openSUSE: 2019:2283-1 Moderate: libseccomp Syscall Filter Fix

This update for libseccomp fixes the following issues:

Security issues fixed:

- CVE-2019-9893: An incorrect generation of syscall filters in libseccomp

was fixed (bsc#1128828)

libseccomp was updated to new upstream release 2.4.1:

- Fix a BPF generation bug where the optimizer mistakenly identified

duplicate BPF code blocks.

libseccomp was updated to 2.4.0 (bsc#1128828 CVE-2019-9893):

- Update the syscall table for Linux v5.0-rc5

- Added support for the SCMP_ACT_KILL_PROCESS action

- Added support for the SCMP_ACT_LOG action and SCMP_FLTATR_CTL_LOG

attribute

- Added explicit 32-bit (SCMP_AX_32(...)) and 64-bit (SCMP_AX_64(...))

argument comparison macros to help protect against unexpected sign

extension

- Added support for the parisc and parisc64 architectures

- Added the ability to query and set the libseccomp API level via

seccomp_api_get(3) and seccomp_api_set(3)

- Return -EDOM on an endian mismatch when...