libsepol provides an API for the manipulation of SELinux binary policies. It is used by checkpolicy (the policy compiler) and similar tools, as well as by programs like load_policy that need to perform specific transformations on binary policies such as customizing policy boolean settings.
Security Fix(es):
The CIL compiler in SELinux 3.2 has a use-after-free in cilresetclasspermission (called from cilresetclasspermsset and cilresetclasspermslist).(CVE-2021-36086)
{
"severity": "Low"
}{
"x86_64": [
"libsepol-3.1-8.oe1.x86_64.rpm",
"libsepol-devel-3.1-8.oe1.x86_64.rpm",
"libsepol-debugsource-3.1-8.oe1.x86_64.rpm",
"libsepol-debuginfo-3.1-8.oe1.x86_64.rpm"
],
"src": [
"libsepol-3.1-8.oe1.src.rpm"
],
"noarch": [
"libsepol-help-3.1-8.oe1.noarch.rpm"
],
"aarch64": [
"libsepol-debugsource-3.1-8.oe1.aarch64.rpm",
"libsepol-debuginfo-3.1-8.oe1.aarch64.rpm",
"libsepol-devel-3.1-8.oe1.aarch64.rpm",
"libsepol-3.1-8.oe1.aarch64.rpm"
]
}
{
"x86_64": [
"libsepol-debugsource-3.1-8.oe1.x86_64.rpm",
"libsepol-debuginfo-3.1-8.oe1.x86_64.rpm",
"libsepol-devel-3.1-8.oe1.x86_64.rpm",
"libsepol-3.1-8.oe1.x86_64.rpm"
],
"src": [
"libsepol-3.1-8.oe1.src.rpm"
],
"noarch": [
"libsepol-help-3.1-8.oe1.noarch.rpm"
],
"aarch64": [
"libsepol-3.1-8.oe1.aarch64.rpm",
"libsepol-debuginfo-3.1-8.oe1.aarch64.rpm",
"libsepol-devel-3.1-8.oe1.aarch64.rpm",
"libsepol-debugsource-3.1-8.oe1.aarch64.rpm"
]
}