libsepol security update

2.9-3 - cil: Fix out-of-bound read of file context pattern ending with '' - cil: Destroy classperms list when resetting classpermission 1983517 - cil: Destroy classperm list when resetting map perms 1983521 - cil: cilresetclasspermsset should not reset classpermission 1983525 - cil: Set class...

Design/Logic Flaw

The CIL compiler in SELinux 3.2 has a use-after-free in cilverifyclassperms called from cilverifyclasspermission and cilpreverifyhelper...

CVE-2021-36087

The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmapmatchany called indirectly from cilcheckneverallow. This occurs because there is sometimes a lack of checks for invalid statements in an optional block...

CVE-2021-36084

The CIL compiler in SELinux 3.2 has a use-after-free in cilverifyclassperms called from cilverifyclasspermission and cilpreverifyhelper...