Red Hat Product Errata RHBA-2026:18757 - Bug Fix Advisory
Issued:
2026-05-19
Updated:
2026-05-19

RHBA-2026:18757 - Bug Fix Advisory

Synopsis

fapolicyd bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for fapolicyd is now available for Red Hat Enterprise Linux 9.

Description

For detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x

Fixes

  • RHEL-118363 - [RHEL 9] Update fapolicyd to v1.4.3
  • RHEL-122158 - [RHEL9] fapolicyd deadlocks itself when writing its state file (/run/fapolicyd/fapolicyd.state)
  • RHEL-65625 - fapolicyd skips last line of configuration file when it's not ending with a newline
  • RHEL-141670 - [RHEL9] Add files in /usr/share/*/bin/* to trust db
  • RHEL-141671 - [RHEL9] fapolicyd reports wrong executable when executing through ld-linux.so
  • RHEL-141842 - [RHEL9] file /usr/share/selinux/devel/include/distributed is not owned by any package
  • RHEL-144373 - [RHEL9] fapolicyd computes an invalid checksum when a user probe is set on a file
  • RHEL-1357 - sudo: error while loading shared libraries: libsudo_util.so.0: cannot open shared object file: No such file or directory
  • RHEL-94661 - SELinux tools generate untrusted files from fapolicyd's point of view

CVEs

(none)

Red Hat Enterprise Linux for x86_64 9

SRPM
fapolicyd-1.4.3-3.el9.src.rpm SHA-256: 323182241df4326f31978459a52f010308c241c59c7b9adb530232318f9e8347
x86_64
fapolicyd-1.4.3-3.el9.x86_64.rpm SHA-256: 06cde4262e2f0537c379b7e5a02b4f0aadb0ffb420ef87847c40b53dba0fba20
fapolicyd-debuginfo-1.4.3-3.el9.x86_64.rpm SHA-256: bb2f461cee71e4afe00e5d5612cc23e6bf613c6e2db0e5577b90ac70dfc9ebbb
fapolicyd-debugsource-1.4.3-3.el9.x86_64.rpm SHA-256: 2d77d77b3f3e09cd4ad26a023078e5269f2e16a39fa1d1b6ff7d2ae567bb35c8
fapolicyd-selinux-1.4.3-3.el9.noarch.rpm SHA-256: a8660078ee10c6ef6bd1706545037f417b1db80cb7d338e6d5c87af76cf6814a

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8

SRPM
fapolicyd-1.4.3-3.el9.src.rpm SHA-256: 323182241df4326f31978459a52f010308c241c59c7b9adb530232318f9e8347
x86_64
fapolicyd-1.4.3-3.el9.x86_64.rpm SHA-256: 06cde4262e2f0537c379b7e5a02b4f0aadb0ffb420ef87847c40b53dba0fba20
fapolicyd-debuginfo-1.4.3-3.el9.x86_64.rpm SHA-256: bb2f461cee71e4afe00e5d5612cc23e6bf613c6e2db0e5577b90ac70dfc9ebbb
fapolicyd-debugsource-1.4.3-3.el9.x86_64.rpm SHA-256: 2d77d77b3f3e09cd4ad26a023078e5269f2e16a39fa1d1b6ff7d2ae567bb35c8
fapolicyd-selinux-1.4.3-3.el9.noarch.rpm SHA-256: a8660078ee10c6ef6bd1706545037f417b1db80cb7d338e6d5c87af76cf6814a

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
fapolicyd-1.4.3-3.el9.src.rpm SHA-256: 323182241df4326f31978459a52f010308c241c59c7b9adb530232318f9e8347
s390x
fapolicyd-1.4.3-3.el9.s390x.rpm SHA-256: 25ab031a24c039f9f2f4ddf2f48baa1411c99a45e9af317846c240ee780a2150
fapolicyd-debuginfo-1.4.3-3.el9.s390x.rpm SHA-256: c41404c0c370faac2e598e85e65c1ee06be1cbc3a04d151de489ca97073a650e
fapolicyd-debugsource-1.4.3-3.el9.s390x.rpm SHA-256: b4c3013eddde9fa67857d5479995d09ed0ae100e3eab795bd73d8d686f281f97
fapolicyd-selinux-1.4.3-3.el9.noarch.rpm SHA-256: a8660078ee10c6ef6bd1706545037f417b1db80cb7d338e6d5c87af76cf6814a

