 7
libseccomp

Package

Name
libseccomp
Purl
pkg:rpm/suse/libseccomp&distro=SUSE%20OpenStack%20Cloud%207

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.4.1-11.3.2

Ecosystem specific 

{
    "binaries":  [
        {
            "libseccomp2":  "2.4.1-11.3.2",
            "libseccomp2-32bit":  "2.4.1-11.3.2"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:2941-1.json"
SUSE:OpenStack Cloud 8
libseccomp

Package

Name
libseccomp
Purl
pkg:rpm/suse/libseccomp&distro=SUSE%20OpenStack%20Cloud%208

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.4.1-11.3.2

Ecosystem specific 

{
    "binaries":  [
        {
            "libseccomp2":  "2.4.1-11.3.2",
            "libseccomp2-32bit":  "2.4.1-11.3.2"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:2941-1.json"
SUSE:OpenStack Cloud Crowbar 8
libseccomp

Package

Name
libseccomp
Purl
pkg:rpm/suse/libseccomp&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.4.1-11.3.2

Ecosystem specific 

{
    "binaries":  [
        {
            "libseccomp2":  "2.4.1-11.3.2",
            "libseccomp2-32bit":  "2.4.1-11.3.2"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:2941-1.json"