> USN-8326-1: Foomuuri vulnerabilities
[DATE: 27/05/2026 17:43]
[LANGUAGE: EN]
Matthias Gerstner discovered that Foomuuri's D-Bus service did not properly
enforce authorization. An unprivileged local attacker could possibly use
this issue to manipulate the firewall configuration, contrary to
expectations. (CVE-2025-67603)
Matthias Gerstner discovered that Foomuuri's D-Bus service did not properly
validate interface names. A local attacker could possibly use this issue to
manipulate the firewall configuration in unintended ways. (CVE-2025-67858)