scandy

registry.access.redhat.com/ubi10-micro

With RPM updates as of

Show kernel-headers

ID	Age	Component	Trivy Severity	Grype Severity	Red Hat Severity	Scandy Opinion
CVE-2025-5278	10	coreutils-single		Medium	Moderate

© 2024 Anthony Green

Scandy is an experiment by Anthony Green, the source code for which is available under the terms of the MIT license at https://github.com/atgreen/scandy. Scandy 'opinions' are not comprehensive and in some cases may be incorrect. Submit new opinions as pull requests, and questions or comments as github issues.

registry.access.redhat.com/ubi10-micro

Security Advisory: CVE-2025-5278

Description:

A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.

Locations:

coreutils-single-9.5-6.el10

References:

https://access.redhat.com/security/cve/CVE-2025-5278
https://www.cve.org/CVERecord?id=CVE-2025-5278 https://nvd.nist.gov/vuln/detail/CVE-2025-5278