Issued:: 2020-03-31
Updated:: 2020-03-31

RHBA-2020:1109 - Bug Fix Advisory

Overview
Updated Packages

Synopsis

firewalld bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for firewalld is now available for Red Hat Enterprise Linux 7.

Description

For detailed information on changes in this release, see the Red Hat
Enterprise Linux 7.8 Release Notes linked from the References section.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

Red Hat Enterprise Linux Server 7 x86_64
Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
Red Hat Enterprise Linux Workstation 7 x86_64
Red Hat Enterprise Linux Desktop 7 x86_64
Red Hat Enterprise Linux for IBM z Systems 7 s390x
Red Hat Enterprise Linux for Power, big endian 7 ppc64
Red Hat Enterprise Linux for Scientific Computing 7 x86_64
Red Hat Enterprise Linux for Power, little endian 7 ppc64le
Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

BZ - 1459927 - rich rules are only syntax-checked, invalid rules are silently unapplied
BZ - 1594657 - Docker with firewalld produces WARNING messages
BZ - 1637675 - Attempting to remove a rich rule via FirewallClient python api results in dbus failure
BZ - 1637894 - There is no check for the toaddr= option when add-forward-port is used on firewalld
BZ - 1713823 - Forward port for external zone is reachable from internal zone and gets all port-related traffic
BZ - 1720650 - testsuite should also use xtables-multi locking
BZ - 1729097 - firewall throw error: "'Rich_Destination' is not iterable" when services and destination address is provided rich rule.
BZ - 1737491 - order of INPUT_ZONES_SOURCE rules is not deterministic
BZ - 1738785 - Firewalld shows ip6tables error when IPv6 is disabled.
BZ - 1740074 - No documentation for --check-config

CVEs

(none)

References

https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.8_release_notes/index

Note: More recent versions of these packages may be available. Click a package name for more details.

Red Hat Enterprise Linux Server 7

SRPM
firewalld-0.6.3-8.el7.src.rpm	SHA-256: 3a094833b10895e2c7e980e063f3fd022a06840b6c2e0e76e897fc92b52bd1ac
x86_64
firewall-applet-0.6.3-8.el7.noarch.rpm	SHA-256: 2dd1b1f6f84f3d76e1e7f527df3cd5ec27095b8cc746d328b0a12fea40c9d34d
firewall-config-0.6.3-8.el7.noarch.rpm	SHA-256: 7d665b31911aa85df992b72b753341c945532aca93eea74903de662ee7916638
firewalld-0.6.3-8.el7.noarch.rpm	SHA-256: 0adaafbe26f0c33f721c9b2afec8d0720cff07cfb6dd73b4283dfa1ceae2453b
firewalld-filesystem-0.6.3-8.el7.noarch.rpm	SHA-256: e8a753e6f40b2f9ed69707fd49b175f294cf2c2f1995e61c4c62ebdb018ad425
python-firewall-0.6.3-8.el7.noarch.rpm	SHA-256: a99d6e99de869186c0364227b3df84b4757a22ca2435a2b8ed9b45feb1d695b3

Red Hat Enterprise Linux Server - Extended Life Cycle Support 7

SRPM
firewalld-0.6.3-8.el7.src.rpm	SHA-256: 3a094833b10895e2c7e980e063f3fd022a06840b6c2e0e76e897fc92b52bd1ac
x86_64
firewall-applet-0.6.3-8.el7.noarch.rpm	SHA-256: 2dd1b1f6f84f3d76e1e7f527df3cd5ec27095b8cc746d328b0a12fea40c9d34d
firewall-config-0.6.3-8.el7.noarch.rpm	SHA-256: 7d665b31911aa85df992b72b753341c945532aca93eea74903de662ee7916638
firewalld-0.6.3-8.el7.noarch.rpm	SHA-256: 0adaafbe26f0c33f721c9b2afec8d0720cff07cfb6dd73b4283dfa1ceae2453b
firewalld-filesystem-0.6.3-8.el7.noarch.rpm	SHA-256: e8a753e6f40b2f9ed69707fd49b175f294cf2c2f1995e61c4c62ebdb018ad425
python-firewall-0.6.3-8.el7.noarch.rpm	SHA-256: a99d6e99de869186c0364227b3df84b4757a22ca2435a2b8ed9b45feb1d695b3

Red Hat Enterprise Linux Workstation 7

SRPM
firewalld-0.6.3-8.el7.src.rpm	SHA-256: 3a094833b10895e2c7e980e063f3fd022a06840b6c2e0e76e897fc92b52bd1ac
x86_64
firewall-applet-0.6.3-8.el7.noarch.rpm	SHA-256: 2dd1b1f6f84f3d76e1e7f527df3cd5ec27095b8cc746d328b0a12fea40c9d34d
firewall-config-0.6.3-8.el7.noarch.rpm	SHA-256: 7d665b31911aa85df992b72b753341c945532aca93eea74903de662ee7916638
firewalld-0.6.3-8.el7.noarch.rpm	SHA-256: 0adaafbe26f0c33f721c9b2afec8d0720cff07cfb6dd73b4283dfa1ceae2453b
firewalld-filesystem-0.6.3-8.el7.noarch.rpm	SHA-256: e8a753e6f40b2f9ed69707fd49b175f294cf2c2f1995e61c4c62ebdb018ad425
python-firewall-0.6.3-8.el7.noarch.rpm	SHA-256: a99d6e99de869186c0364227b3df84b4757a22ca2435a2b8ed9b45feb1d695b3

