Issued:: 2026-09-15
Updated:: 2026-09-15

RHSA-2026:67585 - Security Advisory

Overview
Updated Packages

Synopsis

Moderate: firewalld security update

Type/Severity

Security Advisory: Moderate

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for firewalld is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface.

Security Fix(es):

firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis-authorization (CVE-2026-4948)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

Red Hat Enterprise Linux for x86_64 9 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64
Red Hat Enterprise Linux for IBM z Systems 9 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x
Red Hat Enterprise Linux for Power, little endian 9 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le
Red Hat Enterprise Linux for ARM 64 9 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64
Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64
Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x
Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64
Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64
Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le
Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x

Fixes

BZ - 2452086 - CVE-2026-4948 firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis-authorization

CVEs

CVE-2026-4948

References

https://access.redhat.com/security/updates/classification/#moderate

Note: More recent versions of these packages may be available. Click a package name for more details.

Red Hat Enterprise Linux for x86_64 9

SRPM
firewalld-1.3.4-20.el9_8.src.rpm	SHA-256: ceed6e511bd95b3ec2f0d1dd9e7e3738c19561b24e7aa6a98acc7a05c9c12e8a
x86_64
firewall-applet-1.3.4-20.el9_8.noarch.rpm	SHA-256: a3bad95b8dcacf9805e96436290bb463fc26ea1f16a0e1c206ebbc9a41b1fe8c
firewall-config-1.3.4-20.el9_8.noarch.rpm	SHA-256: 7bb0e1a17fb2d5e901d9a69f891116cc752c0593975eb3f4903b0009d7f1ab83
firewalld-1.3.4-20.el9_8.noarch.rpm	SHA-256: 67723d5ae293c1855a37bace83b14e03ec86a91e7523b2b270ff019384a4f145
firewalld-filesystem-1.3.4-20.el9_8.noarch.rpm	SHA-256: 35cdc0bac0ed023a0722647140b0df5d9fc90c1594f5f8c1acf6f0df860f3954
python3-firewall-1.3.4-20.el9_8.noarch.rpm	SHA-256: a8c2bb370a0e29fc262f1ddac33831280b59e5da47020769d653cd50247e948b

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8

SRPM
firewalld-1.3.4-20.el9_8.src.rpm	SHA-256: ceed6e511bd95b3ec2f0d1dd9e7e3738c19561b24e7aa6a98acc7a05c9c12e8a
x86_64
firewall-applet-1.3.4-20.el9_8.noarch.rpm	SHA-256: a3bad95b8dcacf9805e96436290bb463fc26ea1f16a0e1c206ebbc9a41b1fe8c
firewall-config-1.3.4-20.el9_8.noarch.rpm	SHA-256: 7bb0e1a17fb2d5e901d9a69f891116cc752c0593975eb3f4903b0009d7f1ab83
firewalld-1.3.4-20.el9_8.noarch.rpm	SHA-256: 67723d5ae293c1855a37bace83b14e03ec86a91e7523b2b270ff019384a4f145
firewalld-filesystem-1.3.4-20.el9_8.noarch.rpm	SHA-256: 35cdc0bac0ed023a0722647140b0df5d9fc90c1594f5f8c1acf6f0df860f3954
python3-firewall-1.3.4-20.el9_8.noarch.rpm	SHA-256: a8c2bb370a0e29fc262f1ddac33831280b59e5da47020769d653cd50247e948b

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
firewalld-1.3.4-20.el9_8.src.rpm	SHA-256: ceed6e511bd95b3ec2f0d1dd9e7e3738c19561b24e7aa6a98acc7a05c9c12e8a
s390x
firewall-applet-1.3.4-20.el9_8.noarch.rpm	SHA-256: a3bad95b8dcacf9805e96436290bb463fc26ea1f16a0e1c206ebbc9a41b1fe8c
firewall-config-1.3.4-20.el9_8.noarch.rpm	SHA-256: 7bb0e1a17fb2d5e901d9a69f891116cc752c0593975eb3f4903b0009d7f1ab83
firewalld-1.3.4-20.el9_8.noarch.rpm	SHA-256: 67723d5ae293c1855a37bace83b14e03ec86a91e7523b2b270ff019384a4f145
firewalld-filesystem-1.3.4-20.el9_8.noarch.rpm	SHA-256: 35cdc0bac0ed023a0722647140b0df5d9fc90c1594f5f8c1acf6f0df860f3954
python3-firewall-1.3.4-20.el9_8.noarch.rpm	SHA-256: a8c2bb370a0e29fc262f1ddac33831280b59e5da47020769d653cd50247e948b

