--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-b7e8e980ef
2016-10-10 17:40:40.963439
--------------------------------------------------------------------------------
Name : libsepol
Product : Fedora 25
Version : 2.5
Release : 10.fc25
URL :
https://github.com/SELinuxProject/selinux/wiki
Summary : SELinux binary policy manipulation library
Description :
Security-enhanced Linux is a feature of the Linux�� kernel and a number
of utilities with enhanced security functionality designed to add
mandatory access controls to Linux. The Security-enhanced Linux
kernel contains new architectural components originally developed to
improve the security of the Flask operating system. These
architectural components provide general support for the enforcement
of many kinds of mandatory access control policies, including those
based on the concepts of Type Enforcement��, Role-based Access
Control, and Multi-level Security.
libsepol provides an API for the manipulation of SELinux binary policies.
It is used by checkpolicy (the policy compiler) and similar tools, as well
as by programs like load_policy that need to perform specific transformations
on binary policies such as customizing policy boolean settings.
--------------------------------------------------------------------------------
Update Information:
This update backports several fixes from upstream and also fixes sandbox issues
including CVE-2016-7545
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1378577 - CVE-2016-7545 policycoreutils: SELinux sandbox escape via TIOCSTI
ioctl
https://bugzilla.redhat.com/show_bug.cgi?id=1378577
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update libsepol' at the command line.
For more information, refer to "Managing Software with yum",
available at
https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------