CVE-2025-5278

Medium

Advisory

Published 27 May 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.4; base score, highest
EPSS: 0.003; 22nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,554; of 17,821 indexed, latest versions
Container images: 2,613; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: coreutils security update

Carried by container images the latest versions of 2,554 of 17,821 indexed charts deploy, on 2,613 images.

Affected package	Affected versions	Fixed in	Images
coreutilsdeb	8.21-1ubuntu5, 8.21-1ubuntu5.1, 8.21-1ubuntu5.4, 8.25-2ubuntu2+17 more	8.32-4.1ubuntu1.4, 9.4-3ubuntu6.3, 9.7-3ubuntu2.1	2,440
coreutilsrpm	8.29-lp151.3.3, 8.29-lp152.4.7, 8.32-32.el9, 8.32-34.el9+7 more	0:8.32-41.el9_8, 0:9.5-8.el10_2, 8.32-150400.9.9.1, 9.4-7+1 more	155
coreutils-fromdeb	9.5-1ubuntu2+0.0.0~ubuntu24, 9.5-1ubuntu2+0.0.0~ubuntu25	9.7-3ubuntu2.1	77

OSV records: DEBIAN-CVE-2025-5278 RHSA-2026:28911 RHSA-2026:33124 RLSA-2026:28911 UBUNTU-CVE-2025-5278 AZL-93060 openSUSE-SU-2025:15327-1 SUSE-SU-2025:02362-1
Also known as: USN-8697-1

Charts affected

2,554 by stars

Chart

Latest

Affected images

Radar Score

changedetection-iozekker6

1.102.0

1 of 1 See more

changedetection-io zekker6 1.102.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.7	096dae27b5d6	coreutils@9.1-1	no fix listed

Open the chart page →

2,710

NEW_APPzekker6

0.0.0

1 of 1 See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
library/nginx :latest	abe47724e466	coreutils@9.7-3	no fix listed

Open the chart page →

1,593

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	coreutils@8.28-1ubuntu1	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	coreutils@8.30-3ubuntu2	no fix listed

Open the chart page →

9,297

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	coreutils@8.32-4.1ubuntu1.3	8.32-4.1ubuntu1.4

Open the chart page →

7,966

Container images carrying it

2,613 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/nginx :1.27	6784fb0834aa	coreutils@9.1-1	no fix listed	1
library/nginx :1.25.1	67f9a4f10d14	coreutils@9.1-1	no fix listed	1
library/nginx :1.25.4	9ff236ed47fe	coreutils@9.1-1	no fix listed	1
library/nginx :1.31	a53fc6c27208	coreutils@9.7-3	no fix listed	1
library/nginx :latest	cfb8a89ac237	coreutils@9.7-3	no fix listed	1
library/nginx :1.27.3	fb197595ebe7	coreutils@9.1-1	no fix listed	1
library/node :22-bookworm-slim	48e4b67d85f8	coreutils@9.1-1	no fix listed	1
library/node :20	8f693eaa7e0a	coreutils@9.1-1	no fix listed	1
library/node :lts	be23f54a88d3	coreutils@9.1-1	no fix listed	1
library/node :latest	f5d1cc40abc1	coreutils@9.7-3	no fix listed	1
library/php :8.4-fpm	59fa733c9af6	coreutils@9.7-3	no fix listed	1
library/phpmyadmin :5.2.3-apache	adc486045303	coreutils@9.7-3	no fix listed	1
library/postgres :18.0	073e7c8b84e2	coreutils@9.7-3	no fix listed	1
library/postgres :17.4	304ab8135187	coreutils@9.1-1	no fix listed	1
library/postgres :18.4	3a82e1f56c8f	coreutils@9.7-3	no fix listed	1
library/postgres :16.11	468e1f126ca5	coreutils@9.7-3	no fix listed	1
library/postgres :16.6	557fea37a744	coreutils@9.1-1	no fix listed	1
library/postgres :18.3	69e8582b781c	coreutils@9.7-3	no fix listed	1
library/postgres :15.18	6eb0add3b77c	coreutils@9.7-3	no fix listed	1
library/postgres :15.3	8775adb39f0d	coreutils@9.1-1	no fix listed	1
library/postgres :18.4	8ff36f3c6637	coreutils@9.7-3	no fix listed	1
library/postgres :18.3	a9abf4275f9e	coreutils@9.7-3	no fix listed	1
library/postgres :17.5	aadf2c0696f5	coreutils@9.7-3	no fix listed	1
library/postgres :13.12	ced3ba927f4c	coreutils@9.1-1	no fix listed	1
library/postgres :15.18-bookworm	e8db9bd3e9e1	coreutils@9.1-1	no fix listed	1
library/postgres :14.22	eba8ddbdd837	coreutils@9.7-3	no fix listed	1
library/postgres :17.10	ebba4f4de37f	coreutils@9.7-3	no fix listed	1
library/postgres :17.5-bookworm	fbcea1bd13b6	coreutils@9.1-1	no fix listed	1
library/python :3.10	70c9cc675605	coreutils@9.7-3	no fix listed	1
library/python :3.12-slim	78387bc3881b	coreutils@9.7-3	no fix listed	1
library/python :3.11-slim	9534e5a8e315	coreutils@9.7-3	no fix listed	1
library/python :3.8	d41127070014	coreutils@9.1-1	no fix listed	1
library/python :3.9	da5aee29682d	coreutils@9.7-3	no fix listed	1
library/rabbitmq :3.12.10	0742852455ad	coreutils@8.32-4.1ubuntu1	8.32-4.1ubuntu1.4	1
library/rabbitmq :3.11.5-management	1b0f675d2f24	coreutils@8.30-3ubuntu2	no fix listed	1
library/rabbitmq :4.2.8	7561d672fae4	coreutils@9.4-3ubuntu6.2	9.4-3ubuntu6.3	1
library/rabbitmq :3.7-management	b6dd45cc35b3	coreutils@8.28-1ubuntu1	no fix listed	1
library/rabbitmq :4.3.4-management	eb5295d08332	coreutils@9.4-3ubuntu6.2	9.4-3ubuntu6.3	1
library/redis :8.6.2	009cc37796fb	coreutils@9.7-3	no fix listed	1
library/redis :8.8.0	234c902a2db4	coreutils@9.7-3	no fix listed	1
library/redis :7.0.15	352c1fdadc91	coreutils@9.1-1	no fix listed	1
library/redis :8.4.0	3906b477e4b6	coreutils@9.1-1	no fix listed	1
library/redis :8.8.1-trixie	3eafabb4c93f	coreutils@9.7-3	no fix listed	1
library/redis :8.2.2	4521b581dbdd	coreutils@9.1-1	no fix listed	1
library/redis :8.6.3	4d25e2fe601f	coreutils@9.7-3	no fix listed	1
library/redis :8.2.1	5fa2edb1e408	coreutils@9.1-1	no fix listed	1
library/redis :7.2 :7.2-bookworm	74566c6910d1	coreutils@9.1-1	no fix listed	1
library/redis	83edc2b8e9ff	coreutils@9.1-1	no fix listed	1
library/redis :8.4	8df317692c59	coreutils@9.7-3	no fix listed	1
library/redis :8.0.2	b43d2dcbbdb1	coreutils@9.1-1	no fix listed	1