FEDORA-2016-de55d2c2c9 — security update for firewalld

stable

firewalld-0.4.3.3-1.fc24

FEDORA-2016-de55d2c2c9 created by twoerner 8 years ago for Fedora 24

Fix CVE-2016-5410: Firewall configuration can be modified by any logged in user
firewall/server/firewalld: Make getXSettings and getLogDenied CONFIG_INFO
Update AppData configuration file.
tests/firewalld_rich.py: Use new import structure and FirewallClient classes
tests/firewalld_direct.py: Use new import structure
tests: firewalld_direct: Fix assert to check for True instead of False
tests: firewalld_config: Fix expected value when querying the zone target
tests: firewalld_config: Use real nf_conntrack modules
firewalld.spec: Added comment about make call for %build
firewall-config: Use also width_request and height_request with default size
Updated firewall-config screenshot
firewall-cmd: Fixed typo in help output (#1367171)
test-suite: Ignore stderr to get default zone also for missing firewalld.conf
firewall.core.logger: Warnings should be printed to stderr per default
firewall.core.fw_nm: Ignore NetworkManager if NM.Client connect fails
firewall-cmd, firewallctl: Gracefully fail if SystemBus can not be aquired
firewall.client: Generate new DBUS_ERROR if SystemBus can not be aquired
test-suite: Do not fail on ALREADY_ENABLED --add-destination tests
firewall.command: ALREADY_ENABLED, NOT_ENABLED, ZONE_ALREADY_SET are warnings
doc/xml/firewalld.dbus.xml: Removed undefined reference
doc/xml/transform-html.xsl.in: Fixed references in the document
doc/xml/firewalld.{dbus,zone}.xml: Embed programlisting in para
doc/xml/transform-html.xsl.in: Enhanced html formatting closer to the man page
firewall: core: fw_nm: Instantiate the NM client only once
firewall/core/io/*.py: Do not traceback on a general sax parsing issue
firewall-offline-cmd: Fix --{add,remove}-entries-from-file
firewall-cmd: Add missing action to fix --{add,remove}-entries-from-file
firewall.core.prog: Do not output stderr, but return it in the error case
firewall.core.io.ifcfg.py: Fix ifcfg file reader and writer (#1362171)
config/firewall.service.in: use KillMode=mixed
config/firewalld.service.in: use network-pre.target
firewall-config: Add missing gettext.textdomain call to fix translations
Add UDP to transmission-client.xml service
tests/firewall-[offline-]cmd_test.sh: Hide errors and warnings
firewall.client: Fix ALREADY_ENABLED errors in icmptype destination calls
firewall.client: Fix NOT_ENABLED errors in icmptype destination calls
firewall.client: Use {ALREADY,NOT}_ENABLED errors in icmptype destination calls
firewall.command: Add the removed FirewallError handling to the action (a17ce50)
firewall.command: Do not use query methods for sequences and also single options
Add missing information about MAC and ipset sources to man pages and help output
firewalld.spec: Add BuildRequires for libxslt to enable rebuild of man pages
firewall[-offline]-cmd, firewallctl, firewall.command: Use sys.{stdout,stderr}
firewallctl: Fix traceback if not connected to firewalld
firewall-config: Initialize value in on_richRuleDialogElementChooser_clicked
firewall.command: Convert errors to string for Python3
firewall.command: Get proper firewall error code from D-BusExceptions
firewall-cmd: Fixed traceback without args
Add missing service files to Makefile.am
shell-completion: Add shell completion support for --{get,set}--{description,short}

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2016-de55d2c2c9

This update has been submitted for testing by twoerner.

8 years ago

twoerner edited this update.

8 years ago

twoerner edited this update.

8 years ago

This update has been pushed to testing.

8 years ago

cserpentis commented & provided feedback 8 years ago

karma

works for me

mhayden commented & provided feedback 8 years ago

karma

Works for me.

This update has been submitted for stable by bodhi.

8 years ago

dhgutteridge commented & provided feedback 8 years ago

karma

No regressions noted.

This update has been pushed to stable.

8 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

firewalld-0.4.3.3-1.fc24

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

8 years ago

in testing

8 years ago

in stable

8 years ago

modified

8 years ago

BZ#1358380 firewall-cmd crashes if /run/dbus/system_bus_socket does not exist

BZ#1361589 firewall-config error when using pt-BR language

BZ#1363741 firewall-cmd ipset --add-entries-from-file regression

BZ#1367381 CVE-2016-5410 firewalld: Firewall configuration can be modified by any logged in user [fedora-all]

firewalld-0.4.3.3-1.fc24

Automated Test Results

None