CVE-2025-5278

Medium

Advisory

Published 27 May 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.4; base score, highest
EPSS: 0.003; 22nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,554; of 17,821 indexed, latest versions
Container images: 2,613; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: coreutils security update

Carried by container images the latest versions of 2,554 of 17,821 indexed charts deploy, on 2,613 images.

Affected package	Affected versions	Fixed in	Images
coreutilsdeb	8.21-1ubuntu5, 8.21-1ubuntu5.1, 8.21-1ubuntu5.4, 8.25-2ubuntu2+17 more	8.32-4.1ubuntu1.4, 9.4-3ubuntu6.3, 9.7-3ubuntu2.1	2,440
coreutilsrpm	8.29-lp151.3.3, 8.29-lp152.4.7, 8.32-32.el9, 8.32-34.el9+7 more	0:8.32-41.el9_8, 0:9.5-8.el10_2, 8.32-150400.9.9.1, 9.4-7+1 more	155
coreutils-fromdeb	9.5-1ubuntu2+0.0.0~ubuntu24, 9.5-1ubuntu2+0.0.0~ubuntu25	9.7-3ubuntu2.1	77

OSV records: DEBIAN-CVE-2025-5278 RHSA-2026:28911 RHSA-2026:33124 RLSA-2026:28911 UBUNTU-CVE-2025-5278 AZL-93060 openSUSE-SU-2025:15327-1 SUSE-SU-2025:02362-1
Also known as: USN-8697-1

Charts affected

2,554 by stars

Chart

Latest

Affected images

Radar Score

changedetection-iozekker6

1.102.0

1 of 1 See more

changedetection-io zekker6 1.102.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.7	096dae27b5d6	coreutils@9.1-1	no fix listed

Open the chart page →

2,710

NEW_APPzekker6

0.0.0

1 of 1 See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
library/nginx :latest	abe47724e466	coreutils@9.7-3	no fix listed

Open the chart page →

1,593

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	coreutils@8.28-1ubuntu1	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	coreutils@8.30-3ubuntu2	no fix listed

Open the chart page →

9,297

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	coreutils@8.32-4.1ubuntu1.3	8.32-4.1ubuntu1.4

