Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 22 articles for you...
219
security advisorymoderatecoreutilsRocky Linux Coreutils Moderate Heap Under-Read Vuln RLSA-2026-33124
Moderate: coreutils security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:33124", "synopsis": "Moderate: coreutils security update", "severity": "SEVERITY_MODERATE", "topic": "An update is available for coreutils.\nThis update affects Rocky Linux 10.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and textutils packages.\n\nSecurity Fix(es):\n\n* coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification (CVE-2025-5278)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 10"], "fixes": [{"ticket": "2368764", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2368764", "description": ""}], "cves": [{"name": "CVE-2025-5278", "sourceBy": "MITRE", "sourceLink": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5278", "cvss3ScoringVector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L", "cvss3BaseScore": "4.4", "cwe": "CWE-121"}], "references": [], "publishedAt": "2026-07-05T12:05:17.112177Z", "rpms": {"Rocky Linux 10": {"nvras": ["coreutils-single-debuginfo-0:9.5-8.el10_2.x86_64.rpm", "coreutils-debugsource-0:9.5-8.el10_2.x86_64.rpm", "coreutils-common-0:9.5-8.el10_2.s390x.rpm", "coreutils-debugsource-0:9.5-8.el10_2.ppc64le.rpm", "coreutils-debuginfo-0:9.5-8.el10_2.ppc64le.rpm", "coreutils-single-0:9.5-8.el10_2.aarch64.rpm", "coreutils-0:9.5-8.el10_2.aarch64.rpm", "coreutils-single-0:9.5-8.el10_2.s390x.rpm", "coreutils-debugsource-0:9.5-8.el10_2.aarch64.rpm", "coreutils-0:9.5-8.el10_2.s390x.rpm", "coreutils-debuginfo-0:9.5-8.el10_2.s390x.rpm","coreutils-single-debuginfo-0:9.5-8.el10_2.aarch64.rpm", "coreutils-0:9.5-8.el10_2.ppc64le.rpm", "coreutils-common-0:9.5-8.el10_2.aarch64.rpm", "coreutils-common-0:9.5-8.el10_2.ppc64le.rpm", "coreutils-debuginfo-0:9.5-8.el10_2.x86_64.rpm", "coreutils-0:9.5-8.el10_2.x86_64.rpm", "coreutils-debuginfo-0:9.5-8.el10_2.aarch64.rpm", "coreutils-common-0:9.5-8.el10_2.x86_64.rpm", "coreutils-single-0:9.5-8.el10_2.x86_64.rpm", "coreutils-single-0:9.5-8.el10_2.ppc64le.rpm", "coreutils-single-debuginfo-0:9.5-8.el10_2.ppc64le.rpm", "coreutils-single-debuginfo-0:9.5-8.el10_2.s390x.rpm", "coreutils-debugsource-0:9.5-8.el10_2.s390x.rpm", "coreutils-0:9.5-8.el10_2.src.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Coreutils security update for Rocky Linux 10 addresses a moderate severity issue related to heap buffer under-read. Patch now.. Rocky Linux coreutils patch heap buffer. . Severity: moderate. LinuxSecurity.com Team
Jul 05, 2026
•moderate
Rocky Linux
217
security advisorymoderatesecurity issueOracle Linux 9 Coreutils Moderate Heap Buffer Under-Read ELSA-2026-28911
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-28911 http://linux.oracle.com/errata/ELSA-2026-28911.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: coreutils-8.32-41.0.1.el9_8.x86_64.rpm coreutils-common-8.32-41.0.1.el9_8.x86_64.rpm coreutils-single-8.32-41.0.1.el9_8.x86_64.rpm aarch64: coreutils-8.32-41.0.1.el9_8.aarch64.rpm coreutils-common-8.32-41.0.1.el9_8.aarch64.rpm coreutils-single-8.32-41.0.1.el9_8.aarch64.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates/coreutils-8.32-41.0.1.el9_8.src.rpm Related CVEs: CVE-2025-5278 Description of changes: [8.32-41.0.1] - clean up empty file if cp is failed [Orabug 15973168] [9.5-8] - CVE-2025-5278 - Fix Heap Buffer Under-Read in sort via Key Specification (RHEL-180331) _______________________________________________ El-errata mailing list
Jun 26, 2026
•moderate
Oracle
219
security advisorymoderatethreatRocky Linux 9 Coreutils Moderate Heap Buffer Issue RLSA-2026-28911
