Security update for libseccomp SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:2517-1 Final 1 1 2019-10-02T08:49:23Z current 2019-10-02T08:49:23Z 2019-10-02T08:49:23Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for libseccomp This update for libseccomp fixes the following issues: Security issues fixed: - CVE-2019-9893: An incorrect generation of syscall filters in libseccomp was fixed (bsc#1128828) libseccomp was updated to new upstream release 2.4.1: - Fix a BPF generation bug where the optimizer mistakenly identified duplicate BPF code blocks. libseccomp was updated to 2.4.0 (bsc#1128828 CVE-2019-9893): - Update the syscall table for Linux v5.0-rc5 - Added support for the SCMP_ACT_KILL_PROCESS action - Added support for the SCMP_ACT_LOG action and SCMP_FLTATR_CTL_LOG attribute - Added explicit 32-bit (SCMP_AX_32(...)) and 64-bit (SCMP_AX_64(...)) argument comparison macros to help protect against unexpected sign extension - Added support for the parisc and parisc64 architectures - Added the ability to query and set the libseccomp API level via seccomp_api_get(3) and seccomp_api_set(3) - Return -EDOM on an endian mismatch when adding an architecture to a filter - Renumber the pseudo syscall number for subpage_prot() so it no longer conflicts with spu_run() - Fix PFC generation when a syscall is prioritized, but no rule exists - Numerous fixes to the seccomp-bpf filter generation code - Switch our internal hashing function to jhash/Lookup3 to MurmurHash3 - Numerous tests added to the included test suite, coverage now at ~92% - Update our Travis CI configuration to use Ubuntu 16.04 - Numerous documentation fixes and updates libseccomp was updated to release 2.3.3: - Updated the syscall table for Linux v4.15-rc7 The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container caasp/v4/cilium:1.6.6-2019-2517,Container caasp/v4/etcd:3.4.13-2019-2517,Container caasp/v4/hyperkube:v1.17.17-2019-2517,Container caasp/v4/prometheus-alertmanager:0.16.2-2019-2517,Container caasp/v4/prometheus-pushgateway:0.6.0-2019-2517,Container caasp/v4/prometheus-server:2.7.1-2019-2517,Container caasp/v4/rsyslog:8.39.0-2019-2517,Container ses/6/cephcsi/cephcsi:latest-2019-2517,Container ses/6/rook/ceph:latest-2019-2517,Container ses/7/ceph/ceph:latest-2019-2517,Container ses/7/ceph/grafana:latest-2019-2517,Container ses/7/cephcsi/cephcsi:latest-2019-2517,Container ses/7/rook/ceph:latest-2019-2517,Container suse/sle-micro/5.0/toolbox:latest-2019-2517,Container suse/sles/15.2/virt-handler:0.38.1-2019-2517,Container suse/sles/15.2/virt-launcher:0.38.1-2019-2517,Container suse/sles/15.3/cdi-importer:1.37.1-2019-2517,Container suse/sles/15.3/cdi-uploadserver:1.37.1-2019-2517,Container suse/sles/15.3/libguestfs-tools:0.45.0-2019-2517,Container suse/sles/15.3/virt-handler:0.45.0-2019-2517,Container suse/sles/15.3/virt-launcher:0.45.0-2019-2517,Image SLES15-Azure-BYOS-2019-2517,Image SLES15-EC2-CHOST-HVM-BYOS-2019-2517,Image SLES15-EC2-HVM-BYOS-2019-2517,Image SLES15-GCE-BYOS-2019-2517,Image SLES15-OCI-BYOS-2019-2517,Image SLES15-SAP-Azure-2019-2517,Image SLES15-SAP-Azure-BYOS-2019-2517,Image SLES15-SAP-Azure-LI-BYOS-Production-2019-2517,Image SLES15-SAP-Azure-VLI-BYOS-Production-2019-2517,Image SLES15-SAP-EC2-HVM-2019-2517,Image SLES15-SAP-EC2-HVM-BYOS-2019-2517,Image SLES15-SAP-GCE-2019-2517,Image