Red Hat Product Errata RHBA-2022:8810 - Bug Fix Advisory
Issued:
2022-12-06
Updated:
2022-12-06

RHBA-2022:8810 - Bug Fix Advisory

Synopsis

fapolicyd bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for fapolicyd is now available for Red Hat Enterprise Linux 8.6 Extended Update Support.

Description

The fapolicyd software framework introduces a form of application whitelisting and blacklisting based on a user-defined policy. The application whitelisting feature provides one of the most efficient ways to prevent running untrusted and possibly malicious applications on the system.

Bug Fix(es) and Enhancement(s):

  • drop libgcrypt in favor of openssl (BZ#2136830)
  • statically linked app can execute untrusted app (BZ#2137252)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 8.6 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6 ppc64le
  • Red Hat Enterprise Linux Server - TUS 8.6 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64

Fixes

  • BZ - 2136830 - drop libgcrypt in favour of openssl [rhel-8.6.0.z]

CVEs

(none)

References

(none)

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6

SRPM
fapolicyd-1.1-6.el8_6.4.src.rpm SHA-256: 422fe96605949ae36f5fb858018af8ec656e5f080b853b36716b8624f4ccc419
x86_64
fapolicyd-1.1-6.el8_6.4.x86_64.rpm SHA-256: 3bcad330f74b439f144e3354ebd54089e266bc495170ade18a7d6f81be1a0e22
fapolicyd-debuginfo-1.1-6.el8_6.4.x86_64.rpm SHA-256: e40da98180fa2dfe3963a66247648c0d734545c5fb50969d4d1e514c2eaefdee
fapolicyd-debugsource-1.1-6.el8_6.4.x86_64.rpm SHA-256: 0fcb35e9d1b5dc75d975789e429d0e1f7a219e35023b847a5129e3ac7b5703b7
fapolicyd-selinux-1.1-6.el8_6.4.noarch.rpm SHA-256: 3a85fe69170cff4a2a2030b3cfbe0bccce67b4b5bc790871686eabe11601fda1

Red Hat Enterprise Linux Server - AUS 8.6

SRPM
fapolicyd-1.1-6.el8_6.4.src.rpm SHA-256: 422fe96605949ae36f5fb858018af8ec656e5f080b853b36716b8624f4ccc419
x86_64
fapolicyd-1.1-6.el8_6.4.x86_64.rpm SHA-256: 3bcad330f74b439f144e3354ebd54089e266bc495170ade18a7d6f81be1a0e22
fapolicyd-debuginfo-1.1-6.el8_6.4.x86_64.rpm SHA-256: e40da98180fa2dfe3963a66247648c0d734545c5fb50969d4d1e514c2eaefdee
fapolicyd-debugsource-1.1-6.el8_6.4.x86_64.rpm SHA-256: 0fcb35e9d1b5dc75d975789e429d0e1f7a219e35023b847a5129e3ac7b5703b7
fapolicyd-selinux-1.1-6.el8_6.4.noarch.rpm SHA-256: 3a85fe69170cff4a2a2030b3cfbe0bccce67b4b5bc790871686eabe11601fda1

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6

SRPM
fapolicyd-1.1-6.el8_6.4.src.rpm SHA-256: 422fe96605949ae36f5fb858018af8ec656e5f080b853b36716b8624f4ccc419
s390x
fapolicyd-1.1-6.el8_6.4.s390x.rpm SHA-256: 7de1c24224b93e9ebb11434945d9e081cc492da5d9d354abe4d596d7da67d407
fapolicyd-debuginfo-1.1-6.el8_6.4.s390x.rpm SHA-256: 54726efd492a5bf1e76f52ff0ed742880198a883d11dbe8f6cc51cc8fcc4c7eb
fapolicyd-debugsource-1.1-6.el8_6.4.s390x.rpm SHA-256: 55866e0f39bdfc01c59197fbd2cfa0196d08a387353b04f8027518031af46c06
fapolicyd-selinux-1.1-6.el8_6.4.noarch.rpm SHA-256: 3a85fe69170cff4a2a2030b3cfbe0bccce67b4b5bc790871686eabe11601fda1

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6

SRPM
fapolicyd-1.1-6.el8_6.4.src.rpm SHA-256: 422fe96605949ae36f5fb858018af8ec656e5f080b853b36716b8624f4ccc419
ppc64le
fapolicyd-1.1-6.el8_6.4.ppc64le.rpm SHA-256: 1c72e5f28e10bc1d7af3219db07edda80ec26038f69d0564a64087cfadf5279d
fapolicyd-debuginfo-1.1-6.el8_6.4.ppc64le.rpm SHA-256: 1d2f6ed724af9e29da444fe7cebac74a9c3775ae163b6c47eb86543f9ca7217f
fapolicyd-debugsource-1.1-6.el8_6.4.ppc64le.rpm SHA-256: fbbd37cbdd282cf34d50d26a6ceda1eb39225a310efd092e18f03f6ea156a89e
fapolicyd-selinux-1.1-6.el8_6.4.noarch.rpm SHA-256: 3a85fe69170cff4a2a2030b3cfbe0bccce67b4b5bc790871686eabe11601fda1