Red Hat Enterprise Linux Desktop 7

SRPM
firewalld-0.6.3-8.el7.src.rpm	SHA-256: 3a094833b10895e2c7e980e063f3fd022a06840b6c2e0e76e897fc92b52bd1ac
x86_64
firewall-applet-0.6.3-8.el7.noarch.rpm	SHA-256: 2dd1b1f6f84f3d76e1e7f527df3cd5ec27095b8cc746d328b0a12fea40c9d34d
firewall-config-0.6.3-8.el7.noarch.rpm	SHA-256: 7d665b31911aa85df992b72b753341c945532aca93eea74903de662ee7916638
firewalld-0.6.3-8.el7.noarch.rpm	SHA-256: 0adaafbe26f0c33f721c9b2afec8d0720cff07cfb6dd73b4283dfa1ceae2453b
firewalld-filesystem-0.6.3-8.el7.noarch.rpm	SHA-256: e8a753e6f40b2f9ed69707fd49b175f294cf2c2f1995e61c4c62ebdb018ad425
python-firewall-0.6.3-8.el7.noarch.rpm	SHA-256: a99d6e99de869186c0364227b3df84b4757a22ca2435a2b8ed9b45feb1d695b3

Red Hat Enterprise Linux for IBM z Systems 7

SRPM
firewalld-0.6.3-8.el7.src.rpm	SHA-256: 3a094833b10895e2c7e980e063f3fd022a06840b6c2e0e76e897fc92b52bd1ac
s390x
firewall-applet-0.6.3-8.el7.noarch.rpm	SHA-256: 2dd1b1f6f84f3d76e1e7f527df3cd5ec27095b8cc746d328b0a12fea40c9d34d
firewall-config-0.6.3-8.el7.noarch.rpm	SHA-256: 7d665b31911aa85df992b72b753341c945532aca93eea74903de662ee7916638
firewalld-0.6.3-8.el7.noarch.rpm	SHA-256: 0adaafbe26f0c33f721c9b2afec8d0720cff07cfb6dd73b4283dfa1ceae2453b
firewalld-filesystem-0.6.3-8.el7.noarch.rpm	SHA-256: e8a753e6f40b2f9ed69707fd49b175f294cf2c2f1995e61c4c62ebdb018ad425
python-firewall-0.6.3-8.el7.noarch.rpm	SHA-256: a99d6e99de869186c0364227b3df84b4757a22ca2435a2b8ed9b45feb1d695b3

Red Hat Enterprise Linux for Power, big endian 7

SRPM
firewalld-0.6.3-8.el7.src.rpm	SHA-256: 3a094833b10895e2c7e980e063f3fd022a06840b6c2e0e76e897fc92b52bd1ac
ppc64
firewall-applet-0.6.3-8.el7.noarch.rpm	SHA-256: 2dd1b1f6f84f3d76e1e7f527df3cd5ec27095b8cc746d328b0a12fea40c9d34d
firewall-config-0.6.3-8.el7.noarch.rpm	SHA-256: 7d665b31911aa85df992b72b753341c945532aca93eea74903de662ee7916638
firewalld-0.6.3-8.el7.noarch.rpm	SHA-256: 0adaafbe26f0c33f721c9b2afec8d0720cff07cfb6dd73b4283dfa1ceae2453b
firewalld-filesystem-0.6.3-8.el7.noarch.rpm	SHA-256: e8a753e6f40b2f9ed69707fd49b175f294cf2c2f1995e61c4c62ebdb018ad425
python-firewall-0.6.3-8.el7.noarch.rpm	SHA-256: a99d6e99de869186c0364227b3df84b4757a22ca2435a2b8ed9b45feb1d695b3

Red Hat Enterprise Linux for Scientific Computing 7

SRPM
firewalld-0.6.3-8.el7.src.rpm	SHA-256: 3a094833b10895e2c7e980e063f3fd022a06840b6c2e0e76e897fc92b52bd1ac
x86_64
firewall-applet-0.6.3-8.el7.noarch.rpm	SHA-256: 2dd1b1f6f84f3d76e1e7f527df3cd5ec27095b8cc746d328b0a12fea40c9d34d
firewall-config-0.6.3-8.el7.noarch.rpm	SHA-256: 7d665b31911aa85df992b72b753341c945532aca93eea74903de662ee7916638
firewalld-0.6.3-8.el7.noarch.rpm	SHA-256: 0adaafbe26f0c33f721c9b2afec8d0720cff07cfb6dd73b4283dfa1ceae2453b
firewalld-filesystem-0.6.3-8.el7.noarch.rpm	SHA-256: e8a753e6f40b2f9ed69707fd49b175f294cf2c2f1995e61c4c62ebdb018ad425
python-firewall-0.6.3-8.el7.noarch.rpm	SHA-256: a99d6e99de869186c0364227b3df84b4757a22ca2435a2b8ed9b45feb1d695b3

