(RHSA-2016:2702) Important: policycoreutils security update

2016-11-1410:43:01

access.redhat.com

EPSS

Percentile

5.1%

JSON

The policycoreutils packages contain the core policy utilities required to manage a SELinux environment.

Security Fix(es):

It was found that the sandbox tool provided in policycoreutils was vulnerable to a TIOCSTI ioctl attack. A specially crafted program executed via the sandbox command could use this flaw to execute arbitrary commands in the context of the parent shell, escaping the sandbox. (CVE-2016-7545)

OSVersionArchitecturePackageVersionFilename
RedHat7ppc64policycoreutils-restorecond< 2.5-9.el7policycoreutils-restorecond-2.5-9.el7.ppc64.rpm
RedHat7s390policycoreutils-debuginfo< 2.5-9.el7policycoreutils-debuginfo-2.5-9.el7.s390.rpm
RedHat7ppc64policycoreutils-gui< 2.5-9.el7policycoreutils-gui-2.5-9.el7.ppc64.rpm
RedHat6x86_64policycoreutils-newrole< 2.0.83-30.1.el6_8policycoreutils-newrole-2.0.83-30.1.el6_8.x86_64.rpm
RedHat6x86_64policycoreutils-sandbox< 2.0.83-30.1.el6_8policycoreutils-sandbox-2.0.83-30.1.el6_8.x86_64.rpm
RedHat7s390xpolicycoreutils-newrole< 2.5-9.el7policycoreutils-newrole-2.5-9.el7.s390x.rpm
RedHat7ppc64lepolicycoreutils-newrole< 2.5-9.el7policycoreutils-newrole-2.5-9.el7.ppc64le.rpm
RedHat7ppc64policycoreutils-newrole< 2.5-9.el7policycoreutils-newrole-2.5-9.el7.ppc64.rpm
RedHat7ppc64lepolicycoreutils-devel< 2.5-9.el7policycoreutils-devel-2.5-9.el7.ppc64le.rpm
RedHat6s390xpolicycoreutils-gui< 2.0.83-30.1.el6_8policycoreutils-gui-2.0.83-30.1.el6_8.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	7	ppc64	policycoreutils-restorecond	< 2.5-9.el7	policycoreutils-restorecond-2.5-9.el7.ppc64.rpm
RedHat	7	s390	policycoreutils-debuginfo	< 2.5-9.el7	policycoreutils-debuginfo-2.5-9.el7.s390.rpm
RedHat	7	ppc64	policycoreutils-gui	< 2.5-9.el7	policycoreutils-gui-2.5-9.el7.ppc64.rpm
RedHat	6	x86_64	policycoreutils-newrole	< 2.0.83-30.1.el6_8	policycoreutils-newrole-2.0.83-30.1.el6_8.x86_64.rpm
RedHat	6	x86_64	policycoreutils-sandbox	< 2.0.83-30.1.el6_8	policycoreutils-sandbox-2.0.83-30.1.el6_8.x86_64.rpm
RedHat	7	s390x	policycoreutils-newrole	< 2.5-9.el7	policycoreutils-newrole-2.5-9.el7.s390x.rpm
RedHat	7	ppc64le	policycoreutils-newrole	< 2.5-9.el7	policycoreutils-newrole-2.5-9.el7.ppc64le.rpm
RedHat	7	ppc64	policycoreutils-newrole	< 2.5-9.el7	policycoreutils-newrole-2.5-9.el7.ppc64.rpm
RedHat	7	ppc64le	policycoreutils-devel	< 2.5-9.el7	policycoreutils-devel-2.5-9.el7.ppc64le.rpm
RedHat	6	s390x	policycoreutils-gui	< 2.0.83-30.1.el6_8	policycoreutils-gui-2.0.83-30.1.el6_8.s390x.rpm