Oracle alert ELSA-2024-10384 (tuned)

From:
             
 
Errata Announcements for Oracle Linux via El-errata <el-errata@oss.oracle.com>
To:
             
 
el-errata@oss.oracle.com
Subject:
             
 
[El-errata] ELSA-2024-10384 Important: Oracle Linux 9 tuned security update
Date:
             
 
Thu, 05 Dec 2024 05:46:22 -0800
Message-ID:
             
 
<mailman.31.1733406391.246.el-errata@oss.oracle.com>
Oracle Linux Security Advisory ELSA-2024-10384

http://linux.oracle.com/errata/ELSA-2024-10384.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
tuned-2.24.0-2.0.1.el9_5.noarch.rpm
tuned-gtk-2.24.0-2.0.1.el9_5.noarch.rpm
tuned-ppd-2.24.0-2.0.1.el9_5.noarch.rpm
tuned-profiles-atomic-2.24.0-2.0.1.el9_5.noarch.rpm
tuned-profiles-cpu-partitioning-2.24.0-2.0.1.el9_5.noarch.rpm
tuned-profiles-mssql-2.24.0-2.0.1.el9_5.noarch.rpm
tuned-profiles-oracle-2.24.0-2.0.1.el9_5.noarch.rpm
tuned-profiles-postgresql-2.24.0-2.0.1.el9_5.noarch.rpm
tuned-profiles-spectrumscale-2.24.0-2.0.1.el9_5.noarch.rpm
tuned-utils-2.24.0-2.0.1.el9_5.noarch.rpm
tuned-profiles-oci-2.24.0-2.0.1.el9_5.noarch.rpm
tuned-profiles-oci-recommend-2.24.0-2.0.1.el9_5.noarch.rpm

aarch64:
tuned-profiles-oci-2.24.0-2.0.1.el9_5.noarch.rpm
tuned-profiles-oci-recommend-2.24.0-2.0.1.el9_5.noarch.rpm
tuned-2.24.0-2.0.1.el9_5.noarch.rpm
tuned-gtk-2.24.0-2.0.1.el9_5.noarch.rpm
tuned-ppd-2.24.0-2.0.1.el9_5.noarch.rpm
tuned-profiles-atomic-2.24.0-2.0.1.el9_5.noarch.rpm
tuned-profiles-cpu-partitioning-2.24.0-2.0.1.el9_5.noarch.rpm
tuned-profiles-mssql-2.24.0-2.0.1.el9_5.noarch.rpm
tuned-profiles-oracle-2.24.0-2.0.1.el9_5.noarch.rpm
tuned-profiles-postgresql-2.24.0-2.0.1.el9_5.noarch.rpm
tuned-profiles-spectrumscale-2.24.0-2.0.1.el9_5.noarch.rpm
tuned-utils-2.24.0-2.0.1.el9_5.noarch.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//tuned-2.24.0-2.0...

Related CVEs:

CVE-2024-52336
CVE-2024-52337




Description of changes:

[2.24.0-2.0.1]
- Fix RPS/XPS and busy polling optimization not getting applied [Orabug: 32153315]
- Fix error in uninstalling tuned [Orabug: 351528377]
- Updated patch with the more recent version [Orabug: 30730976]
- Set AMD CPU freq governor to ondemand when unapplying cpu tunings [Orabug: 30033199]
- Restored the system rules in recommend.conf [Orabug: 29962987]
- Added oci-nic profile and updated profiles-oci-recommend [Orabug: 29869969]
  for increasing combined channels to 16 on NICs with bnxt_en driver on BM
- Do not access xps_cpus on single queue devices [Orabug: 29894296]
- OL8 does not support System Purpose [Orabug: 29443881]
  Remove syspurpose_role option in recommend.conf.
- Added profiles-oci-recommend package [Orabug: 29632202]
- Modified the patch for ol8 [Orabug: 29560068] (james.cheng@oracle.com)
- Added iscsi plugin, and
  - added oci-rps-xps profile [Orabug: 28397039]
  - added oci-busy-polling profile [Orabug: 28748149]
  - added oci-cpu-power profile

[2.24.0-2]
- Fixed privileged execution of arbitrary scripts by active local user,
  (CVE-2024-52336)
  Resolves: RHEL-66639
- Added sanity checks for API methods parameters, (CVE-2024-52337)
  Resolves: RHEL-66616


_______________________________________________
El-errata mailing list
El-errata@oss.oracle.com
https://oss.oracle.com/mailman/listinfo/el-errata