Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · Hardened Images 1 hummingbird:1 | policycoreutils | 0:3.11-2.2.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | policycoreutils-dbus | 0:3.11-2.2.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | policycoreutils-devel | 0:3.11-2.2.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | policycoreutils-gui | 0:3.11-2.2.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | policycoreutils-newrole | 0:3.11-2.2.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | policycoreutils-python-utils | 0:3.11-2.2.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | policycoreutils-restorecond | 0:3.11-2.2.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | policycoreutils-sandbox | 0:3.11-2.2.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | python3-policycoreutils | 0:3.11-2.2.hum1 |
Vulnerabilities 1
-
Medium 4.4
Policycoreutils: policycoreutils: toctou race condition in fixfiles allows arbitrary selinux label manipulation
A TOCTOU (Time-of-Check-Time-of-Use) race condition vulnerability was found in the fixfiles script in policycoreutils. When running fixfiles relabel or fixfiles restore, the script used find and chcon commands to locate and relabel unlabeled files under /tmp …
References
-
report
https://access.redhat.com/security/cve/CVE-2026-19079
-
article
https://access.redhat.com/security/updates/classification/
-
article
https://images.redhat.com/
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_51861.json
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2511976
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-19079
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-19079
-
article
https://github.com/SELinuxProject/selinux/commit/a556538c2d5d2583273e025b45c02651fef47679