Issued:
2020-03-31
Updated:
2020-03-31

RHBA-2020:1109 - Bug Fix Advisory

Synopsis

firewalld bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Topic

An update for firewalld is now available for Red Hat Enterprise Linux 7.

Description

For detailed information on changes in this release, see the Red Hat
Enterprise Linux 7.8 Release Notes linked from the References section.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server 7 x86_64
  • Red Hat Enterprise Linux Workstation 7 x86_64
  • Red Hat Enterprise Linux Desktop 7 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 7 s390x
  • Red Hat Enterprise Linux for Power, big endian 7 ppc64
  • Red Hat Enterprise Linux for Scientific Computing 7 x86_64
  • Red Hat Enterprise Linux for Power, little endian 7 ppc64le

Fixes

  • BZ - 1459927 - rich rules are only syntax-checked, invalid rules are silently unapplied
  • BZ - 1594657 - Docker with firewalld produces WARNING messages
  • BZ - 1637675 - Attempting to remove a rich rule via FirewallClient python api results in dbus failure
  • BZ - 1637894 - There is no check for the toaddr= option when add-forward-port is used on firewalld
  • BZ - 1713823 - Forward port for external zone is reachable from internal zone and gets all port-related traffic
  • BZ - 1720650 - testsuite should also use xtables-multi locking
  • BZ - 1729097 - firewall throw error: "'Rich_Destination' is not iterable" when services and destination address is provided rich rule.
  • BZ - 1737491 - order of INPUT_ZONES_SOURCE rules is not deterministic
  • BZ - 1738785 - Firewalld shows ip6tables error when IPv6 is disabled.
  • BZ - 1740074 - No documentation for --check-config

CVEs

(none)

References

Red Hat Enterprise Linux Server 7

SRPM
firewalld-0.6.3-8.el7.src.rpm SHA-256: 3a094833b10895e2c7e980e063f3fd022a06840b6c2e0e76e897fc92b52bd1ac
x86_64
firewall-applet-0.6.3-8.el7.noarch.rpm SHA-256: 2dd1b1f6f84f3d76e1e7f527df3cd5ec27095b8cc746d328b0a12fea40c9d34d
firewall-config-0.6.3-8.el7.noarch.rpm SHA-256: 7d665b31911aa85df992b72b753341c945532aca93eea74903de662ee7916638
firewalld-0.6.3-8.el7.noarch.rpm SHA-256: 0adaafbe26f0c33f721c9b2afec8d0720cff07cfb6dd73b4283dfa1ceae2453b
firewalld-filesystem-0.6.3-8.el7.noarch.rpm SHA-256: e8a753e6f40b2f9ed69707fd49b175f294cf2c2f1995e61c4c62ebdb018ad425
python-firewall-0.6.3-8.el7.noarch.rpm SHA-256: a99d6e99de869186c0364227b3df84b4757a22ca2435a2b8ed9b45feb1d695b3

Red Hat Enterprise Linux Workstation 7

SRPM
firewalld-0.6.3-8.el7.src.rpm SHA-256: 3a094833b10895e2c7e980e063f3fd022a06840b6c2e0e76e897fc92b52bd1ac
x86_64
firewall-applet-0.6.3-8.el7.noarch.rpm SHA-256: 2dd1b1f6f84f3d76e1e7f527df3cd5ec27095b8cc746d328b0a12fea40c9d34d
firewall-config-0.6.3-8.el7.noarch.rpm SHA-256: 7d665b31911aa85df992b72b753341c945532aca93eea74903de662ee7916638
firewalld-0.6.3-8.el7.noarch.rpm SHA-256: 0adaafbe26f0c33f721c9b2afec8d0720cff07cfb6dd73b4283dfa1ceae2453b
firewalld-filesystem-0.6.3-8.el7.noarch.rpm SHA-256: e8a753e6f40b2f9ed69707fd49b175f294cf2c2f1995e61c4c62ebdb018ad425
python-firewall-0.6.3-8.el7.noarch.rpm SHA-256: a99d6e99de869186c0364227b3df84b4757a22ca2435a2b8ed9b45feb1d695b3

Red Hat Enterprise Linux Desktop 7

SRPM
firewalld-0.6.3-8.el7.src.rpm SHA-256: 3a094833b10895e2c7e980e063f3fd022a06840b6c2e0e76e897fc92b52bd1ac
x86_64
firewall-applet-0.6.3-8.el7.noarch.rpm SHA-256: 2dd1b1f6f84f3d76e1e7f527df3cd5ec27095b8cc746d328b0a12fea40c9d34d
firewall-config-0.6.3-8.el7.noarch.rpm SHA-256: 7d665b31911aa85df992b72b753341c945532aca93eea74903de662ee7916638
firewalld-0.6.3-8.el7.noarch.rpm SHA-256: 0adaafbe26f0c33f721c9b2afec8d0720cff07cfb6dd73b4283dfa1ceae2453b
firewalld-filesystem-0.6.3-8.el7.noarch.rpm SHA-256: e8a753e6f40b2f9ed69707fd49b175f294cf2c2f1995e61c4c62ebdb018ad425
python-firewall-0.6.3-8.el7.noarch.rpm SHA-256: a99d6e99de869186c0364227b3df84b4757a22ca2435a2b8ed9b45feb1d695b3

