firewall, firewalld, python security update

2016-11-25T15:57:23
ID CESA-2016:2597
Type centos
Reporter CentOS Project
Modified 2016-11-25T15:57:23

Description

CentOS Errata and Security Advisory CESA-2016:2597

firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface.

The following packages have been upgraded to a newer upstream version: firewalld (0.4.3.2). (BZ#1302802)

Security Fix(es):

  • A flaw was found in the way firewalld allowed certain firewall configurations to be modified by unauthenticated users. Any locally logged in user could use this flaw to tamper or change firewall settings. (CVE-2016-5410)

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.3 Release Notes linked from the References section.

Merged security bulletin from advisories: http://lists.centos.org/pipermail/centos-cr-announce/2016-November/003591.html

Affected packages: firewall-applet firewall-config firewalld firewalld-filesystem python-firewall

Upstream details at: https://rhn.redhat.com/errata/RHSA-2016-2597.html