Red Hat Product Errata RHBA-2025:16442 - Bug Fix Advisory
Issued:
2025-09-23
Updated:
2025-09-23

RHBA-2025:16442 - Bug Fix Advisory

Synopsis

firewalld bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for firewalld is now available for Red Hat Enterprise Linux 10.

Description

firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface.

Bug Fix(es) and Enhancement(s):

  • prevent rules from getting flushed when a rich rule with an invalid ipset is added (JIRA:RHEL-67103)
  • Firewalld loads ipset which logs an "Unmaintained driver" warning [rhel-10] (JIRA:RHEL-92450)
  • CI: omit "scale" tests from parallel run, run separately and serially [rhel-10] (JIRA:RHEL-92451)
  • Reloading firewalld immediately after restarting it terminates it [rhel-10] (JIRA:RHEL-92452)
  • firewall-config: Rich Rule creation is broken (JIRA:RHEL-94646)
  • firewalld: rebase to latest 2.3.z (JIRA:RHEL-96068)

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 10 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 10 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x
  • Red Hat Enterprise Linux for Power, little endian 10 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le
  • Red Hat Enterprise Linux for ARM 64 10 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x
  • Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le
  • Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64

Fixes

  • RHEL-67103 - prevent rules from getting flushed when a rich rule with an invalid ipset is added
  • RHEL-94646 - firewall-config: Rich Rule creation is broken
  • RHEL-96068 - firewalld: rebase to latest 2.3.z

CVEs

(none)

References

(none)

Red Hat Enterprise Linux for x86_64 10

SRPM
firewalld-2.3.1-1.el10_0.src.rpm SHA-256: abcb2f30faab073c6a54169360dd20adbc0df0452eb29fa910058d5de9eac015
x86_64
firewall-applet-2.3.1-1.el10_0.noarch.rpm SHA-256: c2f3c86cd31345de1fdfe8174d605fb09d244d446a4d9d8e1c15e4e2fdae03a8
firewall-config-2.3.1-1.el10_0.noarch.rpm SHA-256: 825223760419baa00faeb2395c37af1de2a21acc89ccc66b8d7bc4be30877e10
firewalld-2.3.1-1.el10_0.noarch.rpm SHA-256: 55a5a84afd16d396958cb892d565d6e08d260eaba1c25589d2d0d20d116982ea
firewalld-filesystem-2.3.1-1.el10_0.noarch.rpm SHA-256: 2c332f3c7bf66a3d5f5316aa06a23c1a7eb093f84cf5bf3474d99f450f9cf139
python3-firewall-2.3.1-1.el10_0.noarch.rpm SHA-256: b41a6065724de3529c4aa23c175f0a69696e8f0126b73189dec367da59edb3a7

Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0

SRPM
firewalld-2.3.1-1.el10_0.src.rpm SHA-256: abcb2f30faab073c6a54169360dd20adbc0df0452eb29fa910058d5de9eac015
x86_64
firewall-applet-2.3.1-1.el10_0.noarch.rpm SHA-256: c2f3c86cd31345de1fdfe8174d605fb09d244d446a4d9d8e1c15e4e2fdae03a8
firewall-config-2.3.1-1.el10_0.noarch.rpm SHA-256: 825223760419baa00faeb2395c37af1de2a21acc89ccc66b8d7bc4be30877e10
firewalld-2.3.1-1.el10_0.noarch.rpm SHA-256: 55a5a84afd16d396958cb892d565d6e08d260eaba1c25589d2d0d20d116982ea
firewalld-filesystem-2.3.1-1.el10_0.noarch.rpm SHA-256: 2c332f3c7bf66a3d5f5316aa06a23c1a7eb093f84cf5bf3474d99f450f9cf139
python3-firewall-2.3.1-1.el10_0.noarch.rpm SHA-256: b41a6065724de3529c4aa23c175f0a69696e8f0126b73189dec367da59edb3a7

