Red Hat Product Errata RHSA-2026:67585 - Security Advisory Issued: 2026-09-15 Updated: 2026-09-15 RHSA-2026:67585 - Security Advisory Overview Updated Packages Synopsis Moderate: firewalld security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for firewalld is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface. Security Fix(es): firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis-authorization (CVE-2026-4948) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2452086 - CVE-2026-4948 firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis-authorization CVEs CVE-2026-4948 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM firewalld-1.3.4-20.el9_8.src.rpm SHA-256: ceed6e511bd95b3ec2f0d1dd9e7e3738c19561b24e7aa6a98acc7a05c9c12e8a x86_64 firewall-applet-1.3.4-20.el9_8.noarch.rpm SHA-256: a3bad95b8dcacf9805e96436290bb463fc26ea1f16a0e1c206ebbc9a41b1fe8c firewall-config-1.3.4-20.el9_8.noarch.rpm SHA-256: 7bb0e1a17fb2d5e901d9a69f891116cc752c0593975eb3f4903b0009d7f1ab83 firewalld-1.3.4-20.el9_8.noarch.rpm SHA-256: 67723d5ae293c1855a37bace83b14e03ec86a91e7523b2b270ff019384a4f145 firewalld-filesystem-1.3.4-20.el9_8.noarch.rpm SHA-256: 35cdc0bac0ed023a0722647140b0df5d9fc90c1594f5f8c1acf6f0df860f3954 python3-firewall-1.3.4-20.el9_8.noarch.rpm SHA-256: a8c2bb370a0e29fc262f1ddac33831280b59e5da47020769d653cd50247e948b Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM firewalld-1.3.4-20.el9_8.src.rpm SHA-256: ceed6e511bd95b3ec2f0d1dd9e7e3738c19561b24e7aa6a98acc7a05c9c12e8a x86_64 firewall-applet-1.3.4-20.el9_8.noarch.rpm SHA-256: a3bad95b8dcacf9805e96436290bb463fc26ea1f16a0e1c206ebbc9a41b1fe8c firewall-config-1.3.4-20.el9_8.noarch.rpm SHA-256: 7bb0e1a17fb2d5e901d9a69f891116cc752c0593975eb3f4903b0009d7f1ab83 firewalld-1.3.4-20.el9_8.noarch.rpm SHA-256: 67723d5ae293c1855a37bace83b14e03ec86a91e7523b2b270ff019384a4f145 firewalld-filesystem-1.3.4-20.el9_8.noarch.rpm SHA-256: 35cdc0bac0ed023a0722647140b0df5d9fc90c1594f5f8c1acf6f0df860f3954 python3-firewall-1.3.4-20.el9_8.noarch.rpm SHA-256: a8c2bb370a0e29fc262f1ddac33831280b59e5da47020769d653cd50247e948b Red Hat Enterprise Linux for IBM z Systems 9 SRPM firewalld-1.3.4-20.el9_8.src.rpm SHA-256: ceed6e511bd95b3ec2f0d1dd9e7e3738c19561b24e7aa6a98acc7a05c9c12e8a s390x firewall-applet-1.3.4-20.el9_8.noarch.rpm SHA-256: a3bad95b8dcacf9805e96436290bb463fc26ea1f16a0e1c206ebbc9a41b1fe8c firewall-config-1.3.4-20.el9_8.noarch.rpm SHA-256: 7bb0e1a17fb2d5e901d9a69f891116cc752c0593975eb3f4903b0009d7f1ab83 firewalld-1.3.4-20.el9_8.noarch.rpm SHA-256: 