Moderate: coreutils security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:28911", "synopsis": "Moderate: coreutils security update", "severity": "SEVERITY_MODERATE", "topic": "An update is available for coreutils.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and textutils packages.\n\nSecurity Fix(es):\n\n* coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification (CVE-2025-5278)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 9"], "fixes": [{"ticket": "2368764", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2368764", "description": ""}], "cves": [{"name": "CVE-2025-5278", "sourceBy": "MITRE", "sourceLink": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5278", "cvss3ScoringVector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L", "cvss3BaseScore": "4.4", "cwe": "CWE-121"}], "references": [], "publishedAt": "2026-06-25T12:03:43.452279Z", "rpms": {"Rocky Linux 9": {"nvras": ["coreutils-0:8.32-41.el9_8.aarch64.rpm", "coreutils-0:8.32-41.el9_8.ppc64le.rpm", "coreutils-0:8.32-41.el9_8.s390x.rpm", "coreutils-0:8.32-41.el9_8.src.rpm", "coreutils-0:8.32-41.el9_8.x86_64.rpm", "coreutils-common-0:8.32-41.el9_8.aarch64.rpm", "coreutils-common-0:8.32-41.el9_8.ppc64le.rpm", "coreutils-common-0:8.32-41.el9_8.s390x.rpm", "coreutils-common-0:8.32-41.el9_8.x86_64.rpm", "coreutils-debuginfo-0:8.32-41.el9_8.aarch64.rpm", "coreutils-debuginfo-0:8.32-41.el9_8.ppc64le.rpm", "coreutils-debuginfo-0:8.32-41.el9_8.s390x.rpm","coreutils-debuginfo-0:8.32-41.el9_8.x86_64.rpm", "coreutils-debugsource-0:8.32-41.el9_8.aarch64.rpm", "coreutils-debugsource-0:8.32-41.el9_8.ppc64le.rpm", "coreutils-debugsource-0:8.32-41.el9_8.s390x.rpm", "coreutils-debugsource-0:8.32-41.el9_8.x86_64.rpm", "coreutils-single-0:8.32-41.el9_8.aarch64.rpm", "coreutils-single-0:8.32-41.el9_8.ppc64le.rpm", "coreutils-single-0:8.32-41.el9_8.s390x.rpm", "coreutils-single-0:8.32-41.el9_8.x86_64.rpm", "coreutils-single-debuginfo-0:8.32-41.el9_8.aarch64.rpm", "coreutils-single-debuginfo-0:8.32-41.el9_8.ppc64le.rpm", "coreutils-single-debuginfo-0:8.32-41.el9_8.s390x.rpm", "coreutils-single-debuginfo-0:8.32-41.el9_8.x86_64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. A moderate coreutils security fix is available for Rocky Linux 9, addressing heap buffer issues in GNU Core Utilities.. Rocky Linux Core Utilities Security Fix Heap Buffer. . Severity: moderate. LinuxSecurity.com Team
Jun 25, 2026
•moderate
Rocky Linux
100
security advisorymoderateSuSESUSE: coreutils Moderate Heap Buffer Overflow Vuln 2025:20660-1
* bsc#1243767 Cross-References: * CVE-2025-5278 . # Security update for coreutils Announcement ID: SUSE-SU-2025:20660-1 Release Date: 2025-08-28T15:15:06Z Rating: moderate References: * bsc#1243767 Cross-References: * CVE-2025-5278 CVSS scores: * CVE-2025-5278 ( SUSE ): 2.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2025-5278 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2025-5278 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L Affected Products: * SUSE Linux Micro 6.1 An update that solves one vulnerability can now be installed. ## Description: This update for coreutils fixes the following issues: * CVE-2025-5278: Sort with key character offsets of SIZE_MAX, could induce a read of 1 byte before an allocated heap buffer (bsc#1243767). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-238=1 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * coreutils-debugsource-9.4-slfo.1.1_2.1 * coreutils-debuginfo-9.4-slfo.1.1_2.1 * coreutils-9.4-slfo.1.1_2.1 ## References: * https://www.suse.com/security/cve/CVE-2025-5278.html * https://bugzilla.suse.com/show_bug.cgi?id=1243767 . Security patch for coreutils targeting CVE-2025-5278 resolves a heap overflow vulnerability in SUSE Linux Micro 6.1.. Coreutils Update, Linux Security Patch, SUSE Micro Update. . LinuxSecurity.com Team
Sep 10, 2025
SuSE
100
security advisorymoderateSuSESUSE Linux 6.0: Coreutils Moderate Heap Buffer Under-Read CVE-2025-5278
* bsc#1243767 Cross-References: * CVE-2025-5278 . # Security update for coreutils Announcement ID: SUSE-SU-2025:20523-1 Release Date: 2025-07-31T09:44:31Z Rating: moderate References: * bsc#1243767 Cross-References: * CVE-2025-5278 CVSS scores: * CVE-2025-5278 ( SUSE ): 2.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2025-5278 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2025-5278 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L Affected Products: * SUSE Linux Micro 6.0 An update that solves one vulnerability can now be installed. ## Description: This update for coreutils fixes the following issues: * CVE-2025-5278: Fixed heap buffer under-read ledaing to a crash or leak sensitive data (bsc#1243767) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-405=1 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * coreutils-debugsource-9.4-5.1 * coreutils-9.4-5.1 * coreutils-debuginfo-9.4-5.1 ## References: * https://www.suse.com/security/cve/CVE-2025-5278.html * https://bugzilla.suse.com/show_bug.cgi?id=1243767 . A recent security advisory from SUSE regarding Coreutils highlights vulnerabilities of moderate severity that could potentially result in unauthorized access to sensitive information.. SUSE Security Patch, Coreutils Update, Heap Buffer Issue. . LinuxSecurity.com Team