SLES15-SAP-GCE-BYOS-2019-2517,Image SLES15-SAP-OCI-BYOS-2019-2517,Image SLES15-SP1-Azure-BYOS-2019-2517,Image SLES15-SP1-Azure-HPC-BYOS-2019-2517,Image SLES15-SP1-CAP-Deployment-BYOS-EC2-HVM-2019-2517,Image SLES15-SP1-CAP-Deployment-BYOS-GCE-2019-2517,Image SLES15-SP1-CHOST-BYOS-Azure-2019-2517,Image SLES15-SP1-CHOST-BYOS-EC2-2019-2517,Image SLES15-SP1-CHOST-BYOS-GCE-2019-2517,Image SLES15-SP1-EC2-HPC-HVM-BYOS-2019-2517,Image SLES15-SP1-EC2-HVM-BYOS-2019-2517,Image SLES15-SP1-GCE-BYOS-2019-2517,Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy-2019-2517,Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server-2019-2517,Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy-2019-2517,Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server-2019-2517,Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy-2019-2517,Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server-2019-2517,Image SLES15-SP1-OCI-BYOS-2019-2517,Image SLES15-SP1-SAP-Azure-2019-2517,Image SLES15-SP1-SAP-Azure-BYOS-2019-2517,Image SLES15-SP1-SAP-Azure-LI-BYOS-Production-2019-2517,Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production-2019-2517,Image SLES15-SP1-SAP-EC2-HVM-2019-2517,Image SLES15-SP1-SAP-EC2-HVM-BYOS-2019-2517,Image SLES15-SP1-SAP-GCE-2019-2517,Image SLES15-SP1-SAP-GCE-BYOS-2019-2517,Image SLES15-SP1-SAP-OCI-BYOS-2019-2517,Image SLES15-SP1-SAPCAL-Azure-2019-2517,Image SLES15-SP1-SAPCAL-EC2-HVM-2019-2517,Image SLES15-SP1-SAPCAL-GCE-2019-2517,Image SLES15-SP2-Azure-Basic-2019-2517,Image SLES15-SP2-Azure-Standard-2019-2517,Image SLES15-SP2-BYOS-Azure-2019-2517,Image SLES15-SP2-BYOS-EC2-HVM-2019-2517,Image SLES15-SP2-BYOS-GCE-2019-2517,Image SLES15-SP2-CAP-Deployment-BYOS-Azure-2019-2517,Image SLES15-SP2-CHOST-BYOS-Aliyun-2019-2517,Image SLES15-SP2-CHOST-BYOS-Azure-2019-2517,Image SLES15-SP2-CHOST-BYOS-EC2-2019-2517,Image SLES15-SP2-CHOST-BYOS-GCE-2019-2517,Image SLES15-SP2-EC2-ECS-HVM-2019-2517,Image SLES15-SP2-EC2-HVM-2019-2517,Image SLES15-SP2-GCE-2019-2517,Image SLES15-SP2-HPC-Azure-2019-2517,Image SLES15-SP2-HPC-BYOS-Azure-2019-2517,Image SLES15-SP2-HPC-BYOS-EC2-HVM-2019-2517,Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure-2019-2517,Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM-2019-2517,Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE-2019-2517,Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure-2019-2517,Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM-2019-2517,Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE-2019-2517,Image SLES15-SP2-SAP-Azure-2019-2517,Image SLES15-SP2-SAP-Azure-LI-BYOS-Production-2019-2517,Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production-2019-2517,Image SLES15-SP2-SAP-BYOS-Azure-2019-2517,Image SLES15-SP2-SAP-BYOS-EC2-HVM-2019-2517,Image SLES15-SP2-SAP-BYOS-GCE-2019-2517,Image SLES15-SP2-SAP-EC2-HVM-2019-2517,Image SLES15-SP2-SAP-GCE-2019-2517,Image SLES15-SP3-Micro-BYOS-GCE-2019-2517,SUSE-2019-2517,SUSE-SLE-Module-Basesystem-15-2019-2517,SUSE-SLE-Module-Basesystem-15-SP1-2019-2517,SUSE-SLE-Module-Development-Tools-OBS-15-2019-2517,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-2517 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20192517-1/ Link for SUSE-SU-2019:2517-1 https://lists.suse.com/pipermail/sle-security-updates/2019-October/005978.html E-Mail link for SUSE-SU-2019:2517-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1082318 