CVE-2025-8058
MediumAdvisory
Published 23 Jul 2025In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.9
- base score, highest
- EPSS
- 0.002
- 6th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,516
- of 17,792 indexed, latest versions
- Container images
- 1,706
- deployed by those charts
- Fix available
- 3 of 4
- affected packages
Red Hat Security Advisory: glibc security update
Carried by container images the latest versions of 1,516 of 17,792 indexed charts deploy, on 1,706 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| glibcdeb | 2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+43 more | 2.23-0ubuntu11.3+esm9, 2.27-3ubuntu1.6+esm6, 2.31-0ubuntu9.18+esm1, 2.35-0ubuntu3.11+2 more | 1,388 |
| glibcapk | 2.37-r6, 2.38-r6, 2.39-r7, 2.40-r1+4 more | 2.41-r56 | 12 |
| eglibcdeb | 2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 more | no fix listed | 7 |
| glibcrpm | 2.26-lp151.18.7, 2.28-42.el8_0.1, 2.28-72.el8_1.1, 2.28-101.el8+38 more | 0:2.28-251.el8_10.25, 0:2.34-168.el9_6.23, 2.42-1.1 | 299 |
- OSV records
- CGA-cw79-fpr6-v2rxDEBIAN-CVE-2025-8058RHSA-2025:12748RHSA-2025:12980RLSA-2025:12748RLSA-2025:12980UBUNTU-CVE-2025-8058openSUSE-SU-2025:15459-1
- Also known as
- CGA-pgc4-x5mq-893r, USN-7760-1, USN-8005-1
Charts affected
1,516 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| openebswenerme | 3.10.0 | 2 of 3See more | 10,602 |
| wexa-studiowexa-studio | 1.2.0 | 3 of 15See more | 15,056 |
| jaegerwikimedia | 3.1.2 | 1 of 4See more | 9,340 |
| keycloakwiremindVerified publisher | 25.3.1 | 1 of 2See more | 7,687 |
| kibanawiremindVerified publisher | 8.5.23 | 1 of 2See more | 6,336 |
| marge-botwiremindVerified publisher | 1.4.4 | 1 of 1See more | 5,566 |
| playwright-synthetic-monitoringwork-adventure | 1.0.1 | 1 of 1See more | 14,218 |
| workshop-pipelinesworkshop-pipelines | 0.1.6 | 2 of 2See more | 11,622 |
| tabbyxdVerified publisher | 1.0.6 | 1 of 2See more | 7,714 |
| xkopsxkops | 0.1.0 | 3 of 5See more | 13,813 |
| xlinexline | 0.0.1 | 1 of 1See more | 2,152 |
| api-snapyoukadevVerified publisher | 0.1.1 | 1 of 1See more | 2,692 |
| zahori-schedulerzahoriVerified publisher | 1.0.1 | 1 of 1See more | 2,474 |
| keycloakxzaks | 2.2.0 | 1 of 1See more | 6,017 |
| posthogzeet | 0.23.2 | 1 of 9See more | 3,697 |
| clickhousezloi-space | 1.2.0 | 2 of 3See more | 9,272 |
Container images carrying it
1,706 by charts deploying them
A fixed version is listed for 3 of the 4 affected packages.