RHBA-2020:1109 - Bug Fix Advisory

Topic

An update for firewalld is now available for Red Hat Enterprise Linux 7.

Description

For detailed information on changes in this release, see the Red Hat
Enterprise Linux 7.8 Release Notes linked from the References section.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat Enterprise Linux for IBM z Systems 7 s390x
• Red Hat Enterprise Linux for Power, big endian 7 ppc64
• Red Hat Enterprise Linux for Scientific Computing 7 x86_64
• Red Hat Enterprise Linux for Power, little endian 7 ppc64le

Fixes

• BZ - 1459927 - rich rules are only syntax-checked, invalid rules are silently unapplied
• BZ - 1594657 - Docker with firewalld produces WARNING messages
• BZ - 1637675 - Attempting to remove a rich rule via FirewallClient python api results in dbus failure
• BZ - 1637894 - There is no check for the toaddr= option when add-forward-port is used on firewalld
• BZ - 1713823 - Forward port for external zone is reachable from internal zone and gets all port-related traffic
• BZ - 1720650 - testsuite should also use xtables-multi locking
• BZ - 1729097 - firewall throw error: "'Rich_Destination' is not iterable" when services and destination address is provided rich rule.
• BZ - 1737491 - order of INPUT_ZONES_SOURCE rules is not deterministic
• BZ - 1738785 - Firewalld shows ip6tables error when IPv6 is disabled.
• BZ - 1740074 - No documentation for --check-config

CVEs

(none)

References

• https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.8_release_notes/index