firehol

FireHOL http://firehol.org/ FireHOL, an iptables stateful packet filtering firewall for humans! FireQOS, a TC based bandwidth shaper for humans! Git These instructions are for people who are working with the git repository. There are more general instructions starting with Upgrade Notes. Cloning...

knocker

Knocker 是一款自托管服务，为您的 Homelab 提供基于 HTTP 的“敲门”单包授权 SPA 网关，支持 Web、CLI + GNOME 以及 Android 客户端。 它可以用作反向代理（如 Caddy）的身份验证，甚至可以在防火墙层面使用 FirewallD 集成。它允许您将服务完全私有化，仅在需要时向授权的 IP 地址开放。 这非常适合 Homelab 环境，您希望在不建立持久 VPN 连接的情况下将服务暴露到互联网，同时最大限度地减少对外攻击面。 功能特性 API 密钥认证 ：使用多个可配置的 API 密钥保护您的敲门端点。 可配置 TTL ：每个 API...

fwknop

fwknop - Single Packet Authorization Introduction fwknop implements an authorization scheme known as Single Packet Authorization SPA for strong service concealment. SPA requires only a single packet which is encrypted, non-replayable, and authenticated via an HMAC in order to communicate desired...

pared

Pared Pared 是一个用 Crystal 编写的轻量级、安全的控制平面和实时管理 Web 仪表盘，专为 Linux 主机安全而设计。它为 firewalld DBus/CLI 接口和 NetworkManager 连接提供集中管理，具备双向 TLS（mTLS）、PAM/SSSD 认证，以及通过 WebSocket 实现的实时 systemd 日志流式传输。 主要特性 集中式身份与 mTLS 认证 ：PAM 回退、SSSD DBus 组授权，以及客户端证书 mTLS。 防火墙与网络管理 ：动态区域变更、富规则，以及针对物理、Bond、Bridge 和 WireGuard...

AlmaLinux 9.2 [TuxCare] Security Update: firewall-applet / firewall-config / firewalld / etc (ALMALINUX9.2:CLSA-2026:1778887961)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778887961 advisory. - A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus Desktop Bus...

Rocky Linux 10.2 [CIQ] Security Update: firewall-applet / firewall-config / firewalld / etc (crlba-2026_28238)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlba-202628238 advisory. firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface. Bug Fixes and Enhancements: firewalld: package...

Rocky Linux 9 [CIQ] Security Update: firewall-applet / firewall-config / firewalld / etc (crlsa-2026_67585)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202667585 advisory. firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis- authorization CVE-2026-4948 Tenable has extracted the preceding...

firewalld security update

An update is available for firewalld. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list firewalld is a firewall service daemon that provides a dynamic customizable...

RLSA-2026:67585 Moderate: firewalld security update

firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface. Security Fixes: firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis-authorization CVE-2026-4948 For more details about the security issues,...

MiracleLinux 9 : firewalld-1.3.4-20.el9_8 (AXSA:2026-1864:05)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1864:05 advisory. firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis- authorization CVE-2026-4948 Tenable has extracted the...

RockyLinux 9 : firewalld (RLSA-2026:67585)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:67585 advisory. firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis- authorization CVE-2026-4948 Tenable has extracted the preceding...

firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis-authorization

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus Desktop Bus setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication,...

Moderate: Red Hat Security Advisory: firewalld security update

An update for firewalld is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

RHEL 10 : firewalld (RHSA-2026:67843)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:67843 advisory. firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface. Security Fixes: firewalld: firewalld:...

firewalld security update

1.3.4-20.0.1 - Red Hat Satellite and Red Hat high availaibility reference found in cockpit UI Orabug: 30257573 - discard empty RH-Satellite-6.xml Orabug: 30328734 - Remove capsule file as well, since it references removed config Orabug: 33513329 1.3.4-20 - fixpolicy: use PKACTIONCONFIG for...

AlmaLinux 9 : firewalld (ALSA-2026:67585)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:67585 advisory. firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis- authorization CVE-2026-4948 Tenable has extracted the preceding...

Oracle Linux 9 : firewalld (ELSA-2026-67585)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-67585 advisory. 1.3.4-20.0.1 - Red Hat Satellite and Red Hat high availaibility reference found in cockpit UI Orabug: 30257573 - discard empty RH-Satellite-6.xml Orabug:...

Moderate: Red Hat Security Advisory: firewalld security update

An update for firewalld is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis-authorization

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus Desktop Bus setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication,...

ALSA-2026:67585 Moderate: firewalld security update

firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface. Security Fixes: firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis-authorization CVE-2026-4948 For more details about the security issues,...