Public bug reported:

Within Xenial version 2.2.3 of seccomp is included.
With Yaketty version 2.3.1 is available and fixed this problem.

Even Docker is working on a SNAP solution, please provide the fix to
16.04.


With following patches this can be applied to 2.2.3 in support of the 16.04 LTS 
Release
16.04....

Here the upstream git commits for the patches:

0001-arch-fix-a-problem-with-the-rule-rewrites-in-_seccom.patch
1d63fad4a064b80e0b921b16ed419f3342337ed4
 
0001-all-block-negative-syscall-numbers-from-the-filter.patch
51c46f80c1edee863bbc4eb21b03decc44e69a45 

0001-api-limit-errno-values-to-MAX_ERRNO.patch
0d287caf43792239b107ee3215b32b8bc901f9c3 

0001-db-fix-a-minor-style-problem.patch
61c28579a984a6c4bd87ec585dc6d5cd4cc0e702 

0001-db-make-the-individual-db-filter-ops-private.patch
a4478ddcd4e3b34fcd9c526dcf54f0d79b33ac16

0001-db-store-the-rules-used-to-build-the-filter.patch
f16f405f61ecdbad202257b61004b85fce64d75c 

0001-arch-make-use-of-function-tables-instead-of-switch-s.patch
57df79c166b26d5044e7e27099e6e69671e727dd 

0001-db-introduce-transaction-support.patch
9be1538a4ac0e45047a3f1b79691505c3d11ca31 

0001-arch-move-the-low-level-filter-rule-addition-code-in.patch
996e445a74823c735757413fda809e1ed0afc7d4 

0001-arch-enable-more-involved-arch-ABI-specific-rule-cre.patch
5b42b8cfa25506fa260c8f46b4a063b5cfd09d1c 

0001-arch-basic-support-for-multiplexed-and-direct-socket.patch
d32c3bfa4b07add90dcd04292eb4ba278dd103ba 

0001-arch-generate-both-multiplexed-and-direct-socket-sys.patch
983835f3e0fd000a42c8beaea9d7fbe726ffff65 

0001-tests-add-a-test-for-the-different-types-of-socket-s.patch
099f4214ce4fe5f53cf0f59e96b71bf4d54a8cd6 

0001-api-add-a-seccomp_version-API-call.patch
58a7c20d4c2defc1c984c5c7391ecc60093f85fa 

0001-tests-create-a-simple-live-test-to-verify-we-can-set.patch
8ed78c3859f476d302995b43d6739f3341f5b37d 

0001-s390-handle-multiplexed-syscalls-correctly.patch
47516603828396f85107ea3e2a254958c2bc3ff5 

0001-arch-fix-the-multiplexed-ipc-syscalls.patch
3a89bd144885f54aff86f2e275859a1483992edd

With the following additional commit all tests pass with "make check"

0001-tests-remove-fuzzing-from-28-sim-arch_x86.tests.patch
0d8504bc192e0989494df06efc4b186a9f02e20a

** Affects: libseccomp (Ubuntu)
     Importance: Undecided
     Assignee: Skipper Bug Screeners (skipper-screen-team)
         Status: New


** Tags: architecture-s39064 bugnameltc-152352 severity-high 
targetmilestone-inin1604

** Tags added: architecture-s39064 bugnameltc-152352 severity-high
targetmilestone-inin1604

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1679691

Title:
  libseccomp fix - s390: handle multiplexed syscalls correctly

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libseccomp/+bug/1679691/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to