Описание
Security update for policycoreutils
This update for policycoreutils fixes the following issues:
- CVE-2016-7545: nonpriv session can escape to parent [bsc#1000998]
Список пакетов
SUSE Linux Enterprise Server 11 SP4
policycoreutils-2.0.79-4.8.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4
policycoreutils-2.0.79-4.8.1
Ссылки
- Link for SUSE-SU-2017:0339-1
- E-Mail link for SUSE-SU-2017:0339-1
- SUSE Security Ratings
- SUSE Bug 1000998
- SUSE CVE CVE-2016-7545 page
Описание
SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call.
Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:policycoreutils-2.0.79-4.8.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4:policycoreutils-2.0.79-4.8.1
Ссылки
- CVE-2016-7545
- SUSE Bug 1000998
- SUSE Bug 968375
- SUSE Bug 968674