Red Hat Enterprise Linux for Power, little endian 7

SRPM
firewalld-0.6.3-8.el7.src.rpm	SHA-256: 3a094833b10895e2c7e980e063f3fd022a06840b6c2e0e76e897fc92b52bd1ac
ppc64le
firewall-applet-0.6.3-8.el7.noarch.rpm	SHA-256: 2dd1b1f6f84f3d76e1e7f527df3cd5ec27095b8cc746d328b0a12fea40c9d34d
firewall-config-0.6.3-8.el7.noarch.rpm	SHA-256: 7d665b31911aa85df992b72b753341c945532aca93eea74903de662ee7916638
firewalld-0.6.3-8.el7.noarch.rpm	SHA-256: 0adaafbe26f0c33f721c9b2afec8d0720cff07cfb6dd73b4283dfa1ceae2453b
firewalld-filesystem-0.6.3-8.el7.noarch.rpm	SHA-256: e8a753e6f40b2f9ed69707fd49b175f294cf2c2f1995e61c4c62ebdb018ad425
python-firewall-0.6.3-8.el7.noarch.rpm	SHA-256: a99d6e99de869186c0364227b3df84b4757a22ca2435a2b8ed9b45feb1d695b3

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7

SRPM
firewalld-0.6.3-8.el7.src.rpm	SHA-256: 3a094833b10895e2c7e980e063f3fd022a06840b6c2e0e76e897fc92b52bd1ac
s390x
firewall-applet-0.6.3-8.el7.noarch.rpm	SHA-256: 2dd1b1f6f84f3d76e1e7f527df3cd5ec27095b8cc746d328b0a12fea40c9d34d
firewall-config-0.6.3-8.el7.noarch.rpm	SHA-256: 7d665b31911aa85df992b72b753341c945532aca93eea74903de662ee7916638
firewalld-0.6.3-8.el7.noarch.rpm	SHA-256: 0adaafbe26f0c33f721c9b2afec8d0720cff07cfb6dd73b4283dfa1ceae2453b
firewalld-filesystem-0.6.3-8.el7.noarch.rpm	SHA-256: e8a753e6f40b2f9ed69707fd49b175f294cf2c2f1995e61c4c62ebdb018ad425
python-firewall-0.6.3-8.el7.noarch.rpm	SHA-256: a99d6e99de869186c0364227b3df84b4757a22ca2435a2b8ed9b45feb1d695b3

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7

SRPM
firewalld-0.6.3-8.el7.src.rpm	SHA-256: 3a094833b10895e2c7e980e063f3fd022a06840b6c2e0e76e897fc92b52bd1ac
ppc64
firewall-applet-0.6.3-8.el7.noarch.rpm	SHA-256: 2dd1b1f6f84f3d76e1e7f527df3cd5ec27095b8cc746d328b0a12fea40c9d34d
firewall-config-0.6.3-8.el7.noarch.rpm	SHA-256: 7d665b31911aa85df992b72b753341c945532aca93eea74903de662ee7916638
firewalld-0.6.3-8.el7.noarch.rpm	SHA-256: 0adaafbe26f0c33f721c9b2afec8d0720cff07cfb6dd73b4283dfa1ceae2453b
firewalld-filesystem-0.6.3-8.el7.noarch.rpm	SHA-256: e8a753e6f40b2f9ed69707fd49b175f294cf2c2f1995e61c4c62ebdb018ad425
python-firewall-0.6.3-8.el7.noarch.rpm	SHA-256: a99d6e99de869186c0364227b3df84b4757a22ca2435a2b8ed9b45feb1d695b3

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7

SRPM
firewalld-0.6.3-8.el7.src.rpm	SHA-256: 3a094833b10895e2c7e980e063f3fd022a06840b6c2e0e76e897fc92b52bd1ac
ppc64le
firewall-applet-0.6.3-8.el7.noarch.rpm	SHA-256: 2dd1b1f6f84f3d76e1e7f527df3cd5ec27095b8cc746d328b0a12fea40c9d34d
firewall-config-0.6.3-8.el7.noarch.rpm	SHA-256: 7d665b31911aa85df992b72b753341c945532aca93eea74903de662ee7916638
firewalld-0.6.3-8.el7.noarch.rpm	SHA-256: 0adaafbe26f0c33f721c9b2afec8d0720cff07cfb6dd73b4283dfa1ceae2453b
firewalld-filesystem-0.6.3-8.el7.noarch.rpm	SHA-256: e8a753e6f40b2f9ed69707fd49b175f294cf2c2f1995e61c4c62ebdb018ad425
python-firewall-0.6.3-8.el7.noarch.rpm	SHA-256: a99d6e99de869186c0364227b3df84b4757a22ca2435a2b8ed9b45feb1d695b3

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.

Select Your Language

Infrastructure and Management

Cloud Computing

Storage

Runtimes

Integration and Automation