Red Hat Product Errata RHBA-2018:3120 - Bug Fix Advisory
Issued:
2018-10-30
Updated:
2018-10-30

RHBA-2018:3120 - Bug Fix Advisory

Synopsis

firewalld bug fix update

Type/Severity

Bug Fix Advisory

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for firewalld is now available for Red Hat Enterprise Linux 7.

Description

firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface.

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.

Users of firewalld are advised to upgrade to these updated packages.

Solution

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server 7 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
  • Red Hat Enterprise Linux Workstation 7 x86_64
  • Red Hat Enterprise Linux Desktop 7 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 7 s390x
  • Red Hat Enterprise Linux for Power, big endian 7 ppc64
  • Red Hat Enterprise Linux for Scientific Computing 7 x86_64
  • Red Hat Enterprise Linux for Power, little endian 7 ppc64le
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
  • Red Hat Enterprise Linux for ARM 64 7 aarch64
  • Red Hat Enterprise Linux for Power 9 7 ppc64le
  • Red Hat Enterprise Linux for IBM System z (Structure A) 7 s390x
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

  • BZ - 1477771 - FIrewalld in RHEL 7 doesn't have any option to check the rule set syntax of .xml file contents.
  • BZ - 1498923 - If a direct rule fails to insert all following direct rules also fail
  • BZ - 1506742 - firewall-cmd fails to load entries from file to an ipset with timeout
  • BZ - 1534571 - runtime rules deduplication may remove additional rules of other services
  • BZ - 1554993 - Rebase firewalld package to latest 0.5.x

CVEs

(none)

Red Hat Enterprise Linux Server 7

SRPM
firewalld-0.5.3-5.el7.src.rpm SHA-256: 242f5aaf1ebb120fa8c704242beeeaa130a8a1f4880ae05ac1b31051a1ec2628
x86_64
firewall-applet-0.5.3-5.el7.noarch.rpm SHA-256: b6336ede068a9d72723cfbfc44368c1ed2080cf635d482c3491a8b64a1eb0e1e
firewall-config-0.5.3-5.el7.noarch.rpm SHA-256: 60dd565f86af3894fd7e1b734e846fc8463c9fdf9943c43fb96874cfdefbbcbb
firewalld-0.5.3-5.el7.noarch.rpm SHA-256: 3a3ccc409e08cbdaa454c50dcfaab1c4509caab2c6e5fd989367fafe4e78aef6
firewalld-filesystem-0.5.3-5.el7.noarch.rpm SHA-256: dee30cde79abacbfb6a78b50bd8610f2cb3dc148d66b179a5c70236966c93268
python-firewall-0.5.3-5.el7.noarch.rpm SHA-256: 1a519ea814633f4c144c1a4e41206d107f1fc37ef0d35c1f1671149ba7d74192

Red Hat Enterprise Linux Server - Extended Life Cycle Support 7

SRPM
firewalld-0.5.3-5.el7.src.rpm SHA-256: 242f5aaf1ebb120fa8c704242beeeaa130a8a1f4880ae05ac1b31051a1ec2628
x86_64
firewall-applet-0.5.3-5.el7.noarch.rpm SHA-256: b6336ede068a9d72723cfbfc44368c1ed2080cf635d482c3491a8b64a1eb0e1e
firewall-config-0.5.3-5.el7.noarch.rpm SHA-256: 60dd565f86af3894fd7e1b734e846fc8463c9fdf9943c43fb96874cfdefbbcbb
firewalld-0.5.3-5.el7.noarch.rpm SHA-256: 3a3ccc409e08cbdaa454c50dcfaab1c4509caab2c6e5fd989367fafe4e78aef6
firewalld-filesystem-0.5.3-5.el7.noarch.rpm SHA-256: dee30cde79abacbfb6a78b50bd8610f2cb3dc148d66b179a5c70236966c93268
python-firewall-0.5.3-5.el7.noarch.rpm SHA-256: 1a519ea814633f4c144c1a4e41206d107f1fc37ef0d35c1f1671149ba7d74192

Red Hat Enterprise Linux Workstation 7

SRPM
firewalld-0.5.3-5.el7.src.rpm SHA-256: 242f5aaf1ebb120fa8c704242beeeaa130a8a1f4880ae05ac1b31051a1ec2628
x86_64
firewall-applet-0.5.3-5.el7.noarch.rpm SHA-256: b6336ede068a9d72723cfbfc44368c1ed2080cf635d482c3491a8b64a1eb0e1e
firewall-config-0.5.3-5.el7.noarch.rpm SHA-256: 60dd565f86af3894fd7e1b734e846fc8463c9fdf9943c43fb96874cfdefbbcbb
firewalld-0.5.3-5.el7.noarch.rpm SHA-256: 3a3ccc409e08cbdaa454c50dcfaab1c4509caab2c6e5fd989367fafe4e78aef6
firewalld-filesystem-0.5.3-5.el7.noarch.rpm SHA-256: dee30cde79abacbfb6a78b50bd8610f2cb3dc148d66b179a5c70236966c93268
python-firewall-0.5.3-5.el7.noarch.rpm SHA-256: 1a519ea814633f4c144c1a4e41206d107f1fc37ef0d35c1f1671149ba7d74192

