policycoreutils-2.0.83-30.1.AXS4
エラータID: AXSA:2016-915:02
リリース日:
2016/11/14 Monday - 19:03
題名:
policycoreutils-2.0.83-30.1.AXS4
影響のあるチャネル:
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity:
High
Description:
[修正内容]
以下項目について対処しました。
[Security Fix]
- SELinux policycoreutils には，巧妙に細工された TIOCSTI ioctl コールに
よって，ローカルのユーザがサンドボックスの外側の任意のコマンドを実行す
る脆弱性があります。(CVE-2016-7545)
一部CVEの翻訳文はJVNからの引用になります。
http://jvndb.jvn.jp/
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2016-7545
SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call.
SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call.
追加情報:
N/A
ダウンロード:
SRPMS
- policycoreutils-2.0.83-30.1.AXS4.src.rpm
MD5: e222858fbc3d81517dd416347969a2ef
SHA-256: 16c5a8c1a6d4cfa4059acb13a21bb702c24a49b383c887614fcf5507c1caab41
Size: 2.96 MB
Asianux Server 4 for x86
- policycoreutils-2.0.83-30.1.AXS4.i686.rpm
MD5: cef8d42781a82a7b2bacfe19e178b1cb
SHA-256: dc18207c7cc7532cb152f07f902b1d18452e87672eeccbfb780948c70e374f1e
Size: 657.55 kB - policycoreutils-gui-2.0.83-30.1.AXS4.i686.rpm
MD5: 36d10a158a1e1dc1dba43cf32ecbeb95
SHA-256: 8a2b53cfee89182771ca61f29a3c912cdd7ddf0ae5a755ce8ceba20f7260c09c
Size: 126.84 kB - policycoreutils-newrole-2.0.83-30.1.AXS4.i686.rpm
MD5: 78fef4bc20672998979511426930438f
SHA-256: 499e961514ea045b115362206b487e1045e0f2db64725e69219628b20e0ddde9
Size: 115.11 kB - policycoreutils-python-2.0.83-30.1.AXS4.i686.rpm
MD5: 61f34793318c05e6d0963b37a28a40ce
SHA-256: 4a70f30832f236279da916d8d23a23cb6a63c74f57e2745ec9590d8ecb3518fb
Size: 434.86 kB - policycoreutils-sandbox-2.0.83-30.1.AXS4.i686.rpm
MD5: af774647af169615a7eb1dbca83a23ec
SHA-256: 45eec9bf5f2fbdd575bcb43ed82895afd91733b5f999e242e5e3d50b49e36b25
Size: 113.98 kB
Asianux Server 4 for x86_64
- policycoreutils-2.0.83-30.1.AXS4.x86_64.rpm
MD5: 9117b987800c7eedf63133484cabb05a
SHA-256: 07a0f73abe4bcc220f40726fb3caf657ffb073ef7269f7561bedec07fb381d05
Size: 661.84 kB - policycoreutils-gui-2.0.83-30.1.AXS4.x86_64.rpm
MD5: 1182ad18f8e88f08449d980b84653139
SHA-256: 871f646ee219de5719f0b1f08ffbfb5b5044771ba4950d133a5e02f997e9771e
Size: 126.39 kB - policycoreutils-newrole-2.0.83-30.1.AXS4.x86_64.rpm
MD5: c64c6299819796d3ef6b976392a1e069
SHA-256: c7d4098d4bf784e0873e6ba7783066a9626affb4a28c2f3702417532243ff88b
Size: 115.09 kB - policycoreutils-python-2.0.83-30.1.AXS4.x86_64.rpm
MD5: 65e5b59a8e9a811052cef31cc410f467
SHA-256: 890c153b3c68867cd743b2c57e81b4850b5f390d20e823a17ec897a05c34766b
Size: 436.29 kB - policycoreutils-sandbox-2.0.83-30.1.AXS4.x86_64.rpm
MD5: d3b5aafca191f4f603c1209b8a5dcbc5
SHA-256: 2cd2e09c7df80c982e20c7a9bb99ea62316cd089b3944e1cb7e0a9ccb25ec2cb
Size: 113.62 kB
English