Summary
[2.24.0-2.0.1]
- Fix RPS/XPS and busy polling optimization not getting applied [Orabug: 32153315]
- Fix error in uninstalling tuned [Orabug: 351528377]
- Updated patch with the more recent version [Orabug: 30730976]
- Set AMD CPU freq governor to ondemand when unapplying cpu tunings [Orabug: 30033199]
- Restored the system rules in recommend.conf [Orabug: 29962987]
- Added oci-nic profile and updated profiles-oci-recommend [Orabug: 29869969]
for increasing combined channels to 16 on NICs with bnxt_en driver on BM
- Do not access xps_cpus on single queue devices [Orabug: 29894296]
- OL8 does not support System Purpose [Orabug: 29443881]
Remove syspurpose_role option in recommend.conf.
- Added profiles-oci-recommend package [Orabug: 29632202]
- Modified the patch for ol8 [Orabug: 29560068] (james.cheng@oracle.com)
- Added iscsi plugin, and
- added oci-rps-xps profile [Orabug: 28397039]
- added oci-busy-polling profile [Orabug: 28748149]
- added oci-cpu-power profile
[2.24.0-2]
- Fixed privileged execution of arbitrary scripts by active local user,
(CVE-2024-52336)
Resolves: RHEL-66639
- Added sanity checks for API methods parameters, (CVE-2024-52337)
Resolves: RHEL-66616
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | tuned | 0:2.24.0-2.0.1.el9_5 |
| Oracle Linux · 9 | tuned-gtk | 0:2.24.0-2.0.1.el9_5 |
| Oracle Linux · 9 | tuned-ppd | 0:2.24.0-2.0.1.el9_5 |
| Oracle Linux · 9 | tuned-profiles-atomic | 0:2.24.0-2.0.1.el9_5 |
| Oracle Linux · 9 | tuned-profiles-cpu-partitioning | 0:2.24.0-2.0.1.el9_5 |
| Oracle Linux · 9 | tuned-profiles-mssql | 0:2.24.0-2.0.1.el9_5 |
| Oracle Linux · 9 | tuned-profiles-oci | 0:2.24.0-2.0.1.el9_5 |
| Oracle Linux · 9 | tuned-profiles-oci-recommend | 0:2.24.0-2.0.1.el9_5 |
| Oracle Linux · 9 | tuned-profiles-oracle | 0:2.24.0-2.0.1.el9_5 |
| Oracle Linux · 9 | tuned-profiles-postgresql | 0:2.24.0-2.0.1.el9_5 |
| Oracle Linux · 9 | tuned-profiles-spectrumscale | 0:2.24.0-2.0.1.el9_5 |
| Oracle Linux · 9 | tuned-utils | 0:2.24.0-2.0.1.el9_5 |
Vulnerabilities 2
-
High 7.8
Tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root
A script injection vulnerability was identified in the Tuned package. The `instance_create()` D-Bus function can be called by locally logged-in users without authentication. This flaw allows a local non-privileged user to execute a D-Bus call with `script_pre…
-
Medium 5.5
Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method
A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the 'evil' the attacker could mi…