Red Hat Security Advisory

RHSA-2025:11386

updated RHEL-8 based Middleware Containers container images

Released 2025-07-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Middleware Containers for OpenShift rhpam-7/rhpam-businesscentral-monitoring-rhel8, rhpam-7/rhpam-businesscentral-rhel8, rhpam-7/rhpam-controller-rhel8 +6

Fixes 4 records

TI-2024-11791 CVE-2024-12718 · GHSA-2pg8-h2j6-28xm

Bypass extraction filter to modify file metadata outside extraction directory

MEDIUM 63

Allows modifying some file metadata (e.g.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00825 Published 2025-06-03 Fixed in 3.9.23, 3.10.18 +4 CWE-22

TI-2025-04033 CVE-2025-4517 · GHSA-6r6c-684h-9j7p

Arbitrary writes via tarfile realpath overflow

MEDIUM 51

Allows arbitrary filesystem writes outside the extraction directory during extraction with filter="data".

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.0148 Published 2025-06-03 Fixed in 3.9.23, 3.10.18 +4 CWE-22

TI-2025-03675 CVE-2025-4138 · GHSA-4g4g-fqw4-prp2

Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory

MEDIUM 42

Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01487 Published 2025-06-03 Fixed in 3.9.23, 3.10.18 +4 CWE-22

TI-2025-05440 CVE-2025-6020

Linux-pam: linux-pam directory traversal

LOW 36

A flaw was found in linux-pam.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00472 Published 2025-06-17 Fixed in 1.7.1, 1.6.1-8.el10 +49 CWE-22