Red Hat Product Errata RHSA-2023:7733 - Security Advisory
Issued:
2023-12-12
Updated:
2023-12-12

RHSA-2023:7733 - Security Advisory

Synopsis

Important: tracker-miners security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for tracker-miners is now available for Red Hat Enterprise Linux 8.6 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Tracker is a powerful desktop-neutral first class object database, tag/metadata database and search tool. This package contains various miners and metadata extractors for tracker.

Security Fix(es):

  • tracker-miners: sandbox escape (CVE-2023-5557)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 8.6 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6 ppc64le
  • Red Hat Enterprise Linux Server - TUS 8.6 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle Long Life 8.6 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle Long Life 8.6 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle Long Life 8.6 s390x

Fixes

  • BZ - 2243096 - CVE-2023-5557 tracker-miners: sandbox escape

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.6

SRPM
tracker-miners-2.1.5-2.el8_6.1.src.rpm SHA-256: 91b174571013b3819f35da649646533c8029a0815b23436011f36305771194d3
x86_64
tracker-miners-2.1.5-2.el8_6.1.i686.rpm SHA-256: 9b2a8a8ce06f9a7c931c34b85a0240ae28d96c3a6d37c80e08cf7fd099692a24
tracker-miners-2.1.5-2.el8_6.1.x86_64.rpm SHA-256: c1950035fba9b51e9d7a8c9889ff14051d9edda575d1b59fa80676ba3381a0b3
tracker-miners-debuginfo-2.1.5-2.el8_6.1.i686.rpm SHA-256: a22ed6dbc419fc8da5c9a635a0487170b2608dbfe9ebfda924deb6ee72deeb13
tracker-miners-debuginfo-2.1.5-2.el8_6.1.x86_64.rpm SHA-256: 15f3c62e8c700e589e8cef1b4ef079e03ec26f16da78e879f965d0fb246af3fc
tracker-miners-debugsource-2.1.5-2.el8_6.1.i686.rpm SHA-256: ca86c93c21e5a9861063d98a39e00c4363f43397d2df5b2c3328f3f534a5637b
tracker-miners-debugsource-2.1.5-2.el8_6.1.x86_64.rpm SHA-256: 9612a8851cf183b409ca50d822d2b49b28b7cb18744d4b8795186839eed3409f

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6

SRPM
tracker-miners-2.1.5-2.el8_6.1.src.rpm SHA-256: 91b174571013b3819f35da649646533c8029a0815b23436011f36305771194d3
x86_64
tracker-miners-2.1.5-2.el8_6.1.i686.rpm SHA-256: 9b2a8a8ce06f9a7c931c34b85a0240ae28d96c3a6d37c80e08cf7fd099692a24
tracker-miners-2.1.5-2.el8_6.1.x86_64.rpm SHA-256: c1950035fba9b51e9d7a8c9889ff14051d9edda575d1b59fa80676ba3381a0b3
tracker-miners-debuginfo-2.1.5-2.el8_6.1.i686.rpm SHA-256: a22ed6dbc419fc8da5c9a635a0487170b2608dbfe9ebfda924deb6ee72deeb13
tracker-miners-debuginfo-2.1.5-2.el8_6.1.x86_64.rpm SHA-256: 15f3c62e8c700e589e8cef1b4ef079e03ec26f16da78e879f965d0fb246af3fc
tracker-miners-debugsource-2.1.5-2.el8_6.1.i686.rpm SHA-256: ca86c93c21e5a9861063d98a39e00c4363f43397d2df5b2c3328f3f534a5637b
tracker-miners-debugsource-2.1.5-2.el8_6.1.x86_64.rpm SHA-256: 9612a8851cf183b409ca50d822d2b49b28b7cb18744d4b8795186839eed3409f

Red Hat Enterprise Linux Server - AUS 8.6

SRPM
tracker-miners-2.1.5-2.el8_6.1.src.rpm SHA-256: 91b174571013b3819f35da649646533c8029a0815b23436011f36305771194d3
x86_64
tracker-miners-2.1.5-2.el8_6.1.i686.rpm SHA-256: 9b2a8a8ce06f9a7c931c34b85a0240ae28d96c3a6d37c80e08cf7fd099692a24
tracker-miners-2.1.5-2.el8_6.1.x86_64.rpm SHA-256: c1950035fba9b51e9d7a8c9889ff14051d9edda575d1b59fa80676ba3381a0b3
tracker-miners-debuginfo-2.1.5-2.el8_6.1.i686.rpm SHA-256: a22ed6dbc419fc8da5c9a635a0487170b2608dbfe9ebfda924deb6ee72deeb13
tracker-miners-debuginfo-2.1.5-2.el8_6.1.x86_64.rpm SHA-256: 15f3c62e8c700e589e8cef1b4ef079e03ec26f16da78e879f965d0fb246af3fc
tracker-miners-debugsource-2.1.5-2.el8_6.1.i686.rpm SHA-256: ca86c93c21e5a9861063d98a39e00c4363f43397d2df5b2c3328f3f534a5637b
tracker-miners-debugsource-2.1.5-2.el8_6.1.x86_64.rpm SHA-256: 9612a8851cf183b409ca50d822d2b49b28b7cb18744d4b8795186839eed3409f

