Issued:: 2026-10-06
Updated:: 2026-10-06

RHSA-2026:76844 - Security Advisory

Overview
Updated Packages

Synopsis

Moderate: firewalld security update

Type/Severity

Security Advisory: Moderate

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for firewalld is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface.

Security Fix(es):

firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis-authorization (CVE-2026-4948)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64
Red Hat Enterprise Linux Server - AUS 9.6 x86_64
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64
Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64
Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x
Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64
Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64
Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le
Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 s390x

Fixes

BZ - 2452086 - CVE-2026-4948 firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis-authorization

CVEs

CVE-2026-4948

References

https://access.redhat.com/security/updates/classification/#moderate

Note: More recent versions of these packages may be available. Click a package name for more details.

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6

SRPM
firewalld-1.3.4-15.el9_6.1.src.rpm	SHA-256: 6374eae206c3b03d77c3e45e7af567d8134b327037c709c9738d45a4a498dba2
x86_64
firewall-applet-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 9797b65539fcd6399821e9ca5a88b8ea40d1cdcc2674507e76893b5ad5c2546e
firewall-config-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: eed67390054dbf18d6b1ab0de2e3b358637a153e38dcd592f14ac47c37b50b4e
firewalld-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: c147d890f2f344369e4fb64ba4cb0797a91444f05b2be1fb80d2490fba59c7be
firewalld-filesystem-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 1bd74ffda118e4e6e1ced2205b8e453024a61aca3f3500031b5976ed40ecefb9
python3-firewall-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 3791059e6be26ee0210743d94ca883253f3ccd7df2762402d32bc4c535c46af5

Red Hat Enterprise Linux Server - AUS 9.6

SRPM
firewalld-1.3.4-15.el9_6.1.src.rpm	SHA-256: 6374eae206c3b03d77c3e45e7af567d8134b327037c709c9738d45a4a498dba2
x86_64
firewall-applet-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 9797b65539fcd6399821e9ca5a88b8ea40d1cdcc2674507e76893b5ad5c2546e
firewall-config-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: eed67390054dbf18d6b1ab0de2e3b358637a153e38dcd592f14ac47c37b50b4e
firewalld-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: c147d890f2f344369e4fb64ba4cb0797a91444f05b2be1fb80d2490fba59c7be
firewalld-filesystem-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 1bd74ffda118e4e6e1ced2205b8e453024a61aca3f3500031b5976ed40ecefb9
python3-firewall-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 3791059e6be26ee0210743d94ca883253f3ccd7df2762402d32bc4c535c46af5

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6

SRPM
firewalld-1.3.4-15.el9_6.1.src.rpm	SHA-256: 6374eae206c3b03d77c3e45e7af567d8134b327037c709c9738d45a4a498dba2
s390x
firewall-applet-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 9797b65539fcd6399821e9ca5a88b8ea40d1cdcc2674507e76893b5ad5c2546e
firewall-config-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: eed67390054dbf18d6b1ab0de2e3b358637a153e38dcd592f14ac47c37b50b4e
firewalld-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: c147d890f2f344369e4fb64ba4cb0797a91444f05b2be1fb80d2490fba59c7be
firewalld-filesystem-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 1bd74ffda118e4e6e1ced2205b8e453024a61aca3f3500031b5976ed40ecefb9
python3-firewall-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 3791059e6be26ee0210743d94ca883253f3ccd7df2762402d32bc4c535c46af5

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6

SRPM
firewalld-1.3.4-15.el9_6.1.src.rpm	SHA-256: 6374eae206c3b03d77c3e45e7af567d8134b327037c709c9738d45a4a498dba2
ppc64le
firewall-applet-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 9797b65539fcd6399821e9ca5a88b8ea40d1cdcc2674507e76893b5ad5c2546e
firewall-config-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: eed67390054dbf18d6b1ab0de2e3b358637a153e38dcd592f14ac47c37b50b4e
firewalld-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: c147d890f2f344369e4fb64ba4cb0797a91444f05b2be1fb80d2490fba59c7be
firewalld-filesystem-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 1bd74ffda118e4e6e1ced2205b8e453024a61aca3f3500031b5976ed40ecefb9
python3-firewall-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 3791059e6be26ee0210743d94ca883253f3ccd7df2762402d32bc4c535c46af5

