Re: [BLFS Trac] #23546: libseccomp-2.6.1

#23546: libseccomp-2.6.1
-------------------------+-------------------------------
 Reporter:  Bruce Dubbs  |       Owner:  SecurityAdvisory
     Type:  enhancement  |      Status:  new
 Priority:  elevated     |   Milestone:  98-Security
Component:  BOOK         |     Version:  git
 Severity:  normal       |  Resolution:
 Keywords:               |
-------------------------+-------------------------------
Changes (by Joe Locash):

 * milestone:  13.1 => 98-Security
 * owner:  Joe Locash => SecurityAdvisory
 * priority:  normal => elevated
 * status:  assigned => new

Comment:

 {{{
 * Version 2.6.1 - July 1, 2026
 - Update the syscall table for Linux v7.1.0-rc4
 - Fix incorrect 64-bit comparison merge that can weaken libseccomp
 filters.
   See GitHub Advisory GHSA-4q85-33p6-j5g6
 - Fix issue where oversized libseccomp filters can trigger a double free.
   See GitHub Advisory GHSA-46fr-jh49-xvhx
 - Fix issue where oversized libseccomp filters can trigger a heap
 corruption.
   See GitHub Advisory GHSA-2hqh-5c36-grrm
 - Fix struct aliasing undefined behavior in the internal libseccomp hash
   algorithm
 - Fix issue where extraneous bytes were being copied to the destination
   buffer in seccomp_export_bpf_mem()
 - Fix a bug where merged libseccomp filters failed to merge the
 notify_used
   flag, leading to no listener file descriptor being generated
 - Update python shebang to point to python3
 - Add documentation for seccomp_transaction_start()
 - Since support for s390 has been removed from the upstream Linux kernel,
   freeze libseccomp's s390 syscall table at Linux v6.18
 }}}
 Fixed at [sha:3bd3fea3d7]. Leaving open for SA.
-- 
Ticket URL: <https://wiki.linuxfromscratch.org/blfs/ticket/23546#comment:2>
BLFS Trac <https://wiki.linuxfromscratch.org/blfs/>
Beyond Linux From Scratch

-- 
http://lists.linuxfromscratch.org/sympa/info/blfs-book
Unsubscribe: See the above information page