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6

SRPM
tracker-miners-2.1.5-2.el8_6.1.src.rpm SHA-256: 91b174571013b3819f35da649646533c8029a0815b23436011f36305771194d3
s390x
tracker-miners-2.1.5-2.el8_6.1.s390x.rpm SHA-256: 3ffdf9a496b866475230dd52f9a8cea5d581668233eac37870f5686020d5d065
tracker-miners-debuginfo-2.1.5-2.el8_6.1.s390x.rpm SHA-256: 5c2772fec5dc56c6a34976712b0600a3fe69768c232d2d4d38310d78c5b5847c
tracker-miners-debugsource-2.1.5-2.el8_6.1.s390x.rpm SHA-256: aacb0967cac733664a4680dabe4c6dcf427b93e3035cd896c9ed47dfb5e3181c

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6

SRPM
tracker-miners-2.1.5-2.el8_6.1.src.rpm SHA-256: 91b174571013b3819f35da649646533c8029a0815b23436011f36305771194d3
ppc64le
tracker-miners-2.1.5-2.el8_6.1.ppc64le.rpm SHA-256: a2fa2dd76df3d7d1d9fb5783e2b5a143dbbfdfa1ffecae17097271a19180da8f
tracker-miners-debuginfo-2.1.5-2.el8_6.1.ppc64le.rpm SHA-256: c182834eae88a7f604bcb2fe00755537b2450c18a54c07302a4576e42480779c
tracker-miners-debugsource-2.1.5-2.el8_6.1.ppc64le.rpm SHA-256: 8282f956b82c030638abd472023b2194f83bd6191fe472d92578308f32ec8e25

Red Hat Enterprise Linux Server - TUS 8.6

SRPM
tracker-miners-2.1.5-2.el8_6.1.src.rpm SHA-256: 91b174571013b3819f35da649646533c8029a0815b23436011f36305771194d3
x86_64
tracker-miners-2.1.5-2.el8_6.1.i686.rpm SHA-256: 9b2a8a8ce06f9a7c931c34b85a0240ae28d96c3a6d37c80e08cf7fd099692a24
tracker-miners-2.1.5-2.el8_6.1.x86_64.rpm SHA-256: c1950035fba9b51e9d7a8c9889ff14051d9edda575d1b59fa80676ba3381a0b3
tracker-miners-debuginfo-2.1.5-2.el8_6.1.i686.rpm SHA-256: a22ed6dbc419fc8da5c9a635a0487170b2608dbfe9ebfda924deb6ee72deeb13
tracker-miners-debuginfo-2.1.5-2.el8_6.1.x86_64.rpm SHA-256: 15f3c62e8c700e589e8cef1b4ef079e03ec26f16da78e879f965d0fb246af3fc
tracker-miners-debugsource-2.1.5-2.el8_6.1.i686.rpm SHA-256: ca86c93c21e5a9861063d98a39e00c4363f43397d2df5b2c3328f3f534a5637b
tracker-miners-debugsource-2.1.5-2.el8_6.1.x86_64.rpm SHA-256: 9612a8851cf183b409ca50d822d2b49b28b7cb18744d4b8795186839eed3409f

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6

SRPM
tracker-miners-2.1.5-2.el8_6.1.src.rpm SHA-256: 91b174571013b3819f35da649646533c8029a0815b23436011f36305771194d3
aarch64
tracker-miners-2.1.5-2.el8_6.1.aarch64.rpm SHA-256: 7f21d03c02c96ace4fd3dcbdf4ec805265d979374bf3c9f6c18348de683abf92
tracker-miners-debuginfo-2.1.5-2.el8_6.1.aarch64.rpm SHA-256: b5379a4a957e4442e5dde8fe2bd38a27a86f6810c0daada75cb613b04f3062d9
tracker-miners-debugsource-2.1.5-2.el8_6.1.aarch64.rpm SHA-256: 25a433c0beff1119c2245f97566e4283191aa6b752417a3cddc70400cf637d26