Red Hat Enterprise Linux for IBM z Systems 10

SRPM
firewalld-2.3.1-1.el10_0.src.rpm SHA-256: abcb2f30faab073c6a54169360dd20adbc0df0452eb29fa910058d5de9eac015
s390x
firewall-applet-2.3.1-1.el10_0.noarch.rpm SHA-256: c2f3c86cd31345de1fdfe8174d605fb09d244d446a4d9d8e1c15e4e2fdae03a8
firewall-config-2.3.1-1.el10_0.noarch.rpm SHA-256: 825223760419baa00faeb2395c37af1de2a21acc89ccc66b8d7bc4be30877e10
firewalld-2.3.1-1.el10_0.noarch.rpm SHA-256: 55a5a84afd16d396958cb892d565d6e08d260eaba1c25589d2d0d20d116982ea
firewalld-filesystem-2.3.1-1.el10_0.noarch.rpm SHA-256: 2c332f3c7bf66a3d5f5316aa06a23c1a7eb093f84cf5bf3474d99f450f9cf139
python3-firewall-2.3.1-1.el10_0.noarch.rpm SHA-256: b41a6065724de3529c4aa23c175f0a69696e8f0126b73189dec367da59edb3a7

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0

SRPM
firewalld-2.3.1-1.el10_0.src.rpm SHA-256: abcb2f30faab073c6a54169360dd20adbc0df0452eb29fa910058d5de9eac015
s390x
firewall-applet-2.3.1-1.el10_0.noarch.rpm SHA-256: c2f3c86cd31345de1fdfe8174d605fb09d244d446a4d9d8e1c15e4e2fdae03a8
firewall-config-2.3.1-1.el10_0.noarch.rpm SHA-256: 825223760419baa00faeb2395c37af1de2a21acc89ccc66b8d7bc4be30877e10
firewalld-2.3.1-1.el10_0.noarch.rpm SHA-256: 55a5a84afd16d396958cb892d565d6e08d260eaba1c25589d2d0d20d116982ea
firewalld-filesystem-2.3.1-1.el10_0.noarch.rpm SHA-256: 2c332f3c7bf66a3d5f5316aa06a23c1a7eb093f84cf5bf3474d99f450f9cf139
python3-firewall-2.3.1-1.el10_0.noarch.rpm SHA-256: b41a6065724de3529c4aa23c175f0a69696e8f0126b73189dec367da59edb3a7

Red Hat Enterprise Linux for Power, little endian 10

SRPM
firewalld-2.3.1-1.el10_0.src.rpm SHA-256: abcb2f30faab073c6a54169360dd20adbc0df0452eb29fa910058d5de9eac015
ppc64le
firewall-applet-2.3.1-1.el10_0.noarch.rpm SHA-256: c2f3c86cd31345de1fdfe8174d605fb09d244d446a4d9d8e1c15e4e2fdae03a8
firewall-config-2.3.1-1.el10_0.noarch.rpm SHA-256: 825223760419baa00faeb2395c37af1de2a21acc89ccc66b8d7bc4be30877e10
firewalld-2.3.1-1.el10_0.noarch.rpm SHA-256: 55a5a84afd16d396958cb892d565d6e08d260eaba1c25589d2d0d20d116982ea
firewalld-filesystem-2.3.1-1.el10_0.noarch.rpm SHA-256: 2c332f3c7bf66a3d5f5316aa06a23c1a7eb093f84cf5bf3474d99f450f9cf139
python3-firewall-2.3.1-1.el10_0.noarch.rpm SHA-256: b41a6065724de3529c4aa23c175f0a69696e8f0126b73189dec367da59edb3a7

