Red Hat Product Errata RHBA-2023:5242 - Bug Fix Advisory
Issued:
2023-09-19
Updated:
2023-09-19

RHBA-2023:5242 - Bug Fix Advisory

Synopsis

firewalld bug fix update

Type/Severity

Bug Fix Advisory

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for firewalld is now available for Red Hat Enterprise Linux 8.

Description

firewalld is a firewall service daemon that provides a dynamic customizable
firewall with a D-Bus interface.

Bug Fix(es):

  • Allow RHEL8 firewalld 0.9.3 to accept established and related connections with reject/drop policies (BZ#2196599)
  • log rate limiting rule does not work (BZ#2196600)

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 8 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.8 s390x
  • Red Hat Enterprise Linux for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.8 ppc64le
  • Red Hat Enterprise Linux Server - TUS 8.8 x86_64
  • Red Hat Enterprise Linux for ARM 64 8 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.8 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64

Fixes

  • BZ - 2196599 - Allow RHEL8 firewalld 0.9.3 to accept established and related connections with reject/drop policies [rhel-8.8.0.z]
  • BZ - 2196600 - log rate limiting rule does not work [rhel-8.8.0.z]

CVEs

(none)

References

(none)

Red Hat Enterprise Linux for x86_64 8

SRPM
firewalld-0.9.11-1.el8_8.src.rpm SHA-256: 6dadddd6849419fcd9e89f5673fcee1de832e0fe9f0521f913585c8e4e2eef95
x86_64
firewall-applet-0.9.11-1.el8_8.noarch.rpm SHA-256: dd7a42d7107cc3095816ad2e05f52e99b845c4cfa94b959dcb441fea88acd3c0
firewall-config-0.9.11-1.el8_8.noarch.rpm SHA-256: 0b3f244ee076a6a38bbd3c492f5c5ec234ca2af240ba1009732997bba1437e89
firewalld-0.9.11-1.el8_8.noarch.rpm SHA-256: ec0607291d4a861770329e3035513a85051f06371d0dae48a63e68c677da56b6
firewalld-filesystem-0.9.11-1.el8_8.noarch.rpm SHA-256: 9120c34adf8212a9453effce3bfc7646c6085db70e64197613352545ec5abbb6
python3-firewall-0.9.11-1.el8_8.noarch.rpm SHA-256: c02f48d0c17ec137829e62e16e1555e10da8fb0558ba06835fd464516b593cac

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8

SRPM
firewalld-0.9.11-1.el8_8.src.rpm SHA-256: 6dadddd6849419fcd9e89f5673fcee1de832e0fe9f0521f913585c8e4e2eef95
x86_64
firewall-applet-0.9.11-1.el8_8.noarch.rpm SHA-256: dd7a42d7107cc3095816ad2e05f52e99b845c4cfa94b959dcb441fea88acd3c0
firewall-config-0.9.11-1.el8_8.noarch.rpm SHA-256: 0b3f244ee076a6a38bbd3c492f5c5ec234ca2af240ba1009732997bba1437e89
firewalld-0.9.11-1.el8_8.noarch.rpm SHA-256: ec0607291d4a861770329e3035513a85051f06371d0dae48a63e68c677da56b6
firewalld-filesystem-0.9.11-1.el8_8.noarch.rpm SHA-256: 9120c34adf8212a9453effce3bfc7646c6085db70e64197613352545ec5abbb6
python3-firewall-0.9.11-1.el8_8.noarch.rpm SHA-256: c02f48d0c17ec137829e62e16e1555e10da8fb0558ba06835fd464516b593cac

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
firewalld-0.9.11-1.el8_8.src.rpm SHA-256: 6dadddd6849419fcd9e89f5673fcee1de832e0fe9f0521f913585c8e4e2eef95
s390x
firewall-applet-0.9.11-1.el8_8.noarch.rpm SHA-256: dd7a42d7107cc3095816ad2e05f52e99b845c4cfa94b959dcb441fea88acd3c0
firewall-config-0.9.11-1.el8_8.noarch.rpm SHA-256: 0b3f244ee076a6a38bbd3c492f5c5ec234ca2af240ba1009732997bba1437e89
firewalld-0.9.11-1.el8_8.noarch.rpm SHA-256: ec0607291d4a861770329e3035513a85051f06371d0dae48a63e68c677da56b6
firewalld-filesystem-0.9.11-1.el8_8.noarch.rpm SHA-256: 9120c34adf8212a9453effce3bfc7646c6085db70e64197613352545ec5abbb6
python3-firewall-0.9.11-1.el8_8.noarch.rpm SHA-256: c02f48d0c17ec137829e62e16e1555e10da8fb0558ba06835fd464516b593cac