SUSE Bug 1082318 https://bugzilla.suse.com/1128828 SUSE Bug 1128828 https://bugzilla.suse.com/1142614 SUSE Bug 1142614 https://www.suse.com/security/cve/CVE-2019-9893/ SUSE CVE CVE-2019-9893 page Container caasp/v4/cilium:1.6.6 Container caasp/v4/etcd:3.4.13 Container caasp/v4/hyperkube:v1.17.17 Container caasp/v4/prometheus-alertmanager:0.16.2 Container caasp/v4/prometheus-pushgateway:0.6.0 Container caasp/v4/prometheus-server:2.7.1 Container caasp/v4/rsyslog:8.39.0 Container ses/6/cephcsi/cephcsi:latest Container ses/6/rook/ceph:latest Container ses/7/ceph/ceph:latest Container ses/7/ceph/grafana:latest Container ses/7/cephcsi/cephcsi:latest Container ses/7/rook/ceph:latest Container suse/sle-micro/5.0/toolbox:latest Container suse/sles/15.2/virt-handler:0.38.1 Container suse/sles/15.2/virt-launcher:0.38.1 Container suse/sles/15.3/cdi-importer:1.37.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1 Container suse/sles/15.3/libguestfs-tools:0.45.0 Container suse/sles/15.3/virt-handler:0.45.0 Container suse/sles/15.3/virt-launcher:0.45.0 Image SLES15-Azure-BYOS Image SLES15-EC2-CHOST-HVM-BYOS Image SLES15-EC2-HVM-BYOS Image SLES15-GCE-BYOS Image SLES15-OCI-BYOS Image SLES15-SAP-Azure Image SLES15-SAP-Azure-BYOS Image SLES15-SAP-Azure-LI-BYOS-Production Image SLES15-SAP-Azure-VLI-BYOS-Production Image SLES15-SAP-EC2-HVM Image SLES15-SAP-EC2-HVM-BYOS Image SLES15-SAP-GCE Image SLES15-SAP-GCE-BYOS Image SLES15-SAP-OCI-BYOS Image SLES15-SP1-Azure-BYOS Image SLES15-SP1-Azure-HPC-BYOS Image SLES15-SP1-CAP-Deployment-BYOS-EC2-HVM Image SLES15-SP1-CAP-Deployment-BYOS-GCE Image SLES15-SP1-CHOST-BYOS-Azure Image SLES15-SP1-CHOST-BYOS-EC2 Image SLES15-SP1-CHOST-BYOS-GCE Image SLES15-SP1-EC2-HPC-HVM-BYOS Image SLES15-SP1-EC2-HVM-BYOS Image SLES15-SP1-GCE-BYOS Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server Image SLES15-SP1-OCI-BYOS Image SLES15-SP1-SAP-Azure Image SLES15-SP1-SAP-Azure-BYOS Image SLES15-SP1-SAP-Azure-LI-BYOS-Production Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production Image SLES15-SP1-SAP-EC2-HVM Image SLES15-SP1-SAP-EC2-HVM-BYOS Image SLES15-SP1-SAP-GCE Image SLES15-SP1-SAP-GCE-BYOS Image SLES15-SP1-SAP-OCI-BYOS Image SLES15-SP1-SAPCAL-Azure Image SLES15-SP1-SAPCAL-EC2-HVM Image SLES15-SP1-SAPCAL-GCE Image SLES15-SP2-Azure-Basic Image SLES15-SP2-Azure-Standard Image SLES15-SP2-BYOS-Azure Image SLES15-SP2-BYOS-EC2-HVM Image SLES15-SP2-BYOS-GCE Image SLES15-SP2-CAP-Deployment-BYOS-Azure Image SLES15-SP2-CHOST-BYOS-Aliyun Image SLES15-SP2-CHOST-BYOS-Azure Image SLES15-SP2-CHOST-BYOS-EC2 Image SLES15-SP2-CHOST-BYOS-GCE Image SLES15-SP2-EC2-ECS-HVM Image SLES15-SP2-EC2-HVM Image SLES15-SP2-GCE Image SLES15-SP2-HPC-Azure Image SLES15-SP2-HPC-BYOS-Azure Image SLES15-SP2-HPC-BYOS-EC2-HVM Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE Image SLES15-SP2-SAP-Azure Image SLES15-SP2-SAP-Azure-LI-BYOS-Production Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production Image SLES15-SP2-SAP-BYOS-Azure Image SLES15-SP2-SAP-BYOS-EC2-HVM Image SLES15-SP2-SAP-BYOS-GCE Image SLES15-SP2-SAP-EC2-HVM Image SLES15-SP2-SAP-GCE Image SLES15-SP3-Micro-BYOS-GCE SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 libseccomp2-2.4.1-3.3.1 libseccomp2-32bit-2.4.1-3.3.1 libseccomp-devel-2.4.1-3.3.1 libseccomp-tools-2.4.1-3.3.1 libseccomp2-64bit-2.4.1-3.3.1 