Red Hat Enterprise Linux Desktop 7

SRPM
firewalld-0.5.3-5.el7.src.rpm SHA-256: 242f5aaf1ebb120fa8c704242beeeaa130a8a1f4880ae05ac1b31051a1ec2628
x86_64
firewall-applet-0.5.3-5.el7.noarch.rpm SHA-256: b6336ede068a9d72723cfbfc44368c1ed2080cf635d482c3491a8b64a1eb0e1e
firewall-config-0.5.3-5.el7.noarch.rpm SHA-256: 60dd565f86af3894fd7e1b734e846fc8463c9fdf9943c43fb96874cfdefbbcbb
firewalld-0.5.3-5.el7.noarch.rpm SHA-256: 3a3ccc409e08cbdaa454c50dcfaab1c4509caab2c6e5fd989367fafe4e78aef6
firewalld-filesystem-0.5.3-5.el7.noarch.rpm SHA-256: dee30cde79abacbfb6a78b50bd8610f2cb3dc148d66b179a5c70236966c93268
python-firewall-0.5.3-5.el7.noarch.rpm SHA-256: 1a519ea814633f4c144c1a4e41206d107f1fc37ef0d35c1f1671149ba7d74192

Red Hat Enterprise Linux for IBM z Systems 7

SRPM
firewalld-0.5.3-5.el7.src.rpm SHA-256: 242f5aaf1ebb120fa8c704242beeeaa130a8a1f4880ae05ac1b31051a1ec2628
s390x
firewall-applet-0.5.3-5.el7.noarch.rpm SHA-256: b6336ede068a9d72723cfbfc44368c1ed2080cf635d482c3491a8b64a1eb0e1e
firewall-config-0.5.3-5.el7.noarch.rpm SHA-256: 60dd565f86af3894fd7e1b734e846fc8463c9fdf9943c43fb96874cfdefbbcbb
firewalld-0.5.3-5.el7.noarch.rpm SHA-256: 3a3ccc409e08cbdaa454c50dcfaab1c4509caab2c6e5fd989367fafe4e78aef6
firewalld-filesystem-0.5.3-5.el7.noarch.rpm SHA-256: dee30cde79abacbfb6a78b50bd8610f2cb3dc148d66b179a5c70236966c93268
python-firewall-0.5.3-5.el7.noarch.rpm SHA-256: 1a519ea814633f4c144c1a4e41206d107f1fc37ef0d35c1f1671149ba7d74192

Red Hat Enterprise Linux for Power, big endian 7

SRPM
firewalld-0.5.3-5.el7.src.rpm SHA-256: 242f5aaf1ebb120fa8c704242beeeaa130a8a1f4880ae05ac1b31051a1ec2628
ppc64
firewall-applet-0.5.3-5.el7.noarch.rpm SHA-256: b6336ede068a9d72723cfbfc44368c1ed2080cf635d482c3491a8b64a1eb0e1e
firewall-config-0.5.3-5.el7.noarch.rpm SHA-256: 60dd565f86af3894fd7e1b734e846fc8463c9fdf9943c43fb96874cfdefbbcbb
firewalld-0.5.3-5.el7.noarch.rpm SHA-256: 3a3ccc409e08cbdaa454c50dcfaab1c4509caab2c6e5fd989367fafe4e78aef6
firewalld-filesystem-0.5.3-5.el7.noarch.rpm SHA-256: dee30cde79abacbfb6a78b50bd8610f2cb3dc148d66b179a5c70236966c93268
python-firewall-0.5.3-5.el7.noarch.rpm SHA-256: 1a519ea814633f4c144c1a4e41206d107f1fc37ef0d35c1f1671149ba7d74192

