(RHSA-2018:0913) Low: policycoreutils security, bug fix, and enhancement update

2018-04-10T09:03:39
ID RHSA-2018:0913
Type redhat
Reporter RedHat
Modified 2018-04-10T10:46:58

Description

The policycoreutils packages contain the core policy utilities required to manage a SELinux environment.

Security Fix(es):

  • policycoreutils: Relabelling of symbolic links in /tmp and /var/tmp change the context of their target instead (CVE-2018-1063)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

This issue was discovered by Renaud Métrich (Red Hat).

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.5 Release Notes linked from the References section.