Summary
[1.3.4-20.0.1]
- Red Hat Satellite and Red Hat high availaibility reference found in cockpit UI
[Orabug: 30257573]
- discard empty RH-Satellite-6.xml [Orabug: 30328734]
- Remove capsule file as well, since it references removed config [Orabug: 33513329]
[1.3.4-20]
- fix(policy): use PK_ACTION_CONFIG for set{ZoneSettings2,PolicySettings} (CVE-2026-4948)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | firewall-applet | 0:1.3.4-20.0.1.el9_8 |
| Oracle Linux · 9 | firewall-config | 0:1.3.4-20.0.1.el9_8 |
| Oracle Linux · 9 | firewalld | 0:1.3.4-20.0.1.el9_8 |
| Oracle Linux · 9 | firewalld-filesystem | 0:1.3.4-20.0.1.el9_8 |
| Oracle Linux · 9 | python3-firewall | 0:1.3.4-20.0.1.el9_8 |
Vulnerabilities 1
-
Medium 5.5
Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization
A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall s…