Red Hat Product Errata RHBA-2023:0092 - Bug Fix Advisory
Issued:
2023-01-12
Updated:
2023-01-12

RHBA-2023:0092 - Bug Fix Advisory

Synopsis

fapolicyd bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for fapolicyd is now available for Red Hat Enterprise Linux 8.

Description

The fapolicyd software framework introduces a form of application whitelisting and blacklisting based on a user-defined policy. The application whitelisting feature provides one of the most efficient ways to prevent running untrusted and possibly malicious applications on the system.

Bug Fix(es) and Enhancement(s).

  • statically linked app can execute untrusted app (BZ#2137251)

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 8 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.8 s390x
  • Red Hat Enterprise Linux for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.8 ppc64le
  • Red Hat Enterprise Linux Server - TUS 8.8 x86_64
  • Red Hat Enterprise Linux for ARM 64 8 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.8 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64

Fixes

(none)

CVEs

(none)

References

(none)

Red Hat Enterprise Linux for x86_64 8

SRPM
fapolicyd-1.1.3-8.el8_7.1.src.rpm SHA-256: cb9f67fc8a42e798a746b7b086b20e64ec564730ecfdcfe7c74981c32e0fe6c4
x86_64
fapolicyd-1.1.3-8.el8_7.1.x86_64.rpm SHA-256: fb848be98779bb2e768120d6b9dd12e6e5413b94da029edd9db3bc25124cf32d
fapolicyd-debuginfo-1.1.3-8.el8_7.1.x86_64.rpm SHA-256: 4d4e6883da0963672f201a4d5cc1652533fa38ac021018bc89343b92a72f5c08
fapolicyd-debugsource-1.1.3-8.el8_7.1.x86_64.rpm SHA-256: b61d3b29da7559fa64bd8f2b5823dae3883f696ef755034720bc6f7ec059bd3b
fapolicyd-selinux-1.1.3-8.el8_7.1.noarch.rpm SHA-256: f84918c84c63608cba8e6e3009c3bafc8b51b6bd6e5896f0ebc083211e0542e0

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8

SRPM
fapolicyd-1.1.3-8.el8_7.1.src.rpm SHA-256: cb9f67fc8a42e798a746b7b086b20e64ec564730ecfdcfe7c74981c32e0fe6c4
x86_64
fapolicyd-1.1.3-8.el8_7.1.x86_64.rpm SHA-256: fb848be98779bb2e768120d6b9dd12e6e5413b94da029edd9db3bc25124cf32d
fapolicyd-debuginfo-1.1.3-8.el8_7.1.x86_64.rpm SHA-256: 4d4e6883da0963672f201a4d5cc1652533fa38ac021018bc89343b92a72f5c08
fapolicyd-debugsource-1.1.3-8.el8_7.1.x86_64.rpm SHA-256: b61d3b29da7559fa64bd8f2b5823dae3883f696ef755034720bc6f7ec059bd3b
fapolicyd-selinux-1.1.3-8.el8_7.1.noarch.rpm SHA-256: f84918c84c63608cba8e6e3009c3bafc8b51b6bd6e5896f0ebc083211e0542e0

Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.8

SRPM
fapolicyd-1.1.3-8.el8_7.1.src.rpm SHA-256: cb9f67fc8a42e798a746b7b086b20e64ec564730ecfdcfe7c74981c32e0fe6c4
x86_64
fapolicyd-1.1.3-8.el8_7.1.x86_64.rpm SHA-256: fb848be98779bb2e768120d6b9dd12e6e5413b94da029edd9db3bc25124cf32d
fapolicyd-debuginfo-1.1.3-8.el8_7.1.x86_64.rpm SHA-256: 4d4e6883da0963672f201a4d5cc1652533fa38ac021018bc89343b92a72f5c08
fapolicyd-debugsource-1.1.3-8.el8_7.1.x86_64.rpm SHA-256: b61d3b29da7559fa64bd8f2b5823dae3883f696ef755034720bc6f7ec059bd3b
fapolicyd-selinux-1.1.3-8.el8_7.1.noarch.rpm SHA-256: f84918c84c63608cba8e6e3009c3bafc8b51b6bd6e5896f0ebc083211e0542e0