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8

SRPM
firewalld-1.3.4-20.el9_8.src.rpm	SHA-256: ceed6e511bd95b3ec2f0d1dd9e7e3738c19561b24e7aa6a98acc7a05c9c12e8a
s390x
firewall-applet-1.3.4-20.el9_8.noarch.rpm	SHA-256: a3bad95b8dcacf9805e96436290bb463fc26ea1f16a0e1c206ebbc9a41b1fe8c
firewall-config-1.3.4-20.el9_8.noarch.rpm	SHA-256: 7bb0e1a17fb2d5e901d9a69f891116cc752c0593975eb3f4903b0009d7f1ab83
firewalld-1.3.4-20.el9_8.noarch.rpm	SHA-256: 67723d5ae293c1855a37bace83b14e03ec86a91e7523b2b270ff019384a4f145
firewalld-filesystem-1.3.4-20.el9_8.noarch.rpm	SHA-256: 35cdc0bac0ed023a0722647140b0df5d9fc90c1594f5f8c1acf6f0df860f3954
python3-firewall-1.3.4-20.el9_8.noarch.rpm	SHA-256: a8c2bb370a0e29fc262f1ddac33831280b59e5da47020769d653cd50247e948b

Red Hat Enterprise Linux for Power, little endian 9

SRPM
firewalld-1.3.4-20.el9_8.src.rpm	SHA-256: ceed6e511bd95b3ec2f0d1dd9e7e3738c19561b24e7aa6a98acc7a05c9c12e8a
ppc64le
firewall-applet-1.3.4-20.el9_8.noarch.rpm	SHA-256: a3bad95b8dcacf9805e96436290bb463fc26ea1f16a0e1c206ebbc9a41b1fe8c
firewall-config-1.3.4-20.el9_8.noarch.rpm	SHA-256: 7bb0e1a17fb2d5e901d9a69f891116cc752c0593975eb3f4903b0009d7f1ab83
firewalld-1.3.4-20.el9_8.noarch.rpm	SHA-256: 67723d5ae293c1855a37bace83b14e03ec86a91e7523b2b270ff019384a4f145
firewalld-filesystem-1.3.4-20.el9_8.noarch.rpm	SHA-256: 35cdc0bac0ed023a0722647140b0df5d9fc90c1594f5f8c1acf6f0df860f3954
python3-firewall-1.3.4-20.el9_8.noarch.rpm	SHA-256: a8c2bb370a0e29fc262f1ddac33831280b59e5da47020769d653cd50247e948b

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8

SRPM
firewalld-1.3.4-20.el9_8.src.rpm	SHA-256: ceed6e511bd95b3ec2f0d1dd9e7e3738c19561b24e7aa6a98acc7a05c9c12e8a
ppc64le
firewall-applet-1.3.4-20.el9_8.noarch.rpm	SHA-256: a3bad95b8dcacf9805e96436290bb463fc26ea1f16a0e1c206ebbc9a41b1fe8c
firewall-config-1.3.4-20.el9_8.noarch.rpm	SHA-256: 7bb0e1a17fb2d5e901d9a69f891116cc752c0593975eb3f4903b0009d7f1ab83
firewalld-1.3.4-20.el9_8.noarch.rpm	SHA-256: 67723d5ae293c1855a37bace83b14e03ec86a91e7523b2b270ff019384a4f145
firewalld-filesystem-1.3.4-20.el9_8.noarch.rpm	SHA-256: 35cdc0bac0ed023a0722647140b0df5d9fc90c1594f5f8c1acf6f0df860f3954
python3-firewall-1.3.4-20.el9_8.noarch.rpm	SHA-256: a8c2bb370a0e29fc262f1ddac33831280b59e5da47020769d653cd50247e948b

