[Apollo] Advisories Statistics light light Login

RLSA-2026:67585

Security Mirrored from RHSA-2026:67585
Issued at: 2026-09-17
Updated at: 2026-09-17

Advisory content derived from Red Hat RHSA-2026:67585, © Red Hat, Inc., used under CC BY 4.0, with modifications.

Synopsis

Moderate: firewalld security update



Description

firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface.

Security Fix(es):

* firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis-authorization (CVE-2026-4948)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.



Affected products

Rocky Linux 9 aarch64 Rocky Linux 9 ppc64le Rocky Linux 9 s390x

Fixes

2452086

CVEs

CVE-2026-4948

Affected packages

Rocky Linux 9 aarch64 - AppStream

firewall-applet-0:1.3.4-20.el9_8.noarch.rpm firewall-config-0:1.3.4-20.el9_8.noarch.rpm

Rocky Linux 9 s390x - AppStream

firewall-applet-0:1.3.4-20.el9_8.noarch.rpm firewall-config-0:1.3.4-20.el9_8.noarch.rpm

Rocky Linux 9 ppc64le - AppStream

firewall-applet-0:1.3.4-20.el9_8.noarch.rpm firewall-config-0:1.3.4-20.el9_8.noarch.rpm

Rocky Linux 9 aarch64 - BaseOS

firewalld-0:1.3.4-20.el9_8.noarch.rpm firewalld-0:1.3.4-20.el9_8.src.rpm firewalld-filesystem-0:1.3.4-20.el9_8.noarch.rpm python3-firewall-0:1.3.4-20.el9_8.noarch.rpm

Rocky Linux 9 s390x - BaseOS

firewalld-0:1.3.4-20.el9_8.noarch.rpm firewalld-0:1.3.4-20.el9_8.src.rpm firewalld-filesystem-0:1.3.4-20.el9_8.noarch.rpm python3-firewall-0:1.3.4-20.el9_8.noarch.rpm

Rocky Linux 9 ppc64le - BaseOS

firewalld-0:1.3.4-20.el9_8.noarch.rpm firewalld-0:1.3.4-20.el9_8.src.rpm firewalld-filesystem-0:1.3.4-20.el9_8.noarch.rpm python3-firewall-0:1.3.4-20.el9_8.noarch.rpm