VDB

RHSA-2025%3A0650

RHSA-2025%3A0650 PUBLISHED CVSS 7.800000190734863 HIGH

A flaw was found in the tempfile.TemporaryDirectory class in python3/cpython3. The class may dereference symbolic links during permission-related errors, resulting in users that run privileged programs being able to modify permissions of files referenced by the symbolic link.

Risk Scores

CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

Affected Products

VendorProductVersions
Red Hatopenshift4/ose-cluster-machine-approver-rhel9@sha256:22b597df7012d928d0cd124008bd775b21393a9e250688f4f20162e2415110a8_ppc64le as a component of Red Hat OpenShift Container Platform 4.16*, *, *
Red Hatopenshift4/ose-vsphere-cloud-controller-manager-rhel9@sha256:ec9b55091eb416d9b55a1e55f29ca493a9ae6408d9c7c4e51395b08744e96b11_amd64 as a component of Red Hat OpenShift Container Platform 4.16*, *, *
Red Hatopenshift4/ose-machine-config-rhel9-operator@sha256:cee926c5f30de6a0715fd2151f7d8de5a7bf5d87d4819a3946017b197f30d1ce_amd64 as a component of Red Hat OpenShift Container Platform 4.16openshift4/ose-machine-config-rhel9-operator@sha256:cee926c5f30de6a0715fd2151f7d8de5a7bf5d87d4819a3946017b197f30d1ce_amd64
Red Hatopenshift4/ose-installer-rhel9@sha256:04075b13d0a4e96330010d28fae395d07c2810489bd00cf2377e74a4d218738c_ppc64le as a component of Red Hat OpenShift Container Platform 4.16openshift4/ose-installer-rhel9@sha256:04075b13d0a4e96330010d28fae395d07c2810489bd00cf2377e74a4d218738c_ppc64le
Red Hatopenshift4/ose-tests-rhel9@sha256:e42860008271d89c0111a33dc47932a74a2d14d1060a8af81b7c545604f6fcc5_arm64 as a component of Red Hat OpenShift Container Platform 4.16openshift4/ose-tests-rhel9@sha256:e42860008271d89c0111a33dc47932a74a2d14d1060a8af81b7c545604f6fcc5_arm64
Red Hatopenshift4/ose-ironic-machine-os-downloader-rhel9@sha256:c273b8cfaadfa348da3b4e94f72697ee56c7cb4e01cf6f3efbde2fb1efb277c7_arm64 as a component of Red Hat OpenShift Container Platform 4.16*, *, *
Red Hatopenshift4/ose-operator-registry-rhel9@sha256:d7785691d67e492b5bd6562eb1b65e431135bb0d3351ef1637e2b9f1310322ff_amd64 as a component of Red Hat OpenShift Container Platform 4.16openshift4/ose-operator-registry-rhel9@sha256:d7785691d67e492b5bd6562eb1b65e431135bb0d3351ef1637e2b9f1310322ff_amd64
Red Hatopenshift4/ose-insights-rhel9-operator@sha256:65c60f3d1df0bd632fa4d647e89617a22bb650ed6eaae222d75a60c91bbe8b04_ppc64le as a component of Red Hat OpenShift Container Platform 4.16*, *, *
Red Hatopenshift4/ose-openshift-controller-manager-rhel9@sha256:8288993c87e11922809cd3191d0d00140861740d78fccf80dcc7e6eccf1e401b_amd64 as a component of Red Hat OpenShift Container Platform 4.16openshift4/ose-openshift-controller-manager-rhel9@sha256:8288993c87e11922809cd3191d0d00140861740d78fccf80dcc7e6eccf1e401b_amd64
Red Hatopenshift4/driver-toolkit-rhel9@sha256:4ac87ac404534c5e22c7583666fa2bf34bea52dceb59ad05d93f1c7f9c7d05b6_ppc64le as a component of Red Hat OpenShift Container Platform 4.16openshift4/driver-toolkit-rhel9@sha256:4ac87ac404534c5e22c7583666fa2bf34bea52dceb59ad05d93f1c7f9c7d05b6_ppc64le
Red Hatopenshift4/ose-cluster-machine-approver-rhel9@sha256:22b597df7012d928d0cd124008bd775b21393a9e250688f4f20162e2415110a8_ppc64le as a component of Red Hat OpenShift Container Platform 4.16openshift4/ose-cluster-machine-approver-rhel9@sha256:22b597df7012d928d0cd124008bd775b21393a9e250688f4f20162e2415110a8_ppc64le
Red Hatopenshift4/ose-pod-rhel9@sha256:7f46e78078ce043688e3762a4985101a751551a7dcf99e8eed2106537e6e5892_amd64 as a component of Red Hat OpenShift Container Platform 4.16*, *, *
Red Hatopenshift4/ose-installer-artifacts-rhel9@sha256:968859ad2806cf6015667825295ccc01621bbf0eb32332d020ec1671281592e8_arm64 as a component of Red Hat OpenShift Container Platform 4.16openshift4/ose-installer-artifacts-rhel9@sha256:968859ad2806cf6015667825295ccc01621bbf0eb32332d020ec1671281592e8_arm64
Red Hatopenshift4/ose-openshift-controller-manager-rhel9@sha256:bf65670258c5075223e029682be6321ae78874d3781fe6cf519ea6716574529b_ppc64le as a component of Red Hat OpenShift Container Platform 4.16*, *, *
Red Hatopenshift4/ose-cluster-node-tuning-rhel9-operator@sha256:79aee3e0a22813e5d740a8cd16903d81600abc2a1816194df4e560af851d565c_s390x as a component of Red Hat OpenShift Container Platform 4.16openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:79aee3e0a22813e5d740a8cd16903d81600abc2a1816194df4e560af851d565c_s390x
Red Hatopenshift4/oc-mirror-plugin-rhel9@sha256:f5e545ba9260068217c2efba5608dd3f071b9eb32395d881401aaeca0250dde8_amd64 as a component of Red Hat OpenShift Container Platform 4.16*, *, *
Red Hatopenshift4/ose-machine-config-rhel9-operator@sha256:7d7cdcdf5acb4e8019e42c13e0c20c63305577f14a1b2360913b318020b1af08_ppc64le as a component of Red Hat OpenShift Container Platform 4.16*
Red Hatopenshift4/ose-hypershift-rhel9@sha256:bfb1431e85180dff6f49a5eed50a51cf5a9dbd62870a764da4d101945b18edf7_arm64 as a component of Red Hat OpenShift Container Platform 4.16*, *, *
Red Hatrhcos@sha256:42cff8389b798df1496ee30da37cd9e27c2e423c9113042ef60e28c318af3ab7_aarch64 as a component of Red Hat OpenShift Container Platform 4.16rhcos@sha256:42cff8389b798df1496ee30da37cd9e27c2e423c9113042ef60e28c318af3ab7_aarch64
Red Hatopenshift4/ose-cluster-machine-approver-rhel9@sha256:492a166ce0afdf451f9e6feb7ed0a2afff35974425e8a5418fbce225ddc3ca70_amd64 as a component of Red Hat OpenShift Container Platform 4.16*

…and 217 more

Timeline

  • Jan 29, 2025 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Jul 19, 2026 CVE Updated

References

…and 25 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›