Red Hat Product Errata RHSA-2025:0195 - Security Advisory
Issued:
2025-01-09
Updated:
2025-01-09

RHSA-2025:0195 - Security Advisory

Synopsis

Moderate: tuned security update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for tuned is now available for Red Hat Enterprise Linux 8.8 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The tuned packages provide a service that tunes system settings according to a selected profile.

Security Fix(es):

  • tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method (CVE-2024-52337)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.8 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.8 ppc64le
  • Red Hat Enterprise Linux for SAP Solutions for x86_64 - Extended Update Support 8.8 x86_64
  • Red Hat Enterprise Linux Server - TUS 8.8 x86_64
  • Red Hat Enterprise Linux for SAP Applications for x86_64 - Extended Update Support 8.8 x86_64
  • Red Hat Enterprise Linux for SAP Applications for Power, little endian - Extended Update Support 8.8 ppc64le
  • Red Hat Enterprise Linux for SAP Applications for System Z - Extended Update Support 8.8 s390x
  • Red Hat Enterprise Linux for SAP Solutions for Power, little endian - Extended Update Support 8.8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.8 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le
  • Red Hat Enterprise Linux for SAP Applications for Power LE - Update Services for SAP Solutions 8.8 ppc64le
  • Red Hat Enterprise Linux for SAP Solutions for Power LE - Update Services for SAP Solutions 8.8 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64
  • Red Hat Enterprise Linux for SAP Applications for x86_64 - Update Services for SAP Solutions 8.8 x86_64
  • Red Hat Enterprise Linux for SAP Solutions for x86_64 - Update Services for SAP Solutions 8.8 x86_64
  • Red Hat Enterprise Linux for Real Time - Telecommunications Update Service 8.8 x86_64
  • Red Hat Enterprise Linux for Real Time for NFV - Telecommunications Update Service 8.8 x86_64

Fixes

  • BZ - 2324541 - CVE-2024-52337 tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8

SRPM
tuned-2.20.0-2.el8_8.1.src.rpm SHA-256: df160f63bae882cb2edd81cf8ef1c9ea3152dacfcf7a1b510c53b841445906e6
x86_64
tuned-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 56e84e4de3d3184f1e0ce81bbddfa8c3837bd47040676c615bfdbece5a27039e
tuned-gtk-2.20.0-2.el8_8.1.noarch.rpm SHA-256: d35dc443d8684900b83dfba341f1d91430d2f29701ee941702800b470e964881
tuned-profiles-atomic-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 7df59838e51fad912018e7081ef58d5a3ccc1dfc6897044a8c5c48be1334784c
tuned-profiles-compat-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 5f4e0c20fb9fc11a4ce218cf7c3d5e91990b71dd79e97ac3a9c297b467de8969
tuned-profiles-cpu-partitioning-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 1f8b103ec8601a99c8fc0cc51e4c40b04046dedb17f26e9a35b8d61e3c0510ff
tuned-profiles-mssql-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 90f8623049d3e4acb71d756fdcacb71915ffd22995d1d160ec831887218684b4
tuned-profiles-oracle-2.20.0-2.el8_8.1.noarch.rpm SHA-256: ec7f96987d79b8c8a34e683a5a547fde736c04455ebf3797b9c2b06b1fcef312
tuned-profiles-postgresql-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 3f73517d0a1e4b84ccc88f37d724a6e70d69370186aa0caea6372b6c3e0d4ede
tuned-utils-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 42d1de1dfd7b712f46851ce813dc40bb799e38927f5a7206bffa28bdaf145079
tuned-utils-systemtap-2.20.0-2.el8_8.1.noarch.rpm SHA-256: dfb031d1c225f54de127ad457730128f57fe9d8c52224edc6f0139b277b14446

