[SECURITY] Fedora 36 Update: fapolicyd-1.1.2-1.fc36
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-bba9ca95b5
2022-06-03 03:05:06.305910
--------------------------------------------------------------------------------
Name : fapolicyd
Product : Fedora 36
Version : 1.1.2
Release : 1.fc36
URL : http://people.redhat.com/sgrubb/fapolicyd
Summary : Application Whitelisting Daemon
Description :
Fapolicyd (File Access Policy Daemon) implements application whitelisting
to decide file access rights. Applications that are known via a reputation
source are allowed access while unknown applications are not. The daemon
makes use of the kernel's fanotify interface to determine file access rights.
--------------------------------------------------------------------------------
Update Information:
Rebase to v1.1.2 * fixed CVE-2022-1117
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 25 2022 Radovan Sroka <rsroka(a)redhat.com> - 1.1.2-1
- rebase to v1.1.2
- fixed CVE-2022-1117
Resolves: rhbz#2089692
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2089692 - CVE-2022-1117 fapolicyd: fapolicyd wrongly prepares ld.so path
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2089692
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-bba9ca95b5' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------