Lucene search

K
oraclelinuxOracleLinuxELSA-2022-1898
HistoryMay 17, 2022 - 12:00 a.m.

fapolicyd security, bug fix, and enhancement update

2022-05-1700:00:00
linux.oracle.com
73

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

[1.1-6.0.1]

  • Increase db_max_size to 100M
    [1.1-6]
  • CVE-2022-1117 fapolicyd: fapolicyd wrongly prepares ld.so path
    Resolves: rhbz#2069120
    [1.1-4]
    RHEL 8.6.0 ERRATUM
  • fapolicyd denies access to /usr/lib64/ld-2.28.so
    Resolves: rhbz#2066300
    [1.1-1]
    RHEL 8.6.0 ERRATUM
  • rebase to 1.1
    Resolves: rhbz#1939379
  • introduce rules.d feature
    Resolves: rhbz#2054741
  • remove pretrans scriptlet
    Resolves: rhbz#2051485
    [1.0.4-2]
    RHEL 8.6.0 ERRATUM
  • rebase to 1.0.4
  • added rpm_sha256_only option
  • added trust.d directory
  • allow file names with whitespace in trust files
  • use full paths in trust files
    Resolves: rhbz#1939379
  • fix libc.so getting identified as application/x-executable
    Resolves: rhbz#1989272
  • fix fapolicyd-dnf-plugin reporting as ’

    Resolves: rhbz#1997414
  • fix selinux DSP module definition in spec file
    Resolves: rhbz#2014445
    [1.0.2-7]
  • fapolicyd abnormally exits by executing sosreport
  • fixed multiple problems with unlink()
  • fapolicyd breaks system upgrade, leaving system in dead state - complete fix
    Resolves: rhbz#1943251

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H