Red Hat Product Errata RHSA-2025:0368 - Security Advisory
Issued:
2025-01-16
Updated:
2025-01-16

RHSA-2025:0368 - Security Advisory

Synopsis

Moderate: tuned security update

Type/Severity

Security Advisory: Moderate

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for tuned is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The tuned packages provide a service that tunes system settings according to a selected profile.

Security Fix(es):

  • tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method (CVE-2024-52337)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 8.6 x86_64
  • Red Hat Enterprise Linux for SAP Solutions for x86_64 - Extended Update Support Extension 8.6 x86_64
  • Red Hat Enterprise Linux Server - TUS 8.6 x86_64
  • Red Hat Enterprise Linux for SAP Applications for x86_64 - Extended Update Support Extension 8.6 x86_64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
  • Red Hat Enterprise Linux for SAP Applications for Power LE - Update Services for SAP Solutions 8.6 ppc64le
  • Red Hat Enterprise Linux for SAP Solutions for Power LE - Update Services for SAP Solutions 8.6 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64
  • Red Hat Enterprise Linux for SAP Applications for x86_64 - Update Services for SAP Solutions 8.6 x86_64
  • Red Hat Enterprise Linux for SAP Solutions for x86_64 - Update Services for SAP Solutions 8.6 x86_64
  • Red Hat Enterprise Linux for Real Time - Telecommunications Update Service 8.6 x86_64
  • Red Hat Enterprise Linux for Real Time for NFV - Telecommunications Update Service 8.6 x86_64

Fixes

  • BZ - 2324541 - CVE-2024-52337 tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method

Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6

SRPM
tuned-2.20.0-1.el8_6.2.src.rpm SHA-256: 81467752d97fded60b5337e4b39e5d2eebe18ae6f843f254fc6d317388947907
x86_64
tuned-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 718a0909d75338944cd66581062773a0351a92cc5e101db4e51754a67a030f36
tuned-gtk-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 9c15b52c8034d81adb25aea74251843e5f8f365bca9cb8f5c3b796f51330396e
tuned-profiles-atomic-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 3d04fdeb4a4b2ef3a6dae89b01e0bb1a1afbe751745e23138060d0761fb3ceba
tuned-profiles-compat-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 168ffc131f788af40c549f3b724be968a089dc877d9f779331145f71270c250d
tuned-profiles-cpu-partitioning-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 3df63b8a477496e846d0e466b2452f2bbaed64e14c9c5bb08d7c73b9e6a96908
tuned-profiles-mssql-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 7e8bc7a55990a393188134422b6522eb8999760d6799935db0479d26668b4cde
tuned-profiles-nfv-2.20.0-1.el8_6.2.noarch.rpm SHA-256: e2295ea629c64011c5fc719a203605259fd4cd1b2b28edf6cb74cdaa887dc2b4
tuned-profiles-nfv-guest-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 27f2ef96ec6ab27783d57f04a22331d1b18b59497ded35c7164cd53cc32018e8
tuned-profiles-nfv-host-2.20.0-1.el8_6.2.noarch.rpm SHA-256: ef13d2bbefbbd3776de00945e219351c55b68f7c896c7e5e8f6469fa9cc051df
tuned-profiles-oracle-2.20.0-1.el8_6.2.noarch.rpm SHA-256: c4a6fd36eb282a9353a0ce53cb8f82f1408d154f9784e644bce26ffe0053bc43
tuned-profiles-realtime-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 7cabad2e8c997341e4982c3cccc2f380704f964c6c88c1774f29d836b22e03e1
tuned-profiles-realtime-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 7cabad2e8c997341e4982c3cccc2f380704f964c6c88c1774f29d836b22e03e1
tuned-utils-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 8f79fc9133a8fe021541f259e03511475586c3a8cfac35ee0e135bc599d84449
tuned-utils-systemtap-2.20.0-1.el8_6.2.noarch.rpm SHA-256: d7f79dbc9300724eb46cae2f0f2f5268f34a2a33cec7641ed4846f1fa6e9f390