libseccomp2-2.4.1-3.3.1 as a component of Container caasp/v4/cilium:1.6.6 libseccomp2-2.4.1-3.3.1 as a component of Container caasp/v4/etcd:3.4.13 libseccomp2-2.4.1-3.3.1 as a component of Container caasp/v4/hyperkube:v1.17.17 libseccomp2-2.4.1-3.3.1 as a component of Container caasp/v4/prometheus-alertmanager:0.16.2 libseccomp2-2.4.1-3.3.1 as a component of Container caasp/v4/prometheus-pushgateway:0.6.0 libseccomp2-2.4.1-3.3.1 as a component of Container caasp/v4/prometheus-server:2.7.1 libseccomp2-2.4.1-3.3.1 as a component of Container caasp/v4/rsyslog:8.39.0 libseccomp2-2.4.1-3.3.1 as a component of Container ses/6/cephcsi/cephcsi:latest libseccomp2-2.4.1-3.3.1 as a component of Container ses/6/rook/ceph:latest libseccomp2-2.4.1-3.3.1 as a component of Container ses/7/ceph/ceph:latest libseccomp2-2.4.1-3.3.1 as a component of Container ses/7/ceph/grafana:latest libseccomp2-2.4.1-3.3.1 as a component of Container ses/7/cephcsi/cephcsi:latest libseccomp2-2.4.1-3.3.1 as a component of Container ses/7/rook/ceph:latest libseccomp2-2.4.1-3.3.1 as a component of Container suse/sle-micro/5.0/toolbox:latest libseccomp2-2.4.1-3.3.1 as a component of Container suse/sles/15.2/virt-handler:0.38.1 libseccomp2-2.4.1-3.3.1 as a component of Container suse/sles/15.2/virt-launcher:0.38.1 libseccomp2-2.4.1-3.3.1 as a component of Container suse/sles/15.3/cdi-importer:1.37.1 libseccomp2-2.4.1-3.3.1 as a component of Container suse/sles/15.3/cdi-uploadserver:1.37.1 libseccomp2-2.4.1-3.3.1 as a component of Container suse/sles/15.3/libguestfs-tools:0.45.0 libseccomp2-2.4.1-3.3.1 as a component of Container suse/sles/15.3/virt-handler:0.45.0 libseccomp2-2.4.1-3.3.1 as a component of Container suse/sles/15.3/virt-launcher:0.45.0 libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-Azure-BYOS libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-EC2-CHOST-HVM-BYOS libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-EC2-HVM-BYOS libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-GCE-BYOS libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-OCI-BYOS libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SAP-Azure libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SAP-Azure-BYOS libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SAP-Azure-LI-BYOS-Production libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SAP-Azure-VLI-BYOS-Production libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SAP-EC2-HVM libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SAP-EC2-HVM-BYOS libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SAP-GCE libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SAP-GCE-BYOS libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SAP-OCI-BYOS libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP1-Azure-BYOS libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP1-Azure-HPC-BYOS libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP1-CAP-Deployment-BYOS-EC2-HVM libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP1-CAP-Deployment-BYOS-GCE libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP1-CHOST-BYOS-Azure libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP1-CHOST-BYOS-EC2 libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP1-CHOST-BYOS-GCE libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP1-EC2-HPC-HVM-BYOS libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP1-EC2-HVM-BYOS libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP1-GCE-BYOS libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP1-OCI-BYOS libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP1-SAP-Azure libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP1-SAP-Azure-BYOS libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP1-SAP-Azure-LI-BYOS-Production libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP1-SAP-EC2-HVM libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP1-SAP-EC2-HVM-BYOS libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP1-SAP-GCE libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP1-SAP-GCE-BYOS libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP1-SAP-OCI-BYOS libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP1-SAPCAL-Azure libseccomp2-32bit-2.4.1-3.3.1 as a component of Image SLES15-SP1-SAPCAL-Azure libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP1-SAPCAL-EC2-HVM libseccomp2-32bit-2.4.1-3.3.1 as a component of Image SLES15-SP1-SAPCAL-EC2-HVM libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP1-SAPCAL-GCE libseccomp2-32bit-2.4.1-3.3.1 as a component of Image SLES15-SP1-SAPCAL-GCE libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP2-Azure-Basic libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP2-Azure-Standard libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP2-BYOS-Azure libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP2-BYOS-EC2-HVM libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP2-BYOS-GCE libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP2-CAP-Deployment-BYOS-Azure libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP2-CHOST-BYOS-Aliyun libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP2-CHOST-BYOS-Azure libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP2-CHOST-BYOS-EC2 libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP2-CHOST-BYOS-GCE libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP2-EC2-ECS-HVM libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP2-EC2-HVM libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP2-GCE libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP2-HPC-Azure libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP2-HPC-BYOS-Azure libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP2-HPC-BYOS-EC2-HVM libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP2-SAP-Azure libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP2-SAP-Azure-LI-BYOS-Production libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP2-SAP-BYOS-Azure libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP2-SAP-BYOS-EC2-HVM libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP2-SAP-BYOS-GCE libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP2-SAP-EC2-HVM libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP2-SAP-GCE libseccomp2-2.4.1-3.3.1 as a component of Image SLES15-SP3-Micro-BYOS-GCE libseccomp-devel-2.4.1-3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libseccomp2-2.4.1-3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libseccomp2-32bit-2.4.1-3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libseccomp-devel-2.4.1-3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libseccomp2-2.4.1-3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libseccomp2-32bit-2.4.1-3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE), which