-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 04 May 2026 01:08:28 +0200
Source: firewalld
Architecture: source
Version: 2.3.1-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org>
Changed-By: Michael Biebl <biebl@debian.org>
Changes:
firewalld (2.3.1-1+deb13u1) trixie; urgency=medium
.
* fix(policy): use PK_ACTION_CONFIG for set{ZoneSettings2,PolicySettings}
This prevents local users from being able to modify runtime firewall state
without prior authentication if the desktop policy is active.
(CVE-2026-4948)
Checksums-Sha1:
eefff2e7653288574f9c57e70a7898c73c1cfd50 2509 firewalld_2.3.1-1+deb13u1.dsc
f2975e612f43e8aafafa6a4a3ffe89eaeac3872a 11780 firewalld_2.3.1-1+deb13u1.debian.tar.xz
38f40b134c19feb793e6d1dd6d2790b2752eb559 6630 firewalld_2.3.1-1+deb13u1_source.buildinfo
Checksums-Sha256:
015e45bf96cb2ed6ddb5f6e22b63d45b419b3f6b2c14e87ff6b890a84bb1e0a4 2509 firewalld_2.3.1-1+deb13u1.dsc
20bfd72087838dbacf5f396b735dd73ed08bd2eaf1ab28776e4cee83bb5758c2 11780 firewalld_2.3.1-1+deb13u1.debian.tar.xz
12eeccffb695a05aeacecf5253a7fc0e405e14a9fbc477521590f10dc9311f53 6630 firewalld_2.3.1-1+deb13u1_source.buildinfo
Files:
2756d8339d3941e191c98a06728c9a4c 2509 net optional firewalld_2.3.1-1+deb13u1.dsc
0c93f2d6717bedc505542ea53cd48dc3 11780 net optional firewalld_2.3.1-1+deb13u1.debian.tar.xz
ee3e2ff0d847150131929eb03d1af402 6630 net optional firewalld_2.3.1-1+deb13u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=fU/n
-----END PGP SIGNATURE-----