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6

SRPM
tracker-miners-2.1.5-2.el8_6.1.src.rpm SHA-256: 91b174571013b3819f35da649646533c8029a0815b23436011f36305771194d3
ppc64le
tracker-miners-2.1.5-2.el8_6.1.ppc64le.rpm SHA-256: a2fa2dd76df3d7d1d9fb5783e2b5a143dbbfdfa1ffecae17097271a19180da8f
tracker-miners-debuginfo-2.1.5-2.el8_6.1.ppc64le.rpm SHA-256: c182834eae88a7f604bcb2fe00755537b2450c18a54c07302a4576e42480779c
tracker-miners-debugsource-2.1.5-2.el8_6.1.ppc64le.rpm SHA-256: 8282f956b82c030638abd472023b2194f83bd6191fe472d92578308f32ec8e25

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6

SRPM
tracker-miners-2.1.5-2.el8_6.1.src.rpm SHA-256: 91b174571013b3819f35da649646533c8029a0815b23436011f36305771194d3
x86_64
tracker-miners-2.1.5-2.el8_6.1.i686.rpm SHA-256: 9b2a8a8ce06f9a7c931c34b85a0240ae28d96c3a6d37c80e08cf7fd099692a24
tracker-miners-2.1.5-2.el8_6.1.x86_64.rpm SHA-256: c1950035fba9b51e9d7a8c9889ff14051d9edda575d1b59fa80676ba3381a0b3
tracker-miners-debuginfo-2.1.5-2.el8_6.1.i686.rpm SHA-256: a22ed6dbc419fc8da5c9a635a0487170b2608dbfe9ebfda924deb6ee72deeb13
tracker-miners-debuginfo-2.1.5-2.el8_6.1.x86_64.rpm SHA-256: 15f3c62e8c700e589e8cef1b4ef079e03ec26f16da78e879f965d0fb246af3fc
tracker-miners-debugsource-2.1.5-2.el8_6.1.i686.rpm SHA-256: ca86c93c21e5a9861063d98a39e00c4363f43397d2df5b2c3328f3f534a5637b
tracker-miners-debugsource-2.1.5-2.el8_6.1.x86_64.rpm SHA-256: 9612a8851cf183b409ca50d822d2b49b28b7cb18744d4b8795186839eed3409f

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle Long Life 8.6

SRPM
tracker-miners-2.1.5-2.el8_6.1.src.rpm SHA-256: 91b174571013b3819f35da649646533c8029a0815b23436011f36305771194d3
aarch64
tracker-miners-2.1.5-2.el8_6.1.aarch64.rpm SHA-256: 7f21d03c02c96ace4fd3dcbdf4ec805265d979374bf3c9f6c18348de683abf92
tracker-miners-debuginfo-2.1.5-2.el8_6.1.aarch64.rpm SHA-256: b5379a4a957e4442e5dde8fe2bd38a27a86f6810c0daada75cb613b04f3062d9
tracker-miners-debugsource-2.1.5-2.el8_6.1.aarch64.rpm SHA-256: 25a433c0beff1119c2245f97566e4283191aa6b752417a3cddc70400cf637d26

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle Long Life 8.6

SRPM
tracker-miners-2.1.5-2.el8_6.1.src.rpm SHA-256: 91b174571013b3819f35da649646533c8029a0815b23436011f36305771194d3
ppc64le
tracker-miners-2.1.5-2.el8_6.1.ppc64le.rpm SHA-256: a2fa2dd76df3d7d1d9fb5783e2b5a143dbbfdfa1ffecae17097271a19180da8f
tracker-miners-debuginfo-2.1.5-2.el8_6.1.ppc64le.rpm SHA-256: c182834eae88a7f604bcb2fe00755537b2450c18a54c07302a4576e42480779c
tracker-miners-debugsource-2.1.5-2.el8_6.1.ppc64le.rpm SHA-256: 8282f956b82c030638abd472023b2194f83bd6191fe472d92578308f32ec8e25

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle Long Life 8.6

SRPM
tracker-miners-2.1.5-2.el8_6.1.src.rpm SHA-256: 91b174571013b3819f35da649646533c8029a0815b23436011f36305771194d3
s390x
tracker-miners-2.1.5-2.el8_6.1.s390x.rpm SHA-256: 3ffdf9a496b866475230dd52f9a8cea5d581668233eac37870f5686020d5d065
tracker-miners-debuginfo-2.1.5-2.el8_6.1.s390x.rpm SHA-256: 5c2772fec5dc56c6a34976712b0600a3fe69768c232d2d4d38310d78c5b5847c
tracker-miners-debugsource-2.1.5-2.el8_6.1.s390x.rpm SHA-256: aacb0967cac733664a4680dabe4c6dcf427b93e3035cd896c9ed47dfb5e3181c

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.