mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-10-22 00:41:55 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/libseccomp: security bump to version 2.6.1

Browse Source 
The upstream changelog [1] lists three security fixes (without CVEs):

* Incorrect 64-bit comparison merge in libseccomp can weaken seccomp filters
  https://github.com/seccomp/libseccomp/security/advisories/GHSA-4q85-33p6-j5g6

* Oversized seccomp filters can trigger libseccomp double free
  https://github.com/seccomp/libseccomp/security/advisories/GHSA-46fr-jh49-xvhx

* Oversized seccomp filters can trigger libseccomp heap corruption
  https://github.com/seccomp/libseccomp/security/advisories/GHSA-2hqh-5c36-grrm

[1] https://github.com/seccomp/libseccomp/releases/tag/v2.6.1

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 18f6446b4f)
Signed-off-by: Raphaël Mélotte <raphael.melotte@mind.be>
This commit is contained in:
Fiona Klute
2026-10-03 17:16:39 +02:00
committed by Raphaël Mélotte
parent c58a9d0abe
commit 240b30a2a5
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
package/libseccomp/libseccomp.hash
View File

@@ -1,4 +1,4 @@
# From https://github.com/seccomp/libseccomp/releases/tag/v2.6.0 (PGP-signed checksum)
sha256 83b6085232d1588c379dc9b9cae47bb37407cf262e6e74993c61ba72d2a784dc libseccomp-2.6.0.tar.gz
# From https://github.com/seccomp/libseccomp/releases/tag/v2.6.1 (PGP-signed checksum)
sha256 501f66c667225d53791b97e1d7cf85ab764c297d04881f60f38f451c4b0ee1be libseccomp-2.6.1.tar.gz
# Locally calculated
sha256 102900208eef27b766380135906d431dba87edaa7ec6aa72e6ebd3dd67f3a97b LICENSE

2
package/libseccomp/libseccomp.mk
View File

@@ -4,7 +4,7 @@
#
################################################################################
LIBSECCOMP_VERSION = 2.6.0
LIBSECCOMP_VERSION = 2.6.1
LIBSECCOMP_SITE = https://github.com/seccomp/libseccomp/releases/download/v$(LIBSECCOMP_VERSION)
LIBSECCOMP_LICENSE = LGPL-2.1
LIBSECCOMP_LICENSE_FILES = LICENSE