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8

SRPM
fapolicyd-1.4.3-3.el9.src.rpm SHA-256: 323182241df4326f31978459a52f010308c241c59c7b9adb530232318f9e8347
s390x
fapolicyd-1.4.3-3.el9.s390x.rpm SHA-256: 25ab031a24c039f9f2f4ddf2f48baa1411c99a45e9af317846c240ee780a2150
fapolicyd-debuginfo-1.4.3-3.el9.s390x.rpm SHA-256: c41404c0c370faac2e598e85e65c1ee06be1cbc3a04d151de489ca97073a650e
fapolicyd-debugsource-1.4.3-3.el9.s390x.rpm SHA-256: b4c3013eddde9fa67857d5479995d09ed0ae100e3eab795bd73d8d686f281f97
fapolicyd-selinux-1.4.3-3.el9.noarch.rpm SHA-256: a8660078ee10c6ef6bd1706545037f417b1db80cb7d338e6d5c87af76cf6814a

Red Hat Enterprise Linux for Power, little endian 9

SRPM
fapolicyd-1.4.3-3.el9.src.rpm SHA-256: 323182241df4326f31978459a52f010308c241c59c7b9adb530232318f9e8347
ppc64le
fapolicyd-1.4.3-3.el9.ppc64le.rpm SHA-256: 93ee7e70d511c3421c971faebb285247136f31544d6a43a2d440c248504518d1
fapolicyd-debuginfo-1.4.3-3.el9.ppc64le.rpm SHA-256: 3157fc8022d75246fc09c1fd6b75debe83bba550ccb4bd64b8da95baaec615bd
fapolicyd-debugsource-1.4.3-3.el9.ppc64le.rpm SHA-256: 22893fee42105e1119e302c6bdbf3bd6adab5a11ca941d12f44387f91add30ed
fapolicyd-selinux-1.4.3-3.el9.noarch.rpm SHA-256: a8660078ee10c6ef6bd1706545037f417b1db80cb7d338e6d5c87af76cf6814a

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8

SRPM
fapolicyd-1.4.3-3.el9.src.rpm SHA-256: 323182241df4326f31978459a52f010308c241c59c7b9adb530232318f9e8347
ppc64le
fapolicyd-1.4.3-3.el9.ppc64le.rpm SHA-256: 93ee7e70d511c3421c971faebb285247136f31544d6a43a2d440c248504518d1
fapolicyd-debuginfo-1.4.3-3.el9.ppc64le.rpm SHA-256: 3157fc8022d75246fc09c1fd6b75debe83bba550ccb4bd64b8da95baaec615bd
fapolicyd-debugsource-1.4.3-3.el9.ppc64le.rpm SHA-256: 22893fee42105e1119e302c6bdbf3bd6adab5a11ca941d12f44387f91add30ed
fapolicyd-selinux-1.4.3-3.el9.noarch.rpm SHA-256: a8660078ee10c6ef6bd1706545037f417b1db80cb7d338e6d5c87af76cf6814a

Red Hat Enterprise Linux for ARM 64 9

SRPM
fapolicyd-1.4.3-3.el9.src.rpm SHA-256: 323182241df4326f31978459a52f010308c241c59c7b9adb530232318f9e8347
aarch64
fapolicyd-1.4.3-3.el9.aarch64.rpm SHA-256: e338ca9af97cd583fd8b5d3313610a7b43f1c8830a93fcb692261003883dc286
fapolicyd-debuginfo-1.4.3-3.el9.aarch64.rpm SHA-256: 80c5e955e440010364f21eac3c222818ab221700a8db70677c571a02570fc718
fapolicyd-debugsource-1.4.3-3.el9.aarch64.rpm SHA-256: fa0c7419dce96b9dc9f96613e5bfd3cfec8b5bd1b8d9b6ff289d90e13d9f8af6
fapolicyd-selinux-1.4.3-3.el9.noarch.rpm SHA-256: a8660078ee10c6ef6bd1706545037f417b1db80cb7d338e6d5c87af76cf6814a

