SUSE-SU-2019:2517-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2019/suse-su-20192517-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:2517-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/SUSE-SU-2019:2517-1
Related
Published
2019-10-02T08:49:23Z
Modified
2019-10-02T08:49:23Z
Summary
Security update for libseccomp
Details

This update for libseccomp fixes the following issues:

Security issues fixed:

  • CVE-2019-9893: An incorrect generation of syscall filters in libseccomp was fixed (bsc#1128828)

libseccomp was updated to new upstream release 2.4.1:

  • Fix a BPF generation bug where the optimizer mistakenly identified duplicate BPF code blocks.

libseccomp was updated to 2.4.0 (bsc#1128828 CVE-2019-9893):

  • Update the syscall table for Linux v5.0-rc5
  • Added support for the SCMPACTKILL_PROCESS action
  • Added support for the SCMPACTLOG action and SCMPFLTATRCTL_LOG attribute
  • Added explicit 32-bit (SCMPAX32(...)) and 64-bit (SCMPAX64(...)) argument comparison macros to help protect against unexpected sign extension
  • Added support for the parisc and parisc64 architectures
  • Added the ability to query and set the libseccomp API level via seccompapiget(3) and seccompapiset(3)
  • Return -EDOM on an endian mismatch when adding an architecture to a filter
  • Renumber the pseudo syscall number for subpageprot() so it no longer conflicts with spurun()
  • Fix PFC generation when a syscall is prioritized, but no rule exists
  • Numerous fixes to the seccomp-bpf filter generation code
  • Switch our internal hashing function to jhash/Lookup3 to MurmurHash3
  • Numerous tests added to the included test suite, coverage now at ~92%
  • Update our Travis CI configuration to use Ubuntu 16.04
  • Numerous documentation fixes and updates

libseccomp was updated to release 2.3.3:

  • Updated the syscall table for Linux v4.15-rc7
References

Affected packages

SUSE:Linux Enterprise Module for Basesystem 15 / libseccomp

Package

Name
libseccomp
Purl
pkg:rpm/suse/libseccomp&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.4.1-3.3.1

Ecosystem specific 

{
    "binaries": [
        {
            "libseccomp2-32bit": "2.4.1-3.3.1",
            "libseccomp2": "2.4.1-3.3.1",
            "libseccomp-devel": "2.4.1-3.3.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Basesystem 15 SP1 / libseccomp

Package

Name
libseccomp
Purl
pkg:rpm/suse/libseccomp&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.4.1-3.3.1

Ecosystem specific 

{
    "binaries": [
        {
            "libseccomp2-32bit": "2.4.1-3.3.1",
            "libseccomp2": "2.4.1-3.3.1",
            "libseccomp-devel": "2.4.1-3.3.1"
        }
    ]
}