Aug 04, 2025
SuSE
100
security advisorymoderateSuSESUSE: Coreutils Moderate Heap Buffer Under-read CVE-2025-5278 Advisory
* bsc#1243767 Cross-References: * CVE-2025-5278 . # Security update for coreutils Announcement ID: SUSE-SU-2025:02362-1 Release Date: 2025-07-18T09:08:22Z Rating: moderate References: * bsc#1243767 Cross-References: * CVE-2025-5278 CVSS scores: * CVE-2025-5278 ( SUSE ): 2.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2025-5278 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2025-5278 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L Affected Products: * Basesystem Module 15-SP6 * Basesystem Module 15-SP7 * openSUSE Leap 15.4 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerabilitycan now be installed. ## Description: This update for coreutils fixes the following issues: * CVE-2025-5278: Fixed heap buffer under-read may lead to a crash or leak sensitive data (bsc#1243767) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-2362=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-2362=1 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2025-2362=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-2362=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-2362=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-2362=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-2362=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-2362=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-2362=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-2362=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-2362=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2025-2362=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2025-2362=1 * SUSE Manager Server 4.3 zypper in -t patchSUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-2362=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-2362=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-2362=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-2362=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-2362=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-2362=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-2362=1 ## Package List: * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * Basesystem Module 15-SP6 (noarch) * coreutils-doc-8.32-150400.9.9.1 * coreutils-lang-8.32-150400.9.9.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * Basesystem Module 15-SP7 (noarch) * coreutils-doc-8.32-150400.9.9.1 * coreutils-lang-8.32-150400.9.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * coreutils-doc-8.32-150400.9.9.1 * coreutils-lang-8.32-150400.9.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4(noarch) * coreutils-doc-8.32-150400.9.9.1 * coreutils-lang-8.32-150400.9.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * coreutils-doc-8.32-150400.9.9.1 * coreutils-lang-8.32-150400.9.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * coreutils-doc-8.32-150400.9.9.1 * coreutils-lang-8.32-150400.9.9.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * coreutils-doc-8.32-150400.9.9.1 * coreutils-lang-8.32-150400.9.9.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * coreutils-doc-8.32-150400.9.9.1 * coreutils-lang-8.32-150400.9.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * coreutils-doc-8.32-150400.9.9.1 * coreutils-lang-8.32-150400.9.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * SUSE LinuxEnterprise Server for SAP Applications 15 SP5 (noarch) * coreutils-doc-8.32-150400.9.9.1 * coreutils-lang-8.32-150400.9.9.1 * SUSE Manager Proxy 4.3 (x86_64) * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * SUSE Manager Proxy 4.3 (noarch) * coreutils-doc-8.32-150400.9.9.1 * coreutils-lang-8.32-150400.9.9.