Red Hat Security AdvisoryRHSA-2017:0535
policycoreutils security update
Released 2017-03-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.2) policycoreutils-2.2.5-21.el7_2, policycoreutils-newrole-2.2.5-21.el7_2, policycoreutils-python-2.2.5-21.el7_2
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.2) policycoreutils-devel-2.2.5-21.el7_2, policycoreutils-gui-2.2.5-21.el7_2, policycoreutils-restorecond-2.2.5-21.el7_2 +1
- Red Hat Enterprise Linux Server EUS (v. 7.2) policycoreutils-2.2.5-21.el7_2, policycoreutils-devel-2.2.5-21.el7_2, policycoreutils-devel-2.2.5-21.el7_2.ppc +4
- Red Hat Enterprise Linux Server Optional EUS (v. 7.2) policycoreutils-restorecond-2.2.5-21.el7_2
Fixes 1 record
Priority LOW 38
SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call.
CVSS 3.0HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00382 · Published 2017-01-19 · Fixed CWE-284