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.8

SRPM
tuned-2.20.0-2.el8_8.1.src.rpm SHA-256: df160f63bae882cb2edd81cf8ef1c9ea3152dacfcf7a1b510c53b841445906e6
s390x
tuned-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 56e84e4de3d3184f1e0ce81bbddfa8c3837bd47040676c615bfdbece5a27039e
tuned-gtk-2.20.0-2.el8_8.1.noarch.rpm SHA-256: d35dc443d8684900b83dfba341f1d91430d2f29701ee941702800b470e964881
tuned-profiles-atomic-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 7df59838e51fad912018e7081ef58d5a3ccc1dfc6897044a8c5c48be1334784c
tuned-profiles-compat-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 5f4e0c20fb9fc11a4ce218cf7c3d5e91990b71dd79e97ac3a9c297b467de8969
tuned-profiles-cpu-partitioning-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 1f8b103ec8601a99c8fc0cc51e4c40b04046dedb17f26e9a35b8d61e3c0510ff
tuned-profiles-mssql-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 90f8623049d3e4acb71d756fdcacb71915ffd22995d1d160ec831887218684b4
tuned-profiles-oracle-2.20.0-2.el8_8.1.noarch.rpm SHA-256: ec7f96987d79b8c8a34e683a5a547fde736c04455ebf3797b9c2b06b1fcef312
tuned-profiles-postgresql-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 3f73517d0a1e4b84ccc88f37d724a6e70d69370186aa0caea6372b6c3e0d4ede
tuned-utils-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 42d1de1dfd7b712f46851ce813dc40bb799e38927f5a7206bffa28bdaf145079
tuned-utils-systemtap-2.20.0-2.el8_8.1.noarch.rpm SHA-256: dfb031d1c225f54de127ad457730128f57fe9d8c52224edc6f0139b277b14446

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.8

SRPM
tuned-2.20.0-2.el8_8.1.src.rpm SHA-256: df160f63bae882cb2edd81cf8ef1c9ea3152dacfcf7a1b510c53b841445906e6
ppc64le
tuned-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 56e84e4de3d3184f1e0ce81bbddfa8c3837bd47040676c615bfdbece5a27039e
tuned-gtk-2.20.0-2.el8_8.1.noarch.rpm SHA-256: d35dc443d8684900b83dfba341f1d91430d2f29701ee941702800b470e964881
tuned-profiles-atomic-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 7df59838e51fad912018e7081ef58d5a3ccc1dfc6897044a8c5c48be1334784c
tuned-profiles-compat-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 5f4e0c20fb9fc11a4ce218cf7c3d5e91990b71dd79e97ac3a9c297b467de8969
tuned-profiles-cpu-partitioning-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 1f8b103ec8601a99c8fc0cc51e4c40b04046dedb17f26e9a35b8d61e3c0510ff
tuned-profiles-mssql-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 90f8623049d3e4acb71d756fdcacb71915ffd22995d1d160ec831887218684b4
tuned-profiles-oracle-2.20.0-2.el8_8.1.noarch.rpm SHA-256: ec7f96987d79b8c8a34e683a5a547fde736c04455ebf3797b9c2b06b1fcef312
tuned-profiles-postgresql-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 3f73517d0a1e4b84ccc88f37d724a6e70d69370186aa0caea6372b6c3e0d4ede
tuned-utils-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 42d1de1dfd7b712f46851ce813dc40bb799e38927f5a7206bffa28bdaf145079
tuned-utils-systemtap-2.20.0-2.el8_8.1.noarch.rpm SHA-256: dfb031d1c225f54de127ad457730128f57fe9d8c52224edc6f0139b277b14446

Red Hat Enterprise Linux for SAP Solutions for x86_64 - Extended Update Support 8.8

SRPM
x86_64
tuned-profiles-sap-hana-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 275a6cbb55fb0183b17ddba28f78167946ac01cdda431cf49b38f32b64e5c365

Red Hat Enterprise Linux Server - TUS 8.8

SRPM
tuned-2.20.0-2.el8_8.1.src.rpm SHA-256: df160f63bae882cb2edd81cf8ef1c9ea3152dacfcf7a1b510c53b841445906e6
x86_64
tuned-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 56e84e4de3d3184f1e0ce81bbddfa8c3837bd47040676c615bfdbece5a27039e
tuned-gtk-2.20.0-2.el8_8.1.noarch.rpm SHA-256: d35dc443d8684900b83dfba341f1d91430d2f29701ee941702800b470e964881
tuned-profiles-atomic-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 7df59838e51fad912018e7081ef58d5a3ccc1dfc6897044a8c5c48be1334784c
tuned-profiles-compat-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 5f4e0c20fb9fc11a4ce218cf7c3d5e91990b71dd79e97ac3a9c297b467de8969
tuned-profiles-cpu-partitioning-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 1f8b103ec8601a99c8fc0cc51e4c40b04046dedb17f26e9a35b8d61e3c0510ff
tuned-profiles-mssql-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 90f8623049d3e4acb71d756fdcacb71915ffd22995d1d160ec831887218684b4
tuned-profiles-oracle-2.20.0-2.el8_8.1.noarch.rpm SHA-256: ec7f96987d79b8c8a34e683a5a547fde736c04455ebf3797b9c2b06b1fcef312
tuned-profiles-postgresql-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 3f73517d0a1e4b84ccc88f37d724a6e70d69370186aa0caea6372b6c3e0d4ede
tuned-utils-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 42d1de1dfd7b712f46851ce813dc40bb799e38927f5a7206bffa28bdaf145079
tuned-utils-systemtap-2.20.0-2.el8_8.1.noarch.rpm SHA-256: dfb031d1c225f54de127ad457730128f57fe9d8c52224edc6f0139b277b14446