Red Hat Enterprise Linux Server - TUS 8.6

SRPM
fapolicyd-1.1-6.el8_6.4.src.rpm SHA-256: 422fe96605949ae36f5fb858018af8ec656e5f080b853b36716b8624f4ccc419
x86_64
fapolicyd-1.1-6.el8_6.4.x86_64.rpm SHA-256: 3bcad330f74b439f144e3354ebd54089e266bc495170ade18a7d6f81be1a0e22
fapolicyd-debuginfo-1.1-6.el8_6.4.x86_64.rpm SHA-256: e40da98180fa2dfe3963a66247648c0d734545c5fb50969d4d1e514c2eaefdee
fapolicyd-debugsource-1.1-6.el8_6.4.x86_64.rpm SHA-256: 0fcb35e9d1b5dc75d975789e429d0e1f7a219e35023b847a5129e3ac7b5703b7
fapolicyd-selinux-1.1-6.el8_6.4.noarch.rpm SHA-256: 3a85fe69170cff4a2a2030b3cfbe0bccce67b4b5bc790871686eabe11601fda1

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6

SRPM
fapolicyd-1.1-6.el8_6.4.src.rpm SHA-256: 422fe96605949ae36f5fb858018af8ec656e5f080b853b36716b8624f4ccc419
aarch64
fapolicyd-1.1-6.el8_6.4.aarch64.rpm SHA-256: b4452e2238840d8ae38ea205f1cb6a7709c64741b935216c30b6474e74e7865e
fapolicyd-debuginfo-1.1-6.el8_6.4.aarch64.rpm SHA-256: 5bd7677cabe8f5a475210c8e834b40cf1ee03412a61d4cb7f0e57b4a78927b20
fapolicyd-debugsource-1.1-6.el8_6.4.aarch64.rpm SHA-256: 805156b8772b70ce9f1348bc25a9359105129f7f0c51a8b46be626aebfcd9dfd
fapolicyd-selinux-1.1-6.el8_6.4.noarch.rpm SHA-256: 3a85fe69170cff4a2a2030b3cfbe0bccce67b4b5bc790871686eabe11601fda1

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6

SRPM
fapolicyd-1.1-6.el8_6.4.src.rpm SHA-256: 422fe96605949ae36f5fb858018af8ec656e5f080b853b36716b8624f4ccc419
ppc64le
fapolicyd-1.1-6.el8_6.4.ppc64le.rpm SHA-256: 1c72e5f28e10bc1d7af3219db07edda80ec26038f69d0564a64087cfadf5279d
fapolicyd-debuginfo-1.1-6.el8_6.4.ppc64le.rpm SHA-256: 1d2f6ed724af9e29da444fe7cebac74a9c3775ae163b6c47eb86543f9ca7217f
fapolicyd-debugsource-1.1-6.el8_6.4.ppc64le.rpm SHA-256: fbbd37cbdd282cf34d50d26a6ceda1eb39225a310efd092e18f03f6ea156a89e
fapolicyd-selinux-1.1-6.el8_6.4.noarch.rpm SHA-256: 3a85fe69170cff4a2a2030b3cfbe0bccce67b4b5bc790871686eabe11601fda1

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6

SRPM
fapolicyd-1.1-6.el8_6.4.src.rpm SHA-256: 422fe96605949ae36f5fb858018af8ec656e5f080b853b36716b8624f4ccc419
x86_64
fapolicyd-1.1-6.el8_6.4.x86_64.rpm SHA-256: 3bcad330f74b439f144e3354ebd54089e266bc495170ade18a7d6f81be1a0e22
fapolicyd-debuginfo-1.1-6.el8_6.4.x86_64.rpm SHA-256: e40da98180fa2dfe3963a66247648c0d734545c5fb50969d4d1e514c2eaefdee
fapolicyd-debugsource-1.1-6.el8_6.4.x86_64.rpm SHA-256: 0fcb35e9d1b5dc75d975789e429d0e1f7a219e35023b847a5129e3ac7b5703b7
fapolicyd-selinux-1.1-6.el8_6.4.noarch.rpm SHA-256: 3a85fe69170cff4a2a2030b3cfbe0bccce67b4b5bc790871686eabe11601fda1

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.