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8

SRPM
fapolicyd-1.4.3-3.el9.src.rpm SHA-256: 323182241df4326f31978459a52f010308c241c59c7b9adb530232318f9e8347
aarch64
fapolicyd-1.4.3-3.el9.aarch64.rpm SHA-256: e338ca9af97cd583fd8b5d3313610a7b43f1c8830a93fcb692261003883dc286
fapolicyd-debuginfo-1.4.3-3.el9.aarch64.rpm SHA-256: 80c5e955e440010364f21eac3c222818ab221700a8db70677c571a02570fc718
fapolicyd-debugsource-1.4.3-3.el9.aarch64.rpm SHA-256: fa0c7419dce96b9dc9f96613e5bfd3cfec8b5bd1b8d9b6ff289d90e13d9f8af6
fapolicyd-selinux-1.4.3-3.el9.noarch.rpm SHA-256: a8660078ee10c6ef6bd1706545037f417b1db80cb7d338e6d5c87af76cf6814a

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8

SRPM
fapolicyd-1.4.3-3.el9.src.rpm SHA-256: 323182241df4326f31978459a52f010308c241c59c7b9adb530232318f9e8347
ppc64le
fapolicyd-1.4.3-3.el9.ppc64le.rpm SHA-256: 93ee7e70d511c3421c971faebb285247136f31544d6a43a2d440c248504518d1
fapolicyd-debuginfo-1.4.3-3.el9.ppc64le.rpm SHA-256: 3157fc8022d75246fc09c1fd6b75debe83bba550ccb4bd64b8da95baaec615bd
fapolicyd-debugsource-1.4.3-3.el9.ppc64le.rpm SHA-256: 22893fee42105e1119e302c6bdbf3bd6adab5a11ca941d12f44387f91add30ed
fapolicyd-selinux-1.4.3-3.el9.noarch.rpm SHA-256: a8660078ee10c6ef6bd1706545037f417b1db80cb7d338e6d5c87af76cf6814a

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8

SRPM
fapolicyd-1.4.3-3.el9.src.rpm SHA-256: 323182241df4326f31978459a52f010308c241c59c7b9adb530232318f9e8347
x86_64
fapolicyd-1.4.3-3.el9.x86_64.rpm SHA-256: 06cde4262e2f0537c379b7e5a02b4f0aadb0ffb420ef87847c40b53dba0fba20
fapolicyd-debuginfo-1.4.3-3.el9.x86_64.rpm SHA-256: bb2f461cee71e4afe00e5d5612cc23e6bf613c6e2db0e5577b90ac70dfc9ebbb
fapolicyd-debugsource-1.4.3-3.el9.x86_64.rpm SHA-256: 2d77d77b3f3e09cd4ad26a023078e5269f2e16a39fa1d1b6ff7d2ae567bb35c8
fapolicyd-selinux-1.4.3-3.el9.noarch.rpm SHA-256: a8660078ee10c6ef6bd1706545037f417b1db80cb7d338e6d5c87af76cf6814a

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8

SRPM
fapolicyd-1.4.3-3.el9.src.rpm SHA-256: 323182241df4326f31978459a52f010308c241c59c7b9adb530232318f9e8347
aarch64
fapolicyd-1.4.3-3.el9.aarch64.rpm SHA-256: e338ca9af97cd583fd8b5d3313610a7b43f1c8830a93fcb692261003883dc286
fapolicyd-debuginfo-1.4.3-3.el9.aarch64.rpm SHA-256: 80c5e955e440010364f21eac3c222818ab221700a8db70677c571a02570fc718
fapolicyd-debugsource-1.4.3-3.el9.aarch64.rpm SHA-256: fa0c7419dce96b9dc9f96613e5bfd3cfec8b5bd1b8d9b6ff289d90e13d9f8af6
fapolicyd-selinux-1.4.3-3.el9.noarch.rpm SHA-256: a8660078ee10c6ef6bd1706545037f417b1db80cb7d338e6d5c87af76cf6814a

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8

SRPM
fapolicyd-1.4.3-3.el9.src.rpm SHA-256: 323182241df4326f31978459a52f010308c241c59c7b9adb530232318f9e8347
s390x
fapolicyd-1.4.3-3.el9.s390x.rpm SHA-256: 25ab031a24c039f9f2f4ddf2f48baa1411c99a45e9af317846c240ee780a2150
fapolicyd-debuginfo-1.4.3-3.el9.s390x.rpm SHA-256: c41404c0c370faac2e598e85e65c1ee06be1cbc3a04d151de489ca97073a650e
fapolicyd-debugsource-1.4.3-3.el9.s390x.rpm SHA-256: b4c3013eddde9fa67857d5479995d09ed0ae100e3eab795bd73d8d686f281f97
fapolicyd-selinux-1.4.3-3.el9.noarch.rpm SHA-256: a8660078ee10c6ef6bd1706545037f417b1db80cb7d338e6d5c87af76cf6814a

