CVE-2025-8058

Medium

Advisory

Published 23 Jul 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.002; 6th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,516; of 17,803 indexed, latest versions
Container images: 1,706; deployed by those charts
Fix available: 3 of 4; affected packages

Red Hat Security Advisory: glibc security update

Carried by container images the latest versions of 1,516 of 17,803 indexed charts deploy, on 1,706 images.

Affected package	Affected versions	Fixed in	Images
glibcdeb	2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+43 more	2.23-0ubuntu11.3+esm9, 2.27-3ubuntu1.6+esm6, 2.31-0ubuntu9.18+esm1, 2.35-0ubuntu3.11+2 more	1,388
glibcapk	2.37-r6, 2.38-r6, 2.39-r7, 2.40-r1+4 more	2.41-r56	12
eglibcdeb	2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 more	no fix listed	7
glibcrpm	2.26-lp151.18.7, 2.28-42.el8_0.1, 2.28-72.el8_1.1, 2.28-101.el8+38 more	0:2.28-251.el8_10.25, 0:2.34-168.el9_6.23, 2.42-1.1	299

OSV records: CGA-cw79-fpr6-v2rx DEBIAN-CVE-2025-8058 RHSA-2025:12748 RHSA-2025:12980 RLSA-2025:12748 RLSA-2025:12980 UBUNTU-CVE-2025-8058 openSUSE-SU-2025:15459-1
Also known as: CGA-pgc4-x5mq-893r, USN-7760-1, USN-8005-1

Charts affected

1,516 by stars

Chart

Latest

Affected images

Radar Score

openebswenerme

3.10.0

2 of 3 See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2025-8058.

Container image	Digest	Package	Fixed in
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.11
openebs/node-disk-operator :2.1.0	6afe2123c457	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.11

Open the chart page →

10,613

wexa-studiowexa-studio

1.2.0

3 of 15 See more

wexa-studio wexa-studio 1.2.0

3 of the 15 container images this version deploys carry CVE-2025-8058.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2024-01-16T16-07-38Z	4c4a4876193f	glibc@2.34-83.el9_3.7	0:2.34-168.el9_6.23
qdrant/qdrant :v1.7.4	5f2a56b95266	glibc@2.36-9+deb12u3	2.36-9+deb12u13
quay.io/mongodb/mongodb-kubernetes-operator :0.9.0	5ee4bd681085	glibc@2.28-251.el8_10.22	0:2.28-251.el8_10.25

Open the chart page →

15,376

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2025-8058.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	glibc@2.35-0ubuntu3.5	2.35-0ubuntu3.11

Open the chart page →

9,354

keycloakwiremind

25.3.1

1 of 2 See more

keycloak wiremind 25.3.1

1 of the 2 container images this version deploys carry CVE-2025-8058.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	glibc@2.36-9+deb12u10	2.36-9+deb12u13

Open the chart page →

7,741

kibanawiremind

8.5.23

1 of 2 See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2025-8058.

Container image	Digest	Package	Fixed in
library/kibana :8.18.0	04c0fc150f3a	glibc@2.31-0ubuntu9.17	2.31-0ubuntu9.18+esm1

Open the chart page →

6,350

marge-botwiremind

1.4.4

1 of 1 See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2025-8058.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.14.0	dcffb926e563	glibc@2.36-9+deb12u3	2.36-9+deb12u13

Open the chart page →

5,584

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-8058.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	glibc@2.35-0ubuntu3.8	2.35-0ubuntu3.11

Open the chart page →

14,226

workshop-pipelinesworkshop-pipelines

0.1.6

2 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

2 of the 2 container images this version deploys carry CVE-2025-8058.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	glibc@2.36-9+deb12u9	2.36-9+deb12u13
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	glibc@2.28-164.el8_5.3	0:2.28-251.el8_10.25

Open the chart page →

11,643

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2025-8058.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	glibc@2.36-9+deb12u7	2.36-9+deb12u13

Open the chart page →

7,672

xkopsxkops

0.1.0

3 of 5 See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2025-8058.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	glibc@2.36-9+deb12u8	2.36-9+deb12u13
hamzaarshad10/querypodpy :1.7	154f38e8668e	glibc@2.36-9+deb12u8	2.36-9+deb12u13
murtazashah46/helmfile :latest	4d11726cf803	glibc@2.36-9+deb12u8	2.36-9+deb12u13

Open the chart page →

13,875

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-8058.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	glibc@2.39-0ubuntu8.1	2.39-0ubuntu8.6

Open the chart page →

2,156

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-8058.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	glibc@2.36-9+deb12u4	2.36-9+deb12u13

Open the chart page →

2,710

zahori-schedulerzahori

1.0.1

1 of 1 See more

zahori-scheduler zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-8058.

Container image	Digest	Package	Fixed in
zahoriaut/zahori-scheduler :1.0.0	47d0979b1184	glibc@2.27-3ubuntu1.6	2.27-3ubuntu1.6+esm6

Open the chart page →

2,477

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-8058.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	glibc@2.28-211.el8	0:2.28-251.el8_10.25

Open the chart page →

6,021

posthogzeet

0.23.2

1 of 9 See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2025-8058.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	glibc@2.28-211.el8	0:2.28-251.el8_10.25

Open the chart page →

3,700

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-8058.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	glibc@2.27-3ubuntu1.4	2.27-3ubuntu1.6+esm6
yandex/clickhouse-server :21.3.20	4eccfffb01d7	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.18+esm1

Open the chart page →

9,280

Container images carrying it

1,706 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
registry.k8s.io/dns/k8s-dns-node-cache :1.23.0	81a13703d6b8	glibc@2.36-9+deb12u3	2.36-9+deb12u13	1
registry.k8s.io/dns/k8s-dns-node-cache :1.23.1	e3dccb1a21d1	glibc@2.36-9+deb12u7	2.36-9+deb12u13	1
registry.k8s.io/git-sync/git-sync :v4.1.0	fd9722fd02e3	glibc@2.36-9+deb12u3	2.36-9+deb12u13	1
registry.k8s.io/node-problem-detector/node-problem-detector :v0.8.20	52f0618e9bc2	glibc@2.36-9+deb12u8	2.36-9+deb12u13	1
registry.k8s.io/sig-storage/local-volume-provisioner :v2.8.0	3e2bf2eaef9f	glibc@2.36-9+deb12u10	2.36-9+deb12u13	1
registry.k8s.io/sig-storage/nfsplugin :v4.11.0	ce5b5ccd5eb0	glibc@2.36-9+deb12u10	2.36-9+deb12u13	1