Red Hat Enterprise Linux for ARM 64 9

SRPM
firewalld-1.3.4-20.el9_8.src.rpm	SHA-256: ceed6e511bd95b3ec2f0d1dd9e7e3738c19561b24e7aa6a98acc7a05c9c12e8a
aarch64
firewall-applet-1.3.4-20.el9_8.noarch.rpm	SHA-256: a3bad95b8dcacf9805e96436290bb463fc26ea1f16a0e1c206ebbc9a41b1fe8c
firewall-config-1.3.4-20.el9_8.noarch.rpm	SHA-256: 7bb0e1a17fb2d5e901d9a69f891116cc752c0593975eb3f4903b0009d7f1ab83
firewalld-1.3.4-20.el9_8.noarch.rpm	SHA-256: 67723d5ae293c1855a37bace83b14e03ec86a91e7523b2b270ff019384a4f145
firewalld-filesystem-1.3.4-20.el9_8.noarch.rpm	SHA-256: 35cdc0bac0ed023a0722647140b0df5d9fc90c1594f5f8c1acf6f0df860f3954
python3-firewall-1.3.4-20.el9_8.noarch.rpm	SHA-256: a8c2bb370a0e29fc262f1ddac33831280b59e5da47020769d653cd50247e948b

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8

SRPM
firewalld-1.3.4-20.el9_8.src.rpm	SHA-256: ceed6e511bd95b3ec2f0d1dd9e7e3738c19561b24e7aa6a98acc7a05c9c12e8a
aarch64
firewall-applet-1.3.4-20.el9_8.noarch.rpm	SHA-256: a3bad95b8dcacf9805e96436290bb463fc26ea1f16a0e1c206ebbc9a41b1fe8c
firewall-config-1.3.4-20.el9_8.noarch.rpm	SHA-256: 7bb0e1a17fb2d5e901d9a69f891116cc752c0593975eb3f4903b0009d7f1ab83
firewalld-1.3.4-20.el9_8.noarch.rpm	SHA-256: 67723d5ae293c1855a37bace83b14e03ec86a91e7523b2b270ff019384a4f145
firewalld-filesystem-1.3.4-20.el9_8.noarch.rpm	SHA-256: 35cdc0bac0ed023a0722647140b0df5d9fc90c1594f5f8c1acf6f0df860f3954
python3-firewall-1.3.4-20.el9_8.noarch.rpm	SHA-256: a8c2bb370a0e29fc262f1ddac33831280b59e5da47020769d653cd50247e948b

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8

SRPM
firewalld-1.3.4-20.el9_8.src.rpm	SHA-256: ceed6e511bd95b3ec2f0d1dd9e7e3738c19561b24e7aa6a98acc7a05c9c12e8a
ppc64le
firewall-applet-1.3.4-20.el9_8.noarch.rpm	SHA-256: a3bad95b8dcacf9805e96436290bb463fc26ea1f16a0e1c206ebbc9a41b1fe8c
firewall-config-1.3.4-20.el9_8.noarch.rpm	SHA-256: 7bb0e1a17fb2d5e901d9a69f891116cc752c0593975eb3f4903b0009d7f1ab83
firewalld-1.3.4-20.el9_8.noarch.rpm	SHA-256: 67723d5ae293c1855a37bace83b14e03ec86a91e7523b2b270ff019384a4f145
firewalld-filesystem-1.3.4-20.el9_8.noarch.rpm	SHA-256: 35cdc0bac0ed023a0722647140b0df5d9fc90c1594f5f8c1acf6f0df860f3954
python3-firewall-1.3.4-20.el9_8.noarch.rpm	SHA-256: a8c2bb370a0e29fc262f1ddac33831280b59e5da47020769d653cd50247e948b

