CVE-2017-18367: libseccomp-golang 0.9.0 and earlier incorrectly generates BPFs that OR multiple arguments rather than ANDing them. A process running under a restrictive seccomp filter that specified multiple syscall arguments could bypass intended access restrictions by specifying a single matching argument.
Please fix it.
Standards version of the package is outdated.
high
The package is severely out of date with respect to the Debian Policy.The package should be updated to follow the last version of Debian Policy
(Standards-Version 4.3.0 instead of
3.9.8).
![[bug history graph]](https://qa.debian.org/data/bts/graphs/g/golang-github-seccomp-libseccomp-golang.png){kind=link}