Red Hat Security AdvisoryRHSA-2017:0536
policycoreutils security update
Released 2017-03-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.1) policycoreutils-2.2.5-16.el7_1, policycoreutils-newrole-2.2.5-16.el7_1, policycoreutils-python-2.2.5-16.el7_1
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.1) policycoreutils-devel-2.2.5-16.el7_1, policycoreutils-gui-2.2.5-16.el7_1, policycoreutils-restorecond-2.2.5-16.el7_1 +1
- Red Hat Enterprise Linux Server EUS (v. 7.1) policycoreutils-2.2.5-16.ael7b_1, policycoreutils-2.2.5-16.el7_1, policycoreutils-devel-2.2.5-16.ael7b_1 +10
- Red Hat Enterprise Linux Server Optional EUS (v. 7.1) policycoreutils-restorecond-2.2.5-16.ael7b_1, policycoreutils-restorecond-2.2.5-16.el7_1
Fixes 1 record
Priority LOW 38
SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call.
CVSS 3.0HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00382 · Published 2017-01-19 · Fixed CWE-284