Red Hat Enterprise Linux for SAP Applications for x86_64 - Extended Update Support 8.8

SRPM
x86_64
tuned-profiles-sap-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 6685436127fc414e07663ee1f8af1dd33ad88160d39259c3dfdd0d2dc1d19817

Red Hat Enterprise Linux for SAP Applications for Power, little endian - Extended Update Support 8.8

SRPM
ppc64le
tuned-profiles-sap-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 6685436127fc414e07663ee1f8af1dd33ad88160d39259c3dfdd0d2dc1d19817

Red Hat Enterprise Linux for SAP Applications for System Z - Extended Update Support 8.8

SRPM
s390x
tuned-profiles-sap-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 6685436127fc414e07663ee1f8af1dd33ad88160d39259c3dfdd0d2dc1d19817

Red Hat Enterprise Linux for SAP Solutions for Power, little endian - Extended Update Support 8.8

SRPM
ppc64le
tuned-profiles-sap-hana-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 275a6cbb55fb0183b17ddba28f78167946ac01cdda431cf49b38f32b64e5c365

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.8

SRPM
tuned-2.20.0-2.el8_8.1.src.rpm SHA-256: df160f63bae882cb2edd81cf8ef1c9ea3152dacfcf7a1b510c53b841445906e6
aarch64
tuned-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 56e84e4de3d3184f1e0ce81bbddfa8c3837bd47040676c615bfdbece5a27039e
tuned-gtk-2.20.0-2.el8_8.1.noarch.rpm SHA-256: d35dc443d8684900b83dfba341f1d91430d2f29701ee941702800b470e964881
tuned-profiles-atomic-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 7df59838e51fad912018e7081ef58d5a3ccc1dfc6897044a8c5c48be1334784c
tuned-profiles-compat-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 5f4e0c20fb9fc11a4ce218cf7c3d5e91990b71dd79e97ac3a9c297b467de8969
tuned-profiles-cpu-partitioning-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 1f8b103ec8601a99c8fc0cc51e4c40b04046dedb17f26e9a35b8d61e3c0510ff
tuned-profiles-mssql-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 90f8623049d3e4acb71d756fdcacb71915ffd22995d1d160ec831887218684b4
tuned-profiles-oracle-2.20.0-2.el8_8.1.noarch.rpm SHA-256: ec7f96987d79b8c8a34e683a5a547fde736c04455ebf3797b9c2b06b1fcef312
tuned-profiles-postgresql-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 3f73517d0a1e4b84ccc88f37d724a6e70d69370186aa0caea6372b6c3e0d4ede
tuned-utils-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 42d1de1dfd7b712f46851ce813dc40bb799e38927f5a7206bffa28bdaf145079
tuned-utils-systemtap-2.20.0-2.el8_8.1.noarch.rpm SHA-256: dfb031d1c225f54de127ad457730128f57fe9d8c52224edc6f0139b277b14446

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8

SRPM
tuned-2.20.0-2.el8_8.1.src.rpm SHA-256: df160f63bae882cb2edd81cf8ef1c9ea3152dacfcf7a1b510c53b841445906e6
ppc64le
tuned-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 56e84e4de3d3184f1e0ce81bbddfa8c3837bd47040676c615bfdbece5a27039e
tuned-gtk-2.20.0-2.el8_8.1.noarch.rpm SHA-256: d35dc443d8684900b83dfba341f1d91430d2f29701ee941702800b470e964881
tuned-profiles-atomic-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 7df59838e51fad912018e7081ef58d5a3ccc1dfc6897044a8c5c48be1334784c
tuned-profiles-compat-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 5f4e0c20fb9fc11a4ce218cf7c3d5e91990b71dd79e97ac3a9c297b467de8969
tuned-profiles-cpu-partitioning-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 1f8b103ec8601a99c8fc0cc51e4c40b04046dedb17f26e9a35b8d61e3c0510ff
tuned-profiles-mssql-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 90f8623049d3e4acb71d756fdcacb71915ffd22995d1d160ec831887218684b4
tuned-profiles-oracle-2.20.0-2.el8_8.1.noarch.rpm SHA-256: ec7f96987d79b8c8a34e683a5a547fde736c04455ebf3797b9c2b06b1fcef312
tuned-profiles-postgresql-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 3f73517d0a1e4b84ccc88f37d724a6e70d69370186aa0caea6372b6c3e0d4ede
tuned-utils-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 42d1de1dfd7b712f46851ce813dc40bb799e38927f5a7206bffa28bdaf145079
tuned-utils-systemtap-2.20.0-2.el8_8.1.noarch.rpm SHA-256: dfb031d1c225f54de127ad457730128f57fe9d8c52224edc6f0139b277b14446