Red Hat Enterprise Linux Server - AUS 8.6

SRPM
tuned-2.20.0-1.el8_6.2.src.rpm SHA-256: 81467752d97fded60b5337e4b39e5d2eebe18ae6f843f254fc6d317388947907
x86_64
tuned-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 718a0909d75338944cd66581062773a0351a92cc5e101db4e51754a67a030f36
tuned-gtk-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 9c15b52c8034d81adb25aea74251843e5f8f365bca9cb8f5c3b796f51330396e
tuned-profiles-atomic-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 3d04fdeb4a4b2ef3a6dae89b01e0bb1a1afbe751745e23138060d0761fb3ceba
tuned-profiles-compat-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 168ffc131f788af40c549f3b724be968a089dc877d9f779331145f71270c250d
tuned-profiles-cpu-partitioning-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 3df63b8a477496e846d0e466b2452f2bbaed64e14c9c5bb08d7c73b9e6a96908
tuned-profiles-mssql-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 7e8bc7a55990a393188134422b6522eb8999760d6799935db0479d26668b4cde
tuned-profiles-oracle-2.20.0-1.el8_6.2.noarch.rpm SHA-256: c4a6fd36eb282a9353a0ce53cb8f82f1408d154f9784e644bce26ffe0053bc43
tuned-utils-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 8f79fc9133a8fe021541f259e03511475586c3a8cfac35ee0e135bc599d84449
tuned-utils-systemtap-2.20.0-1.el8_6.2.noarch.rpm SHA-256: d7f79dbc9300724eb46cae2f0f2f5268f34a2a33cec7641ed4846f1fa6e9f390

Red Hat Enterprise Linux for SAP Solutions for x86_64 - Extended Update Support Extension 8.6

SRPM
x86_64
tuned-profiles-sap-hana-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 84e9e6a6a9a9bea81628d4d1e76bf824287843d18b8800a7de15315837721f90

Red Hat Enterprise Linux Server - TUS 8.6

SRPM
tuned-2.20.0-1.el8_6.2.src.rpm SHA-256: 81467752d97fded60b5337e4b39e5d2eebe18ae6f843f254fc6d317388947907
x86_64
tuned-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 718a0909d75338944cd66581062773a0351a92cc5e101db4e51754a67a030f36
tuned-gtk-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 9c15b52c8034d81adb25aea74251843e5f8f365bca9cb8f5c3b796f51330396e
tuned-profiles-atomic-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 3d04fdeb4a4b2ef3a6dae89b01e0bb1a1afbe751745e23138060d0761fb3ceba
tuned-profiles-compat-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 168ffc131f788af40c549f3b724be968a089dc877d9f779331145f71270c250d
tuned-profiles-cpu-partitioning-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 3df63b8a477496e846d0e466b2452f2bbaed64e14c9c5bb08d7c73b9e6a96908
tuned-profiles-mssql-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 7e8bc7a55990a393188134422b6522eb8999760d6799935db0479d26668b4cde
tuned-profiles-oracle-2.20.0-1.el8_6.2.noarch.rpm SHA-256: c4a6fd36eb282a9353a0ce53cb8f82f1408d154f9784e644bce26ffe0053bc43
tuned-utils-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 8f79fc9133a8fe021541f259e03511475586c3a8cfac35ee0e135bc599d84449
tuned-utils-systemtap-2.20.0-1.el8_6.2.noarch.rpm SHA-256: d7f79dbc9300724eb46cae2f0f2f5268f34a2a33cec7641ed4846f1fa6e9f390

Red Hat Enterprise Linux for SAP Applications for x86_64 - Extended Update Support Extension 8.6

SRPM
x86_64
tuned-profiles-sap-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 8be51ab5f385618633fb6bfb89e0baaac4f97c13342d3328d57c757ee4ceab22

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6

SRPM
tuned-2.20.0-1.el8_6.2.src.rpm SHA-256: 81467752d97fded60b5337e4b39e5d2eebe18ae6f843f254fc6d317388947907
ppc64le
tuned-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 718a0909d75338944cd66581062773a0351a92cc5e101db4e51754a67a030f36
tuned-gtk-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 9c15b52c8034d81adb25aea74251843e5f8f365bca9cb8f5c3b796f51330396e
tuned-profiles-atomic-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 3d04fdeb4a4b2ef3a6dae89b01e0bb1a1afbe751745e23138060d0761fb3ceba
tuned-profiles-compat-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 168ffc131f788af40c549f3b724be968a089dc877d9f779331145f71270c250d
tuned-profiles-cpu-partitioning-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 3df63b8a477496e846d0e466b2452f2bbaed64e14c9c5bb08d7c73b9e6a96908
tuned-profiles-mssql-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 7e8bc7a55990a393188134422b6522eb8999760d6799935db0479d26668b4cde
tuned-profiles-oracle-2.20.0-1.el8_6.2.noarch.rpm SHA-256: c4a6fd36eb282a9353a0ce53cb8f82f1408d154f9784e644bce26ffe0053bc43
tuned-utils-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 8f79fc9133a8fe021541f259e03511475586c3a8cfac35ee0e135bc599d84449
tuned-utils-systemtap-2.20.0-1.el8_6.2.noarch.rpm SHA-256: d7f79dbc9300724eb46cae2f0f2f5268f34a2a33cec7641ed4846f1fa6e9f390

