SUSE SLES12 Security Update : policycoreutils (SUSE-SU-2017:0340-1)

This update for policycoreutils fixes the following issues : - CVE-2016-7545: nonpriv session can escape to parent bsc1000998 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

SUSE-SU-2017:0339-1 Security update for policycoreutils

This update for policycoreutils fixes the following issues: CVE-2016-7545: nonpriv session can escape to parent bsc1000998...

SUSE-SU-2017:0340-1 Security update for policycoreutils

This update for policycoreutils fixes the following issues: CVE-2016-7545: nonpriv session can escape to parent bsc1000998...

SUSE-SU-2017:0338-1 Security update for policycoreutils

This update for policycoreutils fixes the following issues: CVE-2016-7545: nonpriv session can escape to parent bsc1000998...

CVE-2016-7545

SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call...

CVE-2016-7545

SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call...

CVE-2016-7545

SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call...

CVE-2016-7545

CVE-2016-7545 affects SELinux policycoreutils where the sandbox tool is vulnerable to a TIOCSTI ioctl attack, allowing local users to execute arbitrary commands outside the sandbox. The issue is documented by several advisories and vendor bulletins (e.g., Red Hat RHSA-2016:2702, CentOS CESA-2016:...

CVE-2016-7545

SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call...

Fedora Update for libsepol FEDORA-2016-b7e8e980ef

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for libselinux FEDORA-2016-b7e8e980ef

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for secilc FEDORA-2016-b7e8e980ef

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for libsemanage FEDORA-2016-b7e8e980ef

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for policycoreutils CESA-2016:2702 centos6

Check for the Version of policycoreutils SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882599";...

Oracle Linux 6 / 7 : policycoreutils (ELSA-2016-2702)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2702 advisory. 2.0.83-30.1.0.1 - Lazy unmount private, shared entryJoe Jinorabug 12560705 2.0.83-30.1 - sandbox: create a new session for sandboxed processes Resolves:...

RHEL 6 / 7 : policycoreutils (RHSA-2016:2702)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2016:2702 advisory. The policycoreutils packages contain the core policy utilities required to manage a SELinux environment. Security Fixes: It was found that the...

Fedora 25 : checkpolicy / libselinux / libsemanage / libsepol / policycoreutils / etc (2016-b7e8e980ef)

This update backports several fixes from upstream and also fixes sandbox issues including CVE-2016-7545 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as mu...

Important: Red Hat Security Advisory: policycoreutils security update

An update for policycoreutils is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

policycoreutils security update

2.0.83-30.1.0.1 - Lazy unmount private, shared entryJoe Jinorabug 12560705 2.0.83-30.1 - sandbox: create a new session for sandboxed processes Resolves: CVE-2016-7545...

Important: policycoreutils

Issue Overview: It was found that the sandbox tool provided in policycoreutils was vulnerable to a TIOCSTI ioctl attack. A specially crafted program executed via the sandbox command could use this flaw to execute arbitrary commands in the context of the parent bash, escaping the sandbox. Affected...