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8

SRPM
firewalld-1.3.4-20.el9_8.src.rpm	SHA-256: ceed6e511bd95b3ec2f0d1dd9e7e3738c19561b24e7aa6a98acc7a05c9c12e8a
x86_64
firewall-applet-1.3.4-20.el9_8.noarch.rpm	SHA-256: a3bad95b8dcacf9805e96436290bb463fc26ea1f16a0e1c206ebbc9a41b1fe8c
firewall-config-1.3.4-20.el9_8.noarch.rpm	SHA-256: 7bb0e1a17fb2d5e901d9a69f891116cc752c0593975eb3f4903b0009d7f1ab83
firewalld-1.3.4-20.el9_8.noarch.rpm	SHA-256: 67723d5ae293c1855a37bace83b14e03ec86a91e7523b2b270ff019384a4f145
firewalld-filesystem-1.3.4-20.el9_8.noarch.rpm	SHA-256: 35cdc0bac0ed023a0722647140b0df5d9fc90c1594f5f8c1acf6f0df860f3954
python3-firewall-1.3.4-20.el9_8.noarch.rpm	SHA-256: a8c2bb370a0e29fc262f1ddac33831280b59e5da47020769d653cd50247e948b

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8

SRPM
firewalld-1.3.4-20.el9_8.src.rpm	SHA-256: ceed6e511bd95b3ec2f0d1dd9e7e3738c19561b24e7aa6a98acc7a05c9c12e8a
aarch64
firewall-applet-1.3.4-20.el9_8.noarch.rpm	SHA-256: a3bad95b8dcacf9805e96436290bb463fc26ea1f16a0e1c206ebbc9a41b1fe8c
firewall-config-1.3.4-20.el9_8.noarch.rpm	SHA-256: 7bb0e1a17fb2d5e901d9a69f891116cc752c0593975eb3f4903b0009d7f1ab83
firewalld-1.3.4-20.el9_8.noarch.rpm	SHA-256: 67723d5ae293c1855a37bace83b14e03ec86a91e7523b2b270ff019384a4f145
firewalld-filesystem-1.3.4-20.el9_8.noarch.rpm	SHA-256: 35cdc0bac0ed023a0722647140b0df5d9fc90c1594f5f8c1acf6f0df860f3954
python3-firewall-1.3.4-20.el9_8.noarch.rpm	SHA-256: a8c2bb370a0e29fc262f1ddac33831280b59e5da47020769d653cd50247e948b

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8

SRPM
firewalld-1.3.4-20.el9_8.src.rpm	SHA-256: ceed6e511bd95b3ec2f0d1dd9e7e3738c19561b24e7aa6a98acc7a05c9c12e8a
s390x
firewall-applet-1.3.4-20.el9_8.noarch.rpm	SHA-256: a3bad95b8dcacf9805e96436290bb463fc26ea1f16a0e1c206ebbc9a41b1fe8c
firewall-config-1.3.4-20.el9_8.noarch.rpm	SHA-256: 7bb0e1a17fb2d5e901d9a69f891116cc752c0593975eb3f4903b0009d7f1ab83
firewalld-1.3.4-20.el9_8.noarch.rpm	SHA-256: 67723d5ae293c1855a37bace83b14e03ec86a91e7523b2b270ff019384a4f145
firewalld-filesystem-1.3.4-20.el9_8.noarch.rpm	SHA-256: 35cdc0bac0ed023a0722647140b0df5d9fc90c1594f5f8c1acf6f0df860f3954
python3-firewall-1.3.4-20.el9_8.noarch.rpm	SHA-256: a8c2bb370a0e29fc262f1ddac33831280b59e5da47020769d653cd50247e948b

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8

SRPM
firewalld-1.3.4-20.el9_8.src.rpm	SHA-256: ceed6e511bd95b3ec2f0d1dd9e7e3738c19561b24e7aa6a98acc7a05c9c12e8a
x86_64
firewall-applet-1.3.4-20.el9_8.noarch.rpm	SHA-256: a3bad95b8dcacf9805e96436290bb463fc26ea1f16a0e1c206ebbc9a41b1fe8c
firewall-config-1.3.4-20.el9_8.noarch.rpm	SHA-256: 7bb0e1a17fb2d5e901d9a69f891116cc752c0593975eb3f4903b0009d7f1ab83
firewalld-1.3.4-20.el9_8.noarch.rpm	SHA-256: 67723d5ae293c1855a37bace83b14e03ec86a91e7523b2b270ff019384a4f145
firewalld-filesystem-1.3.4-20.el9_8.noarch.rpm	SHA-256: 35cdc0bac0ed023a0722647140b0df5d9fc90c1594f5f8c1acf6f0df860f3954
python3-firewall-1.3.4-20.el9_8.noarch.rpm	SHA-256: a8c2bb370a0e29fc262f1ddac33831280b59e5da47020769d653cd50247e948b

