Red Hat Security AdvisoryRHSA-2018:0913
policycoreutils security, bug fix, and enhancement update
Released 2018-04-10 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) policycoreutils-2.5-22.el7, policycoreutils-devel-2.5-22.el7, policycoreutils-gui-2.5-22.el7 +3
- Red Hat Enterprise Linux Client Optional (v. 7) policycoreutils-restorecond-2.5-22.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) policycoreutils-2.5-22.el7, policycoreutils-newrole-2.5-22.el7, policycoreutils-python-2.5-22.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) policycoreutils-devel-2.5-22.el7, policycoreutils-gui-2.5-22.el7, policycoreutils-restorecond-2.5-22.el7 +1
- Red Hat Enterprise Linux Server (v. 7) policycoreutils-2.5-22.el7, policycoreutils-devel-2.5-22.el7, policycoreutils-devel-2.5-22.el7.ppc +4
- Red Hat Enterprise Linux Server Optional (v. 7) policycoreutils-restorecond-2.5-22.el7
- Red Hat Enterprise Linux Workstation (v. 7) policycoreutils-2.5-22.el7, policycoreutils-devel-2.5-22.el7, policycoreutils-gui-2.5-22.el7 +3
- Red Hat Enterprise Linux Workstation Optional (v. 7) policycoreutils-restorecond-2.5-22.el7
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) policycoreutils-2.5-22.el7, policycoreutils-devel-2.5-22.el7, policycoreutils-gui-2.5-22.el7 +3
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) policycoreutils-restorecond-2.5-22.el7
Fixes 1 record
Priority LOW 21
Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local, unprivileged malicious entity to change the SELinux context of an arbitrary file to a context with few restrictions.
CVSS 3.0MEDIUM 4.4· Local · Low privileges · No interaction · EPSS 0.00402 · Published 2018-03-02 · Partial fix CWE-59