67723d5ae293c1855a37bace83b14e03ec86a91e7523b2b270ff019384a4f145 firewalld-filesystem-1.3.4-20.el9_8.noarch.rpm SHA-256: 35cdc0bac0ed023a0722647140b0df5d9fc90c1594f5f8c1acf6f0df860f3954 python3-firewall-1.3.4-20.el9_8.noarch.rpm SHA-256: a8c2bb370a0e29fc262f1ddac33831280b59e5da47020769d653cd50247e948b Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 SRPM firewalld-1.3.4-20.el9_8.src.rpm SHA-256: ceed6e511bd95b3ec2f0d1dd9e7e3738c19561b24e7aa6a98acc7a05c9c12e8a s390x firewall-applet-1.3.4-20.el9_8.noarch.rpm SHA-256: a3bad95b8dcacf9805e96436290bb463fc26ea1f16a0e1c206ebbc9a41b1fe8c firewall-config-1.3.4-20.el9_8.noarch.rpm SHA-256: 7bb0e1a17fb2d5e901d9a69f891116cc752c0593975eb3f4903b0009d7f1ab83 firewalld-1.3.4-20.el9_8.noarch.rpm SHA-256: 67723d5ae293c1855a37bace83b14e03ec86a91e7523b2b270ff019384a4f145 firewalld-filesystem-1.3.4-20.el9_8.noarch.rpm SHA-256: 35cdc0bac0ed023a0722647140b0df5d9fc90c1594f5f8c1acf6f0df860f3954 python3-firewall-1.3.4-20.el9_8.noarch.rpm SHA-256: a8c2bb370a0e29fc262f1ddac33831280b59e5da47020769d653cd50247e948b Red Hat Enterprise Linux for Power, little endian 9 SRPM firewalld-1.3.4-20.el9_8.src.rpm SHA-256: ceed6e511bd95b3ec2f0d1dd9e7e3738c19561b24e7aa6a98acc7a05c9c12e8a ppc64le firewall-applet-1.3.4-20.el9_8.noarch.rpm SHA-256: a3bad95b8dcacf9805e96436290bb463fc26ea1f16a0e1c206ebbc9a41b1fe8c firewall-config-1.3.4-20.el9_8.noarch.rpm SHA-256: 7bb0e1a17fb2d5e901d9a69f891116cc752c0593975eb3f4903b0009d7f1ab83 firewalld-1.3.4-20.el9_8.noarch.rpm SHA-256: 67723d5ae293c1855a37bace83b14e03ec86a91e7523b2b270ff019384a4f145 firewalld-filesystem-1.3.4-20.el9_8.noarch.rpm SHA-256: 35cdc0bac0ed023a0722647140b0df5d9fc90c1594f5f8c1acf6f0df860f3954 python3-firewall-1.3.4-20.el9_8.noarch.rpm SHA-256: a8c2bb370a0e29fc262f1ddac33831280b59e5da47020769d653cd50247e948b Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 SRPM firewalld-1.3.4-20.el9_8.src.rpm SHA-256: ceed6e511bd95b3ec2f0d1dd9e7e3738c19561b24e7aa6a98acc7a05c9c12e8a ppc64le firewall-applet-1.3.4-20.el9_8.noarch.rpm SHA-256: a3bad95b8dcacf9805e96436290bb463fc26ea1f16a0e1c206ebbc9a41b1fe8c firewall-config-1.3.4-20.el9_8.noarch.rpm SHA-256: 7bb0e1a17fb2d5e901d9a69f891116cc752c0593975eb3f4903b0009d7f1ab83 firewalld-1.3.4-20.el9_8.noarch.rpm SHA-256: 67723d5ae293c1855a37bace83b14e03ec86a91e7523b2b270ff019384a4f145 firewalld-filesystem-1.3.4-20.el9_8.noarch.rpm SHA-256: 35cdc0bac0ed023a0722647140b0df5d9fc90c1594f5f8c1acf6f0df860f3954 python3-firewall-1.3.4-20.el9_8.noarch.rpm SHA-256: a8c2bb370a0e29fc262f1ddac33831280b59e5da47020769d653cd50247e948b Red Hat Enterprise