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * coreutils-doc-8.32-150400.9.9.1 * coreutils-lang-8.32-150400.9.9.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * SUSE Manager Server 4.3 (noarch) * coreutils-doc-8.32-150400.9.9.1 * coreutils-lang-8.32-150400.9.9.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-single-8.32-150400.9.9.1 * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * coreutils-single-debuginfo-8.32-150400.9.9.1 * coreutils-testsuite-8.32-150400.9.9.1 * coreutils-single-debugsource-8.32-150400.9.9.1 * openSUSE Leap 15.4 (noarch) * coreutils-doc-8.32-150400.9.9.1 * coreutils-lang-8.32-150400.9.9.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-single-8.32-150400.9.9.1 * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * coreutils-single-debuginfo-8.32-150400.9.9.1 * coreutils-testsuite-8.32-150400.9.9.1 * coreutils-single-debugsource-8.32-150400.9.9.1 * openSUSE Leap 15.6 (noarch) * coreutils-doc-8.32-150400.9.9.1 * coreutils-lang-8.32-150400.9.9.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) *coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 ## References: * https://www.suse.com/security/cve/CVE-2025-5278.html * https://bugzilla.suse.com/show_bug.cgi?id=1243767 . CVE-2025-5280 in bash impacts Debian systems, creating potential security flaws demanding critical patches. Verify your installation.. SUSE coreutils update, moderate severity patch, SUSE security advisory, heap buffer under-read, data leak risk. . LinuxSecurity.com Team
Jul 18, 2025
SuSE
202
security advisorymoderatecoreutilsopenSUSE Coreutils Advisory 2025:02362-1 Reports CVE-2025-5278 Risk
An update that solves one vulnerability can now be installed.. # Security update for coreutils Announcement ID: SUSE-SU-2025:02362-1 Release Date: 2025-07-18T09:08:22Z Rating: moderate References: * bsc#1243767 Cross-References: * CVE-2025-5278 CVSS scores: * CVE-2025-5278 ( SUSE ): 2.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2025-5278 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2025-5278 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L Affected Products: * Basesystem Module 15-SP6 * Basesystem Module 15-SP7 * openSUSE Leap 15.4 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves onevulnerability can now be installed. ## Description: This update for coreutils fixes the following issues: * CVE-2025-5278: Fixed heap buffer under-read may lead to a crash or leak sensitive data (bsc#1243767) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-2362=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-2362=1 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2025-2362=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-2362=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-2362=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-2362=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-2362=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-2362=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-2362=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-2362=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-2362=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2025-2362=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2025-2362=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-2362=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-2362=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-2362=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-2362=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-2362=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-2362=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-2362=1 ## Package List: * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * Basesystem Module 15-SP6 (noarch) * coreutils-doc-8.32-150400.9.9.1 * coreutils-lang-8.32-150400.9.9.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * Basesystem Module 15-SP7 (noarch) * coreutils-doc-8.32-150400.9.9.1 * coreutils-lang-8.32-150400.9.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * coreutils-doc-8.32-150400.9.9.1 * coreutils-lang-8.32-150400.9.