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8

SRPM
firewalld-1.3.4-20.el9_8.src.rpm	SHA-256: ceed6e511bd95b3ec2f0d1dd9e7e3738c19561b24e7aa6a98acc7a05c9c12e8a
aarch64
firewall-applet-1.3.4-20.el9_8.noarch.rpm	SHA-256: a3bad95b8dcacf9805e96436290bb463fc26ea1f16a0e1c206ebbc9a41b1fe8c
firewall-config-1.3.4-20.el9_8.noarch.rpm	SHA-256: 7bb0e1a17fb2d5e901d9a69f891116cc752c0593975eb3f4903b0009d7f1ab83
firewalld-1.3.4-20.el9_8.noarch.rpm	SHA-256: 67723d5ae293c1855a37bace83b14e03ec86a91e7523b2b270ff019384a4f145
firewalld-filesystem-1.3.4-20.el9_8.noarch.rpm	SHA-256: 35cdc0bac0ed023a0722647140b0df5d9fc90c1594f5f8c1acf6f0df860f3954
python3-firewall-1.3.4-20.el9_8.noarch.rpm	SHA-256: a8c2bb370a0e29fc262f1ddac33831280b59e5da47020769d653cd50247e948b

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8

SRPM
firewalld-1.3.4-20.el9_8.src.rpm	SHA-256: ceed6e511bd95b3ec2f0d1dd9e7e3738c19561b24e7aa6a98acc7a05c9c12e8a
ppc64le
firewall-applet-1.3.4-20.el9_8.noarch.rpm	SHA-256: a3bad95b8dcacf9805e96436290bb463fc26ea1f16a0e1c206ebbc9a41b1fe8c
firewall-config-1.3.4-20.el9_8.noarch.rpm	SHA-256: 7bb0e1a17fb2d5e901d9a69f891116cc752c0593975eb3f4903b0009d7f1ab83
firewalld-1.3.4-20.el9_8.noarch.rpm	SHA-256: 67723d5ae293c1855a37bace83b14e03ec86a91e7523b2b270ff019384a4f145
firewalld-filesystem-1.3.4-20.el9_8.noarch.rpm	SHA-256: 35cdc0bac0ed023a0722647140b0df5d9fc90c1594f5f8c1acf6f0df860f3954
python3-firewall-1.3.4-20.el9_8.noarch.rpm	SHA-256: a8c2bb370a0e29fc262f1ddac33831280b59e5da47020769d653cd50247e948b

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8

SRPM
firewalld-1.3.4-20.el9_8.src.rpm	SHA-256: ceed6e511bd95b3ec2f0d1dd9e7e3738c19561b24e7aa6a98acc7a05c9c12e8a
s390x
firewall-applet-1.3.4-20.el9_8.noarch.rpm	SHA-256: a3bad95b8dcacf9805e96436290bb463fc26ea1f16a0e1c206ebbc9a41b1fe8c
firewall-config-1.3.4-20.el9_8.noarch.rpm	SHA-256: 7bb0e1a17fb2d5e901d9a69f891116cc752c0593975eb3f4903b0009d7f1ab83
firewalld-1.3.4-20.el9_8.noarch.rpm	SHA-256: 67723d5ae293c1855a37bace83b14e03ec86a91e7523b2b270ff019384a4f145
firewalld-filesystem-1.3.4-20.el9_8.noarch.rpm	SHA-256: 35cdc0bac0ed023a0722647140b0df5d9fc90c1594f5f8c1acf6f0df860f3954
python3-firewall-1.3.4-20.el9_8.noarch.rpm	SHA-256: a8c2bb370a0e29fc262f1ddac33831280b59e5da47020769d653cd50247e948b

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.

Select Your Language

Infrastructure and Management

Cloud Computing

Storage

Runtimes

Integration and Automation