Red Hat Product Errata RHBA-2026:3475 - Bug Fix Advisory
Issued:
2026-03-02
Updated:
2026-03-02

RHBA-2026:3475 - Bug Fix Advisory

Synopsis

selinux-policy bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for selinux-policy is now available for Red Hat Enterprise Linux 10.

Description

The selinux-policy packages contain the rules that govern how confined processes run on the system.

Bug Fix(es) and Enhancement(s):

  • Allow nfsd_t domain setuid and setgid capability for rpc.mountd [rhel-10.1.z] (JIRA:RHEL-148248)

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 10 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 10 s390x
  • Red Hat Enterprise Linux for Power, little endian 10 ppc64le
  • Red Hat Enterprise Linux for ARM 64 10 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 10 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le
  • Red Hat CodeReady Linux Builder for ARM 64 10 aarch64
  • Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x

Fixes

(none)

CVEs

(none)

References

(none)

Red Hat Enterprise Linux for x86_64 10

SRPM
selinux-policy-42.1.7-1.el10_1.1.src.rpm SHA-256: a81e8cec003f637ce1fdc2575d84727e54d7725e9c343e3e4b4f303ae8e6c41d
x86_64
selinux-policy-42.1.7-1.el10_1.1.noarch.rpm SHA-256: dc76f4fc633b0781ca81224031446a16ff272a0b226f32be9f8fca29d340ee82
selinux-policy-devel-42.1.7-1.el10_1.1.noarch.rpm SHA-256: d8c92cbb70792c3becc6bb6e0f249e4b191c166e59f7bbd54e79807484391a32
selinux-policy-doc-42.1.7-1.el10_1.1.noarch.rpm SHA-256: 9105d09c18e1f8b252297108fc705f7e12b2e758ea92e6afbc722be5f64e1fae
selinux-policy-mls-42.1.7-1.el10_1.1.noarch.rpm SHA-256: dde06ca3ad6454a1eeadbe1d1dbc7d45007e4997f0a7f92754a19a459b8ce761
selinux-policy-sandbox-42.1.7-1.el10_1.1.noarch.rpm SHA-256: 44dd071dd8297029e29b4434a3976f34e861bae5e7db9e6a444be131e484b49b
selinux-policy-targeted-42.1.7-1.el10_1.1.noarch.rpm SHA-256: 13051e3cd49c5afd4dd18098c8f3c3b603171f696a4f13a815c5bafef0347476

Red Hat Enterprise Linux for IBM z Systems 10

SRPM
selinux-policy-42.1.7-1.el10_1.1.src.rpm SHA-256: a81e8cec003f637ce1fdc2575d84727e54d7725e9c343e3e4b4f303ae8e6c41d
s390x
selinux-policy-42.1.7-1.el10_1.1.noarch.rpm SHA-256: dc76f4fc633b0781ca81224031446a16ff272a0b226f32be9f8fca29d340ee82
selinux-policy-devel-42.1.7-1.el10_1.1.noarch.rpm SHA-256: d8c92cbb70792c3becc6bb6e0f249e4b191c166e59f7bbd54e79807484391a32
selinux-policy-doc-42.1.7-1.el10_1.1.noarch.rpm SHA-256: 9105d09c18e1f8b252297108fc705f7e12b2e758ea92e6afbc722be5f64e1fae
selinux-policy-mls-42.1.7-1.el10_1.1.noarch.rpm SHA-256: dde06ca3ad6454a1eeadbe1d1dbc7d45007e4997f0a7f92754a19a459b8ce761
selinux-policy-sandbox-42.1.7-1.el10_1.1.noarch.rpm SHA-256: 44dd071dd8297029e29b4434a3976f34e861bae5e7db9e6a444be131e484b49b
selinux-policy-targeted-42.1.7-1.el10_1.1.noarch.rpm SHA-256: 13051e3cd49c5afd4dd18098c8f3c3b603171f696a4f13a815c5bafef0347476

Red Hat Enterprise Linux for Power, little endian 10

SRPM
selinux-policy-42.1.7-1.el10_1.1.src.rpm SHA-256: a81e8cec003f637ce1fdc2575d84727e54d7725e9c343e3e4b4f303ae8e6c41d
ppc64le
selinux-policy-42.1.7-1.el10_1.1.noarch.rpm SHA-256: dc76f4fc633b0781ca81224031446a16ff272a0b226f32be9f8fca29d340ee82
selinux-policy-devel-42.1.7-1.el10_1.1.noarch.rpm SHA-256: d8c92cbb70792c3becc6bb6e0f249e4b191c166e59f7bbd54e79807484391a32
selinux-policy-doc-42.1.7-1.el10_1.1.noarch.rpm SHA-256: 9105d09c18e1f8b252297108fc705f7e12b2e758ea92e6afbc722be5f64e1fae
selinux-policy-mls-42.1.7-1.el10_1.1.noarch.rpm SHA-256: dde06ca3ad6454a1eeadbe1d1dbc7d45007e4997f0a7f92754a19a459b8ce761
selinux-policy-sandbox-42.1.7-1.el10_1.1.noarch.rpm SHA-256: 44dd071dd8297029e29b4434a3976f34e861bae5e7db9e6a444be131e484b49b
selinux-policy-targeted-42.1.7-1.el10_1.1.noarch.rpm SHA-256: 13051e3cd49c5afd4dd18098c8f3c3b603171f696a4f13a815c5bafef0347476