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6

SRPM
firewalld-1.3.4-15.el9_6.1.src.rpm	SHA-256: 6374eae206c3b03d77c3e45e7af567d8134b327037c709c9738d45a4a498dba2
aarch64
firewall-applet-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 9797b65539fcd6399821e9ca5a88b8ea40d1cdcc2674507e76893b5ad5c2546e
firewall-config-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: eed67390054dbf18d6b1ab0de2e3b358637a153e38dcd592f14ac47c37b50b4e
firewalld-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: c147d890f2f344369e4fb64ba4cb0797a91444f05b2be1fb80d2490fba59c7be
firewalld-filesystem-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 1bd74ffda118e4e6e1ced2205b8e453024a61aca3f3500031b5976ed40ecefb9
python3-firewall-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 3791059e6be26ee0210743d94ca883253f3ccd7df2762402d32bc4c535c46af5

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6

SRPM
firewalld-1.3.4-15.el9_6.1.src.rpm	SHA-256: 6374eae206c3b03d77c3e45e7af567d8134b327037c709c9738d45a4a498dba2
ppc64le
firewall-applet-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 9797b65539fcd6399821e9ca5a88b8ea40d1cdcc2674507e76893b5ad5c2546e
firewall-config-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: eed67390054dbf18d6b1ab0de2e3b358637a153e38dcd592f14ac47c37b50b4e
firewalld-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: c147d890f2f344369e4fb64ba4cb0797a91444f05b2be1fb80d2490fba59c7be
firewalld-filesystem-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 1bd74ffda118e4e6e1ced2205b8e453024a61aca3f3500031b5976ed40ecefb9
python3-firewall-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 3791059e6be26ee0210743d94ca883253f3ccd7df2762402d32bc4c535c46af5

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6

SRPM
firewalld-1.3.4-15.el9_6.1.src.rpm	SHA-256: 6374eae206c3b03d77c3e45e7af567d8134b327037c709c9738d45a4a498dba2
x86_64
firewall-applet-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 9797b65539fcd6399821e9ca5a88b8ea40d1cdcc2674507e76893b5ad5c2546e
firewall-config-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: eed67390054dbf18d6b1ab0de2e3b358637a153e38dcd592f14ac47c37b50b4e
firewalld-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: c147d890f2f344369e4fb64ba4cb0797a91444f05b2be1fb80d2490fba59c7be
firewalld-filesystem-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 1bd74ffda118e4e6e1ced2205b8e453024a61aca3f3500031b5976ed40ecefb9
python3-firewall-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 3791059e6be26ee0210743d94ca883253f3ccd7df2762402d32bc4c535c46af5

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6

SRPM
firewalld-1.3.4-15.el9_6.1.src.rpm	SHA-256: 6374eae206c3b03d77c3e45e7af567d8134b327037c709c9738d45a4a498dba2
aarch64
firewall-applet-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 9797b65539fcd6399821e9ca5a88b8ea40d1cdcc2674507e76893b5ad5c2546e
firewall-config-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: eed67390054dbf18d6b1ab0de2e3b358637a153e38dcd592f14ac47c37b50b4e
firewalld-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: c147d890f2f344369e4fb64ba4cb0797a91444f05b2be1fb80d2490fba59c7be
firewalld-filesystem-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 1bd74ffda118e4e6e1ced2205b8e453024a61aca3f3500031b5976ed40ecefb9
python3-firewall-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 3791059e6be26ee0210743d94ca883253f3ccd7df2762402d32bc4c535c46af5

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6

SRPM
firewalld-1.3.4-15.el9_6.1.src.rpm	SHA-256: 6374eae206c3b03d77c3e45e7af567d8134b327037c709c9738d45a4a498dba2
s390x
firewall-applet-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 9797b65539fcd6399821e9ca5a88b8ea40d1cdcc2674507e76893b5ad5c2546e
firewall-config-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: eed67390054dbf18d6b1ab0de2e3b358637a153e38dcd592f14ac47c37b50b4e
firewalld-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: c147d890f2f344369e4fb64ba4cb0797a91444f05b2be1fb80d2490fba59c7be
firewalld-filesystem-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 1bd74ffda118e4e6e1ced2205b8e453024a61aca3f3500031b5976ed40ecefb9
python3-firewall-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 3791059e6be26ee0210743d94ca883253f3ccd7df2762402d32bc4c535c46af5

