Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Red Hat 7 RHSA-2018-0913 Low: Policycoreutils Security Update

red hat
Calendar Grey April 10, 2018
Scroller Redhat
Canonical announces an update for snapd addressing minor vulnerabilities and enhancing performance in Ubuntu 18.04 LTS.
An update for policycoreutils is now available for Red Hat Enterprise Linux 7

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Summary

The policycoreutils packages contain the core policy utilities required to manage a SELinux environment.
Security Fix(es):
* policycoreutils: Relabelling of symbolic links in /tmp and /var/tmp change the context of their target instead (CVE-2018-1063)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
This issue was discovered by Renaud Métrich (Red Hat).
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.5 Release Notes linked from the References section.

Topics%20covered

Topics Covered

security advisory bug fix Red Hat Enterprise Linux low severity security impact policycoreutils CVE-2018-1063

References

https://access.redhat.com/security/cve/CVE-2018-1063 https://access.redhat.com/security/updates/classification/#low https://access.redhat.com/documentation/en-US/red_hat_enterprise_linux/7/html/7.5_release_notes/index.html

Package List

Red Hat Enterprise Linux Client (v. 7):
Source: policycoreutils-2.5-22.el7.src.rpm
x86_64: policycoreutils-2.5-22.el7.x86_64.rpm policycoreutils-debuginfo-2.5-22.el7.i686.rpm policycoreutils-debuginfo-2.5-22.el7.x86_64.rpm policycoreutils-devel-2.5-22.el7.i686.rpm policycoreutils-devel-2.5-22.el7.x86_64.rpm policycoreutils-gui-2.5-22.el7.x86_64.rpm policycoreutils-newrole-2.5-22.el7.x86_64.rpm policycoreutils-python-2.5-22.el7.x86_64.rpm policycoreutils-sandbox-2.5-22.el7.x86_64.rpm
Buildroot (shipped just to git.centos.org):
Source: policycoreutils-2.5-22.el7.src.rpm
x86_64: policycoreutils-2.5-22.el7.x86_64.rpm policycoreutils-debuginfo-2.5-22.el7.x86_64.rpm
Red Hat Enterprise Linux Client Optional (v. 7):
x86_64: policycoreutils-debuginfo-2.5-22.el7.x86_64.rpm policycoreutils-restorecond-2.5-22.el7.x86_64.rpm
Red Hat Enterprise Linux ComputeNode (v. 7):
Source: policycoreutils-2.5-22.el7.src.rpm
x86_64: policycoreutils-2.5-22.el7.x86_64.rpm policycoreutils-debuginfo-2.5-22.el7.x86_64.rpm policycoreutils-newrole-2.5-22.el7.x86_64.rpm policycoreutils-python-2.5-22.el7.x86_64.rpm
Buildroot (shipped just to git.centos.org):
Source: policycoreutils-2.5-22.el7.src.rpm
x86_64: policycoreutils-2.5-22.el7.x86_64.rpm policycoreutils-debuginfo-2.5-22.el7.x86_64.rpm


Read the Full Advisory


Severity
low
Lowest
Low
Medium
High
Critical

Advisory ID: RHSA-2018:0913-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2018:0913
Issue date: 2018-04-10

Topic

An update for policycoreutils is now available for Red Hat Enterprise Linux7.Red Hat Product Security has rated this update as having a security impactof Low. A Common Vulnerability Scoring System (CVSS) base score, whichgives a detailed severity rating, is available for each vulnerability fromthe CVE link(s) in the References section.

Topics%20covered

Topics Covered

security advisory bug fix Red Hat Enterprise Linux low severity security impact policycoreutils CVE-2018-1063

Relevant Releases Architectures

Buildroot (shipped just to git.centos.org) - ppc64, ppc64le, s390x, x86_64

Red Hat Enterprise Linux Client (v. 7) - x86_64

Red Hat Enterprise Linux Client Optional (v. 7) - x86_64

Red Hat Enterprise Linux ComputeNode (v. 7) - x86_64

Red Hat Enterprise Linux ComputeNode Optional (v. 7) - x86_64

Red Hat Enterprise Linux Server (v. 7) - ppc64, ppc64le, s390x, x86_64

Red Hat Enterprise Linux Server Optional (v. 7) - ppc64, ppc64le, s390x, x86_64

Red Hat Enterprise Linux Workstation (v. 7) - x86_64

Red Hat Enterprise Linux Workstation Optional (v. 7) - x86_64

Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) - aarch64, ppc64le, s390x

Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) - aarch64, ppc64le, s390x

Bugs Fixed

974163 - semanage port -l shows a port with multiple types

1260238 - RFE: restorecon should say in verbose mode when it doesn't change a context due to customizable_type

1337192 - semodule: provide better documentation for behavior across operations with modules

1376770 - sealert tracebacks when lithuanian locales are used

1409813 - file context policy does not honor globs for /home based entries

1458831 - '/sbin/fixfiles restore' doesn't relabel all files when run from /.autorelabel or from system when some special files are present in /tmp

1471809 - RFE: backport SELinux/InfiniBand userspace support

1481191 - [policycoreutils] Tier 0 Localization

1499259 - semanage fcontext "-f/--ftype" description is broken

1550122 - CVE-2018-1063 policycoreutils: Relabelling of symbolic links in /tmp and /var/tmp change the context of their target instead

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.