Oval Definition:oval:com.redhat.rhsa:def:20162597
Revision Date:2016-11-03Version:639
Title:RHSA-2016:2597: firewalld security, bug fix, and enhancement update (Moderate)
Description:firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface.

  • The following packages have been upgraded to a newer upstream version: firewalld (0.4.3.2). (BZ#1302802)

    Security Fix(es):

  • A flaw was found in the way firewalld allowed certain firewall configurations to be modified by unauthenticated users. Any locally logged in user could use this flaw to tamper or change firewall settings. (CVE-2016-5410)

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.3 Release Notes linked from the References section.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2016-5410
    RHSA-2016:2597
    RHSA-2016:2597-01
    RHSA-2016:2597-02
    RHSA-2016:2597-02
    Platform(s):Red Hat Enterprise Linux 7
    Red Hat Enterprise Linux 7 (please do not use for >= RHEL-7.5)
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 7 is installed
  • AND
  • firewall-applet is earlier than 0:0.4.3.2-8.el7
  • AND firewall-applet is signed with Red Hat redhatrelease2 key
  • firewall-config is earlier than 0:0.4.3.2-8.el7
  • AND firewall-config is signed with Red Hat redhatrelease2 key
  • firewalld is earlier than 0:0.4.3.2-8.el7
  • AND firewalld is signed with Red Hat redhatrelease2 key
  • firewalld-filesystem is earlier than 0:0.4.3.2-8.el7
  • AND firewalld-filesystem is signed with Red Hat redhatrelease2 key
  • python-firewall is earlier than 0:0.4.3.2-8.el7
  • AND python-firewall is signed with Red Hat redhatrelease2 key
  • Definition Synopsis
  • Release Information
  • Red Hat Enterprise Linux 7 Client is installed
  • OR Red Hat Enterprise Linux 7 Server is installed
  • OR Red Hat Enterprise Linux 7 Workstation is installed
  • OR Red Hat Enterprise Linux 7 ComputeNode is installed
  • AND Package Information
  • firewalld-filesystem is earlier than 0:0.4.3.2-8.el7
  • AND firewalld-filesystem is signed with Red Hat redhatrelease2 key
  • OR
  • python-firewall is earlier than 0:0.4.3.2-8.el7
  • AND python-firewall is signed with Red Hat redhatrelease2 key
  • OR
  • firewall-config is earlier than 0:0.4.3.2-8.el7
  • AND firewall-config is signed with Red Hat redhatrelease2 key
  • OR
  • firewalld is earlier than 0:0.4.3.2-8.el7
  • AND firewalld is signed with Red Hat redhatrelease2 key
  • OR
  • firewall-applet is earlier than 0:0.4.3.2-8.el7
  • AND firewall-applet is signed with Red Hat redhatrelease2 key
  • BACK