libsepol provides an API for the manipulation of SELinux binary policies. It is used by checkpolicy (the policy compiler) and similar tools, as well as by programs like load_policy that need to perform specific transformations on binary policies such as customizing policy boolean settings.
Security Fix(es):
The CIL compiler in SELinux 3.2 has a use-after-free in cilresetclasspermission (called from cilresetclasspermsset and cilresetclasspermslist).(CVE-2021-36086)
{ "severity": "Low" }
{ "noarch": [ "libsepol-help-3.1-8.oe1.noarch.rpm" ], "src": [ "libsepol-3.1-8.oe1.src.rpm" ], "aarch64": [ "libsepol-debugsource-3.1-8.oe1.aarch64.rpm", "libsepol-debuginfo-3.1-8.oe1.aarch64.rpm", "libsepol-devel-3.1-8.oe1.aarch64.rpm", "libsepol-3.1-8.oe1.aarch64.rpm" ], "x86_64": [ "libsepol-3.1-8.oe1.x86_64.rpm", "libsepol-devel-3.1-8.oe1.x86_64.rpm", "libsepol-debugsource-3.1-8.oe1.x86_64.rpm", "libsepol-debuginfo-3.1-8.oe1.x86_64.rpm" ] }
{ "noarch": [ "libsepol-help-3.1-8.oe1.noarch.rpm" ], "src": [ "libsepol-3.1-8.oe1.src.rpm" ], "aarch64": [ "libsepol-3.1-8.oe1.aarch64.rpm", "libsepol-debuginfo-3.1-8.oe1.aarch64.rpm", "libsepol-devel-3.1-8.oe1.aarch64.rpm", "libsepol-debugsource-3.1-8.oe1.aarch64.rpm" ], "x86_64": [ "libsepol-debugsource-3.1-8.oe1.x86_64.rpm", "libsepol-debuginfo-3.1-8.oe1.x86_64.rpm", "libsepol-devel-3.1-8.oe1.x86_64.rpm", "libsepol-3.1-8.oe1.x86_64.rpm" ] }