Debian alert DLA-4585-1 (firewalld)

From:
             
 
Andreas Henriksson <andreas@fatal.se>
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA 4585-1] firewalld security update
Date:
             
 
Fri, 15 May 2026 18:54:36 +0200
Message-ID:
             
 
<w2aqiacr3kac3jja355rcbtj6vmezjz6ryo7i2iqtsheqy2fzx@xlvag3y2uypm>
-------------------------------------------------------------------------
Debian LTS Advisory DLA-4585-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                   Andreas Henriksson
May 15, 2026                                  https://wiki.debian.org/LTS
-------------------------------------------------------------------------

Package        : firewalld
Version        : 0.9.3-2+deb11u1
CVE ID         : CVE-2026-4948
Debian Bug     : 

A flaw was found in firewalld where a local unprivileged user can
modify the runtime firewall state without proper authentication, leading to
unauthorized changes in network security configurations.

For Debian 11 bullseye, this problem has been fixed in version
0.9.3-2+deb11u1.

We recommend that you upgrade your firewalld packages.

For the detailed security status of firewalld please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/firewalld

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=cP+j
-----END PGP SIGNATURE-----