Red Hat Product Errata RHSA-2024:10384 - Security Advisory
Issued:
2024-11-26
Updated:
2024-11-26

RHSA-2024:10384 - Security Advisory

Synopsis

Important: tuned security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for tuned is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The tuned packages provide a service that tunes system settings according to a selected profile.

Security Fix(es):

  • tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root (CVE-2024-52336)
  • tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method (CVE-2024-52337)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for SAP Applications for x86_64 9 x86_64
  • Red Hat Enterprise Linux for SAP Solutions for x86_64 9 x86_64
  • Red Hat Enterprise Linux for SAP Applications for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for SAP Applications for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat Enterprise Linux for SAP Solutions for Power, little endian 9 ppc64le

Fixes

  • BZ - 2324540 - CVE-2024-52336 tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root
  • BZ - 2324541 - CVE-2024-52337 tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method

Red Hat Enterprise Linux for x86_64 9

SRPM
tuned-2.24.0-2.el9_5.src.rpm SHA-256: b7953fc14c4dba5fb395ed316586d2366ab7f3dbc127ac92c98186ed82759961
x86_64
tuned-2.24.0-2.el9_5.noarch.rpm SHA-256: f0ae3c6ee11d66edcb73c80c9df6d5234c59b59faedf9b081e7d22c4ccfcd1a6
tuned-gtk-2.24.0-2.el9_5.noarch.rpm SHA-256: a12675cdf4aaff2e6ce721207905ebb9d50d2ba8faeefd297bbae95187c5b79d
tuned-ppd-2.24.0-2.el9_5.noarch.rpm SHA-256: f173db5e32db9d47eeef4ec7abbbc343c60d13f3f65e35cfd36a32631b2931bb
tuned-profiles-atomic-2.24.0-2.el9_5.noarch.rpm SHA-256: 63d7bf085dd04524e3403494253a64ff1b1c6002c8f31ba8c6e54ac685596dee
tuned-profiles-cpu-partitioning-2.24.0-2.el9_5.noarch.rpm SHA-256: e3f7718b971363c7fdbba496de8f4a2d8089c9ae20080fb3a1698f84c9914c9b
tuned-profiles-mssql-2.24.0-2.el9_5.noarch.rpm SHA-256: 7255381020a4ada12e4a3742174537b23e3c040ff822cb46c6f31e4786523d6c
tuned-profiles-nfv-2.24.0-2.el9_5.noarch.rpm SHA-256: e8f24b3c0bd3f0fdd3349fff11022e17d268ad03b6e35f569c72dab8ef6ee997
tuned-profiles-nfv-guest-2.24.0-2.el9_5.noarch.rpm SHA-256: 1e8ebf13d8e3043f425c1c3c9f6082d0249acb07f740e9c2eb51416c7a347bfc
tuned-profiles-nfv-host-2.24.0-2.el9_5.noarch.rpm SHA-256: 8310b80d413cce34af3e0f8123f7342472adb3bcfd9c749162ebd8e7fc67a19c
tuned-profiles-oracle-2.24.0-2.el9_5.noarch.rpm SHA-256: c714a1e2d0e1586998ac5be36d1df05b4884effc42f917f49b9e089daa4f310b
tuned-profiles-postgresql-2.24.0-2.el9_5.noarch.rpm SHA-256: b63252081f9d29377c87fb9c87e9a05b6838efd8aabcab4c0ba36aed0cf90bce
tuned-profiles-realtime-2.24.0-2.el9_5.noarch.rpm SHA-256: 7e196069986346529e946d7a47c10b53f915f7475fe2e78e6c14f9468fc9524d
tuned-profiles-realtime-2.24.0-2.el9_5.noarch.rpm SHA-256: 7e196069986346529e946d7a47c10b53f915f7475fe2e78e6c14f9468fc9524d
tuned-profiles-spectrumscale-2.24.0-2.el9_5.noarch.rpm SHA-256: d513b099921d83c9278906718f7a0ab5e7aaddcc0f9c0797c5e122a15ee535fb
tuned-utils-2.24.0-2.el9_5.noarch.rpm SHA-256: 1aebecc7fe001658996abee7709fdfc97e91474abe0ac317b1e58e91055db0a5

