Approved changes feed: RSS · Atom

cpe:2.3:a:selinux_project:selinux:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorSelinux Project (b7c7aeaf-abaf-5901-8a2d-8df271dd1db2)
ProductSelinux (dbead18d-896e-5a83-9654-5883c273405f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/selinuxproject/selinux purl2cpe 2026-06-01 10:11:15.585928

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-1063 vulnerable 2026-06-08 05:11:16.802278 Details available
Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local, unprivileged malicious entity to change the SELinux context of an arbitrary file to a context with few restrictions. This only happens when the relabeling process is done, usually when taking SELinux state from disabled to enable (permissive or enforcing). The issue was found in policycoreutils 2.5-11.
Published: 2018-03-02T15:00:00.000Z
Updated: 2024-08-05T03:51:47.327Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-7545 vulnerable 2026-06-08 05:08:12.986772 Details available
SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call.
Published: 2017-01-19T20:00:00.000Z
Updated: 2024-08-06T02:04:54.960Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.