{"id":"ALSA-2026:67585","summary":"Moderate: firewalld security update","details":"firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface.  \n\nSecurity Fix(es):  \n\n  * firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis-authorization (CVE-2026-4948)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","modified":"2026-09-16T13:45:03.292980917Z","published":"2026-09-15T00:00:00Z","related":["CVE-2026-4948"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:67585"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-4948"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2452086"},{"type":"ADVISORY","url":"https://errata.almalinux.org/9/ALSA-2026-67585.html"}],"affected":[{"package":{"name":"firewall-applet","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/firewall-applet"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.4-20.el9_8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:67585.json"}},{"package":{"name":"firewall-config","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/firewall-config"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.4-20.el9_8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:67585.json"}},{"package":{"name":"firewalld","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/firewalld"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.4-20.el9_8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:67585.json"}},{"package":{"name":"firewalld-filesystem","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/firewalld-filesystem"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.4-20.el9_8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:67585.json"}},{"package":{"name":"python3-firewall","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/python3-firewall"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.4-20.el9_8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:67585.json"}}],"schema_version":"1.9.0"}