Open the chart page →

7,966

Container images carrying it

2,613 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
assistiot/sdn_controller :2.4.0	ea254b6d8a31	coreutils@8.30-3ubuntu2	no fix listed	1
assistiot/smart-orchestrator_mcs :latest	7d6a0d534c7f	coreutils@9.1-1	no fix listed	1
assistiot/smart-orchestrator_scheduler :latest	38b003e55ff3	coreutils@9.1-1	no fix listed	1
assistiot/smart-orchestrator_scheduler_mc :latest	b1dbe4d62a03	coreutils@9.1-1	no fix listed	1
assistiot/video_augmentation :runner-cpu-latest	e5ae539ce2cb	coreutils@8.30-3ubuntu2	no fix listed	1
athou/commafeed :6.2.0-postgresql	5e388351df1a	coreutils@9.7-3	no fix listed	1
atlassian/confluence-server :7.10.0	3b9222ab32ef	coreutils@8.32-4.1ubuntu1	8.32-4.1ubuntu1.4	1
atlassian/jira-software :8.14.0	37bc46cbec1a	coreutils@8.32-4.1ubuntu1.1	8.32-4.1ubuntu1.4	1
atlassian/jira-software :9.7.2	64a75aa4ec4e	coreutils@9.4-3ubuntu6	9.4-3ubuntu6.3	1
avaprotocol/ap-avs :1.2.0	c430ea5c37d6	coreutils@9.1-1	no fix listed	1
avinash263/pyredis263 :latest	aa2b8727f1a6	coreutils@9.1-1	no fix listed	1
avzini/web-app :latest	f40b30210ed0	coreutils@9.1-1	no fix listed	1
baserow/backend :2.3.3	7c00549b3a6f	coreutils@9.7-3	no fix listed	1
baserow/backend :1.31.1	e0b3c8130b91	coreutils@9.1-1	no fix listed	1
baserow/baserow :1.30.1	df0c42eb67e8	coreutils@9.1-1	no fix listed	1
baserow/web-frontend :2.3.3	566d24c7d9f5	coreutils@9.7-3	no fix listed	1
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	coreutils@8.30-3ubuntu2	no fix listed	1
bcgovimages/aries-cloudagent :py36-1.16-1_0.7.4	faa2e2d21916	coreutils@8.28-1ubuntu1	no fix listed	1
beanbag/reviewboard :latest	6b840f546e1c	coreutils@8.32-4.1ubuntu1.3	8.32-4.1ubuntu1.4	1
berkeleyskypilot/skypilot :0.13.0	3bc8bf8f4d83	coreutils@9.7-3	no fix listed	1
berkeleyskypilot/skypilot-nightly :latest	8da2f3cda472	coreutils@9.7-3	no fix listed	1
beyzkaya/blog-backend :v1.0.1	12a6a3d1c5f9	coreutils@9.1-1	no fix listed	1
bicarus/elrond-rosetta :v1.3.50.0	b1dab0721e1c	coreutils@8.30-3ubuntu2	no fix listed	1
bicarus/mx-notifier :1.1.8	bed688d16762	coreutils@8.30-3ubuntu2	no fix listed	1
bitnamilegacy/cassandra :4.1.7-debian-12-r3	2b7a217999a1	coreutils@9.1-1	no fix listed	1
bitnamilegacy/clickhouse :24.12.3-debian-12-r1	3cf6544f6c6c	coreutils@9.1-1	no fix listed	1
bitnamilegacy/clickhouse :24.12.4	c7e70bf1d3fb	coreutils@9.1-1	no fix listed	1
bitnamilegacy/clickhouse :24.6.2-debian-12-r3	dcc172c6c55f	coreutils@9.1-1	no fix listed	1
bitnamilegacy/consul :1.21.4-debian-12-r1	33ae872fc99d	coreutils@9.1-1	no fix listed	1
bitnamilegacy/elasticsearch :8.12.2	15d4647fd491	coreutils@9.1-1	no fix listed	1
bitnamilegacy/elasticsearch :9.0.1-debian-12-r0	e6f6ddcce2f1	coreutils@9.1-1	no fix listed	1
bitnamilegacy/git :latest	4b08d0c5af8d	coreutils@9.1-1	no fix listed	1
bitnamilegacy/grafana :11.4.0-debian-12-r0	cb8ab5515676	coreutils@9.1-1	no fix listed	1
bitnamilegacy/keycloak :24.0.4	cc599cbd15ff	coreutils@9.1-1	no fix listed	1
bitnamilegacy/keycloak :26.3.3-debian-12-r0	da3df0976a9f	coreutils@9.1-1	no fix listed	1
bitnamilegacy/kubectl :1.30	1249fc292e84	coreutils@9.1-1	no fix listed	1
bitnamilegacy/kubectl :1.31	64614ef8290f	coreutils@9.1-1	no fix listed	1
bitnamilegacy/kubectl :1.30.5	744f84cf7493	coreutils@9.1-1	no fix listed	1
bitnamilegacy/kubectl :1.29.3	f5fc0d561d9e	coreutils@9.1-1	no fix listed	1
bitnamilegacy/kube-state-metrics :2	04a3044b384b	coreutils@9.1-1	no fix listed	1
bitnamilegacy/mariadb :11.3.2-debian-12-r9	320c70dfd914	coreutils@9.1-1	no fix listed	1
bitnamilegacy/mariadb :11.2.6-debian-12-r0	373c3c260571	coreutils@9.1-1	no fix listed	1
bitnamilegacy/mariadb :11.4.3-debian-12-r0	8b3778160e34	coreutils@9.1-1	no fix listed	1
bitnamilegacy/mariadb :11.4.5-debian-12-r12	8bc50a0961a7	coreutils@9.1-1	no fix listed	1
bitnamilegacy/mariadb :11.4.7-debian-12-r2	90dc6acb7b2e	coreutils@9.1-1	no fix listed	1
bitnamilegacy/mariadb :latest	bbd4e17f1ef8	coreutils@9.1-1	no fix listed	1
bitnamilegacy/mariadb-galera :11.3.2-debian-12-r9	aee9c668098f	coreutils@9.1-1	no fix listed	1
bitnamilegacy/mariadb-galera :11.4.3-debian-12-r0	cb8beb6dbb58	coreutils@9.1-1	no fix listed	1
bitnamilegacy/matomo :5.3.2-debian-12-r13	f02c000c54b1	coreutils@9.1-1	no fix listed	1
bitnamilegacy/memcached :1.6.24-debian-12-r0	1d80b6a96f00	coreutils@9.1-1	no fix listed	1