libseccomp v2.6.1

ChangeLog

• Version 2.6.1 - July 1, 2026
  • Update the syscall table for Linux v7.1.0-rc4
  • Fix incorrect 64-bit comparison merge that can weaken libseccomp filters.
    See GitHub Advisory GHSA-4q85-33p6-j5g6
  • Fix issue where oversized libseccomp filters can trigger a double free.
    See GitHub Advisory GHSA-46fr-jh49-xvhx
  • Fix issue where oversized libseccomp filters can trigger a heap corruption.
    See GitHub Advisory GHSA-2hqh-5c36-grrm
  • Fix struct aliasing undefined behavior in the internal libseccomp hash
    algorithm
  • Fix issue where extraneous bytes were being copied to the destination
    buffer in seccomp_export_bpf_mem()
  • Fix a bug where merged libseccomp filters failed to merge the notify_used
    flag, leading to no listener file descriptor being generated
  • Update python shebang to point to python3
  • Add documentation for seccomp_transaction_start()
  • Since support for s390 has been removed from the upstream Linux kernel,
    freeze libseccomp's s390 syscall table at Linux v6.18

Checksum

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

501f66c667225d53791b97e1d7cf85ab764c297d04881f60f38f451c4b0ee1be  libseccomp-2.6.1.tar.gz
-----BEGIN PGP SIGNATURE-----
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=VbpA
-----END PGP SIGNATURE-----