Red Hat Security Advisory

RHSA-2024:10381

tuned security update

Released 2024-11-26 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7 ELS) tuned-2.11.0-13.el7_9, tuned-profiles-cpu-partitioning-2.11.0-13.el7_9, tuned-utils-2.11.0-13.el7_9
Red Hat Enterprise Linux Server Optional (v. 7 ELS) tuned-gtk-2.11.0-13.el7_9, tuned-profiles-atomic-2.11.0-13.el7_9, tuned-profiles-compat-2.11.0-13.el7_9 +3
Red Hat Enterprise Linux Server for SAP ELS (v. 7) tuned-profiles-sap-2.11.0-13.el7_9
Red Hat Enterprise Linux Server for SAPHANA ELS (v. 7) tuned-profiles-sap-hana-2.11.0-13.el7_9
Red Hat Enterprise Linux for Real Time (v. 7 ELS) tuned-profiles-realtime-2.11.0-13.el7_9

TI-2024-35009 CVE-2024-52337 · GHSA-8c3c-gvf8-p7v2

LOW 25

A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.003 Published 2024-11-26 Partial fix · 2.24.1, 2.11.0-5.el7fdp.2 +10 CWE-20