Red Hat Enterprise Linux for Scientific Computing 7

SRPM
firewalld-0.5.3-5.el7.src.rpm SHA-256: 242f5aaf1ebb120fa8c704242beeeaa130a8a1f4880ae05ac1b31051a1ec2628
x86_64
firewall-applet-0.5.3-5.el7.noarch.rpm SHA-256: b6336ede068a9d72723cfbfc44368c1ed2080cf635d482c3491a8b64a1eb0e1e
firewall-config-0.5.3-5.el7.noarch.rpm SHA-256: 60dd565f86af3894fd7e1b734e846fc8463c9fdf9943c43fb96874cfdefbbcbb
firewalld-0.5.3-5.el7.noarch.rpm SHA-256: 3a3ccc409e08cbdaa454c50dcfaab1c4509caab2c6e5fd989367fafe4e78aef6
firewalld-filesystem-0.5.3-5.el7.noarch.rpm SHA-256: dee30cde79abacbfb6a78b50bd8610f2cb3dc148d66b179a5c70236966c93268
python-firewall-0.5.3-5.el7.noarch.rpm SHA-256: 1a519ea814633f4c144c1a4e41206d107f1fc37ef0d35c1f1671149ba7d74192

Red Hat Enterprise Linux for Power, little endian 7

SRPM
firewalld-0.5.3-5.el7.src.rpm SHA-256: 242f5aaf1ebb120fa8c704242beeeaa130a8a1f4880ae05ac1b31051a1ec2628
ppc64le
firewall-applet-0.5.3-5.el7.noarch.rpm SHA-256: b6336ede068a9d72723cfbfc44368c1ed2080cf635d482c3491a8b64a1eb0e1e
firewall-config-0.5.3-5.el7.noarch.rpm SHA-256: 60dd565f86af3894fd7e1b734e846fc8463c9fdf9943c43fb96874cfdefbbcbb
firewalld-0.5.3-5.el7.noarch.rpm SHA-256: 3a3ccc409e08cbdaa454c50dcfaab1c4509caab2c6e5fd989367fafe4e78aef6
firewalld-filesystem-0.5.3-5.el7.noarch.rpm SHA-256: dee30cde79abacbfb6a78b50bd8610f2cb3dc148d66b179a5c70236966c93268
python-firewall-0.5.3-5.el7.noarch.rpm SHA-256: 1a519ea814633f4c144c1a4e41206d107f1fc37ef0d35c1f1671149ba7d74192

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7

SRPM
firewalld-0.5.3-5.el7.src.rpm SHA-256: 242f5aaf1ebb120fa8c704242beeeaa130a8a1f4880ae05ac1b31051a1ec2628
s390x
firewall-applet-0.5.3-5.el7.noarch.rpm SHA-256: b6336ede068a9d72723cfbfc44368c1ed2080cf635d482c3491a8b64a1eb0e1e
firewall-config-0.5.3-5.el7.noarch.rpm SHA-256: 60dd565f86af3894fd7e1b734e846fc8463c9fdf9943c43fb96874cfdefbbcbb
firewalld-0.5.3-5.el7.noarch.rpm SHA-256: 3a3ccc409e08cbdaa454c50dcfaab1c4509caab2c6e5fd989367fafe4e78aef6
firewalld-filesystem-0.5.3-5.el7.noarch.rpm SHA-256: dee30cde79abacbfb6a78b50bd8610f2cb3dc148d66b179a5c70236966c93268
python-firewall-0.5.3-5.el7.noarch.rpm SHA-256: 1a519ea814633f4c144c1a4e41206d107f1fc37ef0d35c1f1671149ba7d74192

Red Hat Enterprise Linux for ARM 64 7

SRPM
firewalld-0.5.3-5.el7.src.rpm SHA-256: 242f5aaf1ebb120fa8c704242beeeaa130a8a1f4880ae05ac1b31051a1ec2628
aarch64
firewall-applet-0.5.3-5.el7.noarch.rpm SHA-256: b6336ede068a9d72723cfbfc44368c1ed2080cf635d482c3491a8b64a1eb0e1e
firewall-config-0.5.3-5.el7.noarch.rpm SHA-256: 60dd565f86af3894fd7e1b734e846fc8463c9fdf9943c43fb96874cfdefbbcbb
firewalld-0.5.3-5.el7.noarch.rpm SHA-256: 3a3ccc409e08cbdaa454c50dcfaab1c4509caab2c6e5fd989367fafe4e78aef6
firewalld-filesystem-0.5.3-5.el7.noarch.rpm SHA-256: dee30cde79abacbfb6a78b50bd8610f2cb3dc148d66b179a5c70236966c93268
python-firewall-0.5.3-5.el7.noarch.rpm SHA-256: 1a519ea814633f4c144c1a4e41206d107f1fc37ef0d35c1f1671149ba7d74192

