CVE-2025-5278: Red Hat Cert Manager Support For Red Hat Openshift Release 1.20

Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days.

A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.

Affected products

Red Hat Cert Manager Support For Red Hat Openshift Release 1.20: before 1790598593 (fixed in 1790598593)
Red Hat Cost Management 4: before 1783539156 (fixed in 1783539156)
Red Hat Red Hat Discovery 2: before 1782756541 (fixed in 1782756541); before 1784821670 (fixed in 1784821670)
Red Hat Red Hat Enterprise Linux 10: before 0:9.5-8.el10_2 (fixed in 0:9.5-8.el10_2)
Red Hat Red Hat Enterprise Linux 6
Red Hat Red Hat Enterprise Linux 7
Red Hat Red Hat Enterprise Linux 8: before 0:8.30-21.el8_10 (fixed in 0:8.30-21.el8_10)
Red Hat Red Hat Enterprise Linux 9: before 0:8.32-41.el9_8 (fixed in 0:8.32-41.el9_8)
Red Hat Red Hat Insights Proxy 1.5: before 1782890503 (fixed in 1782890503)
Red Hat Red Hat Openshift Container Platform 4
Red Hat Red Hat Openshift Distributed Tracing 3.10.2: before 1782501180 (fixed in 1782501180); before 1782501200 (fixed in 1782501200); before 1782498923 (fixed in 1782498923); before 1782510941 (fixed in 1782510941); before 1782501220 (fixed in 1782501220); before 1782501196 (fixed in 1782501196); …
Red Hat Red Hat Update Infrastructure 5: before 1784794818 (fixed in 1784794818); before 1784794778 (fixed in 1784794778); before 1784795112 (fixed in 1784795112); before 1784794289 (fixed in 1784794289); before 1784795076 (fixed in 1784795076); before 1787241211 (fixed in 1787241211); …

Published 2025-05-27. Last modified 2026-09-29.