Urgent Security Alert: Ubuntu 4001-1 Libseccomp Critical Access Issue

ubuntu

May 30, 2019

libseccomp could allow unintended access to system calls.

Summary

libseccomp could allow unintended access to system calls.

Software Description:

- libseccomp: library for working with the Linux seccomp filter

Details:

Jann Horn discovered that libseccomp did not correctly generate 64-bit

syscall argument comparisons with arithmetic operators (LT, GT, LE, GE).

An attacker could use this to bypass intended access restrictions for

argument-filtered system calls.

Topics Covered

security advisory access issue ubuntu system call unintended access libseccomp secomp filter

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.04:
  libseccomp2                     2.4.1-0ubuntu0.19.04.3

Ubuntu 18.10:
  libseccomp2                     2.4.1-0ubuntu0.18.10.3

Ubuntu 18.04 LTS:
  libseccomp2                     2.4.1-0ubuntu0.18.04.2

Ubuntu 16.04 LTS:
  libseccomp2                     2.4.1-0ubuntu0.16.04.2

This update uses a new upstream release which includes additional bug
fixes. In general, a standard system update will make all the necessary
changes.