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.8

SRPM
firewalld-0.9.11-1.el8_8.src.rpm SHA-256: 6dadddd6849419fcd9e89f5673fcee1de832e0fe9f0521f913585c8e4e2eef95
s390x
firewall-applet-0.9.11-1.el8_8.noarch.rpm SHA-256: dd7a42d7107cc3095816ad2e05f52e99b845c4cfa94b959dcb441fea88acd3c0
firewall-config-0.9.11-1.el8_8.noarch.rpm SHA-256: 0b3f244ee076a6a38bbd3c492f5c5ec234ca2af240ba1009732997bba1437e89
firewalld-0.9.11-1.el8_8.noarch.rpm SHA-256: ec0607291d4a861770329e3035513a85051f06371d0dae48a63e68c677da56b6
firewalld-filesystem-0.9.11-1.el8_8.noarch.rpm SHA-256: 9120c34adf8212a9453effce3bfc7646c6085db70e64197613352545ec5abbb6
python3-firewall-0.9.11-1.el8_8.noarch.rpm SHA-256: c02f48d0c17ec137829e62e16e1555e10da8fb0558ba06835fd464516b593cac

Red Hat Enterprise Linux for Power, little endian 8

SRPM
firewalld-0.9.11-1.el8_8.src.rpm SHA-256: 6dadddd6849419fcd9e89f5673fcee1de832e0fe9f0521f913585c8e4e2eef95
ppc64le
firewall-applet-0.9.11-1.el8_8.noarch.rpm SHA-256: dd7a42d7107cc3095816ad2e05f52e99b845c4cfa94b959dcb441fea88acd3c0
firewall-config-0.9.11-1.el8_8.noarch.rpm SHA-256: 0b3f244ee076a6a38bbd3c492f5c5ec234ca2af240ba1009732997bba1437e89
firewalld-0.9.11-1.el8_8.noarch.rpm SHA-256: ec0607291d4a861770329e3035513a85051f06371d0dae48a63e68c677da56b6
firewalld-filesystem-0.9.11-1.el8_8.noarch.rpm SHA-256: 9120c34adf8212a9453effce3bfc7646c6085db70e64197613352545ec5abbb6
python3-firewall-0.9.11-1.el8_8.noarch.rpm SHA-256: c02f48d0c17ec137829e62e16e1555e10da8fb0558ba06835fd464516b593cac

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.8

SRPM
firewalld-0.9.11-1.el8_8.src.rpm SHA-256: 6dadddd6849419fcd9e89f5673fcee1de832e0fe9f0521f913585c8e4e2eef95
ppc64le
firewall-applet-0.9.11-1.el8_8.noarch.rpm SHA-256: dd7a42d7107cc3095816ad2e05f52e99b845c4cfa94b959dcb441fea88acd3c0
firewall-config-0.9.11-1.el8_8.noarch.rpm SHA-256: 0b3f244ee076a6a38bbd3c492f5c5ec234ca2af240ba1009732997bba1437e89
firewalld-0.9.11-1.el8_8.noarch.rpm SHA-256: ec0607291d4a861770329e3035513a85051f06371d0dae48a63e68c677da56b6
firewalld-filesystem-0.9.11-1.el8_8.noarch.rpm SHA-256: 9120c34adf8212a9453effce3bfc7646c6085db70e64197613352545ec5abbb6
python3-firewall-0.9.11-1.el8_8.noarch.rpm SHA-256: c02f48d0c17ec137829e62e16e1555e10da8fb0558ba06835fd464516b593cac

Red Hat Enterprise Linux Server - TUS 8.8

SRPM
firewalld-0.9.11-1.el8_8.src.rpm SHA-256: 6dadddd6849419fcd9e89f5673fcee1de832e0fe9f0521f913585c8e4e2eef95
x86_64
firewall-applet-0.9.11-1.el8_8.noarch.rpm SHA-256: dd7a42d7107cc3095816ad2e05f52e99b845c4cfa94b959dcb441fea88acd3c0
firewall-config-0.9.11-1.el8_8.noarch.rpm SHA-256: 0b3f244ee076a6a38bbd3c492f5c5ec234ca2af240ba1009732997bba1437e89
firewalld-0.9.11-1.el8_8.noarch.rpm SHA-256: ec0607291d4a861770329e3035513a85051f06371d0dae48a63e68c677da56b6
firewalld-filesystem-0.9.11-1.el8_8.noarch.rpm SHA-256: 9120c34adf8212a9453effce3bfc7646c6085db70e64197613352545ec5abbb6
python3-firewall-0.9.11-1.el8_8.noarch.rpm SHA-256: c02f48d0c17ec137829e62e16e1555e10da8fb0558ba06835fd464516b593cac

