Debian Package Tracker
Register | Log in
Subscribe

firewalld

dynamically managed firewall with support for network zones

Choose email to subscribe with

general
  • source: firewalld (main)
  • version: 2.4.1-2
  • maintainer: Utopia Maintenance Team (archive) (DMD)
  • uploaders: Michael Biebl [DMD]
  • arch: all
  • std-ver: 4.7.4
  • VCS: Git (Browse, QA)
versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]
[pool directory]
  • o-o-stable: 0.9.3-2
  • oldstable: 1.3.3-1~deb12u1
  • stable: 2.3.1-1
  • stable-p-u: 2.3.1-1+deb13u1
  • testing: 2.4.1-1
  • unstable: 2.4.1-2
versioned links
  • 0.9.3-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 1.3.3-1~deb12u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 2.3.1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 2.3.1-1+deb13u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 2.4.1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 2.4.1-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
binaries
  • firewall-applet
  • firewall-config (1 bugs: 0, 0, 1, 0)
  • firewalld (7 bugs: 0, 2, 5, 0)
  • firewalld-tests
  • python3-firewall
action needed
1 security issue in bullseye high

There is 1 open security issue in bullseye.

1 important issue:
  • CVE-2026-4948: A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.
Created: 2026-03-28 Last update: 2026-05-04 09:31
2 bugs tagged patch in the BTS normal
The BTS contains patches fixing 2 bugs, consider including or untagging them.
Created: 2026-04-06 Last update: 2026-05-07 03:31
Depends on packages which need a new maintainer normal
The packages that firewalld depends on which need a new maintainer are:
  • docbook-xml (#802368)
    • Build-Depends: docbook-xml
  • docbook-xsl (#802370)
    • Build-Depends: docbook-xsl
Created: 2023-09-01 Last update: 2026-05-07 02:03
lintian reports 7 warnings normal
Lintian reports 7 warnings about this package. You should make the package lintian clean getting rid of them.
Created: 2026-04-14 Last update: 2026-04-14 21:00
1 low-priority security issue in bookworm low

There is 1 open security issue in bookworm.

1 issue left for the package maintainer to handle:
  • CVE-2026-4948: (needs triaging) A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.

You can find information about how to handle this issue in the security team's documentation.

Created: 2026-03-28 Last update: 2026-05-04 09:31
debian/patches: 2 patches to forward upstream low

Among the 2 debian patches available in version 2.4.1-2 of the package, we noticed the following issues:

  • 2 patches where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.
Created: 2023-02-26 Last update: 2026-05-02 17:30
Issues found with some translations low

Automatic checks made by the Debian l10n team found some issues with the translations contained in this package. You should check the l10n status report for more information.

Issues can be things such as missing translations, problematic translated strings, outdated PO files, unknown languages, etc.