Red Hat Enterprise Linux for Power 9 7

SRPM
firewalld-0.5.3-5.el7.src.rpm SHA-256: 242f5aaf1ebb120fa8c704242beeeaa130a8a1f4880ae05ac1b31051a1ec2628
ppc64le
firewall-applet-0.5.3-5.el7.noarch.rpm SHA-256: b6336ede068a9d72723cfbfc44368c1ed2080cf635d482c3491a8b64a1eb0e1e
firewall-config-0.5.3-5.el7.noarch.rpm SHA-256: 60dd565f86af3894fd7e1b734e846fc8463c9fdf9943c43fb96874cfdefbbcbb
firewalld-0.5.3-5.el7.noarch.rpm SHA-256: 3a3ccc409e08cbdaa454c50dcfaab1c4509caab2c6e5fd989367fafe4e78aef6
firewalld-filesystem-0.5.3-5.el7.noarch.rpm SHA-256: dee30cde79abacbfb6a78b50bd8610f2cb3dc148d66b179a5c70236966c93268
python-firewall-0.5.3-5.el7.noarch.rpm SHA-256: 1a519ea814633f4c144c1a4e41206d107f1fc37ef0d35c1f1671149ba7d74192

Red Hat Enterprise Linux for IBM System z (Structure A) 7

SRPM
firewalld-0.5.3-5.el7.src.rpm SHA-256: 242f5aaf1ebb120fa8c704242beeeaa130a8a1f4880ae05ac1b31051a1ec2628
s390x
firewall-applet-0.5.3-5.el7.noarch.rpm SHA-256: b6336ede068a9d72723cfbfc44368c1ed2080cf635d482c3491a8b64a1eb0e1e
firewall-config-0.5.3-5.el7.noarch.rpm SHA-256: 60dd565f86af3894fd7e1b734e846fc8463c9fdf9943c43fb96874cfdefbbcbb
firewalld-0.5.3-5.el7.noarch.rpm SHA-256: 3a3ccc409e08cbdaa454c50dcfaab1c4509caab2c6e5fd989367fafe4e78aef6
firewalld-filesystem-0.5.3-5.el7.noarch.rpm SHA-256: dee30cde79abacbfb6a78b50bd8610f2cb3dc148d66b179a5c70236966c93268
python-firewall-0.5.3-5.el7.noarch.rpm SHA-256: 1a519ea814633f4c144c1a4e41206d107f1fc37ef0d35c1f1671149ba7d74192

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7

SRPM
firewalld-0.5.3-5.el7.src.rpm SHA-256: 242f5aaf1ebb120fa8c704242beeeaa130a8a1f4880ae05ac1b31051a1ec2628
ppc64
firewall-applet-0.5.3-5.el7.noarch.rpm SHA-256: b6336ede068a9d72723cfbfc44368c1ed2080cf635d482c3491a8b64a1eb0e1e
firewall-config-0.5.3-5.el7.noarch.rpm SHA-256: 60dd565f86af3894fd7e1b734e846fc8463c9fdf9943c43fb96874cfdefbbcbb
firewalld-0.5.3-5.el7.noarch.rpm SHA-256: 3a3ccc409e08cbdaa454c50dcfaab1c4509caab2c6e5fd989367fafe4e78aef6
firewalld-filesystem-0.5.3-5.el7.noarch.rpm SHA-256: dee30cde79abacbfb6a78b50bd8610f2cb3dc148d66b179a5c70236966c93268
python-firewall-0.5.3-5.el7.noarch.rpm SHA-256: 1a519ea814633f4c144c1a4e41206d107f1fc37ef0d35c1f1671149ba7d74192

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7

SRPM
firewalld-0.5.3-5.el7.src.rpm SHA-256: 242f5aaf1ebb120fa8c704242beeeaa130a8a1f4880ae05ac1b31051a1ec2628
ppc64le
firewall-applet-0.5.3-5.el7.noarch.rpm SHA-256: b6336ede068a9d72723cfbfc44368c1ed2080cf635d482c3491a8b64a1eb0e1e
firewall-config-0.5.3-5.el7.noarch.rpm SHA-256: 60dd565f86af3894fd7e1b734e846fc8463c9fdf9943c43fb96874cfdefbbcbb
firewalld-0.5.3-5.el7.noarch.rpm SHA-256: 3a3ccc409e08cbdaa454c50dcfaab1c4509caab2c6e5fd989367fafe4e78aef6
firewalld-filesystem-0.5.3-5.el7.noarch.rpm SHA-256: dee30cde79abacbfb6a78b50bd8610f2cb3dc148d66b179a5c70236966c93268
python-firewall-0.5.3-5.el7.noarch.rpm SHA-256: 1a519ea814633f4c144c1a4e41206d107f1fc37ef0d35c1f1671149ba7d74192

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.