USN-4574-1: libseccomp-golang vulnerability
It was discovered that libseccomp-golang did not properly generate BPFs. If
a process were running under a restrictive seccomp filter that specified
multiple syscall arguments, the application could potentially bypass the
intended restrictions put in place by seccomp.
Source: USN-4574-1: libseccomp-golang vulnerability
