RHBA-2010:0686 - Bug Fix Advisory

Topic

Updated system-config-securitylevel packages that fix several bugs are now
available for Red Hat Enterprise Linux 5.

Description

system-config-securitylevel is a graphical program for configuring firewall and
SELinux settings.

These updated packages provide fixes for the following bugs:

• previously, the focus of the add port dialog was not on the port entry if the

dialog was used before. This update places the focus on the port entry every
time gets opened. (BZ#352401)

• previously, adding ports entries could result in loss of the entries if there

was a predefined service also using this port but with a different protocol.
This update solves this issue. (BZ#474100)

• disabling a running firewall resulted in no firewall settings for IPv4, but

the IPv6 firewall was still active. This update solves this issue. (BZ#526477)

All users are advised to upgrade to these updated packages, which resolve
these issues.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 352401 - Please set initial focus to "ports" field of "add " dialog when I open a new port
• BZ - 474100 - system-config-securitylevel misreports NFS4 as enabled when using specific "other ports" entries
• BZ - 526477 - Turning off firewall still configures IPv6 ip6tables

CVEs

(none)

References

(none)