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6

SRPM
firewalld-1.3.4-15.el9_6.1.src.rpm	SHA-256: 6374eae206c3b03d77c3e45e7af567d8134b327037c709c9738d45a4a498dba2
x86_64
firewall-applet-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 9797b65539fcd6399821e9ca5a88b8ea40d1cdcc2674507e76893b5ad5c2546e
firewall-config-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: eed67390054dbf18d6b1ab0de2e3b358637a153e38dcd592f14ac47c37b50b4e
firewalld-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: c147d890f2f344369e4fb64ba4cb0797a91444f05b2be1fb80d2490fba59c7be
firewalld-filesystem-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 1bd74ffda118e4e6e1ced2205b8e453024a61aca3f3500031b5976ed40ecefb9
python3-firewall-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 3791059e6be26ee0210743d94ca883253f3ccd7df2762402d32bc4c535c46af5

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6

SRPM
firewalld-1.3.4-15.el9_6.1.src.rpm	SHA-256: 6374eae206c3b03d77c3e45e7af567d8134b327037c709c9738d45a4a498dba2
aarch64
firewall-applet-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 9797b65539fcd6399821e9ca5a88b8ea40d1cdcc2674507e76893b5ad5c2546e
firewall-config-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: eed67390054dbf18d6b1ab0de2e3b358637a153e38dcd592f14ac47c37b50b4e
firewalld-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: c147d890f2f344369e4fb64ba4cb0797a91444f05b2be1fb80d2490fba59c7be
firewalld-filesystem-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 1bd74ffda118e4e6e1ced2205b8e453024a61aca3f3500031b5976ed40ecefb9
python3-firewall-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 3791059e6be26ee0210743d94ca883253f3ccd7df2762402d32bc4c535c46af5

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6

SRPM
firewalld-1.3.4-15.el9_6.1.src.rpm	SHA-256: 6374eae206c3b03d77c3e45e7af567d8134b327037c709c9738d45a4a498dba2
ppc64le
firewall-applet-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 9797b65539fcd6399821e9ca5a88b8ea40d1cdcc2674507e76893b5ad5c2546e
firewall-config-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: eed67390054dbf18d6b1ab0de2e3b358637a153e38dcd592f14ac47c37b50b4e
firewalld-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: c147d890f2f344369e4fb64ba4cb0797a91444f05b2be1fb80d2490fba59c7be
firewalld-filesystem-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 1bd74ffda118e4e6e1ced2205b8e453024a61aca3f3500031b5976ed40ecefb9
python3-firewall-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 3791059e6be26ee0210743d94ca883253f3ccd7df2762402d32bc4c535c46af5

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6

SRPM
firewalld-1.3.4-15.el9_6.1.src.rpm	SHA-256: 6374eae206c3b03d77c3e45e7af567d8134b327037c709c9738d45a4a498dba2
s390x
firewall-applet-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 9797b65539fcd6399821e9ca5a88b8ea40d1cdcc2674507e76893b5ad5c2546e
firewall-config-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: eed67390054dbf18d6b1ab0de2e3b358637a153e38dcd592f14ac47c37b50b4e
firewalld-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: c147d890f2f344369e4fb64ba4cb0797a91444f05b2be1fb80d2490fba59c7be
firewalld-filesystem-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 1bd74ffda118e4e6e1ced2205b8e453024a61aca3f3500031b5976ed40ecefb9
python3-firewall-1.3.4-15.el9_6.1.noarch.rpm	SHA-256: 3791059e6be26ee0210743d94ca883253f3ccd7df2762402d32bc4c535c46af5

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.

Select Your Language

Infrastructure and Management

Cloud Computing

Storage

Runtimes

Integration and Automation