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0

SRPM
firewalld-2.3.1-1.el10_0.src.rpm SHA-256: abcb2f30faab073c6a54169360dd20adbc0df0452eb29fa910058d5de9eac015
ppc64le
firewall-applet-2.3.1-1.el10_0.noarch.rpm SHA-256: c2f3c86cd31345de1fdfe8174d605fb09d244d446a4d9d8e1c15e4e2fdae03a8
firewall-config-2.3.1-1.el10_0.noarch.rpm SHA-256: 825223760419baa00faeb2395c37af1de2a21acc89ccc66b8d7bc4be30877e10
firewalld-2.3.1-1.el10_0.noarch.rpm SHA-256: 55a5a84afd16d396958cb892d565d6e08d260eaba1c25589d2d0d20d116982ea
firewalld-filesystem-2.3.1-1.el10_0.noarch.rpm SHA-256: 2c332f3c7bf66a3d5f5316aa06a23c1a7eb093f84cf5bf3474d99f450f9cf139
python3-firewall-2.3.1-1.el10_0.noarch.rpm SHA-256: b41a6065724de3529c4aa23c175f0a69696e8f0126b73189dec367da59edb3a7

Red Hat Enterprise Linux for ARM 64 10

SRPM
firewalld-2.3.1-1.el10_0.src.rpm SHA-256: abcb2f30faab073c6a54169360dd20adbc0df0452eb29fa910058d5de9eac015
aarch64
firewall-applet-2.3.1-1.el10_0.noarch.rpm SHA-256: c2f3c86cd31345de1fdfe8174d605fb09d244d446a4d9d8e1c15e4e2fdae03a8
firewall-config-2.3.1-1.el10_0.noarch.rpm SHA-256: 825223760419baa00faeb2395c37af1de2a21acc89ccc66b8d7bc4be30877e10
firewalld-2.3.1-1.el10_0.noarch.rpm SHA-256: 55a5a84afd16d396958cb892d565d6e08d260eaba1c25589d2d0d20d116982ea
firewalld-filesystem-2.3.1-1.el10_0.noarch.rpm SHA-256: 2c332f3c7bf66a3d5f5316aa06a23c1a7eb093f84cf5bf3474d99f450f9cf139
python3-firewall-2.3.1-1.el10_0.noarch.rpm SHA-256: b41a6065724de3529c4aa23c175f0a69696e8f0126b73189dec367da59edb3a7

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0

SRPM
firewalld-2.3.1-1.el10_0.src.rpm SHA-256: abcb2f30faab073c6a54169360dd20adbc0df0452eb29fa910058d5de9eac015
aarch64
firewall-applet-2.3.1-1.el10_0.noarch.rpm SHA-256: c2f3c86cd31345de1fdfe8174d605fb09d244d446a4d9d8e1c15e4e2fdae03a8
firewall-config-2.3.1-1.el10_0.noarch.rpm SHA-256: 825223760419baa00faeb2395c37af1de2a21acc89ccc66b8d7bc4be30877e10
firewalld-2.3.1-1.el10_0.noarch.rpm SHA-256: 55a5a84afd16d396958cb892d565d6e08d260eaba1c25589d2d0d20d116982ea
firewalld-filesystem-2.3.1-1.el10_0.noarch.rpm SHA-256: 2c332f3c7bf66a3d5f5316aa06a23c1a7eb093f84cf5bf3474d99f450f9cf139
python3-firewall-2.3.1-1.el10_0.noarch.rpm SHA-256: b41a6065724de3529c4aa23c175f0a69696e8f0126b73189dec367da59edb3a7

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0

SRPM
firewalld-2.3.1-1.el10_0.src.rpm SHA-256: abcb2f30faab073c6a54169360dd20adbc0df0452eb29fa910058d5de9eac015
aarch64
firewall-applet-2.3.1-1.el10_0.noarch.rpm SHA-256: c2f3c86cd31345de1fdfe8174d605fb09d244d446a4d9d8e1c15e4e2fdae03a8
firewall-config-2.3.1-1.el10_0.noarch.rpm SHA-256: 825223760419baa00faeb2395c37af1de2a21acc89ccc66b8d7bc4be30877e10
firewalld-2.3.1-1.el10_0.noarch.rpm SHA-256: 55a5a84afd16d396958cb892d565d6e08d260eaba1c25589d2d0d20d116982ea
firewalld-filesystem-2.3.1-1.el10_0.noarch.rpm SHA-256: 2c332f3c7bf66a3d5f5316aa06a23c1a7eb093f84cf5bf3474d99f450f9cf139
python3-firewall-2.3.1-1.el10_0.noarch.rpm SHA-256: b41a6065724de3529c4aa23c175f0a69696e8f0126b73189dec367da59edb3a7

