Threats Tagged 'cve-2025-4138'

The Red Hat Storage Ceph container images are based on the latest ubi9 base image and Ceph 8.1. This release updates to the latest version.

Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their operating systems, and relevant configuration data stored within them. Discovery also identifies and reports more detailed facts for some versions of key Red Hat packages and products that it finds in the network.

The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to developers working within your Kubernetes cluster.

CVE-2025-4138 is a path traversal vulnerability in the Python tarfile module that allows the extraction filter to be bypassed, enabling symlink targets to point outside the intended extraction directory and permitting modification of some file metadata. This affects usage of TarFile.extractall() or TarFile.extract() when using the filter parameter set to "data" or "tar". The default filter value changed to "data" starting with Python 3.14, so code relying on this default is also affected. This vulnerability does not significantly impact source distribution installations, which already allow arbitrary code execution during build.