Red Hat Enterprise Linux for IBM z Systems 7

SRPM
firewalld-0.6.3-8.el7.src.rpm SHA-256: 3a094833b10895e2c7e980e063f3fd022a06840b6c2e0e76e897fc92b52bd1ac
s390x
firewall-applet-0.6.3-8.el7.noarch.rpm SHA-256: 2dd1b1f6f84f3d76e1e7f527df3cd5ec27095b8cc746d328b0a12fea40c9d34d
firewall-config-0.6.3-8.el7.noarch.rpm SHA-256: 7d665b31911aa85df992b72b753341c945532aca93eea74903de662ee7916638
firewalld-0.6.3-8.el7.noarch.rpm SHA-256: 0adaafbe26f0c33f721c9b2afec8d0720cff07cfb6dd73b4283dfa1ceae2453b
firewalld-filesystem-0.6.3-8.el7.noarch.rpm SHA-256: e8a753e6f40b2f9ed69707fd49b175f294cf2c2f1995e61c4c62ebdb018ad425
python-firewall-0.6.3-8.el7.noarch.rpm SHA-256: a99d6e99de869186c0364227b3df84b4757a22ca2435a2b8ed9b45feb1d695b3

Red Hat Enterprise Linux for Power, big endian 7

SRPM
firewalld-0.6.3-8.el7.src.rpm SHA-256: 3a094833b10895e2c7e980e063f3fd022a06840b6c2e0e76e897fc92b52bd1ac
ppc64
firewall-applet-0.6.3-8.el7.noarch.rpm SHA-256: 2dd1b1f6f84f3d76e1e7f527df3cd5ec27095b8cc746d328b0a12fea40c9d34d
firewall-config-0.6.3-8.el7.noarch.rpm SHA-256: 7d665b31911aa85df992b72b753341c945532aca93eea74903de662ee7916638
firewalld-0.6.3-8.el7.noarch.rpm SHA-256: 0adaafbe26f0c33f721c9b2afec8d0720cff07cfb6dd73b4283dfa1ceae2453b
firewalld-filesystem-0.6.3-8.el7.noarch.rpm SHA-256: e8a753e6f40b2f9ed69707fd49b175f294cf2c2f1995e61c4c62ebdb018ad425
python-firewall-0.6.3-8.el7.noarch.rpm SHA-256: a99d6e99de869186c0364227b3df84b4757a22ca2435a2b8ed9b45feb1d695b3

Red Hat Enterprise Linux for Scientific Computing 7

SRPM
firewalld-0.6.3-8.el7.src.rpm SHA-256: 3a094833b10895e2c7e980e063f3fd022a06840b6c2e0e76e897fc92b52bd1ac
x86_64
firewall-applet-0.6.3-8.el7.noarch.rpm SHA-256: 2dd1b1f6f84f3d76e1e7f527df3cd5ec27095b8cc746d328b0a12fea40c9d34d
firewall-config-0.6.3-8.el7.noarch.rpm SHA-256: 7d665b31911aa85df992b72b753341c945532aca93eea74903de662ee7916638
firewalld-0.6.3-8.el7.noarch.rpm SHA-256: 0adaafbe26f0c33f721c9b2afec8d0720cff07cfb6dd73b4283dfa1ceae2453b
firewalld-filesystem-0.6.3-8.el7.noarch.rpm SHA-256: e8a753e6f40b2f9ed69707fd49b175f294cf2c2f1995e61c4c62ebdb018ad425
python-firewall-0.6.3-8.el7.noarch.rpm SHA-256: a99d6e99de869186c0364227b3df84b4757a22ca2435a2b8ed9b45feb1d695b3

Red Hat Enterprise Linux for Power, little endian 7

SRPM
firewalld-0.6.3-8.el7.src.rpm SHA-256: 3a094833b10895e2c7e980e063f3fd022a06840b6c2e0e76e897fc92b52bd1ac
ppc64le
firewall-applet-0.6.3-8.el7.noarch.rpm SHA-256: 2dd1b1f6f84f3d76e1e7f527df3cd5ec27095b8cc746d328b0a12fea40c9d34d
firewall-config-0.6.3-8.el7.noarch.rpm SHA-256: 7d665b31911aa85df992b72b753341c945532aca93eea74903de662ee7916638
firewalld-0.6.3-8.el7.noarch.rpm SHA-256: 0adaafbe26f0c33f721c9b2afec8d0720cff07cfb6dd73b4283dfa1ceae2453b
firewalld-filesystem-0.6.3-8.el7.noarch.rpm SHA-256: e8a753e6f40b2f9ed69707fd49b175f294cf2c2f1995e61c4c62ebdb018ad425
python-firewall-0.6.3-8.el7.noarch.rpm SHA-256: a99d6e99de869186c0364227b3df84b4757a22ca2435a2b8ed9b45feb1d695b3

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.