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0

SRPM
firewalld-2.3.1-1.el10_0.src.rpm SHA-256: abcb2f30faab073c6a54169360dd20adbc0df0452eb29fa910058d5de9eac015
s390x
firewall-applet-2.3.1-1.el10_0.noarch.rpm SHA-256: c2f3c86cd31345de1fdfe8174d605fb09d244d446a4d9d8e1c15e4e2fdae03a8
firewall-config-2.3.1-1.el10_0.noarch.rpm SHA-256: 825223760419baa00faeb2395c37af1de2a21acc89ccc66b8d7bc4be30877e10
firewalld-2.3.1-1.el10_0.noarch.rpm SHA-256: 55a5a84afd16d396958cb892d565d6e08d260eaba1c25589d2d0d20d116982ea
firewalld-filesystem-2.3.1-1.el10_0.noarch.rpm SHA-256: 2c332f3c7bf66a3d5f5316aa06a23c1a7eb093f84cf5bf3474d99f450f9cf139
python3-firewall-2.3.1-1.el10_0.noarch.rpm SHA-256: b41a6065724de3529c4aa23c175f0a69696e8f0126b73189dec367da59edb3a7

Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0

SRPM
firewalld-2.3.1-1.el10_0.src.rpm SHA-256: abcb2f30faab073c6a54169360dd20adbc0df0452eb29fa910058d5de9eac015
ppc64le
firewall-applet-2.3.1-1.el10_0.noarch.rpm SHA-256: c2f3c86cd31345de1fdfe8174d605fb09d244d446a4d9d8e1c15e4e2fdae03a8
firewall-config-2.3.1-1.el10_0.noarch.rpm SHA-256: 825223760419baa00faeb2395c37af1de2a21acc89ccc66b8d7bc4be30877e10
firewalld-2.3.1-1.el10_0.noarch.rpm SHA-256: 55a5a84afd16d396958cb892d565d6e08d260eaba1c25589d2d0d20d116982ea
firewalld-filesystem-2.3.1-1.el10_0.noarch.rpm SHA-256: 2c332f3c7bf66a3d5f5316aa06a23c1a7eb093f84cf5bf3474d99f450f9cf139
python3-firewall-2.3.1-1.el10_0.noarch.rpm SHA-256: b41a6065724de3529c4aa23c175f0a69696e8f0126b73189dec367da59edb3a7

Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0

SRPM
firewalld-2.3.1-1.el10_0.src.rpm SHA-256: abcb2f30faab073c6a54169360dd20adbc0df0452eb29fa910058d5de9eac015
x86_64
firewall-applet-2.3.1-1.el10_0.noarch.rpm SHA-256: c2f3c86cd31345de1fdfe8174d605fb09d244d446a4d9d8e1c15e4e2fdae03a8
firewall-config-2.3.1-1.el10_0.noarch.rpm SHA-256: 825223760419baa00faeb2395c37af1de2a21acc89ccc66b8d7bc4be30877e10
firewalld-2.3.1-1.el10_0.noarch.rpm SHA-256: 55a5a84afd16d396958cb892d565d6e08d260eaba1c25589d2d0d20d116982ea
firewalld-filesystem-2.3.1-1.el10_0.noarch.rpm SHA-256: 2c332f3c7bf66a3d5f5316aa06a23c1a7eb093f84cf5bf3474d99f450f9cf139
python3-firewall-2.3.1-1.el10_0.noarch.rpm SHA-256: b41a6065724de3529c4aa23c175f0a69696e8f0126b73189dec367da59edb3a7

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.