ELSA-2024-10384

ELSA-2024-10384 - tuned security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2024-11-29

Description

[2.24.0-2.0.1]
- Fix RPS/XPS and busy polling optimization not getting applied [Orabug: 32153315]
- Fix error in uninstalling tuned [Orabug: 351528377]
- Updated patch with the more recent version [Orabug: 30730976]
- Set AMD CPU freq governor to ondemand when unapplying cpu tunings [Orabug: 30033199]
- Restored the system rules in recommend.conf [Orabug: 29962987]
- Added oci-nic profile and updated profiles-oci-recommend [Orabug: 29869969]
for increasing combined channels to 16 on NICs with bnxt_en driver on BM
- Do not access xps_cpus on single queue devices [Orabug: 29894296]
- OL8 does not support System Purpose [Orabug: 29443881]
Remove syspurpose_role option in recommend.conf.
- Added profiles-oci-recommend package [Orabug: 29632202]
- Modified the patch for ol8 [Orabug: 29560068] (james.cheng@oracle.com)
- Added iscsi plugin, and
- added oci-rps-xps profile [Orabug: 28397039]
- added oci-busy-polling profile [Orabug: 28748149]
- added oci-cpu-power profile

[2.24.0-2]
- Fixed privileged execution of arbitrary scripts by active local user,
(CVE-2024-52336)
Resolves: RHEL-66639
- Added sanity checks for API methods parameters, (CVE-2024-52337)
Resolves: RHEL-66616