might able to lead to bypassing seccomp filters and potential privilege escalations. CVE-2019-9893 Container caasp/v4/cilium:1.6.6:libseccomp2-2.4.1-3.3.1 Container caasp/v4/etcd:3.4.13:libseccomp2-2.4.1-3.3.1 Container caasp/v4/hyperkube:v1.17.17:libseccomp2-2.4.1-3.3.1 Container caasp/v4/prometheus-alertmanager:0.16.2:libseccomp2-2.4.1-3.3.1 Container caasp/v4/prometheus-pushgateway:0.6.0:libseccomp2-2.4.1-3.3.1 Container caasp/v4/prometheus-server:2.7.1:libseccomp2-2.4.1-3.3.1 Container caasp/v4/rsyslog:8.39.0:libseccomp2-2.4.1-3.3.1 Container ses/6/cephcsi/cephcsi:latest:libseccomp2-2.4.1-3.3.1 Container ses/6/rook/ceph:latest:libseccomp2-2.4.1-3.3.1 Container ses/7/ceph/ceph:latest:libseccomp2-2.4.1-3.3.1 Container ses/7/ceph/grafana:latest:libseccomp2-2.4.1-3.3.1 Container ses/7/cephcsi/cephcsi:latest:libseccomp2-2.4.1-3.3.1 Container ses/7/rook/ceph:latest:libseccomp2-2.4.1-3.3.1 Container suse/sle-micro/5.0/toolbox:latest:libseccomp2-2.4.1-3.3.1 Container suse/sles/15.2/virt-handler:0.38.1:libseccomp2-2.4.1-3.3.1 Container suse/sles/15.2/virt-launcher:0.38.1:libseccomp2-2.4.1-3.3.1 Container suse/sles/15.3/cdi-importer:1.37.1:libseccomp2-2.4.1-3.3.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:libseccomp2-2.4.1-3.3.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:libseccomp2-2.4.1-3.3.1 Container suse/sles/15.3/virt-handler:0.45.0:libseccomp2-2.4.1-3.3.1 Container suse/sles/15.3/virt-launcher:0.45.0:libseccomp2-2.4.1-3.3.1 Image SLES15-Azure-BYOS:libseccomp2-2.4.1-3.3.1 Image SLES15-EC2-CHOST-HVM-BYOS:libseccomp2-2.4.1-3.3.1 Image SLES15-EC2-HVM-BYOS:libseccomp2-2.4.1-3.3.1 Image SLES15-GCE-BYOS:libseccomp2-2.4.1-3.3.1 Image SLES15-OCI-BYOS:libseccomp2-2.4.1-3.3.1 Image SLES15-SAP-Azure-BYOS:libseccomp2-2.4.1-3.3.1 Image SLES15-SAP-Azure-LI-BYOS-Production:libseccomp2-2.4.1-3.3.1 Image SLES15-SAP-Azure-VLI-BYOS-Production:libseccomp2-2.4.1-3.3.1 Image SLES15-SAP-Azure:libseccomp2-2.4.1-3.3.1 Image SLES15-SAP-EC2-HVM-BYOS:libseccomp2-2.4.1-3.3.1 Image SLES15-SAP-EC2-HVM:libseccomp2-2.4.1-3.3.1 Image SLES15-SAP-GCE-BYOS:libseccomp2-2.4.1-3.3.1 Image SLES15-SAP-GCE:libseccomp2-2.4.1-3.3.1 Image SLES15-SAP-OCI-BYOS:libseccomp2-2.4.1-3.3.1 Image SLES15-SP1-Azure-BYOS:libseccomp2-2.4.1-3.3.1 Image SLES15-SP1-Azure-HPC-BYOS:libseccomp2-2.4.1-3.3.1 Image SLES15-SP1-CAP-Deployment-BYOS-EC2-HVM:libseccomp2-2.4.1-3.3.1 Image SLES15-SP1-CAP-Deployment-BYOS-GCE:libseccomp2-2.4.1-3.3.1 Image SLES15-SP1-CHOST-BYOS-Azure:libseccomp2-2.4.1-3.3.1 Image SLES15-SP1-CHOST-BYOS-EC2:libseccomp2-2.4.1-3.3.1 Image SLES15-SP1-CHOST-BYOS-GCE:libseccomp2-2.4.1-3.3.1 Image SLES15-SP1-EC2-HPC-HVM-BYOS:libseccomp2-2.4.1-3.3.1 Image SLES15-SP1-EC2-HVM-BYOS:libseccomp2-2.4.1-3.3.1 Image SLES15-SP1-GCE-BYOS:libseccomp2-2.4.1-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:libseccomp2-2.4.1-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:libseccomp2-2.4.1-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:libseccomp2-2.4.1-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:libseccomp2-2.4.1-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:libseccomp2-2.4.1-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:libseccomp2-2.4.1-3.3.1 Image SLES15-SP1-OCI-BYOS:libseccomp2-2.4.1-3.3.1 Image SLES15-SP1-SAP-Azure-BYOS:libseccomp2-2.4.1-3.3.