Red Hat Product Errata RHBA-2026:97443 - Bug Fix Advisory
Issued:
2026-11-10
Updated:
2026-11-10

RHBA-2026:97443 - Bug Fix Advisory

Synopsis

fapolicyd and lmdb bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for multiple packages is now available for Red Hat Enterprise Linux 9.

Description

For detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 9 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le
  • Red Hat CodeReady Linux Builder for ARM 64 9 aarch64
  • Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x

Fixes

  • RHEL-13011 - fagenrules doesn't validate rules before reloading fapolicyd
  • RHEL-170173 - [RHEL 9] - "ignore_mount" list is too small for common deployments
  • RHEL-178765 - [RHEL9] Update to fapolicyd-1.5
  • RHEL-184321 - [RHEL 9] Update to fapolicyd-1.6
  • RHEL-192134 - Rebuild fapolicyd to require lmdb > 0.9.29
  • RHEL-190310 - Update to lmdb 0.9.32
  • RHEL-216973 - [RHEL9] FD overlap in posix_spawn file_actions causes "missing fd" crash
  • RHEL-216963 - [RHEL 9] "db_max_size = auto" makes fapolicyd fail on reload
  • RHEL-186511 - Command "fapolicyd-cli --check-trustdb" creates files with incorrect user/group/mode if it didn't exist.
  • RHEL-186528 - [RHEL9] After starting and stopping the fapolicyd service "/run/fapolicyd" is flagged as missing.
  • RHEL-212483 - [RHEL 9] Update to fapolicyd-2.0
  • RHEL-214042 - [RHEL9] Change fapolicyd.service Restart=on-abnormal to Restart=on-failure
  • RHEL-73816 - fapolicyd denies access to files shared on NFS despite having a rule for that
  • RHEL-239990 - [RHEL9] fapolicyd blocks QML and javascript files (KDE Logout.qml, polkit javascript)
  • RHEL-93432 - fapolicyd service dies when reloading the database after checking the trust db
  • RHEL-189482 - recvmsg EINTR crash on SIGUSR1 during trust DB reload

CVEs

(none)

Red Hat Enterprise Linux for x86_64 9

SRPM
fapolicyd-2.0.1-1.el9.src.rpm SHA-256: f443233de0abe2a6a36baf93d1815277ecbf174458a149e4e63f625e37062513
lmdb-0.9.32-1.el9.src.rpm SHA-256: 61e933e562532e9286180c018dae85cd6139cb4678adb21e4430e0347701ec74
x86_64
fapolicyd-2.0.1-1.el9.x86_64.rpm SHA-256: c7b7f4546e0463e44f9535e83835db4928ba53e6d02be1157ebdd161397c79eb
fapolicyd-debuginfo-2.0.1-1.el9.x86_64.rpm SHA-256: 21289e1f860d7126d02d656e9eb2c63ff2c2973583fb8fe0cd4d9d885129d9e8
fapolicyd-debugsource-2.0.1-1.el9.x86_64.rpm SHA-256: b7c5ea9ff5b95d4f2e26fbcd180e5fa6a8e9a0c4e460c41299a7a07c40ccab86
fapolicyd-selinux-2.0.1-1.el9.noarch.rpm SHA-256: 4feb47c5312b4993d4de7743b36eb0e5ed54e752f9d14ec8acf8cef1516f8017
lmdb-debuginfo-0.9.32-1.el9.i686.rpm SHA-256: b67efdb7e68d83613f54436b235561d5f6443f3686467a9b0fd5a9f96786dce7
lmdb-debuginfo-0.9.32-1.el9.x86_64.rpm SHA-256: 95058dbc1e67b64f0e0144c5da309e4b3c540e0eb5c6650cae9560608f774c15
lmdb-debugsource-0.9.32-1.el9.i686.rpm SHA-256: 378a96f45d4527cc3d7484a7c33e7ae9feba6f27396b32c5619216aa3836c6ac
lmdb-debugsource-0.9.32-1.el9.x86_64.rpm SHA-256: 8db4c5e5e847301318d9993c7ffd31d98f2492c3c5584a0f23a167d089bd0c77
lmdb-libs-0.9.32-1.el9.i686.rpm SHA-256: b5c0d5d5e28a96e5138c71a894e6ad4efc5131e0632b785a5f716957b61dc898
lmdb-libs-0.9.32-1.el9.x86_64.rpm SHA-256: 90d9f527f785363ee2a6879f0c04dd1ca49e62ca8e3a13fa31995b2523ac61c8
lmdb-libs-debuginfo-0.9.32-1.el9.i686.rpm SHA-256: c69857fac4938548de675733517b7120c0b153e26cbee53bcdaa93051b832a3c
lmdb-libs-debuginfo-0.9.32-1.el9.x86_64.rpm SHA-256: 2278a726687c1bda03ac9511c9bb06f1e5dbda22c306d76b8595ceb3bde1a36a

