UbuntuUpdates.org

Package "firewalld"

Name: firewalld

Description:

dynamically managed firewall with support for network zones
Latest version: 0.4.0-1ubuntu0.1
Release: xenial (16.04)
Level: security
Repository: universe
Homepage: https://fedorahosted.org/firewalld/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "firewalld"

All arch deb package
APT INSTALL

Other versions of "firewalld" in Xenial

Repository Area Version
base universe 0.4.0-1
updates universe 0.4.0-1ubuntu0.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 0.4.0-1ubuntu0.1 2017-11-03 05:06:41 UTC

  firewalld (0.4.0-1ubuntu0.1) xenial-security; urgency=medium

  * SECURITY UPDATE: Any logged in user could modify passthrough rules
    and set ipset entries (LP: #1617617)
    - debian/patches/CVE-2016-5410.patch: Enforce appropriate PolicyKit
      authentication requirements, based on upstream 0.4.3.3 commit
    - CVE-2016-5410

 -- Lucas Kocia <email address hidden> Wed, 25 Oct 2017 21:03:52 -0400
1617617 Firewall configuration can be modified by any logged in user
CVE-2016-5410 firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the (1) addPassthrough, (


About   -   Send Feedback to @ubuntu_updates