SUSE-SU-2026:2745-1

Опубликовано: 03 июл. 2026

Источник: suse-cvrf

Описание

Security update for firewalld-legacy

This update for firewalld-legacy fixes the following issue

CVE-2026-4948: local unprivileged users can modify firewall state due to D-Bus setter mis-authorizations (bsc#1260903).

Список пакетов

Container suse/manager/5.0/x86_64/server:latest

firewalld-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP6-Hardened-BYOS

firewalld-1.3.4-150600.13.6.1

firewalld-lang-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP6-Hardened-BYOS-Azure

firewalld-1.3.4-150600.13.6.1

firewalld-lang-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP6-Hardened-BYOS-EC2

firewalld-1.3.4-150600.13.6.1

firewalld-lang-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP6-Hardened-BYOS-GCE

firewalld-1.3.4-150600.13.6.1

firewalld-lang-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP6-SAP

firewalld-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP6-SAP-Azure

firewalld-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP6-SAP-Azure-3P

firewalld-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP6-SAP-BYOS

firewalld-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP6-SAP-BYOS-Azure

firewalld-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP6-SAP-BYOS-EC2

firewalld-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP6-SAP-BYOS-GCE

firewalld-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP6-SAP-EC2

firewalld-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP6-SAP-GCE

firewalld-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP6-SAP-Hardened

firewalld-1.3.4-150600.13.6.1

firewalld-lang-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP6-SAP-Hardened-Azure

firewalld-1.3.4-150600.13.6.1

firewalld-lang-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP6-SAP-Hardened-BYOS

firewalld-1.3.4-150600.13.6.1

firewalld-lang-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

firewalld-1.3.4-150600.13.6.1

firewalld-lang-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

firewalld-1.3.4-150600.13.6.1

firewalld-lang-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

firewalld-1.3.4-150600.13.6.1

firewalld-lang-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP6-SAP-Hardened-EC2

firewalld-1.3.4-150600.13.6.1

firewalld-lang-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP6-SAP-Hardened-GCE

firewalld-1.3.4-150600.13.6.1

firewalld-lang-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP6-SAPCAL

firewalld-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP6-SAPCAL-Azure

firewalld-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP6-SAPCAL-EC2

firewalld-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP6-SAPCAL-GCE

firewalld-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP7-Hardened-BYOS-Azure

firewalld-1.3.4-150600.13.6.1

firewalld-lang-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP7-Hardened-BYOS-EC2

firewalld-1.3.4-150600.13.6.1

firewalld-lang-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP7-Hardened-BYOS-GCE

firewalld-1.3.4-150600.13.6.1

firewalld-lang-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP7-SAP-Azure

firewalld-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP7-SAP-Azure-3P

firewalld-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP7-SAP-BYOS-Azure

firewalld-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP7-SAP-BYOS-EC2

firewalld-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP7-SAP-BYOS-GCE

firewalld-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP7-SAP-EC2

firewalld-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP7-SAP-GCE

firewalld-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP7-SAP-GCE-3P

firewalld-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP7-SAP-Hardened-Azure

firewalld-1.3.4-150600.13.6.1

firewalld-lang-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP7-SAP-Hardened-BYOS-Azure

firewalld-1.3.4-150600.13.6.1

firewalld-lang-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP7-SAP-Hardened-BYOS-EC2

firewalld-1.3.4-150600.13.6.1

firewalld-lang-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP7-SAP-Hardened-BYOS-GCE

firewalld-1.3.4-150600.13.6.1

firewalld-lang-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP7-SAP-Hardened-GCE

firewalld-1.3.4-150600.13.6.1

firewalld-lang-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP7-SAPCAL-Azure