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
tuned-2.24.0-2.el9_5.src.rpm SHA-256: b7953fc14c4dba5fb395ed316586d2366ab7f3dbc127ac92c98186ed82759961
s390x
tuned-2.24.0-2.el9_5.noarch.rpm SHA-256: f0ae3c6ee11d66edcb73c80c9df6d5234c59b59faedf9b081e7d22c4ccfcd1a6
tuned-gtk-2.24.0-2.el9_5.noarch.rpm SHA-256: a12675cdf4aaff2e6ce721207905ebb9d50d2ba8faeefd297bbae95187c5b79d
tuned-ppd-2.24.0-2.el9_5.noarch.rpm SHA-256: f173db5e32db9d47eeef4ec7abbbc343c60d13f3f65e35cfd36a32631b2931bb
tuned-profiles-atomic-2.24.0-2.el9_5.noarch.rpm SHA-256: 63d7bf085dd04524e3403494253a64ff1b1c6002c8f31ba8c6e54ac685596dee
tuned-profiles-cpu-partitioning-2.24.0-2.el9_5.noarch.rpm SHA-256: e3f7718b971363c7fdbba496de8f4a2d8089c9ae20080fb3a1698f84c9914c9b
tuned-profiles-mssql-2.24.0-2.el9_5.noarch.rpm SHA-256: 7255381020a4ada12e4a3742174537b23e3c040ff822cb46c6f31e4786523d6c
tuned-profiles-oracle-2.24.0-2.el9_5.noarch.rpm SHA-256: c714a1e2d0e1586998ac5be36d1df05b4884effc42f917f49b9e089daa4f310b
tuned-profiles-postgresql-2.24.0-2.el9_5.noarch.rpm SHA-256: b63252081f9d29377c87fb9c87e9a05b6838efd8aabcab4c0ba36aed0cf90bce
tuned-profiles-spectrumscale-2.24.0-2.el9_5.noarch.rpm SHA-256: d513b099921d83c9278906718f7a0ab5e7aaddcc0f9c0797c5e122a15ee535fb
tuned-utils-2.24.0-2.el9_5.noarch.rpm SHA-256: 1aebecc7fe001658996abee7709fdfc97e91474abe0ac317b1e58e91055db0a5

Red Hat Enterprise Linux for Power, little endian 9

SRPM
tuned-2.24.0-2.el9_5.src.rpm SHA-256: b7953fc14c4dba5fb395ed316586d2366ab7f3dbc127ac92c98186ed82759961
ppc64le
tuned-2.24.0-2.el9_5.noarch.rpm SHA-256: f0ae3c6ee11d66edcb73c80c9df6d5234c59b59faedf9b081e7d22c4ccfcd1a6
tuned-gtk-2.24.0-2.el9_5.noarch.rpm SHA-256: a12675cdf4aaff2e6ce721207905ebb9d50d2ba8faeefd297bbae95187c5b79d
tuned-ppd-2.24.0-2.el9_5.noarch.rpm SHA-256: f173db5e32db9d47eeef4ec7abbbc343c60d13f3f65e35cfd36a32631b2931bb
tuned-profiles-atomic-2.24.0-2.el9_5.noarch.rpm SHA-256: 63d7bf085dd04524e3403494253a64ff1b1c6002c8f31ba8c6e54ac685596dee
tuned-profiles-cpu-partitioning-2.24.0-2.el9_5.noarch.rpm SHA-256: e3f7718b971363c7fdbba496de8f4a2d8089c9ae20080fb3a1698f84c9914c9b
tuned-profiles-mssql-2.24.0-2.el9_5.noarch.rpm SHA-256: 7255381020a4ada12e4a3742174537b23e3c040ff822cb46c6f31e4786523d6c
tuned-profiles-oracle-2.24.0-2.el9_5.noarch.rpm SHA-256: c714a1e2d0e1586998ac5be36d1df05b4884effc42f917f49b9e089daa4f310b
tuned-profiles-postgresql-2.24.0-2.el9_5.noarch.rpm SHA-256: b63252081f9d29377c87fb9c87e9a05b6838efd8aabcab4c0ba36aed0cf90bce
tuned-profiles-spectrumscale-2.24.0-2.el9_5.noarch.rpm SHA-256: d513b099921d83c9278906718f7a0ab5e7aaddcc0f9c0797c5e122a15ee535fb
tuned-utils-2.24.0-2.el9_5.noarch.rpm SHA-256: 1aebecc7fe001658996abee7709fdfc97e91474abe0ac317b1e58e91055db0a5

