Red Hat Security AdvisoryRHSA-2025:0327
tuned security update
Released 2025-01-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.4) tuned-gtk-2.20.0-1.el8_4.2, tuned-utils-2.20.0-1.el8_4.2, tuned-utils-systemtap-2.20.0-1.el8_4.2
- Red Hat Enterprise Linux AppStream E4S (v.8.4) tuned-gtk-2.20.0-1.el8_4.2, tuned-utils-2.20.0-1.el8_4.2, tuned-utils-systemtap-2.20.0-1.el8_4.2
- Red Hat Enterprise Linux AppStream TUS (v.8.4) tuned-gtk-2.20.0-1.el8_4.2, tuned-utils-2.20.0-1.el8_4.2, tuned-utils-systemtap-2.20.0-1.el8_4.2
- Red Hat Enterprise Linux BaseOS AUS (v.8.4) tuned-2.20.0-1.el8_4.2, tuned-profiles-atomic-2.20.0-1.el8_4.2, tuned-profiles-compat-2.20.0-1.el8_4.2 +3
- Red Hat Enterprise Linux BaseOS E4S (v.8.4) tuned-2.20.0-1.el8_4.2, tuned-profiles-atomic-2.20.0-1.el8_4.2, tuned-profiles-compat-2.20.0-1.el8_4.2 +3
- Red Hat Enterprise Linux BaseOS TUS (v.8.4) tuned-2.20.0-1.el8_4.2, tuned-profiles-atomic-2.20.0-1.el8_4.2, tuned-profiles-compat-2.20.0-1.el8_4.2 +3
- Red Hat Enterprise Linux NFV TUS (v.8.4) tuned-profiles-nfv-2.20.0-1.el8_4.2, tuned-profiles-nfv-guest-2.20.0-1.el8_4.2, tuned-profiles-nfv-host-2.20.0-1.el8_4.2 +1
- Red Hat Enterprise Linux RT TUS (v.8.4) tuned-profiles-realtime-2.20.0-1.el8_4.2
- Red Hat Enterprise Linux SAP E4S (v.8.4) tuned-profiles-sap-2.20.0-1.el8_4.2
- Red Hat Enterprise Linux SAPHANA E4S (v.8.4) tuned-profiles-sap-hana-2.20.0-1.el8_4.2
Fixes 1 record
Priority LOW 25
A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.003 · Published 2024-11-26 · Partial fix · 2.24.1, 2.11.0-5.el7fdp.2 +10 CWE-20