Created: 2026-05-02 Last update: 2026-05-02 11:03
testing migrations
  • excuses:
    • Migration status for firewalld (2.4.1-1 to 2.4.1-2): Will attempt migration (Any information below is purely informational)
    • Additional info (not blocking):
    • ∙ ∙ Piuparts tested OK - https://piuparts.debian.org/sid/source/f/firewalld.html
    • ∙ ∙ Autopkgtest for firewalld/2.4.1-2: amd64: Pass, arm64: No tests, superficial or marked flaky ♻, i386: No tests, superficial or marked flaky ♻ (reference ♻), ppc64el: No tests, superficial or marked flaky ♻, riscv64: No tests, superficial or marked flaky ♻, s390x: No tests, superficial or marked flaky ♻
    • ∙ ∙ Reproduced on amd64
    • ∙ ∙ Reproduced on arm64
    • ∙ ∙ Reproduced on armhf
    • ∙ ∙ Reproduced on i386
    • ∙ ∙ Reproduced on ppc64el
    • ∙ ∙ 5 days old (needed 5 days)
news
[rss feed]
  • [2026-05-07] firewalld 2.4.1-2 MIGRATED to testing (Debian testing watch)
  • [2026-05-05] Accepted firewalld 2.3.1-1+deb13u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Michael Biebl)
  • [2026-05-01] Accepted firewalld 2.4.1-2 (source) into unstable (Michael Biebl)
  • [2026-04-19] firewalld 2.4.1-1 MIGRATED to testing (Debian testing watch)
  • [2026-04-14] Accepted firewalld 2.4.1-1 (source) into unstable (Michael Biebl)
  • [2026-04-14] firewalld 2.4.0-2 MIGRATED to testing (Debian testing watch)
  • [2026-04-07] Accepted firewalld 2.4.0-2 (source) into unstable (Bastian Germann) (signed by: bage@debian.org)
  • [2025-11-13] firewalld 2.4.0-1 MIGRATED to testing (Debian testing watch)
  • [2025-11-07] Accepted firewalld 2.4.0-1 (source) into unstable (Michael Biebl)
  • [2025-10-14] firewalld 2.3.1-3 MIGRATED to testing (Debian testing watch)
  • [2025-10-08] Accepted firewalld 2.3.1-3 (source) into unstable (Michael Biebl)
  • [2025-08-21] firewalld 2.3.1-2 MIGRATED to testing (Debian testing watch)
  • [2025-08-15] Accepted firewalld 2.3.1-2 (source) into unstable (Michael Biebl)
  • [2025-08-01] firewalld 2.3.1-1 MIGRATED to testing (Debian testing watch)
  • [2025-07-26] Accepted firewalld 2.3.1-1 (source) into unstable (Michael Biebl)
  • [2025-06-08] firewalld 2.3.0-4 MIGRATED to testing (Debian testing watch)
  • [2025-05-07] Accepted firewalld 2.3.0-4 (source) into unstable (Michael Biebl)
  • [2025-04-24] firewalld 2.3.0-3 MIGRATED to testing (Debian testing watch)
  • [2025-04-13] Accepted firewalld 2.3.0-3 (source) into unstable (Michael Biebl)
  • [2025-03-23] firewalld 2.3.0-2 MIGRATED to testing (Debian testing watch)
  • [2025-03-18] Accepted firewalld 2.3.0-2 (source) into unstable (Michael Biebl)
  • [2024-11-11] firewalld 2.3.0-1 MIGRATED to testing (Debian testing watch)
  • [2024-11-05] Accepted firewalld 2.3.0-1 (source) into unstable (Michael Biebl)
  • [2024-10-28] firewalld 2.2.3-2 MIGRATED to testing (Debian testing watch)
  • [2024-10-23] firewalld 2.2.3-1 MIGRATED to testing (Debian testing watch)
  • [2024-10-22] Accepted firewalld 2.2.3-2 (source) into unstable (Michael Biebl)
  • [2024-10-17] Accepted firewalld 2.2.3-1 (source) into unstable (Michael Biebl)
  • [2024-08-07] firewalld 2.2.1-1 MIGRATED to testing (Debian testing watch)
  • [2024-08-07] firewalld 2.2.1-1 MIGRATED to testing (Debian testing watch)
  • [2024-08-01] Accepted firewalld 2.2.1-1 (source) into unstable (Michael Biebl)
  • 1
  • 2
bugs [bug history graph]
  • all: 8
  • RC: 0
  • I&N: 2
  • M&W: 6
  • F&P: 0
  • patch: 2
links
  • homepage
  • lintian (0, 7)
  • buildd: logs, reproducibility
  • popcon
  • browse source code
  • other distros
  • security tracker
  • l10n (-, 71)
  • debian patches
  • debci
ubuntu Ubuntu logo [Information about Ubuntu for Debian Developers]
  • version: 2.3.1-3
  • 12 bugs

Debian Package Tracker — Copyright 2013-2025 The Distro Tracker Developers
Report problems to the tracker.debian.org pseudo-package in the Debian BTS.
Documentation — Bugs — Git Repository — Contributing