Skip to content
OpenAdvisories
High ELSA-2016-2702 1 CVE

Important: policycoreutils security update (Oracle Linux 7)

Published Nov 14, 2016 · Updated Nov 14, 2016

Ecosystem: Oracle Linux

Summary

[2.0.83-30.1.0.1]
- Lazy unmount private, shared entry(Joe Jin)[orabug 12560705]

[2.0.83-30.1]
- sandbox: create a new session for sandboxed processes
Resolves: CVE-2016-7545

Fixed packages 7

ReleasePackageFixed in
Oracle Linux · 7 policycoreutils 0:2.5-9.0.1.el7
Oracle Linux · 7 policycoreutils-devel 0:2.5-9.0.1.el7
Oracle Linux · 7 policycoreutils-gui 0:2.5-9.0.1.el7
Oracle Linux · 7 policycoreutils-newrole 0:2.5-9.0.1.el7
Oracle Linux · 7 policycoreutils-python 0:2.5-9.0.1.el7
Oracle Linux · 7 policycoreutils-restorecond 0:2.5-9.0.1.el7
Oracle Linux · 7 policycoreutils-sandbox 0:2.5-9.0.1.el7

Vulnerabilities 1

  • Unscored —
    CVE-2016-7545

    SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI i…

    policycoreutils Debian