firewalld-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP7-SAPCAL-EC2

firewalld-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP7-SAPCAL-GCE

firewalld-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

SUSE Linux Enterprise Module for Basesystem 15 SP7

firewalld-1.3.4-150600.13.6.1

firewalld-bash-completion-1.3.4-150600.13.6.1

firewalld-lang-1.3.4-150600.13.6.1

firewalld-zsh-completion-1.3.4-150600.13.6.1

python3-firewall-1.3.4-150600.13.6.1

SUSE Linux Enterprise Module for Desktop Applications 15 SP7

firewall-applet-1.3.4-150600.13.6.1

firewall-config-1.3.4-150600.13.6.1

SUSE Linux Enterprise Module for Development Tools 15 SP7

firewall-macros-1.3.4-150600.13.6.1

SUSE Linux Enterprise Module for Python 3 15 SP7

python311-firewall-1.3.4-150600.13.6.1

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20262745-1/
Link for SUSE-SU-2026:2745-1
https://lists.suse.com/pipermail/sle-security-updates/2026-July/027268.html
E-Mail link for SUSE-SU-2026:2745-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1260903
SUSE Bug 1260903
https://www.suse.com/security/cve/CVE-2026-4948/
SUSE CVE CVE-2026-4948 page

Описание

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.

Затронутые продукты

Container suse/manager/5.0/x86_64/server:latest:firewalld-1.3.4-150600.13.6.1

Container suse/manager/5.0/x86_64/server:latest:python3-firewall-1.3.4-150600.13.6.1

Image SLES15-SP6-Hardened-BYOS-Azure:firewalld-1.3.4-150600.13.6.1

Image SLES15-SP6-Hardened-BYOS-Azure:firewalld-lang-1.3.4-150600.13.6.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-4948.html
CVE-2026-4948
https://bugzilla.suse.com/1260903
SUSE Bug 1260903

SUSE-SU-2026:2745-1

Описание

Список пакетов

Container suse/manager/5.0/x86_64/server:latest

Image SLES15-SP6-Hardened-BYOS

Image SLES15-SP6-Hardened-BYOS-Azure

Image SLES15-SP6-Hardened-BYOS-EC2

Image SLES15-SP6-Hardened-BYOS-GCE

Image SLES15-SP6-SAP

Image SLES15-SP6-SAP-Azure

Image SLES15-SP6-SAP-Azure-3P

Image SLES15-SP6-SAP-BYOS

Image SLES15-SP6-SAP-BYOS-Azure

Image SLES15-SP6-SAP-BYOS-EC2

Image SLES15-SP6-SAP-BYOS-GCE

Image SLES15-SP6-SAP-EC2

Image SLES15-SP6-SAP-GCE

Image SLES15-SP6-SAP-Hardened

Image SLES15-SP6-SAP-Hardened-Azure

Image SLES15-SP6-SAP-Hardened-BYOS

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

Image SLES15-SP6-SAP-Hardened-EC2

Image SLES15-SP6-SAP-Hardened-GCE

Image SLES15-SP6-SAPCAL

Image SLES15-SP6-SAPCAL-Azure

Image SLES15-SP6-SAPCAL-EC2

Image SLES15-SP6-SAPCAL-GCE

Image SLES15-SP7-Hardened-BYOS-Azure

Image SLES15-SP7-Hardened-BYOS-EC2

Image SLES15-SP7-Hardened-BYOS-GCE

Image SLES15-SP7-SAP-Azure

Image SLES15-SP7-SAP-Azure-3P

Image SLES15-SP7-SAP-BYOS-Azure

Image SLES15-SP7-SAP-BYOS-EC2

Image SLES15-SP7-SAP-BYOS-GCE

Image SLES15-SP7-SAP-EC2

Image SLES15-SP7-SAP-GCE

Image SLES15-SP7-SAP-GCE-3P

Image SLES15-SP7-SAP-Hardened-Azure

Image SLES15-SP7-SAP-Hardened-BYOS-Azure

Image SLES15-SP7-SAP-Hardened-BYOS-EC2

Image SLES15-SP7-SAP-Hardened-BYOS-GCE

Image SLES15-SP7-SAP-Hardened-GCE

Image SLES15-SP7-SAPCAL-Azure

Image SLES15-SP7-SAPCAL-EC2

Image SLES15-SP7-SAPCAL-GCE

SUSE Linux Enterprise Module for Basesystem 15 SP7

SUSE Linux Enterprise Module for Desktop Applications 15 SP7

SUSE Linux Enterprise Module for Development Tools 15 SP7

SUSE Linux Enterprise Module for Python 3 15 SP7

Ссылки

Уязвимость: CVE-2026-4948

Описание

Затронутые продукты

Ссылки