Linux · Security advisory · November 26, 2024

RHSA-2024:10384: Security update for 16 packages

RHSA-2024:10384, released November 26, 2024, fixes 2 CVEs across 16 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0030
22nd percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 1 Routine 1

Fixed package versions

ProductReleaseFixed in
tunedRHEL 90:2.24.0-2.el9_5
tuned-gtkRHEL 90:2.24.0-2.el9_5
tuned-ppdRHEL 90:2.24.0-2.el9_5
tuned-profiles-atomicRHEL 90:2.24.0-2.el9_5
tuned-profiles-cpu-partitioningRHEL 90:2.24.0-2.el9_5
tuned-profiles-mssqlRHEL 90:2.24.0-2.el9_5
tuned-profiles-nfvRHEL 90:2.24.0-2.el9_5
tuned-profiles-nfv-guestRHEL 90:2.24.0-2.el9_5
tuned-profiles-nfv-hostRHEL 90:2.24.0-2.el9_5
tuned-profiles-oracleRHEL 90:2.24.0-2.el9_5
tuned-profiles-postgresqlRHEL 90:2.24.0-2.el9_5
tuned-profiles-realtimeRHEL 90:2.24.0-2.el9_5
tuned-profiles-sapRHEL 90:2.24.0-2.el9_5
tuned-profiles-sap-hanaRHEL 90:2.24.0-2.el9_5
tuned-profiles-spectrumscaleRHEL 90:2.24.0-2.el9_5
tuned-utilsRHEL 90:2.24.0-2.el9_5

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-52336 tuned: The tuned packages provide a service that tunes system settings according to a selected profile. Security Fix(es):... 7.8 0.0030 None reported
Routine CVE-2024-52337 tuned-profiles-mssql: The tuned packages provide a service that tunes system settings according to a selected profile. Security Fix(es):... 5.5 0.0030 None reported
Showing 1 to 2 of 2 1