Related CVEs

CVE-2024-52337

CVE-2024-52336

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	tuned-2.24.0-2.0.1.el9_5.src.rpm	6f23c6d3b2f093022555b88ea42eaef54311b0bce4cd6f331e8bf0ab178e7940	-	ol9_aarch64_appstream
	tuned-2.24.0-2.0.1.el9_5.src.rpm	6f23c6d3b2f093022555b88ea42eaef54311b0bce4cd6f331e8bf0ab178e7940	-	ol9_aarch64_baseos_latest
	tuned-2.24.0-2.0.1.el9_5.src.rpm	6f23c6d3b2f093022555b88ea42eaef54311b0bce4cd6f331e8bf0ab178e7940	-	ol9_aarch64_u5_baseos_patch
	tuned-2.24.0-2.0.1.el9_5.noarch.rpm	a96777270e255bf922d0afac0700f84cadc3c1bab90884da9fd9d30c35b95d6b	-	ol9_aarch64_baseos_latest
	tuned-2.24.0-2.0.1.el9_5.noarch.rpm	a96777270e255bf922d0afac0700f84cadc3c1bab90884da9fd9d30c35b95d6b	-	ol9_aarch64_u5_baseos_patch
	tuned-gtk-2.24.0-2.0.1.el9_5.noarch.rpm	1b342cd2efcb5152489823bdebb8ba03ce680f511ed4dcabf017755e682a7e7f	-	ol9_aarch64_appstream
	tuned-ppd-2.24.0-2.0.1.el9_5.noarch.rpm	6fe56dd8b329cb9f2e937d2bf97726460fe894b345f7185aaa081b9d007229f9	-	ol9_aarch64_appstream
	tuned-profiles-atomic-2.24.0-2.0.1.el9_5.noarch.rpm	14c6c89d803451a45d7dbfc8efb6720fa5a22d84888c6efafc2ba42f5c547dcd	-	ol9_aarch64_appstream
	tuned-profiles-cpu-partitioning-2.24.0-2.0.1.el9_5.noarch.rpm	7c649622c33deaa1b30294906d17056fcf4043df8d8f0f50e973ea034d7556f3	-	ol9_aarch64_baseos_latest
	tuned-profiles-cpu-partitioning-2.24.0-2.0.1.el9_5.noarch.rpm	7c649622c33deaa1b30294906d17056fcf4043df8d8f0f50e973ea034d7556f3	-	ol9_aarch64_u5_baseos_patch
	tuned-profiles-mssql-2.24.0-2.0.1.el9_5.noarch.rpm	cf9b79aa7a2928d348fedf4dd885b78259a228d4a0a92fc7af8a410c517b22ab	-	ol9_aarch64_appstream
	tuned-profiles-oracle-2.24.0-2.0.1.el9_5.noarch.rpm	730f663913396acde628993eff0a76576ff274a4decdf1241db0c51716a45f0f	-	ol9_aarch64_appstream
	tuned-profiles-postgresql-2.24.0-2.0.1.el9_5.noarch.rpm	5d94b53e4493ce4ed25d99dc5e3d909c598cd3f16518825d98346902993a89d9	-	ol9_aarch64_appstream
	tuned-profiles-spectrumscale-2.24.0-2.0.1.el9_5.noarch.rpm	904acb94ea80ae0e3134db63eea1eec28c0b6b7739962c36a6af96193b0adfe7	-	ol9_aarch64_appstream
	tuned-utils-2.24.0-2.0.1.el9_5.noarch.rpm	8a9dc8d56b70527bcacecc95f9bb91ff42c2a42a9bd5368caf00f43c503a0186	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	tuned-2.24.0-2.0.1.el9_5.src.rpm	6f23c6d3b2f093022555b88ea42eaef54311b0bce4cd6f331e8bf0ab178e7940	-	ol9_x86_64_appstream
	tuned-2.24.0-2.0.1.el9_5.src.rpm	6f23c6d3b2f093022555b88ea42eaef54311b0bce4cd6f331e8bf0ab178e7940	-	ol9_x86_64_baseos_latest
	tuned-2.24.0-2.0.1.el9_5.src.rpm	6f23c6d3b2f093022555b88ea42eaef54311b0bce4cd6f331e8bf0ab178e7940	-	ol9_x86_64_u5_baseos_patch
	tuned-2.24.0-2.0.1.el9_5.noarch.rpm	a96777270e255bf922d0afac0700f84cadc3c1bab90884da9fd9d30c35b95d6b	-	ol9_x86_64_baseos_latest
	tuned-2.24.0-2.0.1.el9_5.noarch.rpm	a96777270e255bf922d0afac0700f84cadc3c1bab90884da9fd9d30c35b95d6b	-	ol9_x86_64_u5_baseos_patch
	tuned-gtk-2.24.0-2.0.1.el9_5.noarch.rpm	1b342cd2efcb5152489823bdebb8ba03ce680f511ed4dcabf017755e682a7e7f	-	ol9_x86_64_appstream
	tuned-ppd-2.24.0-2.0.1.el9_5.noarch.rpm	6fe56dd8b329cb9f2e937d2bf97726460fe894b345f7185aaa081b9d007229f9	-	ol9_x86_64_appstream
	tuned-profiles-atomic-2.24.0-2.0.1.el9_5.noarch.rpm	14c6c89d803451a45d7dbfc8efb6720fa5a22d84888c6efafc2ba42f5c547dcd	-	ol9_x86_64_appstream
	tuned-profiles-cpu-partitioning-2.24.0-2.0.1.el9_5.noarch.rpm	7c649622c33deaa1b30294906d17056fcf4043df8d8f0f50e973ea034d7556f3	-	ol9_x86_64_baseos_latest
	tuned-profiles-cpu-partitioning-2.24.0-2.0.1.el9_5.noarch.rpm	7c649622c33deaa1b30294906d17056fcf4043df8d8f0f50e973ea034d7556f3	-	ol9_x86_64_u5_baseos_patch
	tuned-profiles-mssql-2.24.0-2.0.1.el9_5.noarch.rpm	cf9b79aa7a2928d348fedf4dd885b78259a228d4a0a92fc7af8a410c517b22ab	-	ol9_x86_64_appstream
	tuned-profiles-oracle-2.24.0-2.0.1.el9_5.noarch.rpm	730f663913396acde628993eff0a76576ff274a4decdf1241db0c51716a45f0f	-	ol9_x86_64_appstream
	tuned-profiles-postgresql-2.24.0-2.0.1.el9_5.noarch.rpm	5d94b53e4493ce4ed25d99dc5e3d909c598cd3f16518825d98346902993a89d9	-	ol9_x86_64_appstream
	tuned-profiles-spectrumscale-2.24.0-2.0.1.el9_5.noarch.rpm	904acb94ea80ae0e3134db63eea1eec28c0b6b7739962c36a6af96193b0adfe7	-	ol9_x86_64_appstream
	tuned-utils-2.24.0-2.0.1.el9_5.noarch.rpm	8a9dc8d56b70527bcacecc95f9bb91ff42c2a42a9bd5368caf00f43c503a0186	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team