CVE-2025-5278

Medium

Advisory

Published 27 May 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.4; base score, highest
EPSS: 0.003; 22nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,554; of 17,821 indexed, latest versions
Container images: 2,613; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: coreutils security update

Carried by container images the latest versions of 2,554 of 17,821 indexed charts deploy, on 2,613 images.

Affected package	Affected versions	Fixed in	Images
coreutilsdeb	8.21-1ubuntu5, 8.21-1ubuntu5.1, 8.21-1ubuntu5.4, 8.25-2ubuntu2+17 more	8.32-4.1ubuntu1.4, 9.4-3ubuntu6.3, 9.7-3ubuntu2.1	2,440
coreutilsrpm	8.29-lp151.3.3, 8.29-lp152.4.7, 8.32-32.el9, 8.32-34.el9+7 more	0:8.32-41.el9_8, 0:9.5-8.el10_2, 8.32-150400.9.9.1, 9.4-7+1 more	155
coreutils-fromdeb	9.5-1ubuntu2+0.0.0~ubuntu24, 9.5-1ubuntu2+0.0.0~ubuntu25	9.7-3ubuntu2.1	77

OSV records: DEBIAN-CVE-2025-5278 RHSA-2026:28911 RHSA-2026:33124 RLSA-2026:28911 UBUNTU-CVE-2025-5278 AZL-93060 openSUSE-SU-2025:15327-1 SUSE-SU-2025:02362-1
Also known as: USN-8697-1

Charts affected

2,554 by stars

Chart

Latest

Affected images

Radar Score

changedetection-iozekker6

1.102.0

1 of 1 See more

changedetection-io zekker6 1.102.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.7	096dae27b5d6	coreutils@9.1-1	no fix listed

Open the chart page →

2,710

NEW_APPzekker6

0.0.0

1 of 1 See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
library/nginx :latest	abe47724e466	coreutils@9.7-3	no fix listed

Open the chart page →

1,593

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	coreutils@8.28-1ubuntu1	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	coreutils@8.30-3ubuntu2	no fix listed

Open the chart page →

9,297

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	coreutils@8.32-4.1ubuntu1.3	8.32-4.1ubuntu1.4