Red Hat Enterprise Linux for SAP Applications for Power LE - Update Services for SAP Solutions 8.8

SRPM
ppc64le
tuned-profiles-sap-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 6685436127fc414e07663ee1f8af1dd33ad88160d39259c3dfdd0d2dc1d19817

Red Hat Enterprise Linux for SAP Solutions for Power LE - Update Services for SAP Solutions 8.8

SRPM
ppc64le
tuned-profiles-sap-hana-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 275a6cbb55fb0183b17ddba28f78167946ac01cdda431cf49b38f32b64e5c365

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8

SRPM
tuned-2.20.0-2.el8_8.1.src.rpm SHA-256: df160f63bae882cb2edd81cf8ef1c9ea3152dacfcf7a1b510c53b841445906e6
x86_64
tuned-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 56e84e4de3d3184f1e0ce81bbddfa8c3837bd47040676c615bfdbece5a27039e
tuned-gtk-2.20.0-2.el8_8.1.noarch.rpm SHA-256: d35dc443d8684900b83dfba341f1d91430d2f29701ee941702800b470e964881
tuned-profiles-atomic-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 7df59838e51fad912018e7081ef58d5a3ccc1dfc6897044a8c5c48be1334784c
tuned-profiles-compat-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 5f4e0c20fb9fc11a4ce218cf7c3d5e91990b71dd79e97ac3a9c297b467de8969
tuned-profiles-cpu-partitioning-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 1f8b103ec8601a99c8fc0cc51e4c40b04046dedb17f26e9a35b8d61e3c0510ff
tuned-profiles-mssql-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 90f8623049d3e4acb71d756fdcacb71915ffd22995d1d160ec831887218684b4
tuned-profiles-oracle-2.20.0-2.el8_8.1.noarch.rpm SHA-256: ec7f96987d79b8c8a34e683a5a547fde736c04455ebf3797b9c2b06b1fcef312
tuned-profiles-postgresql-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 3f73517d0a1e4b84ccc88f37d724a6e70d69370186aa0caea6372b6c3e0d4ede
tuned-utils-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 42d1de1dfd7b712f46851ce813dc40bb799e38927f5a7206bffa28bdaf145079
tuned-utils-systemtap-2.20.0-2.el8_8.1.noarch.rpm SHA-256: dfb031d1c225f54de127ad457730128f57fe9d8c52224edc6f0139b277b14446

Red Hat Enterprise Linux for SAP Applications for x86_64 - Update Services for SAP Solutions 8.8

SRPM
x86_64
tuned-profiles-sap-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 6685436127fc414e07663ee1f8af1dd33ad88160d39259c3dfdd0d2dc1d19817

Red Hat Enterprise Linux for SAP Solutions for x86_64 - Update Services for SAP Solutions 8.8

SRPM
x86_64
tuned-profiles-sap-hana-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 275a6cbb55fb0183b17ddba28f78167946ac01cdda431cf49b38f32b64e5c365

Red Hat Enterprise Linux for Real Time - Telecommunications Update Service 8.8

SRPM
x86_64
tuned-profiles-realtime-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 9dc212a6104b181a4af701347f58494869e955ef9602b2e85a7b322f11f86102

Red Hat Enterprise Linux for Real Time for NFV - Telecommunications Update Service 8.8

SRPM
x86_64
tuned-profiles-nfv-2.20.0-2.el8_8.1.noarch.rpm SHA-256: a7b31443d9f2bad40046262a84c06ea564e224dcfef46f91e81fe9de8bee264e
tuned-profiles-nfv-guest-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 57cd413576831bca2b51de211dc9b6f456accdbcdac8a2ce05a9e90f857f9124
tuned-profiles-nfv-host-2.20.0-2.el8_8.1.noarch.rpm SHA-256: c374d255f890b44762052af358109d378c1e10f5407b4b52071a53542b296e91
tuned-profiles-realtime-2.20.0-2.el8_8.1.noarch.rpm SHA-256: 9dc212a6104b181a4af701347f58494869e955ef9602b2e85a7b322f11f86102

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.