Ubuntu alert USN-8326-1 (foomuuri)

From:
             
 
noreply+usn-bot@canonical.com
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8326-1] Foomuuri vulnerabilities
Date:
             
 
Wed, 27 May 2026 19:36:17 +0000
Message-ID:
             
 
<E1wSK37-0004Dy-P2@lists.ubuntu.com>
==========================================================================
Ubuntu Security Notice USN-8326-1
May 27, 2026

foomuuri vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 25.10
- Ubuntu 24.04 LTS

Summary:

Several security issues were fixed in Foomuuri.

Software Description:
- foomuuri: multizone bidirectional nftables firewall

Details:

Matthias Gerstner discovered that Foomuuri's D-Bus service did not properly
enforce authorization. An unprivileged local attacker could possibly use
this issue to manipulate the firewall configuration, contrary to
expectations. (CVE-2025-67603)

Matthias Gerstner discovered that Foomuuri's D-Bus service did not properly
validate interface names. A local attacker could possibly use this issue to
manipulate the firewall configuration in unintended ways. (CVE-2025-67858)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.10
  foomuuri                        0.27-2+deb13u1build0.25.10.1
  foomuuri-firewalld              0.27-2+deb13u1build0.25.10.1

Ubuntu 24.04 LTS
  foomuuri                        0.22-1ubuntu0.1~esm1
                                  Available with Ubuntu Pro
  foomuuri-firewalld              0.22-1ubuntu0.1~esm1
                                  Available with Ubuntu Pro

After a standard system update you need to restart Foomuuri to make
all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8326-1
  CVE-2025-67603, CVE-2025-67858

Package Information:
  https://launchpad.net/ubuntu/+source/foomuuri/0.27-2+deb1...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEE+8neBLO2Hp/ppPlOcpJm3tlzhgEFAmoXRUkACgkQcpJm3tlz
hgH8Dg/+I6J1f8P7lpvayEmFKj5sT5RiUa/zi21ClsCsSedSGkbK0KfTiX77VxwB
ciLCdJ229jU6HLTsIH60WtFwOqYoDck2Z7BCrCONGOQbdBSDCKMLREfbHMfzM5Dv
JFx07YKzYm9cPszo6K+ufCXiKYIl1dwDAutZNJCNeXWcjxLTIUMPnnQJw8h5iby2
yGR6G8p2s0MWPCUIxUxHGMO27pVOT/tcoR2Ens9l+naPUeqSAQ103IabL6yNz7il
JYQpkn0I337gpORdVD8VObrNkP5PGz2GQQj64sdJZxvWKCCjowRlPsHgHBxnPCZI
M8FQMWZ7NuxtU+/XdqiTMpTT82KYYx3bGyPEfKsrdCLQaUfgZq9JjOOR2tGVBCOR
JzFCOb3ubMjOwOxK4EXeo15VpcIhsJUEVOxcZwtKn2RHhMZuFg4iU2b3hxS2EFqr
eEz4xvpquzA5YrR7ObymxGq9YzP7Gwn2LT6mH9TV0lBnkQIOv9x8hcHhoam9I1Pu
bhinZgFiVDtXwo77ZNOG+qpF60Qh2lLc4ARZFxQd17dhVkvH2PIvS+518AfkN9vZ
9OL+NPespwkAJcYhWrkPh+fTo0+4Bh1eGQqTC/O4o7zUiwZYpJRfobupP4tHblQi
+pVer4Hh+8z5w7vtQzpF1OTuBmZXvCBiEGRWcrofFKQc1JoYE+A=
=I1ah
-----END PGP SIGNATURE-----