Red Hat Enterprise Linux for SAP Applications for Power LE - Update Services for SAP Solutions 8.6

SRPM
ppc64le
tuned-profiles-sap-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 8be51ab5f385618633fb6bfb89e0baaac4f97c13342d3328d57c757ee4ceab22

Red Hat Enterprise Linux for SAP Solutions for Power LE - Update Services for SAP Solutions 8.6

SRPM
ppc64le
tuned-profiles-sap-hana-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 84e9e6a6a9a9bea81628d4d1e76bf824287843d18b8800a7de15315837721f90

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6

SRPM
tuned-2.20.0-1.el8_6.2.src.rpm SHA-256: 81467752d97fded60b5337e4b39e5d2eebe18ae6f843f254fc6d317388947907
x86_64
tuned-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 718a0909d75338944cd66581062773a0351a92cc5e101db4e51754a67a030f36
tuned-gtk-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 9c15b52c8034d81adb25aea74251843e5f8f365bca9cb8f5c3b796f51330396e
tuned-profiles-atomic-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 3d04fdeb4a4b2ef3a6dae89b01e0bb1a1afbe751745e23138060d0761fb3ceba
tuned-profiles-compat-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 168ffc131f788af40c549f3b724be968a089dc877d9f779331145f71270c250d
tuned-profiles-cpu-partitioning-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 3df63b8a477496e846d0e466b2452f2bbaed64e14c9c5bb08d7c73b9e6a96908
tuned-profiles-mssql-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 7e8bc7a55990a393188134422b6522eb8999760d6799935db0479d26668b4cde
tuned-profiles-oracle-2.20.0-1.el8_6.2.noarch.rpm SHA-256: c4a6fd36eb282a9353a0ce53cb8f82f1408d154f9784e644bce26ffe0053bc43
tuned-utils-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 8f79fc9133a8fe021541f259e03511475586c3a8cfac35ee0e135bc599d84449
tuned-utils-systemtap-2.20.0-1.el8_6.2.noarch.rpm SHA-256: d7f79dbc9300724eb46cae2f0f2f5268f34a2a33cec7641ed4846f1fa6e9f390

Red Hat Enterprise Linux for SAP Applications for x86_64 - Update Services for SAP Solutions 8.6

SRPM
x86_64
tuned-profiles-sap-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 8be51ab5f385618633fb6bfb89e0baaac4f97c13342d3328d57c757ee4ceab22

Red Hat Enterprise Linux for SAP Solutions for x86_64 - Update Services for SAP Solutions 8.6

SRPM
x86_64
tuned-profiles-sap-hana-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 84e9e6a6a9a9bea81628d4d1e76bf824287843d18b8800a7de15315837721f90

Red Hat Enterprise Linux for Real Time - Telecommunications Update Service 8.6

SRPM
x86_64
tuned-profiles-realtime-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 7cabad2e8c997341e4982c3cccc2f380704f964c6c88c1774f29d836b22e03e1

Red Hat Enterprise Linux for Real Time for NFV - Telecommunications Update Service 8.6

SRPM
x86_64
tuned-profiles-nfv-2.20.0-1.el8_6.2.noarch.rpm SHA-256: e2295ea629c64011c5fc719a203605259fd4cd1b2b28edf6cb74cdaa887dc2b4
tuned-profiles-nfv-guest-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 27f2ef96ec6ab27783d57f04a22331d1b18b59497ded35c7164cd53cc32018e8
tuned-profiles-nfv-host-2.20.0-1.el8_6.2.noarch.rpm SHA-256: ef13d2bbefbbd3776de00945e219351c55b68f7c896c7e5e8f6469fa9cc051df
tuned-profiles-realtime-2.20.0-1.el8_6.2.noarch.rpm SHA-256: 7cabad2e8c997341e4982c3cccc2f380704f964c6c88c1774f29d836b22e03e1

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.