- Issued:
- 2026-03-17
- Updated:
- 2026-03-17
RHBA-2026:4714 - Bug Fix Advisory
Synopsis
selinux-policy bug fix and enhancement update
Type/Severity
Bug Fix Advisory
Red Hat Lightspeed patch analysis
Identify and remediate systems affected by this advisory.
Topic
An update for selinux-policy is now available for Red Hat Enterprise Linux 10.
Description
The selinux-policy packages contain the rules that govern how confined processes run on the system.
Bug Fix(es) and Enhancement(s):
- grafana-server service runs as unconfined_service_t [rhel-10.1.z] (JIRA:RHEL-132492)
- Error in <unknown> scriptlet in rpm package usbguard-selinux [rhel-10.1.z] (JIRA:RHEL-128498)
Solution
For details on how to apply this update, which includes the changes described in this advisory, refer to:
Affected Products
- Red Hat Enterprise Linux for x86_64 10 x86_64
- Red Hat Enterprise Linux for IBM z Systems 10 s390x
- Red Hat Enterprise Linux for Power, little endian 10 ppc64le
- Red Hat Enterprise Linux for ARM 64 10 aarch64
- Red Hat CodeReady Linux Builder for x86_64 10 x86_64
- Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le
- Red Hat CodeReady Linux Builder for ARM 64 10 aarch64
- Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x
Fixes
(none)CVEs
(none)
References
(none)
Note:
More recent versions of these packages may be available.
Click a package name for more details.
Red Hat Enterprise Linux for x86_64 10
| SRPM | |
|---|---|
| selinux-policy-42.1.7-1.el10_1.2.src.rpm | SHA-256: 55fb40e82ff4ba2aa06e6b1820edd701930214c405d2138eb8fea858b4d04b3a |
| x86_64 | |
| selinux-policy-42.1.7-1.el10_1.2.noarch.rpm | SHA-256: 2b2b5402fd5aadca2fab39374486f98529456a7d85747963cdf7ff0774760741 |
| selinux-policy-devel-42.1.7-1.el10_1.2.noarch.rpm | SHA-256: 9ebe81174a99322612e70003836111ab54ea9adb68a493baca706f4ed240ff50 |
| selinux-policy-doc-42.1.7-1.el10_1.2.noarch.rpm | SHA-256: a444e1dffd7ab27630701fa014f4162de768580d8c8fdc6afdefd49107dbbc98 |
| selinux-policy-mls-42.1.7-1.el10_1.2.noarch.rpm | SHA-256: c814d90aed15fb21fb4fbb8ba91c38fd8f6d59d260ec1c4a3281fdf9ded35a36 |
| selinux-policy-sandbox-42.1.7-1.el10_1.2.noarch.rpm | SHA-256: 6aa91abf984230cf3062fbfa5a72faaf456d9c6f851c78f7410ea3cf48ffa01b |
| selinux-policy-targeted-42.1.7-1.el10_1.2.noarch.rpm | SHA-256: e5cf334bc7a8fa61b1d1071a1611b1b79d8be0b53ec1798cf9d3d09336eb5b8a |
Red Hat Enterprise Linux for IBM z Systems 10
| SRPM | |
|---|---|
| selinux-policy-42.1.7-1.el10_1.2.src.rpm | SHA-256: 55fb40e82ff4ba2aa06e6b1820edd701930214c405d2138eb8fea858b4d04b3a |
| s390x | |
| selinux-policy-42.1.7-1.el10_1.2.noarch.rpm | SHA-256: 2b2b5402fd5aadca2fab39374486f98529456a7d85747963cdf7ff0774760741 |
| selinux-policy-devel-42.1.7-1.el10_1.2.noarch.rpm | SHA-256: 9ebe81174a99322612e70003836111ab54ea9adb68a493baca706f4ed240ff50 |
| selinux-policy-doc-42.1.7-1.el10_1.2.noarch.rpm | SHA-256: a444e1dffd7ab27630701fa014f4162de768580d8c8fdc6afdefd49107dbbc98 |
| selinux-policy-mls-42.1.7-1.el10_1.2.noarch.rpm | SHA-256: c814d90aed15fb21fb4fbb8ba91c38fd8f6d59d260ec1c4a3281fdf9ded35a36 |
| selinux-policy-sandbox-42.1.7-1.el10_1.2.noarch.rpm | SHA-256: 6aa91abf984230cf3062fbfa5a72faaf456d9c6f851c78f7410ea3cf48ffa01b |
| selinux-policy-targeted-42.1.7-1.el10_1.2.noarch.rpm | SHA-256: e5cf334bc7a8fa61b1d1071a1611b1b79d8be0b53ec1798cf9d3d09336eb5b8a |
Red Hat Enterprise Linux for Power, little endian 10
| SRPM | |
|---|---|
| selinux-policy-42.1.7-1.el10_1.2.src.rpm | SHA-256: 55fb40e82ff4ba2aa06e6b1820edd701930214c405d2138eb8fea858b4d04b3a |
| ppc64le | |
| selinux-policy-42.1.7-1.el10_1.2.noarch.rpm | SHA-256: 2b2b5402fd5aadca2fab39374486f98529456a7d85747963cdf7ff0774760741 |
