Ubuntu Security Update USN-4574-1: libseccomp-golang vulnerability

[LinuxBot]

It was discovered that libseccomp-golang did not properly generate BPFs. If a process were running under a restrictive seccomp filter that specified multiple syscall arguments, the application could potentially bypass the intended restrictions put in place by seccomp.

Continue reading...