(RHSA-2017:0536) Important: policycoreutils security update

2017-03-1513:36:15

access.redhat.com

EPSS

Percentile

5.1%

JSON

The policycoreutils packages contain the core policy utilities required to manage a SELinux environment.

Security Fix(es):

It was found that the sandbox tool provided in policycoreutils was vulnerable to a TIOCSTI ioctl attack. A specially crafted program executed via the sandbox command could use this flaw to execute arbitrary commands in the context of the parent shell, escaping the sandbox. (CVE-2016-7545)

OSVersionArchitecturePackageVersionFilename
RedHatanyppc64lepolicycoreutils-restorecond< 2.2.5-16.ael7b_1policycoreutils-restorecond-2.2.5-16.ael7b_1.ppc64le.rpm
RedHatanyppc64lepolicycoreutils< 2.2.5-16.ael7b_1policycoreutils-2.2.5-16.ael7b_1.ppc64le.rpm
RedHatanyppc64lepolicycoreutils-python< 2.2.5-16.ael7b_1policycoreutils-python-2.2.5-16.ael7b_1.ppc64le.rpm
RedHat7x86_64policycoreutils< 2.2.5-16.el7_1policycoreutils-2.2.5-16.el7_1.x86_64.rpm
RedHat7x86_64policycoreutils-devel< 2.2.5-16.el7_1policycoreutils-devel-2.2.5-16.el7_1.x86_64.rpm
RedHat7i686policycoreutils-debuginfo< 2.2.5-16.el7_1policycoreutils-debuginfo-2.2.5-16.el7_1.i686.rpm
RedHat7s390xpolicycoreutils-restorecond< 2.2.5-16.el7_1policycoreutils-restorecond-2.2.5-16.el7_1.s390x.rpm
RedHat7s390xpolicycoreutils-newrole< 2.2.5-16.el7_1policycoreutils-newrole-2.2.5-16.el7_1.s390x.rpm
RedHat7s390xpolicycoreutils-devel< 2.2.5-16.el7_1policycoreutils-devel-2.2.5-16.el7_1.s390x.rpm
RedHat7ppc64policycoreutils-debuginfo< 2.2.5-16.el7_1policycoreutils-debuginfo-2.2.5-16.el7_1.ppc64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	ppc64le	policycoreutils-restorecond	< 2.2.5-16.ael7b_1	policycoreutils-restorecond-2.2.5-16.ael7b_1.ppc64le.rpm
RedHat	any	ppc64le	policycoreutils	< 2.2.5-16.ael7b_1	policycoreutils-2.2.5-16.ael7b_1.ppc64le.rpm
RedHat	any	ppc64le	policycoreutils-python	< 2.2.5-16.ael7b_1	policycoreutils-python-2.2.5-16.ael7b_1.ppc64le.rpm
RedHat	7	x86_64	policycoreutils	< 2.2.5-16.el7_1	policycoreutils-2.2.5-16.el7_1.x86_64.rpm
RedHat	7	x86_64	policycoreutils-devel	< 2.2.5-16.el7_1	policycoreutils-devel-2.2.5-16.el7_1.x86_64.rpm
RedHat	7	i686	policycoreutils-debuginfo	< 2.2.5-16.el7_1	policycoreutils-debuginfo-2.2.5-16.el7_1.i686.rpm
RedHat	7	s390x	policycoreutils-restorecond	< 2.2.5-16.el7_1	policycoreutils-restorecond-2.2.5-16.el7_1.s390x.rpm
RedHat	7	s390x	policycoreutils-newrole	< 2.2.5-16.el7_1	policycoreutils-newrole-2.2.5-16.el7_1.s390x.rpm
RedHat	7	s390x	policycoreutils-devel	< 2.2.5-16.el7_1	policycoreutils-devel-2.2.5-16.el7_1.s390x.rpm
RedHat	7	ppc64	policycoreutils-debuginfo	< 2.2.5-16.el7_1	policycoreutils-debuginfo-2.2.5-16.el7_1.ppc64.rpm