| selinux-policy-devel-42.1.7-1.el10_1.2.noarch.rpm | SHA-256: 9ebe81174a99322612e70003836111ab54ea9adb68a493baca706f4ed240ff50 |
| selinux-policy-doc-42.1.7-1.el10_1.2.noarch.rpm | SHA-256: a444e1dffd7ab27630701fa014f4162de768580d8c8fdc6afdefd49107dbbc98 |
| selinux-policy-mls-42.1.7-1.el10_1.2.noarch.rpm | SHA-256: c814d90aed15fb21fb4fbb8ba91c38fd8f6d59d260ec1c4a3281fdf9ded35a36 |
| selinux-policy-sandbox-42.1.7-1.el10_1.2.noarch.rpm | SHA-256: 6aa91abf984230cf3062fbfa5a72faaf456d9c6f851c78f7410ea3cf48ffa01b |
| selinux-policy-targeted-42.1.7-1.el10_1.2.noarch.rpm | SHA-256: e5cf334bc7a8fa61b1d1071a1611b1b79d8be0b53ec1798cf9d3d09336eb5b8a |
Red Hat Enterprise Linux for ARM 64 10
| SRPM | |
|---|---|
| selinux-policy-42.1.7-1.el10_1.2.src.rpm | SHA-256: 55fb40e82ff4ba2aa06e6b1820edd701930214c405d2138eb8fea858b4d04b3a |
| aarch64 | |
| selinux-policy-42.1.7-1.el10_1.2.noarch.rpm | SHA-256: 2b2b5402fd5aadca2fab39374486f98529456a7d85747963cdf7ff0774760741 |
| selinux-policy-devel-42.1.7-1.el10_1.2.noarch.rpm | SHA-256: 9ebe81174a99322612e70003836111ab54ea9adb68a493baca706f4ed240ff50 |
| selinux-policy-doc-42.1.7-1.el10_1.2.noarch.rpm | SHA-256: a444e1dffd7ab27630701fa014f4162de768580d8c8fdc6afdefd49107dbbc98 |
| selinux-policy-mls-42.1.7-1.el10_1.2.noarch.rpm | SHA-256: c814d90aed15fb21fb4fbb8ba91c38fd8f6d59d260ec1c4a3281fdf9ded35a36 |
| selinux-policy-sandbox-42.1.7-1.el10_1.2.noarch.rpm | SHA-256: 6aa91abf984230cf3062fbfa5a72faaf456d9c6f851c78f7410ea3cf48ffa01b |
| selinux-policy-targeted-42.1.7-1.el10_1.2.noarch.rpm | SHA-256: e5cf334bc7a8fa61b1d1071a1611b1b79d8be0b53ec1798cf9d3d09336eb5b8a |
Red Hat CodeReady Linux Builder for x86_64 10
| SRPM | |
|---|---|
| x86_64 | |
| selinux-policy-extra-42.1.7-1.el10_1.2.noarch.rpm | SHA-256: b6f715d6315daaf2fd47e7b8730e8eb274cb5eb7bf5d82d046817525ddd3a46a |
| selinux-policy-mls-extra-42.1.7-1.el10_1.2.noarch.rpm | SHA-256: 211a8749f8a0eaa47ae1396de7c6f11f80dae3bc8bbacb5ea5fe2e02a0c36539 |
| selinux-policy-targeted-extra-42.1.7-1.el10_1.2.noarch.rpm | SHA-256: 9349166702fac415db779ed72f9a9ebdde442b7ce937839e48f1a0ba98778214 |
Red Hat CodeReady Linux Builder for Power, little endian 10
| SRPM | |
|---|---|
| ppc64le | |
| selinux-policy-extra-42.1.7-1.el10_1.2.noarch.rpm | SHA-256: b6f715d6315daaf2fd47e7b8730e8eb274cb5eb7bf5d82d046817525ddd3a46a |
| selinux-policy-mls-extra-42.1.7-1.el10_1.2.noarch.rpm | SHA-256: 211a8749f8a0eaa47ae1396de7c6f11f80dae3bc8bbacb5ea5fe2e02a0c36539 |
| selinux-policy-targeted-extra-42.1.7-1.el10_1.2.noarch.rpm | SHA-256: 9349166702fac415db779ed72f9a9ebdde442b7ce937839e48f1a0ba98778214 |
Red Hat CodeReady Linux Builder for ARM 64 10
| SRPM | |
|---|---|
| aarch64 | |
| selinux-policy-extra-42.1.7-1.el10_1.2.noarch.rpm | SHA-256: b6f715d6315daaf2fd47e7b8730e8eb274cb5eb7bf5d82d046817525ddd3a46a |
| selinux-policy-mls-extra-42.1.7-1.el10_1.2.noarch.rpm | SHA-256: 211a8749f8a0eaa47ae1396de7c6f11f80dae3bc8bbacb5ea5fe2e02a0c36539 |
| selinux-policy-targeted-extra-42.1.7-1.el10_1.2.noarch.rpm | SHA-256: 9349166702fac415db779ed72f9a9ebdde442b7ce937839e48f1a0ba98778214 |
Red Hat CodeReady Linux Builder for IBM z Systems 10
| SRPM | |
|---|---|
| s390x | |
| selinux-policy-extra-42.1.7-1.el10_1.2.noarch.rpm | SHA-256: b6f715d6315daaf2fd47e7b8730e8eb274cb5eb7bf5d82d046817525ddd3a46a |
| selinux-policy-mls-extra-42.1.7-1.el10_1.2.noarch.rpm | SHA-256: 211a8749f8a0eaa47ae1396de7c6f11f80dae3bc8bbacb5ea5fe2e02a0c36539 |
| selinux-policy-targeted-extra-42.1.7-1.el10_1.2.noarch.rpm | SHA-256: 9349166702fac415db779ed72f9a9ebdde442b7ce937839e48f1a0ba98778214 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