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
fapolicyd-2.0.1-1.el9.src.rpm SHA-256: f443233de0abe2a6a36baf93d1815277ecbf174458a149e4e63f625e37062513
lmdb-0.9.32-1.el9.src.rpm SHA-256: 61e933e562532e9286180c018dae85cd6139cb4678adb21e4430e0347701ec74
s390x
fapolicyd-2.0.1-1.el9.s390x.rpm SHA-256: 5b5551396207c57b73e9588611ebb25e98d3251af298a5825655e40aa6e4c5c5
fapolicyd-debuginfo-2.0.1-1.el9.s390x.rpm SHA-256: 5c6e84ba923a7044f9aa8b09eed8ff2ca8d4f88037633cce4b3dc91d677af621
fapolicyd-debugsource-2.0.1-1.el9.s390x.rpm SHA-256: d337c43d8e5bfe8716c8a7eaf7946d488aca61c4165d415a34a7c52864644fca
fapolicyd-selinux-2.0.1-1.el9.noarch.rpm SHA-256: 4feb47c5312b4993d4de7743b36eb0e5ed54e752f9d14ec8acf8cef1516f8017
lmdb-debuginfo-0.9.32-1.el9.s390x.rpm SHA-256: 604e9b8e52d6588196b877e5e5583f5d4f86cf45bcd5e21c853de69e8d62d8a1
lmdb-debugsource-0.9.32-1.el9.s390x.rpm SHA-256: 61f07c2ec59cf0421dba52007e7895ccc7af80cff9d231a782c04dfee727ab1c
lmdb-libs-0.9.32-1.el9.s390x.rpm SHA-256: 2d119ab9fd93e3d5e8d032bddb29707d1d55032512fe37b43cdbd49704c7a49d
lmdb-libs-debuginfo-0.9.32-1.el9.s390x.rpm SHA-256: 5811ccdeee1c07bd1fa4c64db151f5742e1d191cb219221c5c22b1bbaa7efcbc

Red Hat Enterprise Linux for Power, little endian 9

SRPM
fapolicyd-2.0.1-1.el9.src.rpm SHA-256: f443233de0abe2a6a36baf93d1815277ecbf174458a149e4e63f625e37062513
lmdb-0.9.32-1.el9.src.rpm SHA-256: 61e933e562532e9286180c018dae85cd6139cb4678adb21e4430e0347701ec74
ppc64le
fapolicyd-2.0.1-1.el9.ppc64le.rpm SHA-256: b8172abf41cfb1471c4e0ad31d5fa1db7a433a13c6c6b211b00550430ea01793
fapolicyd-debuginfo-2.0.1-1.el9.ppc64le.rpm SHA-256: 056bf4a0c4e351d5b6c668d757e82f02c946951fd8547d61366ca4d8e0df3f69
fapolicyd-debugsource-2.0.1-1.el9.ppc64le.rpm SHA-256: b8c86591dc464e6e52f1eca9b475560075a206e03b0f55c021d84f520a525501
fapolicyd-selinux-2.0.1-1.el9.noarch.rpm SHA-256: 4feb47c5312b4993d4de7743b36eb0e5ed54e752f9d14ec8acf8cef1516f8017
lmdb-debuginfo-0.9.32-1.el9.ppc64le.rpm SHA-256: b32c332b9190cb8872941243deb27e5585b431a42f717280526f07e5c263c5d4
lmdb-debugsource-0.9.32-1.el9.ppc64le.rpm SHA-256: ec8ce7e269be98476b94f642bc65ac5e175b02ef35af1e9dbe7788e7b6a0d4cf
lmdb-libs-0.9.32-1.el9.ppc64le.rpm SHA-256: bea00b618b5a52a7701d695d5c3f306845349110281ecdaad53bf72d9644e036
lmdb-libs-debuginfo-0.9.32-1.el9.ppc64le.rpm SHA-256: 100c0fac379c5ed69008b3ef36b057dce0a5c8b61568723e280a6d1c14cee5a5

