From 18f6446b4f29571c3cdd0c241baa975de011edce Mon Sep 17 00:00:00 2001 From: Fiona Klute Date: Sat, 3 Oct 2026 17:16:39 +0200 Subject: [PATCH] package/libseccomp: security bump to version 2.6.1 The upstream changelog [1] lists three security fixes (without CVEs): * Incorrect 64-bit comparison merge in libseccomp can weaken seccomp filters https://github.com/seccomp/libseccomp/security/advisories/GHSA-4q85-33p6-j5g6 * Oversized seccomp filters can trigger libseccomp double free https://github.com/seccomp/libseccomp/security/advisories/GHSA-46fr-jh49-xvhx * Oversized seccomp filters can trigger libseccomp heap corruption https://github.com/seccomp/libseccomp/security/advisories/GHSA-2hqh-5c36-grrm [1] https://github.com/seccomp/libseccomp/releases/tag/v2.6.1 Signed-off-by: Fiona Klute Signed-off-by: Julien Olivain --- package/libseccomp/libseccomp.hash | 4 ++-- package/libseccomp/libseccomp.mk | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package/libseccomp/libseccomp.hash b/package/libseccomp/libseccomp.hash index aaadc8424e..58aee03e6c 100644 --- a/package/libseccomp/libseccomp.hash +++ b/package/libseccomp/libseccomp.hash @@ -1,4 +1,4 @@ -# From https://github.com/seccomp/libseccomp/releases/tag/v2.6.0 (PGP-signed checksum) -sha256 83b6085232d1588c379dc9b9cae47bb37407cf262e6e74993c61ba72d2a784dc libseccomp-2.6.0.tar.gz +# From https://github.com/seccomp/libseccomp/releases/tag/v2.6.1 (PGP-signed checksum) +sha256 501f66c667225d53791b97e1d7cf85ab764c297d04881f60f38f451c4b0ee1be libseccomp-2.6.1.tar.gz # Locally calculated sha256 102900208eef27b766380135906d431dba87edaa7ec6aa72e6ebd3dd67f3a97b LICENSE diff --git a/package/libseccomp/libseccomp.mk b/package/libseccomp/libseccomp.mk index 26585b1887..e1d1271d71 100644 --- a/package/libseccomp/libseccomp.mk +++ b/package/libseccomp/libseccomp.mk @@ -4,7 +4,7 @@ # ################################################################################ -LIBSECCOMP_VERSION = 2.6.0 +LIBSECCOMP_VERSION = 2.6.1 LIBSECCOMP_SITE = https://github.com/seccomp/libseccomp/releases/download/v$(LIBSECCOMP_VERSION) LIBSECCOMP_LICENSE = LGPL-2.1 LIBSECCOMP_LICENSE_FILES = LICENSE