Red Hat Security Advisory

RHSA-2024:11161

tuned security update

Released 2024-12-17 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) tuned-gtk-2.22.1-5.el8_10, tuned-profiles-postgresql-2.22.1-5.el8_10, tuned-utils-2.22.1-5.el8_10 +1
Red Hat Enterprise Linux BaseOS (v. 8) tuned-2.22.1-5.el8_10, tuned-profiles-atomic-2.22.1-5.el8_10, tuned-profiles-compat-2.22.1-5.el8_10 +3
Red Hat Enterprise Linux NFV (v. 8) tuned-profiles-nfv-2.22.1-5.el8_10, tuned-profiles-nfv-guest-2.22.1-5.el8_10, tuned-profiles-nfv-host-2.22.1-5.el8_10 +1
Red Hat Enterprise Linux RT (v. 8) tuned-profiles-realtime-2.22.1-5.el8_10
Red Hat Enterprise Linux SAP (v. 8) tuned-profiles-sap-2.22.1-5.el8_10
Red Hat Enterprise Linux SAPHANA (v. 8) tuned-profiles-sap-hana-2.22.1-5.el8_10

TI-2024-35009 CVE-2024-52337 · GHSA-8c3c-gvf8-p7v2

LOW 25

A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.003 Published 2024-11-26 Partial fix · 2.24.1, 2.11.0-5.el7fdp.2 +10 CWE-20