| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/tinfoil-factory/netfoil | < 0.2.1 | 0.2.1 |
The optional flag --filter-system-calls was not applied even if specified.
This is a defense in depth feature to apply additional seccomp filters after the binary has started. The example config also sandboxes the binary with systemd.
Reduced sandboxing of the netfoil binary.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free