Fixed packages 17
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8 enterprise_linux:8::appstream | tuned-gtk | 0:2.22.1-5.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | tuned-profiles-postgresql | 0:2.22.1-5.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | tuned-utils | 0:2.22.1-5.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | tuned-utils-systemtap | 0:2.22.1-5.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | tuned | 0:2.22.1-5.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | tuned-profiles-atomic | 0:2.22.1-5.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | tuned-profiles-compat | 0:2.22.1-5.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | tuned-profiles-cpu-partitioning | 0:2.22.1-5.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | tuned-profiles-mssql | 0:2.22.1-5.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | tuned-profiles-oracle | 0:2.22.1-5.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::nfv | tuned-profiles-nfv | 0:2.22.1-5.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::nfv | tuned-profiles-nfv-guest | 0:2.22.1-5.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::nfv | tuned-profiles-nfv-host | 0:2.22.1-5.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::nfv | tuned-profiles-realtime | 0:2.22.1-5.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::realtime | tuned-profiles-realtime | 0:2.22.1-5.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::sap | tuned-profiles-sap | 0:2.22.1-5.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::sap_hana | tuned-profiles-sap-hana | 0:2.22.1-5.el8_10 |
Vulnerabilities 1
-
Medium 5.5
Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method
A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the 'evil' the attacker could mi…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2324541
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_11161.json
-
report
https://access.redhat.com/security/cve/CVE-2024-52337
-
advisory
https://www.cve.org/CVERecord?id=CVE-2024-52337
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-52337
-
article
https://github.com/redhat-performance/tuned/releases/tag/v2.24.1
-
article
https://security.opensuse.org/2024/11/26/tuned-instance-create.html
-
article
https://www.openwall.com/lists/oss-security/2024/11/28/1