Home / mailings

PDF

[USN-9069-1] libseccomp-golang vulnerability

Posted on 13 November 2026
Ubuntu Security

==========================================================================Ubuntu Security Notice USN-9069-1
November 12, 2026

golang-github-seccomp-libseccomp-golang vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 18.04 LTS

Summary:

A system hardening measure could be bypassed.

Software Description:
- golang-github-seccomp-libseccomp-golang: Go bindings for libseccomp

Details:

It was discovered that libseccomp-golang incorrectly generated BPF filters
for rules that specified multiple syscall arguments, matching any one of
the arguments instead of all of them. An attacker could possibly use this
issue to bypass intended seccomp restrictions.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS
golang-github-seccomp-libseccomp-golang-dev 0.9.0-1ubuntu0.1~esm1
Available with Ubuntu Pro

After a standard system update anything that depends on libseccomp-golang
needs to be rebuilt to make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-9069-1
CVE-2017-18367

--===============8938154365815536862==Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature

 

TOP