Red Hat Enterprise Linux for SAP Applications for x86_64 9

SRPM
x86_64
tuned-profiles-sap-2.24.0-2.el9_5.noarch.rpm SHA-256: 86b41e9d23a3a9f953d68dba962c7980d5279b22597a3b4af69893cdce219e0d

Red Hat Enterprise Linux for SAP Solutions for x86_64 9

SRPM
x86_64
tuned-profiles-sap-hana-2.24.0-2.el9_5.noarch.rpm SHA-256: 79287fd29cb562d6182a4bd5f6223f8816a3a1e20e9b127aa35e5a9725567685

Red Hat Enterprise Linux for SAP Applications for Power, little endian 9

SRPM
ppc64le
tuned-profiles-sap-2.24.0-2.el9_5.noarch.rpm SHA-256: 86b41e9d23a3a9f953d68dba962c7980d5279b22597a3b4af69893cdce219e0d

Red Hat Enterprise Linux for SAP Applications for IBM z Systems 9

SRPM
s390x
tuned-profiles-sap-2.24.0-2.el9_5.noarch.rpm SHA-256: 86b41e9d23a3a9f953d68dba962c7980d5279b22597a3b4af69893cdce219e0d

Red Hat Enterprise Linux for ARM 64 9

SRPM
tuned-2.24.0-2.el9_5.src.rpm SHA-256: b7953fc14c4dba5fb395ed316586d2366ab7f3dbc127ac92c98186ed82759961
aarch64
tuned-2.24.0-2.el9_5.noarch.rpm SHA-256: f0ae3c6ee11d66edcb73c80c9df6d5234c59b59faedf9b081e7d22c4ccfcd1a6
tuned-gtk-2.24.0-2.el9_5.noarch.rpm SHA-256: a12675cdf4aaff2e6ce721207905ebb9d50d2ba8faeefd297bbae95187c5b79d
tuned-ppd-2.24.0-2.el9_5.noarch.rpm SHA-256: f173db5e32db9d47eeef4ec7abbbc343c60d13f3f65e35cfd36a32631b2931bb
tuned-profiles-atomic-2.24.0-2.el9_5.noarch.rpm SHA-256: 63d7bf085dd04524e3403494253a64ff1b1c6002c8f31ba8c6e54ac685596dee
tuned-profiles-cpu-partitioning-2.24.0-2.el9_5.noarch.rpm SHA-256: e3f7718b971363c7fdbba496de8f4a2d8089c9ae20080fb3a1698f84c9914c9b
tuned-profiles-mssql-2.24.0-2.el9_5.noarch.rpm SHA-256: 7255381020a4ada12e4a3742174537b23e3c040ff822cb46c6f31e4786523d6c
tuned-profiles-oracle-2.24.0-2.el9_5.noarch.rpm SHA-256: c714a1e2d0e1586998ac5be36d1df05b4884effc42f917f49b9e089daa4f310b
tuned-profiles-postgresql-2.24.0-2.el9_5.noarch.rpm SHA-256: b63252081f9d29377c87fb9c87e9a05b6838efd8aabcab4c0ba36aed0cf90bce
tuned-profiles-spectrumscale-2.24.0-2.el9_5.noarch.rpm SHA-256: d513b099921d83c9278906718f7a0ab5e7aaddcc0f9c0797c5e122a15ee535fb
tuned-utils-2.24.0-2.el9_5.noarch.rpm SHA-256: 1aebecc7fe001658996abee7709fdfc97e91474abe0ac317b1e58e91055db0a5

Red Hat Enterprise Linux for SAP Solutions for Power, little endian 9

SRPM
ppc64le
tuned-profiles-sap-hana-2.24.0-2.el9_5.noarch.rpm SHA-256: 79287fd29cb562d6182a4bd5f6223f8816a3a1e20e9b127aa35e5a9725567685

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.