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libseccomp2-2.4.1-3.3.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:libseccomp2-2.4.1-3.3.1 Image SLES15-SP1-SAP-Azure:libseccomp2-2.4.1-3.3.1 Image SLES15-SP1-SAP-EC2-HVM-BYOS:libseccomp2-2.4.1-3.3.1 Image SLES15-SP1-SAP-EC2-HVM:libseccomp2-2.4.1-3.3.1 Image SLES15-SP1-SAP-GCE-BYOS:libseccomp2-2.4.1-3.3.1 Image SLES15-SP1-SAP-GCE:libseccomp2-2.4.1-3.3.1 Image SLES15-SP1-SAP-OCI-BYOS:libseccomp2-2.4.1-3.3.1 Image SLES15-SP1-SAPCAL-Azure:libseccomp2-2.4.1-3.3.1 Image SLES15-SP1-SAPCAL-Azure:libseccomp2-32bit-2.4.1-3.3.1 Image SLES15-SP1-SAPCAL-EC2-HVM:libseccomp2-2.4.1-3.3.1 Image SLES15-SP1-SAPCAL-EC2-HVM:libseccomp2-32bit-2.4.1-3.3.1 Image SLES15-SP1-SAPCAL-GCE:libseccomp2-2.4.1-3.3.1 Image SLES15-SP1-SAPCAL-GCE:libseccomp2-32bit-2.4.1-3.3.1 Image SLES15-SP2-Azure-Basic:libseccomp2-2.4.1-3.3.1 Image SLES15-SP2-Azure-Standard:libseccomp2-2.4.1-3.3.1 Image SLES15-SP2-BYOS-Azure:libseccomp2-2.4.1-3.3.1 Image SLES15-SP2-BYOS-EC2-HVM:libseccomp2-2.4.1-3.3.1 Image SLES15-SP2-BYOS-GCE:libseccomp2-2.4.1-3.3.1 Image SLES15-SP2-CAP-Deployment-BYOS-Azure:libseccomp2-2.4.1-3.3.1 Image SLES15-SP2-CHOST-BYOS-Aliyun:libseccomp2-2.4.1-3.3.1 Image SLES15-SP2-CHOST-BYOS-Azure:libseccomp2-2.4.1-3.3.1 Image SLES15-SP2-CHOST-BYOS-EC2:libseccomp2-2.4.1-3.3.1 Image SLES15-SP2-CHOST-BYOS-GCE:libseccomp2-2.4.1-3.3.1 Image SLES15-SP2-EC2-ECS-HVM:libseccomp2-2.4.1-3.3.1 Image SLES15-SP2-EC2-HVM:libseccomp2-2.4.1-3.3.1 Image SLES15-SP2-GCE:libseccomp2-2.4.1-3.3.1 Image SLES15-SP2-HPC-Azure:libseccomp2-2.4.1-3.3.1 Image SLES15-SP2-HPC-BYOS-Azure:libseccomp2-2.4.1-3.3.1 Image SLES15-SP2-HPC-BYOS-EC2-HVM:libseccomp2-2.4.1-3.3.1 Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure:libseccomp2-2.4.1-3.3.1 Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM:libseccomp2-2.4.1-3.3.1 Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE:libseccomp2-2.4.1-3.3.1 Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure:libseccomp2-2.4.1-3.3.1 Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM:libseccomp2-2.4.1-3.3.1 Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE:libseccomp2-2.4.1-3.3.1 Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:libseccomp2-2.4.1-3.3.1 Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:libseccomp2-2.4.1-3.3.1 Image SLES15-SP2-SAP-Azure:libseccomp2-2.4.1-3.3.1 Image SLES15-SP2-SAP-BYOS-Azure:libseccomp2-2.4.1-3.3.1 Image SLES15-SP2-SAP-BYOS-EC2-HVM:libseccomp2-2.4.1-3.3.1 Image SLES15-SP2-SAP-BYOS-GCE:libseccomp2-2.4.1-3.3.1 Image SLES15-SP2-SAP-EC2-HVM:libseccomp2-2.4.1-3.3.1 Image SLES15-SP2-SAP-GCE:libseccomp2-2.4.1-3.3.1 Image SLES15-SP3-Micro-BYOS-GCE:libseccomp2-2.4.1-3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:libseccomp-devel-2.4.1-3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:libseccomp2-2.4.1-3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:libseccomp2-32bit-2.4.1-3.3.1 SUSE Linux Enterprise Module for Basesystem 15:libseccomp-devel-2.4.1-3.3.1 SUSE Linux Enterprise Module for Basesystem 15:libseccomp2-2.4.1-3.3.1 SUSE Linux Enterprise Module for Basesystem 15:libseccomp2-32bit-2.4.1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192517-1/ https://www.suse.com/security/cve/CVE-2019-9893.html CVE-2019-9893 https://bugzilla.suse.com/1128828 SUSE Bug 1128828