VDB

RHSA-2025%3A1120

RHSA-2025%3A1120 PUBLISHED CVSS 7.800000190734863 HIGH

A flaw was found in the tempfile.TemporaryDirectory class in python3/cpython3. The class may dereference symbolic links during permission-related errors, resulting in users that run privileged programs being able to modify permissions of files referenced by the symbolic link.

Risk Scores

CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

Affected Products

VendorProductVersions
Red Hatopenshift4/ose-baremetal-installer-rhel9@sha256:8a524f99319abd11bd361d4f62be855df05a49a27e35b5e61395b240f440794a_ppc64le as a component of Red Hat OpenShift Container Platform 4.17*, *, *
Red Hatopenshift4/frr-rhel9@sha256:38b401bc3a125738b5382e90b4132c2ac1b028fcf8e2db7bc64a7741de126e67_s390x
Red Hatopenshift4/ose-must-gather-rhel9@sha256:91dfc5e2b6494e663c0e58ba94ddd5c166472f7257380e41948bb903bce1dddd_ppc64le as a component of Red Hat OpenShift Container Platform 4.17*
Red Hatopenshift4/ose-console-rhel9@sha256:c938f308c93d56bace611d043e63aab1ce965b3fe43ba325f29e6d35c6d6b771_arm64 as a component of Red Hat OpenShift Container Platform 4.17*, *, *
Red Hatopenshift4/ose-tests-rhel9@sha256:06663c582eb7fbdacceab1e106e1fa7ce0e3ee370d0a78e0f1fea318acd72e15_amd64 as a component of Red Hat OpenShift Container Platform 4.17openshift4/ose-tests-rhel9@sha256:06663c582eb7fbdacceab1e106e1fa7ce0e3ee370d0a78e0f1fea318acd72e15_amd64
Red Hatopenshift4/ose-agent-installer-api-server-rhel9@sha256:e3222425d80b3efbd311f9ecc25ae9e81d595204cfb59eb1e958bae07321241b_amd64 as a component of Red Hat OpenShift Container Platform 4.17openshift4/ose-agent-installer-api-server-rhel9@sha256:e3222425d80b3efbd311f9ecc25ae9e81d595204cfb59eb1e958bae07321241b_amd64
Red Hatopenshift4/ose-console-rhel9@sha256:c938f308c93d56bace611d043e63aab1ce965b3fe43ba325f29e6d35c6d6b771_arm64 as a component of Red Hat OpenShift Container Platform 4.17openshift4/ose-console-rhel9@sha256:c938f308c93d56bace611d043e63aab1ce965b3fe43ba325f29e6d35c6d6b771_arm64
Red Hatrhcos@sha256:6e5965b847f930b4d49b8a84bb437446f7b0636fca7d8cd8e748d1203d3461fc_x86_64 as a component of Red Hat OpenShift Container Platform 4.17*, *, *
Red Hatopenshift4/ose-hypershift-rhel9@sha256:5b138c670b58c7093706832fa9730b3e4c9019f3eb3b0fa0c77713e698f0b3fc_amd64 as a component of Red Hat OpenShift Container Platform 4.17*, *, *
Red Hatopenshift4/ose-cluster-node-tuning-rhel9-operator@sha256:79fc3e57ff238130a8c7c9ec78d3510f77daabf0f7ec942d82d578ce1bd81f1a_s390x as a component of Red Hat OpenShift Container Platform 4.17*, *, *
Red Hatopenshift4/ose-hypershift-rhel9@sha256:5fec01367dc85a0fd018f60c12c457501dcbe155a6e06113623ab70579350017_s390x as a component of Red Hat OpenShift Container Platform 4.17openshift4/ose-hypershift-rhel9@sha256:5fec01367dc85a0fd018f60c12c457501dcbe155a6e06113623ab70579350017_s390x
Red Hatopenshift4/ose-console-rhel9@sha256:635b46b3f65466d484c742f0541a5d86fe7542d4067976ff6e52c957c07de252_s390x as a component of Red Hat OpenShift Container Platform 4.17openshift4/ose-console-rhel9@sha256:635b46b3f65466d484c742f0541a5d86fe7542d4067976ff6e52c957c07de252_s390x
Red Hatopenshift4/ose-agent-installer-api-server-rhel9@sha256:88f8232223ad481f33fa348ba8ecd0aa4289ae356f710776f15659e77f5a175f_arm64 as a component of Red Hat OpenShift Container Platform 4.17openshift4/ose-agent-installer-api-server-rhel9@sha256:88f8232223ad481f33fa348ba8ecd0aa4289ae356f710776f15659e77f5a175f_arm64
Red Hatopenshift4/ose-agent-installer-api-server-rhel9@sha256:96da2f8d90ba5746a5bd6d9e65b1896687b8db65ef98b3b9443a875dcf835e56_s390x as a component of Red Hat OpenShift Container Platform 4.17*, *, *
Red Hatopenshift4/ose-operator-marketplace-rhel9@sha256:d31f8b72242e979cc87cdf3b7108bbb5842b4a00132a0f51ab78b7e76af67ae5_amd64 as a component of Red Hat OpenShift Container Platform 4.17*
Red Hatopenshift4/ose-deployer-rhel9@sha256:8a411ad4f50076e6e4536183cf3d718630d3fa9c0afb2674a67e6c9d499493b1_ppc64le as a component of Red Hat OpenShift Container Platform 4.17openshift4/ose-deployer-rhel9@sha256:8a411ad4f50076e6e4536183cf3d718630d3fa9c0afb2674a67e6c9d499493b1_ppc64le
Red Hatopenshift4/ose-vmware-vsphere-csi-driver-rhel9-operator@sha256:8e5578d9c957daa902a1af16c4615d9ee829e83cfe3cc73c444929abd1b43aa1_amd64 as a component of Red Hat OpenShift Container Platform 4.17*
Red Hatopenshift4/ose-agent-installer-node-agent-rhel9@sha256:b3c1c8ed42106446e275b5701fe7f07cc4f1d5bb1c670ca76a844960a95dd249_amd64 as a component of Red Hat OpenShift Container Platform 4.17openshift4/ose-agent-installer-node-agent-rhel9@sha256:b3c1c8ed42106446e275b5701fe7f07cc4f1d5bb1c670ca76a844960a95dd249_amd64
Red Hatopenshift4/ose-vmware-vsphere-csi-driver-rhel9-operator@sha256:8e5578d9c957daa902a1af16c4615d9ee829e83cfe3cc73c444929abd1b43aa1_amd64 as a component of Red Hat OpenShift Container Platform 4.17*, *, *

…and 159 more

Timeline

  • Feb 11, 2025 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Jul 19, 2026 CVE Updated

References

…and 18 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›