Red Hat Enterprise Linux for ARM 64 9

SRPM
fapolicyd-2.0.1-1.el9.src.rpm SHA-256: f443233de0abe2a6a36baf93d1815277ecbf174458a149e4e63f625e37062513
lmdb-0.9.32-1.el9.src.rpm SHA-256: 61e933e562532e9286180c018dae85cd6139cb4678adb21e4430e0347701ec74
aarch64
fapolicyd-2.0.1-1.el9.aarch64.rpm SHA-256: 9b4bb6338f79dbf96698325629a0e82daac54f04f9701a1bc32882bac65ec459
fapolicyd-debuginfo-2.0.1-1.el9.aarch64.rpm SHA-256: 4992fc06e3ddaed4d49929c715e4763161586e39909b159e4b41416c0d497ebc
fapolicyd-debugsource-2.0.1-1.el9.aarch64.rpm SHA-256: 2af709ba70268877d388ad808b1c26057a0819b2b63d46ea331ff62bbfe11e44
fapolicyd-selinux-2.0.1-1.el9.noarch.rpm SHA-256: 4feb47c5312b4993d4de7743b36eb0e5ed54e752f9d14ec8acf8cef1516f8017
lmdb-debuginfo-0.9.32-1.el9.aarch64.rpm SHA-256: afb733a20c786cb30f805ba77e8978d2b5f45d441af5c034fc0f10d39026e341
lmdb-debugsource-0.9.32-1.el9.aarch64.rpm SHA-256: 4ddc1babee0525c6c6da4f180ab7722a647bacc44354b78b2b8704a94c030e4d
lmdb-libs-0.9.32-1.el9.aarch64.rpm SHA-256: 49a541dd933be41fea2626e0387e274405cf5f7b16d1c6ed6da1db0cebca7476
lmdb-libs-debuginfo-0.9.32-1.el9.aarch64.rpm SHA-256: e6f79d9c9778b9ad68e167884042797d8bbf6050f4e881f194afd4f03c3a3e8d

Red Hat CodeReady Linux Builder for x86_64 9

SRPM
x86_64
lmdb-0.9.32-1.el9.i686.rpm SHA-256: 7203e43072709302950490ba2b962d0e2d1b87a84aa25ac91449957adfbdbfee
lmdb-0.9.32-1.el9.x86_64.rpm SHA-256: 6457c6f258c36fca32912b006e665f33cc609478a51f3ec7bc6a4422b06131c4
lmdb-debuginfo-0.9.32-1.el9.i686.rpm SHA-256: b67efdb7e68d83613f54436b235561d5f6443f3686467a9b0fd5a9f96786dce7
lmdb-debuginfo-0.9.32-1.el9.x86_64.rpm SHA-256: 95058dbc1e67b64f0e0144c5da309e4b3c540e0eb5c6650cae9560608f774c15
lmdb-debugsource-0.9.32-1.el9.i686.rpm SHA-256: 378a96f45d4527cc3d7484a7c33e7ae9feba6f27396b32c5619216aa3836c6ac
lmdb-debugsource-0.9.32-1.el9.x86_64.rpm SHA-256: 8db4c5e5e847301318d9993c7ffd31d98f2492c3c5584a0f23a167d089bd0c77
lmdb-devel-0.9.32-1.el9.i686.rpm SHA-256: 25b90427e7da423039bc129fac07dc84f11d72a7ae5c6770d47b5335b9b80464
lmdb-devel-0.9.32-1.el9.x86_64.rpm SHA-256: 020b9408e3ab54ea9af22b5eedcbbe4f5f129bbe166f20d6e0f5697cfe0d0007
lmdb-libs-debuginfo-0.9.32-1.el9.i686.rpm SHA-256: c69857fac4938548de675733517b7120c0b153e26cbee53bcdaa93051b832a3c
lmdb-libs-debuginfo-0.9.32-1.el9.x86_64.rpm SHA-256: 2278a726687c1bda03ac9511c9bb06f1e5dbda22c306d76b8595ceb3bde1a36a

