UbuntuUpdates.org

Package "firewalld"

Name: firewalld

Description:

dynamically managed firewall with support for network zones

Latest version: 0.4.0-1ubuntu0.1
Release: xenial (16.04)
Level: updates
Repository: universe
Homepage: https://fedorahosted.org/firewalld/

Links


Download "firewalld"


Other versions of "firewalld" in Xenial

Repository Area Version
base universe 0.4.0-1
security universe 0.4.0-1ubuntu0.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 0.4.0-1ubuntu0.1 2017-11-03 07:06:50 UTC

  firewalld (0.4.0-1ubuntu0.1) xenial-security; urgency=medium

  * SECURITY UPDATE: Any logged in user could modify passthrough rules
    and set ipset entries (LP: #1617617)
    - debian/patches/CVE-2016-5410.patch: Enforce appropriate PolicyKit
      authentication requirements, based on upstream 0.4.3.3 commit
    - CVE-2016-5410

 -- Lucas Kocia <email address hidden> Wed, 25 Oct 2017 21:03:52 -0400

1617617 Firewall configuration can be modified by any logged in user
CVE-2016-5410 firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the (1) addPassthrough, (



About   -   Send Feedback to @ubuntu_updates