Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2026:21032-1

Опубликовано: 22 июн. 2026
Источник: suse-cvrf

Описание

Security update for firewalld

This update for firewalld fixes the following issue

  • CVE-2026-4948: local unprivileged users can modify firewall state due to D-Bus setter mis-authorizations (bsc#1260903).

Список пакетов

openSUSE Leap 16.0
firewall-applet-2.1.2-160000.3.1
firewall-config-2.1.2-160000.3.1
firewall-macros-2.1.2-160000.3.1
firewalld-2.1.2-160000.3.1
firewalld-bash-completion-2.1.2-160000.3.1
firewalld-lang-2.1.2-160000.3.1
firewalld-test-2.1.2-160000.3.1
firewalld-zsh-completion-2.1.2-160000.3.1
python3-firewall-2.1.2-160000.3.1

Ссылки

Описание

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.

Затронутые продукты
openSUSE Leap 16.0:firewall-applet-2.1.2-160000.3.1
openSUSE Leap 16.0:firewall-config-2.1.2-160000.3.1
openSUSE Leap 16.0:firewall-macros-2.1.2-160000.3.1
openSUSE Leap 16.0:firewalld-2.1.2-160000.3.1
Ссылки