Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-9893: libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE), which might able to lead to bypassing seccomp filters and potential privilege escalations. 99999: CVE-2019-9893 libseccomp: incorrect generation of syscall filters in libseccomp
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | libseccomp | 0:2.4.1-1.amzn2 |
| Amazon Linux · 2 | libseccomp-debuginfo | 0:2.4.1-1.amzn2 |
| Amazon Linux · 2 | libseccomp-devel | 0:2.4.1-1.amzn2 |
| Amazon Linux · 2 | libseccomp-static | 0:2.4.1-1.amzn2 |
Vulnerabilities 1
-
Unscored —
libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2019-9893.html