Red Hat Enterprise Linux for ARM 64 8

SRPM
firewalld-0.9.11-1.el8_8.src.rpm SHA-256: 6dadddd6849419fcd9e89f5673fcee1de832e0fe9f0521f913585c8e4e2eef95
aarch64
firewall-applet-0.9.11-1.el8_8.noarch.rpm SHA-256: dd7a42d7107cc3095816ad2e05f52e99b845c4cfa94b959dcb441fea88acd3c0
firewall-config-0.9.11-1.el8_8.noarch.rpm SHA-256: 0b3f244ee076a6a38bbd3c492f5c5ec234ca2af240ba1009732997bba1437e89
firewalld-0.9.11-1.el8_8.noarch.rpm SHA-256: ec0607291d4a861770329e3035513a85051f06371d0dae48a63e68c677da56b6
firewalld-filesystem-0.9.11-1.el8_8.noarch.rpm SHA-256: 9120c34adf8212a9453effce3bfc7646c6085db70e64197613352545ec5abbb6
python3-firewall-0.9.11-1.el8_8.noarch.rpm SHA-256: c02f48d0c17ec137829e62e16e1555e10da8fb0558ba06835fd464516b593cac

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.8

SRPM
firewalld-0.9.11-1.el8_8.src.rpm SHA-256: 6dadddd6849419fcd9e89f5673fcee1de832e0fe9f0521f913585c8e4e2eef95
aarch64
firewall-applet-0.9.11-1.el8_8.noarch.rpm SHA-256: dd7a42d7107cc3095816ad2e05f52e99b845c4cfa94b959dcb441fea88acd3c0
firewall-config-0.9.11-1.el8_8.noarch.rpm SHA-256: 0b3f244ee076a6a38bbd3c492f5c5ec234ca2af240ba1009732997bba1437e89
firewalld-0.9.11-1.el8_8.noarch.rpm SHA-256: ec0607291d4a861770329e3035513a85051f06371d0dae48a63e68c677da56b6
firewalld-filesystem-0.9.11-1.el8_8.noarch.rpm SHA-256: 9120c34adf8212a9453effce3bfc7646c6085db70e64197613352545ec5abbb6
python3-firewall-0.9.11-1.el8_8.noarch.rpm SHA-256: c02f48d0c17ec137829e62e16e1555e10da8fb0558ba06835fd464516b593cac

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8

SRPM
firewalld-0.9.11-1.el8_8.src.rpm SHA-256: 6dadddd6849419fcd9e89f5673fcee1de832e0fe9f0521f913585c8e4e2eef95
ppc64le
firewall-applet-0.9.11-1.el8_8.noarch.rpm SHA-256: dd7a42d7107cc3095816ad2e05f52e99b845c4cfa94b959dcb441fea88acd3c0
firewall-config-0.9.11-1.el8_8.noarch.rpm SHA-256: 0b3f244ee076a6a38bbd3c492f5c5ec234ca2af240ba1009732997bba1437e89
firewalld-0.9.11-1.el8_8.noarch.rpm SHA-256: ec0607291d4a861770329e3035513a85051f06371d0dae48a63e68c677da56b6
firewalld-filesystem-0.9.11-1.el8_8.noarch.rpm SHA-256: 9120c34adf8212a9453effce3bfc7646c6085db70e64197613352545ec5abbb6
python3-firewall-0.9.11-1.el8_8.noarch.rpm SHA-256: c02f48d0c17ec137829e62e16e1555e10da8fb0558ba06835fd464516b593cac

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8

SRPM
firewalld-0.9.11-1.el8_8.src.rpm SHA-256: 6dadddd6849419fcd9e89f5673fcee1de832e0fe9f0521f913585c8e4e2eef95
x86_64
firewall-applet-0.9.11-1.el8_8.noarch.rpm SHA-256: dd7a42d7107cc3095816ad2e05f52e99b845c4cfa94b959dcb441fea88acd3c0
firewall-config-0.9.11-1.el8_8.noarch.rpm SHA-256: 0b3f244ee076a6a38bbd3c492f5c5ec234ca2af240ba1009732997bba1437e89
firewalld-0.9.11-1.el8_8.noarch.rpm SHA-256: ec0607291d4a861770329e3035513a85051f06371d0dae48a63e68c677da56b6
firewalld-filesystem-0.9.11-1.el8_8.noarch.rpm SHA-256: 9120c34adf8212a9453effce3bfc7646c6085db70e64197613352545ec5abbb6
python3-firewall-0.9.11-1.el8_8.noarch.rpm SHA-256: c02f48d0c17ec137829e62e16e1555e10da8fb0558ba06835fd464516b593cac

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.