Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 488
Alerts This Week
Warning Icon 1 488

Fedora 43 libseccomp Critical Security Fixes 2026-9afc6b6bb3

fedora
Calendar Grey July 20, 2026
Scroller Fedora
This Fedora 43 update addresses critical libseccomp issues, enhancing syscall filtering and addressing multiple bugs.
libseccomp 2.6.1 packaging changes Enable Python bindings on Fedora 44+ upstream changes - July 1, 2026 Update the syscall table for Linux v7.1.0-rc4

Summary

The libseccomp library provides an easy to use interface to the Linux Kernel's

syscall filtering mechanism, seccomp. The libseccomp API allows an application

to specify which syscalls, and optionally which syscall arguments, the

application is allowed to execute, all of which are enforced by the Linux

Kernel.

Update Information:

libseccomp 2.6.1 packaging changes Enable Python bindings on Fedora 44+ upstream changes - July 1, 2026 Update the syscall table for Linux v7.1.0-rc4 Fix incorrect 64-bit comparison merge that can weaken libseccomp filters. See GitHub Advisory GHSA-4q85-33p6-j5g6 Fix issue where oversized libseccomp filters can trigger a double free. See GitHub Advisory GHSA-46fr-jh49-xvhx Fix issue where oversized libseccomp filters can trigger a heap corruption. See GitHub Advisory GHSA-2hqh-5c36-grrm Fix struct aliasing undefined behavior in the internal libseccomp hash algorithm Fix issue where extraneous bytes were being copied to the destination buffer in seccomp_export_bpf_mem() Fix a bug where merged libseccomp filters failed to merge the notify_used flag, leading to no listener file descriptor being generated Update python shebang to point to python3 Add documentation for seccomp_transaction_start() Since support for s390 has been removed from the upstream Lin...

Topics%20covered

Topics Covered

security advisory fedora heap corruption important libseccomp filter issues

Change Log

* Sat Jul 18 2026 Michel Lind - 2.6.1-2 - Only enable Python subpackage on Fedora 44 and up * Sat Jul 18 2026 Michel Lind - 2.6.1-1 - Update to version 2.6.1; Resolves: rhbz#2341880 - Build Python bindings; Resolves: rhbz#2437438 - Enable Packit - Support disabling tests for iterating on spec changes * Thu Jul 16 2026 Fedora Release Engineering - 2.6.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Fri Jan 16 2026 Fedora Release Engineering - 2.6.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild

References


[ 1 ] Bug #2341880 - libseccomp-2.6.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2341880

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-9afc6b6bb3' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: libseccomp
Product: Fedora 43
Version: 2.6.1
Release: 2.fc43
URL: https://github.com/seccomp/libseccomp
Summary: Enhanced seccomp library

Topics%20covered

Topics Covered

security advisory fedora heap corruption important libseccomp filter issues

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.