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
fapolicyd-1.1.3-8.el8_7.1.src.rpm SHA-256: cb9f67fc8a42e798a746b7b086b20e64ec564730ecfdcfe7c74981c32e0fe6c4
s390x
fapolicyd-1.1.3-8.el8_7.1.s390x.rpm SHA-256: d6777fcd81992046209525acf36987dd30b9e15b954a8b6d2c0432054a902211
fapolicyd-debuginfo-1.1.3-8.el8_7.1.s390x.rpm SHA-256: 5ce55138ccdd7ad4728032e2672c3e9620eeeb447d34e1a8aa5de1acb097553f
fapolicyd-debugsource-1.1.3-8.el8_7.1.s390x.rpm SHA-256: 93eeb3aa77cb5f6e8a1d7c3cc9bbfbf0cff6a396455a0b8984bda58428f372e1
fapolicyd-selinux-1.1.3-8.el8_7.1.noarch.rpm SHA-256: f84918c84c63608cba8e6e3009c3bafc8b51b6bd6e5896f0ebc083211e0542e0

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.8

SRPM
fapolicyd-1.1.3-8.el8_7.1.src.rpm SHA-256: cb9f67fc8a42e798a746b7b086b20e64ec564730ecfdcfe7c74981c32e0fe6c4
s390x
fapolicyd-1.1.3-8.el8_7.1.s390x.rpm SHA-256: d6777fcd81992046209525acf36987dd30b9e15b954a8b6d2c0432054a902211
fapolicyd-debuginfo-1.1.3-8.el8_7.1.s390x.rpm SHA-256: 5ce55138ccdd7ad4728032e2672c3e9620eeeb447d34e1a8aa5de1acb097553f
fapolicyd-debugsource-1.1.3-8.el8_7.1.s390x.rpm SHA-256: 93eeb3aa77cb5f6e8a1d7c3cc9bbfbf0cff6a396455a0b8984bda58428f372e1
fapolicyd-selinux-1.1.3-8.el8_7.1.noarch.rpm SHA-256: f84918c84c63608cba8e6e3009c3bafc8b51b6bd6e5896f0ebc083211e0542e0

Red Hat Enterprise Linux for Power, little endian 8

SRPM
fapolicyd-1.1.3-8.el8_7.1.src.rpm SHA-256: cb9f67fc8a42e798a746b7b086b20e64ec564730ecfdcfe7c74981c32e0fe6c4
ppc64le
fapolicyd-1.1.3-8.el8_7.1.ppc64le.rpm SHA-256: e029dca2b7e4da1a80e649b93562f56fbf6283e8929a08a0d2154daf1d5b0245
fapolicyd-debuginfo-1.1.3-8.el8_7.1.ppc64le.rpm SHA-256: b8c98f6f46b5258e3d9cb6393002a0a5baf9be29062b12e022ee51d93ddf9f55
fapolicyd-debugsource-1.1.3-8.el8_7.1.ppc64le.rpm SHA-256: faaab7fc585df425bd45842a1112a1e900a7f22977d5ec5103647e39b7aca566
fapolicyd-selinux-1.1.3-8.el8_7.1.noarch.rpm SHA-256: f84918c84c63608cba8e6e3009c3bafc8b51b6bd6e5896f0ebc083211e0542e0

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.8

SRPM
fapolicyd-1.1.3-8.el8_7.1.src.rpm SHA-256: cb9f67fc8a42e798a746b7b086b20e64ec564730ecfdcfe7c74981c32e0fe6c4
ppc64le
fapolicyd-1.1.3-8.el8_7.1.ppc64le.rpm SHA-256: e029dca2b7e4da1a80e649b93562f56fbf6283e8929a08a0d2154daf1d5b0245
fapolicyd-debuginfo-1.1.3-8.el8_7.1.ppc64le.rpm SHA-256: b8c98f6f46b5258e3d9cb6393002a0a5baf9be29062b12e022ee51d93ddf9f55
fapolicyd-debugsource-1.1.3-8.el8_7.1.ppc64le.rpm SHA-256: faaab7fc585df425bd45842a1112a1e900a7f22977d5ec5103647e39b7aca566
fapolicyd-selinux-1.1.3-8.el8_7.1.noarch.rpm SHA-256: f84918c84c63608cba8e6e3009c3bafc8b51b6bd6e5896f0ebc083211e0542e0

Red Hat Enterprise Linux Server - TUS 8.8

SRPM
fapolicyd-1.1.3-8.el8_7.1.src.rpm SHA-256: cb9f67fc8a42e798a746b7b086b20e64ec564730ecfdcfe7c74981c32e0fe6c4
x86_64
fapolicyd-1.1.3-8.el8_7.1.x86_64.rpm SHA-256: fb848be98779bb2e768120d6b9dd12e6e5413b94da029edd9db3bc25124cf32d
fapolicyd-debuginfo-1.1.3-8.el8_7.1.x86_64.rpm SHA-256: 4d4e6883da0963672f201a4d5cc1652533fa38ac021018bc89343b92a72f5c08
fapolicyd-debugsource-1.1.3-8.el8_7.1.x86_64.rpm SHA-256: b61d3b29da7559fa64bd8f2b5823dae3883f696ef755034720bc6f7ec059bd3b
fapolicyd-selinux-1.1.3-8.el8_7.1.noarch.rpm SHA-256: f84918c84c63608cba8e6e3009c3bafc8b51b6bd6e5896f0ebc083211e0542e0

