A fapolicyd security, bug fix, and enhancement update has been released for Red Hat Enterprise Linux 8.
RHSA-2022:1898-01: Moderate: fapolicyd security, bug fix, and enhancement update
=====================================================================
Red Hat Security Advisory
Synopsis: Moderate: fapolicyd security, bug fix, and enhancement update
Advisory ID: RHSA-2022:1898-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2022:1898
Issue date: 2022-05-10
CVE Names: CVE-2022-1117
=====================================================================
1. Summary:
An update for fapolicyd is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact
of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE link(s) in the References section.
2. Relevant releases/architectures:
Red Hat Enterprise Linux AppStream (v. 8) - aarch64, noarch, ppc64le, s390x, x86_64
3. Description:
Fapolicyd (File Access Policy Daemon) implements application whitelisting
to decide file access rights. Applications that are known via a reputation
source are allowed access while unknown applications are not. The daemon
makes use of the kernel's fanotify interface to determine file access
rights.
The following packages have been upgraded to a later upstream version:
fapolicyd (1.1). (BZ#1939379)
Security Fix(es):
* fapolicyd: fapolicyd wrongly prepares ld.so path (CVE-2022-1117)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat
Enterprise Linux 8.6 Release Notes linked from the References section.
4. Solution:
For details on how to apply this update, which includes the changes
described in this advisory, refer to:
https://access.redhat.com/articles/11258
5. Bugs fixed ( https://bugzilla.redhat.com/):
1939379 - Rebase FAPOLICYD to the latest upstream version
1989272 - ftype of libc.so is wrongly identified as application/x-executable
1997414 - fapolicyd-dnf-plugin reports as '' in plugins list
2014445 - SELinux DSP module is wrongly defined in SPEC
2051485 - fapolicyd prevents yum from updating the system if it is update as well
2054741 - Introduce rules.d feature
2066300 - Fapolicyd denies access to /usr/lib64/ld-2.28.so
2068171 - CVE-2022-1117 fapolicyd: fapolicyd wrongly prepares ld.so path
6. Package List:
Red Hat Enterprise Linux AppStream (v. 8):
Source:
fapolicyd-1.1-6.el8.src.rpm
aarch64:
fapolicyd-1.1-6.el8.aarch64.rpm
fapolicyd-debuginfo-1.1-6.el8.aarch64.rpm
fapolicyd-debugsource-1.1-6.el8.aarch64.rpm
noarch:
fapolicyd-selinux-1.1-6.el8.noarch.rpm
ppc64le:
fapolicyd-1.1-6.el8.ppc64le.rpm
fapolicyd-debuginfo-1.1-6.el8.ppc64le.rpm
fapolicyd-debugsource-1.1-6.el8.ppc64le.rpm
s390x:
fapolicyd-1.1-6.el8.s390x.rpm
fapolicyd-debuginfo-1.1-6.el8.s390x.rpm
fapolicyd-debugsource-1.1-6.el8.s390x.rpm
x86_64:
fapolicyd-1.1-6.el8.x86_64.rpm
fapolicyd-debuginfo-1.1-6.el8.x86_64.rpm
fapolicyd-debugsource-1.1-6.el8.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/
7. References:
https://access.redhat.com/security/cve/CVE-2022-1117
https://access.redhat.com/security/updates/classification/#moderate
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.6_release_notes/
8. Contact:
The Red Hat security contact is . More contact
details at https://access.redhat.com/security/team/contact/
Copyright 2022 Red Hat, Inc.
