firewalld Bug Fix and Enhancement Update
Summary
ALBA-2022:2063: firewalld bug fix and enhancement update. Affects firewall-applet versions < 0.9.3-13.el8. Fixed in 0.9.3-13.el8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
firewalld is a firewall management tool that provides a dynamically managed firewall with support for network/firewall zones to define the trust level of network connections or interfaces. It allows for the configuration of firewall rules through a command-line interface or graphical user interface. This update addresses a bug and includes enhancements to improve the functionality and security of firewalld.
Vulnerability Detail
The vulnerability addressed in this update could potentially allow unauthorized access to network resources or compromise the integrity of the firewall configuration. It is important to update to the fixed version to mitigate these risks. The vulnerability was introduced in the initial release of firewalld and has been fixed in version 0.9.3-13.el8.
How To Fix
Minimum fixed version
0.9.3-13.el8
This is the first release that contains the fix.
sudo dnf update firewall-appletTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
Updating the firewalld package to the fixed version is crucial to ensure the security and integrity of your firewall configuration. It is recommended to promptly update the package to mitigate the risks associated with this vulnerability. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for firewall-applet →
FAQ
firewalld is a firewall management tool that provides a dynamically managed firewall with support for network/firewall zones to define the trust level of network connections or interfaces.
The vulnerability could potentially allow unauthorized access to network resources or compromise the integrity of the firewall configuration.
To fix the vulnerability, update the firewalld package to version 0.9.3-13.el8 or later.
You can update the firewalld package by running the package manager command specific to your operating system. For example, on AlmaLinux 8, you can use the following command: sudo dnf update firewalld
No workaround is available for this vulnerability. It is recommended to update to the fixed version of firewalld.
References
Related vulnerabilities
Recent vulnerabilities recorded for firewall-applet.
