Red Hat Security Advisory

RHSA-2025:1802

tuned security update

Released 2025-02-25 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.9.2) tuned-gtk-2.20.0-3.el9_2, tuned-profiles-atomic-2.20.0-3.el9_2, tuned-profiles-mssql-2.20.0-3.el9_2 +4
Red Hat Enterprise Linux BaseOS EUS (v.9.2) tuned-2.20.0-3.el9_2, tuned-profiles-cpu-partitioning-2.20.0-3.el9_2
Red Hat Enterprise Linux Real Time EUS (v.9.2) tuned-profiles-realtime-2.20.0-3.el9_2
Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2) tuned-profiles-nfv-2.20.0-3.el9_2, tuned-profiles-nfv-guest-2.20.0-3.el9_2, tuned-profiles-nfv-host-2.20.0-3.el9_2 +1
Red Hat Enterprise Linux for SAP EUS (v.9.2) tuned-profiles-sap-2.20.0-3.el9_2
Red Hat Enterprise Linux for SAP HANA EUS (v.9.2) tuned-profiles-sap-hana-2.20.0-3.el9_2

TI-2024-35009 CVE-2024-52337 · GHSA-8c3c-gvf8-p7v2

LOW 25

A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.003 Published 2024-11-26 Partial fix · 2.24.1, 2.11.0-5.el7fdp.2 +10 CWE-20