Red Hat Enterprise Linux for ARM 64 10

SRPM
selinux-policy-42.1.7-1.el10_1.1.src.rpm SHA-256: a81e8cec003f637ce1fdc2575d84727e54d7725e9c343e3e4b4f303ae8e6c41d
aarch64
selinux-policy-42.1.7-1.el10_1.1.noarch.rpm SHA-256: dc76f4fc633b0781ca81224031446a16ff272a0b226f32be9f8fca29d340ee82
selinux-policy-devel-42.1.7-1.el10_1.1.noarch.rpm SHA-256: d8c92cbb70792c3becc6bb6e0f249e4b191c166e59f7bbd54e79807484391a32
selinux-policy-doc-42.1.7-1.el10_1.1.noarch.rpm SHA-256: 9105d09c18e1f8b252297108fc705f7e12b2e758ea92e6afbc722be5f64e1fae
selinux-policy-mls-42.1.7-1.el10_1.1.noarch.rpm SHA-256: dde06ca3ad6454a1eeadbe1d1dbc7d45007e4997f0a7f92754a19a459b8ce761
selinux-policy-sandbox-42.1.7-1.el10_1.1.noarch.rpm SHA-256: 44dd071dd8297029e29b4434a3976f34e861bae5e7db9e6a444be131e484b49b
selinux-policy-targeted-42.1.7-1.el10_1.1.noarch.rpm SHA-256: 13051e3cd49c5afd4dd18098c8f3c3b603171f696a4f13a815c5bafef0347476

Red Hat CodeReady Linux Builder for x86_64 10

SRPM
x86_64
selinux-policy-extra-42.1.7-1.el10_1.1.noarch.rpm SHA-256: a6d0b5d84bc9f05b9be17f66ed9fd34a83a29a32343d6ccd361a5ee7c858a2a1
selinux-policy-mls-extra-42.1.7-1.el10_1.1.noarch.rpm SHA-256: 05524f21b159ebbd2c3d19a695fc037c7a532002ee7aceb057b96ca0e6bcaa9b
selinux-policy-targeted-extra-42.1.7-1.el10_1.1.noarch.rpm SHA-256: ca283412c92e96b274d2a0e38d95c9ece60e93e549760b3e136942d9b9e4214a

Red Hat CodeReady Linux Builder for Power, little endian 10

SRPM
ppc64le
selinux-policy-extra-42.1.7-1.el10_1.1.noarch.rpm SHA-256: a6d0b5d84bc9f05b9be17f66ed9fd34a83a29a32343d6ccd361a5ee7c858a2a1
selinux-policy-mls-extra-42.1.7-1.el10_1.1.noarch.rpm SHA-256: 05524f21b159ebbd2c3d19a695fc037c7a532002ee7aceb057b96ca0e6bcaa9b
selinux-policy-targeted-extra-42.1.7-1.el10_1.1.noarch.rpm SHA-256: ca283412c92e96b274d2a0e38d95c9ece60e93e549760b3e136942d9b9e4214a

Red Hat CodeReady Linux Builder for ARM 64 10

SRPM
aarch64
selinux-policy-extra-42.1.7-1.el10_1.1.noarch.rpm SHA-256: a6d0b5d84bc9f05b9be17f66ed9fd34a83a29a32343d6ccd361a5ee7c858a2a1
selinux-policy-mls-extra-42.1.7-1.el10_1.1.noarch.rpm SHA-256: 05524f21b159ebbd2c3d19a695fc037c7a532002ee7aceb057b96ca0e6bcaa9b
selinux-policy-targeted-extra-42.1.7-1.el10_1.1.noarch.rpm SHA-256: ca283412c92e96b274d2a0e38d95c9ece60e93e549760b3e136942d9b9e4214a

Red Hat CodeReady Linux Builder for IBM z Systems 10

SRPM
s390x
selinux-policy-extra-42.1.7-1.el10_1.1.noarch.rpm SHA-256: a6d0b5d84bc9f05b9be17f66ed9fd34a83a29a32343d6ccd361a5ee7c858a2a1
selinux-policy-mls-extra-42.1.7-1.el10_1.1.noarch.rpm SHA-256: 05524f21b159ebbd2c3d19a695fc037c7a532002ee7aceb057b96ca0e6bcaa9b
selinux-policy-targeted-extra-42.1.7-1.el10_1.1.noarch.rpm SHA-256: ca283412c92e96b274d2a0e38d95c9ece60e93e549760b3e136942d9b9e4214a

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.