Red Hat Enterprise Linux for ARM 64 8

SRPM
fapolicyd-1.1.3-8.el8_7.1.src.rpm SHA-256: cb9f67fc8a42e798a746b7b086b20e64ec564730ecfdcfe7c74981c32e0fe6c4
aarch64
fapolicyd-1.1.3-8.el8_7.1.aarch64.rpm SHA-256: 12558b5b7cb389766230653b6445cd3c5a7688a8370032500d1c3c78fd926850
fapolicyd-debuginfo-1.1.3-8.el8_7.1.aarch64.rpm SHA-256: a4aaaaf2c7a8f74f49580b3b0a5c8b7c284702a9b25dc0b38ae6b65df422072b
fapolicyd-debugsource-1.1.3-8.el8_7.1.aarch64.rpm SHA-256: fe8ea921a21d751153bf3d3ceaca5c5086dc0908dec90e5483839c5066def2fb
fapolicyd-selinux-1.1.3-8.el8_7.1.noarch.rpm SHA-256: f84918c84c63608cba8e6e3009c3bafc8b51b6bd6e5896f0ebc083211e0542e0

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.8

SRPM
fapolicyd-1.1.3-8.el8_7.1.src.rpm SHA-256: cb9f67fc8a42e798a746b7b086b20e64ec564730ecfdcfe7c74981c32e0fe6c4
aarch64
fapolicyd-1.1.3-8.el8_7.1.aarch64.rpm SHA-256: 12558b5b7cb389766230653b6445cd3c5a7688a8370032500d1c3c78fd926850
fapolicyd-debuginfo-1.1.3-8.el8_7.1.aarch64.rpm SHA-256: a4aaaaf2c7a8f74f49580b3b0a5c8b7c284702a9b25dc0b38ae6b65df422072b
fapolicyd-debugsource-1.1.3-8.el8_7.1.aarch64.rpm SHA-256: fe8ea921a21d751153bf3d3ceaca5c5086dc0908dec90e5483839c5066def2fb
fapolicyd-selinux-1.1.3-8.el8_7.1.noarch.rpm SHA-256: f84918c84c63608cba8e6e3009c3bafc8b51b6bd6e5896f0ebc083211e0542e0

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8

SRPM
fapolicyd-1.1.3-8.el8_7.1.src.rpm SHA-256: cb9f67fc8a42e798a746b7b086b20e64ec564730ecfdcfe7c74981c32e0fe6c4
ppc64le
fapolicyd-1.1.3-8.el8_7.1.ppc64le.rpm SHA-256: e029dca2b7e4da1a80e649b93562f56fbf6283e8929a08a0d2154daf1d5b0245
fapolicyd-debuginfo-1.1.3-8.el8_7.1.ppc64le.rpm SHA-256: b8c98f6f46b5258e3d9cb6393002a0a5baf9be29062b12e022ee51d93ddf9f55
fapolicyd-debugsource-1.1.3-8.el8_7.1.ppc64le.rpm SHA-256: faaab7fc585df425bd45842a1112a1e900a7f22977d5ec5103647e39b7aca566
fapolicyd-selinux-1.1.3-8.el8_7.1.noarch.rpm SHA-256: f84918c84c63608cba8e6e3009c3bafc8b51b6bd6e5896f0ebc083211e0542e0

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8

SRPM
fapolicyd-1.1.3-8.el8_7.1.src.rpm SHA-256: cb9f67fc8a42e798a746b7b086b20e64ec564730ecfdcfe7c74981c32e0fe6c4
x86_64
fapolicyd-1.1.3-8.el8_7.1.x86_64.rpm SHA-256: fb848be98779bb2e768120d6b9dd12e6e5413b94da029edd9db3bc25124cf32d
fapolicyd-debuginfo-1.1.3-8.el8_7.1.x86_64.rpm SHA-256: 4d4e6883da0963672f201a4d5cc1652533fa38ac021018bc89343b92a72f5c08
fapolicyd-debugsource-1.1.3-8.el8_7.1.x86_64.rpm SHA-256: b61d3b29da7559fa64bd8f2b5823dae3883f696ef755034720bc6f7ec059bd3b
fapolicyd-selinux-1.1.3-8.el8_7.1.noarch.rpm SHA-256: f84918c84c63608cba8e6e3009c3bafc8b51b6bd6e5896f0ebc083211e0542e0

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.