Linux for ARM 64 9 SRPM firewalld-1.3.4-20.el9_8.src.rpm SHA-256: ceed6e511bd95b3ec2f0d1dd9e7e3738c19561b24e7aa6a98acc7a05c9c12e8a aarch64 firewall-applet-1.3.4-20.el9_8.noarch.rpm SHA-256: a3bad95b8dcacf9805e96436290bb463fc26ea1f16a0e1c206ebbc9a41b1fe8c firewall-config-1.3.4-20.el9_8.noarch.rpm SHA-256: 7bb0e1a17fb2d5e901d9a69f891116cc752c0593975eb3f4903b0009d7f1ab83 firewalld-1.3.4-20.el9_8.noarch.rpm SHA-256: 67723d5ae293c1855a37bace83b14e03ec86a91e7523b2b270ff019384a4f145 firewalld-filesystem-1.3.4-20.el9_8.noarch.rpm SHA-256: 35cdc0bac0ed023a0722647140b0df5d9fc90c1594f5f8c1acf6f0df860f3954 python3-firewall-1.3.4-20.el9_8.noarch.rpm SHA-256: a8c2bb370a0e29fc262f1ddac33831280b59e5da47020769d653cd50247e948b Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 SRPM firewalld-1.3.4-20.el9_8.src.rpm SHA-256: ceed6e511bd95b3ec2f0d1dd9e7e3738c19561b24e7aa6a98acc7a05c9c12e8a aarch64 firewall-applet-1.3.4-20.el9_8.noarch.rpm SHA-256: a3bad95b8dcacf9805e96436290bb463fc26ea1f16a0e1c206ebbc9a41b1fe8c firewall-config-1.3.4-20.el9_8.noarch.rpm SHA-256: 7bb0e1a17fb2d5e901d9a69f891116cc752c0593975eb3f4903b0009d7f1ab83 firewalld-1.3.4-20.el9_8.noarch.rpm SHA-256: 67723d5ae293c1855a37bace83b14e03ec86a91e7523b2b270ff019384a4f145 firewalld-filesystem-1.3.4-20.el9_8.noarch.rpm SHA-256: 35cdc0bac0ed023a0722647140b0df5d9fc90c1594f5f8c1acf6f0df860f3954 python3-firewall-1.3.4-20.el9_8.noarch.rpm SHA-256: a8c2bb370a0e29fc262f1ddac33831280b59e5da47020769d653cd50247e948b Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 SRPM firewalld-1.3.4-20.el9_8.src.rpm SHA-256: ceed6e511bd95b3ec2f0d1dd9e7e3738c19561b24e7aa6a98acc7a05c9c12e8a ppc64le firewall-applet-1.3.4-20.el9_8.noarch.rpm SHA-256: a3bad95b8dcacf9805e96436290bb463fc26ea1f16a0e1c206ebbc9a41b1fe8c firewall-config-1.3.4-20.el9_8.noarch.rpm SHA-256: 7bb0e1a17fb2d5e901d9a69f891116cc752c0593975eb3f4903b0009d7f1ab83 firewalld-1.3.4-20.el9_8.noarch.rpm SHA-256: 67723d5ae293c1855a37bace83b14e03ec86a91e7523b2b270ff019384a4f145 firewalld-filesystem-1.3.4-20.el9_8.noarch.rpm SHA-256: 35cdc0bac0ed023a0722647140b0df5d9fc90c1594f5f8c1acf6f0df860f3954 python3-firewall-1.3.4-20.el9_8.noarch.rpm SHA-256: a8c2bb370a0e29fc262f1ddac33831280b59e5da47020769d653cd50247e948b Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 SRPM firewalld-1.3.4-20.el9_8.src.rpm SHA-256: ceed6e511bd95b3ec2f0d1dd9e7e3738c19561b24e7aa6a98acc7a05c9c12e8a x86_64 firewall-applet-1.3.4-20.el9_8.noarch.rpm SHA-256: a3bad95b8dcacf9805e96436290bb463fc26ea1f16a0e1c206ebbc9a41b1fe8c firewall-config-1.3.4-20.el9_8.noarch