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8

SRPM
fapolicyd-1.4.3-3.el9.src.rpm SHA-256: 323182241df4326f31978459a52f010308c241c59c7b9adb530232318f9e8347
x86_64
fapolicyd-1.4.3-3.el9.x86_64.rpm SHA-256: 06cde4262e2f0537c379b7e5a02b4f0aadb0ffb420ef87847c40b53dba0fba20
fapolicyd-debuginfo-1.4.3-3.el9.x86_64.rpm SHA-256: bb2f461cee71e4afe00e5d5612cc23e6bf613c6e2db0e5577b90ac70dfc9ebbb
fapolicyd-debugsource-1.4.3-3.el9.x86_64.rpm SHA-256: 2d77d77b3f3e09cd4ad26a023078e5269f2e16a39fa1d1b6ff7d2ae567bb35c8
fapolicyd-selinux-1.4.3-3.el9.noarch.rpm SHA-256: a8660078ee10c6ef6bd1706545037f417b1db80cb7d338e6d5c87af76cf6814a

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8

SRPM
fapolicyd-1.4.3-3.el9.src.rpm SHA-256: 323182241df4326f31978459a52f010308c241c59c7b9adb530232318f9e8347
aarch64
fapolicyd-1.4.3-3.el9.aarch64.rpm SHA-256: e338ca9af97cd583fd8b5d3313610a7b43f1c8830a93fcb692261003883dc286
fapolicyd-debuginfo-1.4.3-3.el9.aarch64.rpm SHA-256: 80c5e955e440010364f21eac3c222818ab221700a8db70677c571a02570fc718
fapolicyd-debugsource-1.4.3-3.el9.aarch64.rpm SHA-256: fa0c7419dce96b9dc9f96613e5bfd3cfec8b5bd1b8d9b6ff289d90e13d9f8af6
fapolicyd-selinux-1.4.3-3.el9.noarch.rpm SHA-256: a8660078ee10c6ef6bd1706545037f417b1db80cb7d338e6d5c87af76cf6814a

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8

SRPM
fapolicyd-1.4.3-3.el9.src.rpm SHA-256: 323182241df4326f31978459a52f010308c241c59c7b9adb530232318f9e8347
ppc64le
fapolicyd-1.4.3-3.el9.ppc64le.rpm SHA-256: 93ee7e70d511c3421c971faebb285247136f31544d6a43a2d440c248504518d1
fapolicyd-debuginfo-1.4.3-3.el9.ppc64le.rpm SHA-256: 3157fc8022d75246fc09c1fd6b75debe83bba550ccb4bd64b8da95baaec615bd
fapolicyd-debugsource-1.4.3-3.el9.ppc64le.rpm SHA-256: 22893fee42105e1119e302c6bdbf3bd6adab5a11ca941d12f44387f91add30ed
fapolicyd-selinux-1.4.3-3.el9.noarch.rpm SHA-256: a8660078ee10c6ef6bd1706545037f417b1db80cb7d338e6d5c87af76cf6814a

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8

SRPM
fapolicyd-1.4.3-3.el9.src.rpm SHA-256: 323182241df4326f31978459a52f010308c241c59c7b9adb530232318f9e8347
s390x
fapolicyd-1.4.3-3.el9.s390x.rpm SHA-256: 25ab031a24c039f9f2f4ddf2f48baa1411c99a45e9af317846c240ee780a2150
fapolicyd-debuginfo-1.4.3-3.el9.s390x.rpm SHA-256: c41404c0c370faac2e598e85e65c1ee06be1cbc3a04d151de489ca97073a650e
fapolicyd-debugsource-1.4.3-3.el9.s390x.rpm SHA-256: b4c3013eddde9fa67857d5479995d09ed0ae100e3eab795bd73d8d686f281f97
fapolicyd-selinux-1.4.3-3.el9.noarch.rpm SHA-256: a8660078ee10c6ef6bd1706545037f417b1db80cb7d338e6d5c87af76cf6814a

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.