VDB

RHSA-2025%3A0364

RHSA-2025%3A0364 PUBLISHED CVSS 7.800000190734863 HIGH

A flaw was found in the tempfile.TemporaryDirectory class in python3/cpython3. The class may dereference symbolic links during permission-related errors, resulting in users that run privileged programs being able to modify permissions of files referenced by the symbolic link.

Risk Scores

CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

Affected Products

VendorProductVersions
Red Hatopenshift4/ose-cluster-autoscaler@sha256:a02ce0dc98e6088e3e00f22943d7c4fcb9b4b28710f6c01d10f6e45469200b5d_s390x as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-cluster-autoscaler@sha256:a02ce0dc98e6088e3e00f22943d7c4fcb9b4b28710f6c01d10f6e45469200b5d_s390x
Red Hatopenshift4/ose-cluster-platform-operators-manager-rhel8@sha256:f529a119e8b27fc6db3426af8bba8de9a0ec5ae55fb32a8685a3b9f1be05e8e9_arm64 as a component of Red Hat OpenShift Container Platform 4.14*, *
Red Hatopenshift4/ose-cluster-policy-controller-rhel8@sha256:245dbafbe075bf680f78ef8cd06661d87d85de42d720ca0841ca4cd84c76018e_amd64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-cluster-policy-controller-rhel8@sha256:245dbafbe075bf680f78ef8cd06661d87d85de42d720ca0841ca4cd84c76018e_amd64
Red Hatopenshift4/oc-mirror-plugin-rhel8@sha256:d09e186fd142fedd04746d32cacebfa1e8337d03cb141b440f98384d6635b2dd_amd64 as a component of Red Hat OpenShift Container Platform 4.14*, *
Red Hatopenshift4/oc-mirror-plugin-rhel8@sha256:dcb05e3ae097be5ea98c24d708fc9e332f4db5bd1e754485c91c8dff466e23db_s390x as a component of Red Hat OpenShift Container Platform 4.14*, *
Red Hatopenshift4/ose-cluster-kube-scheduler-operator@sha256:e6ab5b55e316f9d493da112b009133220cab95db153822f352c92a4a00a4a52b_arm64 as a component of Red Hat OpenShift Container Platform 4.14*, *
Red Hatopenshift4/ose-machine-config-operator@sha256:8eca99992171323f036e5dc9cacae4e7718c2286db39eecaa4eb928e8f7b36fc_arm64 as a component of Red Hat OpenShift Container Platform 4.14*, *
Red Hatopenshift4/ose-cluster-policy-controller-rhel8@sha256:4c5ba60e69666230150257851099d2567523e959bc5193366c476ae7636e3769_arm64 as a component of Red Hat OpenShift Container Platform 4.14*, *
Red Hatopenshift4/ose-apiserver-network-proxy-rhel8@sha256:3a606fd1bcd46c5c0d14c5baea3684744cbb64c3443bfd4fcbb99d6b84d2bbc3_s390x as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-apiserver-network-proxy-rhel8@sha256:3a606fd1bcd46c5c0d14c5baea3684744cbb64c3443bfd4fcbb99d6b84d2bbc3_s390x
Red Hatopenshift4/ose-cluster-capi-rhel8-operator@sha256:f9e2a5013003977f2f579c997dc430338188297c127d43329c3517ee54f7963c_s390x as a component of Red Hat OpenShift Container Platform 4.14*, *
Red Hatopenshift4/ose-openstack-cinder-csi-driver-rhel8-operator@sha256:0f893aed131a2d1f38000e2937b3376eb1c0b19a3f5fc5708bf8b973e1122670_ppc64le as a component of Red Hat OpenShift Container Platform 4.14*, *
Red Hatopenshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:c06193b3a61d0e3778c46c691e2233bdbab09572bc8c1903e08f408f0e64b9a6_arm64 as a component of Red Hat OpenShift Container Platform 4.14*, *
Red Hatopenshift4/ose-azure-disk-csi-driver-rhel8@sha256:64c8228b889e063508eaf6f0cb78719f057cdc2d22b8781bad56bdb2d00e62fc_arm64 as a component of Red Hat OpenShift Container Platform 4.14*, *
Red Hatopenshift4/openshift-route-controller-manager-rhel8@sha256:ab18ba3438adef9a9355bb4f999b22b889e35decbe39bc2e80b3ab84b5c5e9d9_ppc64le as a component of Red Hat OpenShift Container Platform 4.14openshift4/openshift-route-controller-manager-rhel8@sha256:ab18ba3438adef9a9355bb4f999b22b889e35decbe39bc2e80b3ab84b5c5e9d9_ppc64le
Red Hatopenshift4/ose-cluster-autoscaler-operator@sha256:7cd1810a7d736d52e55de1e19e531af4ac44bcd15a966d0afd4100d312e16268_s390x as a component of Red Hat OpenShift Container Platform 4.14*
Red Hatopenshift4/ose-machine-api-provider-azure-rhel8@sha256:337412e0f85a20ccce17d23bdac57e9006d91be259962b69178259e5ae41fd72_arm64 as a component of Red Hat OpenShift Container Platform 4.14*, *
Red Hatopenshift4/ose-aws-ebs-csi-driver-rhel8@sha256:645496b0b759fb2fc96184dd9452f1c573e3009a46e5771766bd855a3079bd71_amd64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-aws-ebs-csi-driver-rhel8@sha256:645496b0b759fb2fc96184dd9452f1c573e3009a46e5771766bd855a3079bd71_amd64
Red Hatopenshift4/ose-multus-cni@sha256:a0550c8dafe0e86a8a1346a173ed7138b0d9132d770861656b46fef74b6275dd_arm64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-multus-cni@sha256:a0550c8dafe0e86a8a1346a173ed7138b0d9132d770861656b46fef74b6275dd_arm64
Red Hatopenshift4/ose-csi-external-snapshotter-rhel8@sha256:aa993d613a029e4c6fb07a8ef6127a0f40890f9a7ffdeabc4318de5f48d64f0a_s390x as a component of Red Hat OpenShift Container Platform 4.14*, *
Red Hatopenshift4/ose-csi-snapshot-controller-rhel8@sha256:f7025e45377930b455d4f1ca24b7cb08320da2b6f0941bb4c82508c7ea6d6770_s390x as a component of Red Hat OpenShift Container Platform 4.14*, *

…and 1279 more

Timeline

  • Jan 22, 2025 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Jul 19, 2026 CVE Updated

References

…and 6 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›