Red Hat Security AdvisoryRHSA-2016:2702
policycoreutils security update
Released 2016-11-14 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) policycoreutils-2.5-9.el7, policycoreutils-devel-2.5-9.el7, policycoreutils-gui-2.5-9.el7 +3
- Red Hat Enterprise Linux Client Optional (v. 7) policycoreutils-restorecond-2.5-9.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) policycoreutils-2.5-9.el7, policycoreutils-newrole-2.5-9.el7, policycoreutils-python-2.5-9.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) policycoreutils-devel-2.5-9.el7, policycoreutils-gui-2.5-9.el7, policycoreutils-restorecond-2.5-9.el7 +1
- Red Hat Enterprise Linux Desktop (v. 6) policycoreutils-2.0.83-30.1.el6_8, policycoreutils-gui-2.0.83-30.1.el6_8, policycoreutils-newrole-2.0.83-30.1.el6_8 +2
- Red Hat Enterprise Linux HPC Node (v. 6) policycoreutils-2.0.83-30.1.el6_8, policycoreutils-newrole-2.0.83-30.1.el6_8, policycoreutils-python-2.0.83-30.1.el6_8
- Red Hat Enterprise Linux HPC Node Optional (v. 6) policycoreutils-gui-2.0.83-30.1.el6_8, policycoreutils-sandbox-2.0.83-30.1.el6_8
- Red Hat Enterprise Linux Server (v. 6) policycoreutils-2.0.83-30.1.el6_8, policycoreutils-gui-2.0.83-30.1.el6_8, policycoreutils-newrole-2.0.83-30.1.el6_8 +2
- Red Hat Enterprise Linux Server (v. 7) policycoreutils-2.5-9.el7, policycoreutils-devel-2.5-9.el7, policycoreutils-devel-2.5-9.el7.ppc +4
- Red Hat Enterprise Linux Server Optional (v. 7) policycoreutils-restorecond-2.5-9.el7
- Red Hat Enterprise Linux Workstation (v. 6) policycoreutils-2.0.83-30.1.el6_8, policycoreutils-gui-2.0.83-30.1.el6_8, policycoreutils-newrole-2.0.83-30.1.el6_8 +2
- Red Hat Enterprise Linux Workstation (v. 7) policycoreutils-2.5-9.el7, policycoreutils-devel-2.5-9.el7, policycoreutils-gui-2.5-9.el7 +3
- Red Hat Enterprise Linux Workstation Optional (v. 7) policycoreutils-restorecond-2.5-9.el7
Fixes 1 record
Priority LOW 38
SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call.
CVSS 3.0HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00382 · Published 2017-01-19 · Fixed CWE-284