Open the chart page →

7,966

Container images carrying it

2,613 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
bitnamilegacy/postgresql :16	233f361c5819	coreutils@9.1-1	no fix listed	4
bitnamilegacy/rabbitmq :4.1.2 :4.1.2-debian-12-r1	fac502149c40	coreutils@9.1-1	no fix listed	4
hyperledger/fabric-ca :latest	a70b6ba64a08	coreutils@8.32-4.1ubuntu1.3	8.32-4.1ubuntu1.4	4
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	coreutils@8.25-2ubuntu3~16.04	no fix listed	4
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	coreutils@8.25-2ubuntu3~16.04	no fix listed	4
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	coreutils@8.32-4.1ubuntu1	8.32-4.1ubuntu1.4	4
library/httpd :2.4 :2.4.68 :latest	979c38c2228d	coreutils@9.7-3	no fix listed	4
library/mongo :5.0-focal	5e15a3f014ed	coreutils@8.30-3ubuntu2	no fix listed	4
library/mongo :4.2.12-bionic	628741415fc9	coreutils@8.28-1ubuntu1	no fix listed	4
library/mongo :4.4.6	6efa05203990	coreutils@8.28-1ubuntu1	no fix listed	4
library/nginx :1.27.1	287ff321f9e3	coreutils@9.1-1	no fix listed	4
library/postgres :13	4689940c6838	coreutils@9.7-3	no fix listed	4
library/postgres :17	67f41722b7a8	coreutils@9.7-3	no fix listed	4
library/postgres :14	816cf7d06ec3	coreutils@9.7-3	no fix listed	4
library/postgres :15	dfbbb0ad8cab	coreutils@9.7-3	no fix listed	4
library/rabbitmq :3.11-management	c3f70098e01d	coreutils@8.32-4.1ubuntu1.1	8.32-4.1ubuntu1.4	4
library/redis :7.2 :7.2-bookworm	0637954999d0	coreutils@9.1-1	no fix listed	4
library/redis :7 :7.4 :7.4.11	71da9275c5f3	coreutils@9.1-1	no fix listed	4
library/redis :6 :6.2	e7b96daa9a18	coreutils@9.1-1	no fix listed	4
mastercloudapps/planner :v1.23	40a950b311b2	coreutils@8.32-4.1ubuntu1	8.32-4.1ubuntu1.4	4
minio/mc :latest :RELEASE.2025-08-13T08-35-41Z	a7fe349ef4bd	coreutils@8.32-39.el9	0:8.32-41.el9_8	4
opea/llm-tgi :1.0	0c25aab3f106	coreutils@9.1-1	no fix listed	4
oscarsotosanchez/weatherservice :v1.0	911ec961d10b	coreutils@8.28-1ubuntu1	no fix listed	4
shashkist/flask-contacts-app :latest	581de1fd6084	coreutils@9.1-1	no fix listed	4
valkey/valkey :9.0.2	930b41430fb7	coreutils@9.7-3	no fix listed	4
ghcr.io/foundry-rs/foundry :latest	0c00cb0bda1a	coreutils@8.32-4.1ubuntu1.3	8.32-4.1ubuntu1.4	4
quay.io/argoproj/argocd :v3.5.3	dd3f47d5a5e4	coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25	9.7-3ubuntu2.1	4
apache/apisix :3.18.0-ubuntu	9ee5df1611f9	coreutils@9.4-3ubuntu6.2	9.4-3ubuntu6.3	3
apache/superset :6.1.0 :latest	16b50bbef664	coreutils@9.1-1	no fix listed	3
bitnamilegacy/etcd :latest	99b408c15272	coreutils@9.1-1	no fix listed	3
bitnamilegacy/kubectl :latest	cd354d5b2556	coreutils@9.1-1	no fix listed	3
bitnamilegacy/os-shell :12-debian-12-r51	77e65e9d633e	coreutils@9.1-1	no fix listed	3
bitnamilegacy/pgpool :4.6.3-debian-12-r0	d3bf3910f148	coreutils@9.1-1	no fix listed	3
bitnamilegacy/postgresql :17.6.0-debian-12-r0	de520acd66fc	coreutils@9.1-1	no fix listed	3
bitnamilegacy/postgresql :14.13.0	df6ec02e2b9a	coreutils@9.1-1	no fix listed	3
bitnamilegacy/postgresql-repmgr :17.6.0-debian-12-r2	f12387ec882b	coreutils@9.1-1	no fix listed	3
bitnamilegacy/valkey-cluster :8.1.3-debian-12-r3	32869e769b7e	coreutils@9.1-1	no fix listed	3
ciscolabs/rtsp-client :latest	a7b60ec88285	coreutils@8.30-3ubuntu2	no fix listed	3
ciscolabs/rtsp-server :latest	b59fc10bb821	coreutils@8.30-3ubuntu2	no fix listed	3
cloudve/cloudlaunch-server :latest	4a3d7fae90bb	coreutils@8.30-3ubuntu2	no fix listed	3
codeurjc/planner :v1.0	800cf520c245	coreutils@8.32-4.1ubuntu1	8.32-4.1ubuntu1.4	3
dgraph/dgraph :v21.12.0	3b55ea83fffe	coreutils@8.30-3ubuntu2	no fix listed	3
dnationcloud/kubernetes-jsonnet-translator :2.0.1	78fed4f3c130	coreutils@9.1-1	no fix listed	3
emberstack/kubernetes-reflector :10.0.65	51dbd5880929	coreutils@9.4-3ubuntu6.2	9.4-3ubuntu6.3	3
envoyproxy/envoy :v1.31.0	2bf7f042e396	coreutils@8.32-4.1ubuntu1.2	8.32-4.1ubuntu1.4	3
gchq/hdfs :3.3.3	5ec58edbb2db	coreutils@9.4-3ubuntu6	9.4-3ubuntu6.3	3
guacamole/guacamole :1.6.0	f344085e618b	coreutils@9.4-3ubuntu6	9.4-3ubuntu6.3	3
istio/kubectl :1.5.10	dbb7726d1bf0	coreutils@8.28-1ubuntu1	no fix listed	3
jacobalberty/unifi :v10.0.162	896c0ab82d33	coreutils@8.30-3ubuntu2	no fix listed	3
library/httpd :2.4 :2.4.68 :latest	454942557d44	coreutils@9.7-3	no fix listed	3