Red Hat CodeReady Linux Builder for Power, little endian 9

SRPM
ppc64le
lmdb-0.9.32-1.el9.ppc64le.rpm SHA-256: 8796cc15c37bd0f5740699622d7d473d6111f5eb871ec554ea82fd02d203ab9f
lmdb-debuginfo-0.9.32-1.el9.ppc64le.rpm SHA-256: b32c332b9190cb8872941243deb27e5585b431a42f717280526f07e5c263c5d4
lmdb-debugsource-0.9.32-1.el9.ppc64le.rpm SHA-256: ec8ce7e269be98476b94f642bc65ac5e175b02ef35af1e9dbe7788e7b6a0d4cf
lmdb-devel-0.9.32-1.el9.ppc64le.rpm SHA-256: 7f2d863ca130172e8582064c4cea7146a5c28123aaba7c8260c650141a724bbf
lmdb-libs-debuginfo-0.9.32-1.el9.ppc64le.rpm SHA-256: 100c0fac379c5ed69008b3ef36b057dce0a5c8b61568723e280a6d1c14cee5a5

Red Hat CodeReady Linux Builder for ARM 64 9

SRPM
aarch64
lmdb-0.9.32-1.el9.aarch64.rpm SHA-256: 45ce69dde49ae02ff41e383c28b644dda6fb5e3cababb58de1dfc5ebb376b2b3
lmdb-debuginfo-0.9.32-1.el9.aarch64.rpm SHA-256: afb733a20c786cb30f805ba77e8978d2b5f45d441af5c034fc0f10d39026e341
lmdb-debugsource-0.9.32-1.el9.aarch64.rpm SHA-256: 4ddc1babee0525c6c6da4f180ab7722a647bacc44354b78b2b8704a94c030e4d
lmdb-devel-0.9.32-1.el9.aarch64.rpm SHA-256: 774b0a244c6f248cc3573941e99e887b766b492652c606774abae1f8458f4e23
lmdb-libs-debuginfo-0.9.32-1.el9.aarch64.rpm SHA-256: e6f79d9c9778b9ad68e167884042797d8bbf6050f4e881f194afd4f03c3a3e8d

Red Hat CodeReady Linux Builder for IBM z Systems 9

SRPM
s390x
lmdb-0.9.32-1.el9.s390x.rpm SHA-256: 6bf7d89e923c2bfa7d0382085a85c6f0ba53b6c5ee79763b7ea6c347641e760e
lmdb-debuginfo-0.9.32-1.el9.s390x.rpm SHA-256: 604e9b8e52d6588196b877e5e5583f5d4f86cf45bcd5e21c853de69e8d62d8a1
lmdb-debugsource-0.9.32-1.el9.s390x.rpm SHA-256: 61f07c2ec59cf0421dba52007e7895ccc7af80cff9d231a782c04dfee727ab1c
lmdb-devel-0.9.32-1.el9.s390x.rpm SHA-256: 17ed7451ebd1a0684bdbba6a23f0b938314f60d52a80367dcc05db2bdb7c0a7b
lmdb-libs-debuginfo-0.9.32-1.el9.s390x.rpm SHA-256: 5811ccdeee1c07bd1fa4c64db151f5742e1d191cb219221c5c22b1bbaa7efcbc

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.