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * SUSE Linux Enterprise High Performance ComputingLTSS 15 SP4 (noarch) * coreutils-doc-8.32-150400.9.9.1 * coreutils-lang-8.32-150400.9.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * coreutils-doc-8.32-150400.9.9.1 * coreutils-lang-8.32-150400.9.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * coreutils-doc-8.32-150400.9.9.1 * coreutils-lang-8.32-150400.9.9.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * coreutils-doc-8.32-150400.9.9.1 * coreutils-lang-8.32-150400.9.9.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * coreutils-doc-8.32-150400.9.9.1 * coreutils-lang-8.32-150400.9.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * coreutils-doc-8.32-150400.9.9.1 * coreutils-lang-8.32-150400.9.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * SUSELinux Enterprise Server for SAP Applications 15 SP5 (noarch) * coreutils-doc-8.32-150400.9.9.1 * coreutils-lang-8.32-150400.9.9.1 * SUSE Manager Proxy 4.3 (x86_64) * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * SUSE Manager Proxy 4.3 (noarch) * coreutils-doc-8.32-150400.9.9.1 * coreutils-lang-8.32-150400.9.9.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * coreutils-doc-8.32-150400.9.9.1 * coreutils-lang-8.32-150400.9.9.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * SUSE Manager Server 4.3 (noarch) * coreutils-doc-8.32-150400.9.9.1 * coreutils-lang-8.32-150400.9.9.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-single-8.32-150400.9.9.1 * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * coreutils-single-debuginfo-8.32-150400.9.9.1 * coreutils-testsuite-8.32-150400.9.9.1 * coreutils-single-debugsource-8.32-150400.9.9.1 * openSUSE Leap 15.4 (noarch) * coreutils-doc-8.32-150400.9.9.1 * coreutils-lang-8.32-150400.9.9.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-single-8.32-150400.9.9.1 * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * coreutils-single-debuginfo-8.32-150400.9.9.1 * coreutils-testsuite-8.32-150400.9.9.1 * coreutils-single-debugsource-8.32-150400.9.9.1 * openSUSE Leap 15.6 (noarch) * coreutils-doc-8.32-150400.9.9.1 * coreutils-lang-8.32-150400.9.9.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) *coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * coreutils-debuginfo-8.32-150400.9.9.1 * coreutils-debugsource-8.32-150400.9.9.1 * coreutils-8.32-150400.9.9.1 ## References: * https://www.suse.com/security/cve/CVE-2025-5278.html * https://bugzilla.suse.com/show_bug.cgi?id=1243767 . A notice has been released for coreutils within openSUSE addressing a significant vulnerability that may lead to data exposure and system failures.. Linux Security, Coreutils Update, openSUSE Patch. . LinuxSecurity.com Team
Jul 18, 2025
OpenSUSE
100
security advisorymoderateSuSESUSE: Coreutils Moderate Heap Buffer Under-Read Advisory 2025:02353-1
* bsc#1243767 Cross-References: * CVE-2025-5278 . # Security update for coreutils Announcement ID: SUSE-SU-2025:02353-1 Release Date: 2025-07-17T12:35:51Z Rating: moderate References: * bsc#1243767 Cross-References: * CVE-2025-5278 CVSS scores: * CVE-2025-5278 ( SUSE ): 2.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2025-5278 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2025-5278 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for coreutils fixes the following issues: * CVE-2025-5278: Fixed heap buffer under-read may lead to a crash or leak sensitive data (bsc#1243767) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2025-2353=1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-2353=1 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * coreutils-8.25-13.19.1 * coreutils-debuginfo-8.25-13.19.1 * coreutils-debugsource-8.25-13.19.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * coreutils-lang-8.25-13.19.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * coreutils-8.25-13.19.1 * coreutils-debuginfo-8.25-13.19.1 * coreutils-debugsource-8.25-13.19.1 * SUSE Linux Enterprise Server 12SP5 LTSS Extended Security (noarch) * coreutils-lang-8.25-13.19.1 ## References: * https://www.suse.com/security/cve/CVE-2025-5278.html * https://bugzilla.suse.com/show_bug.cgi?id=1243767 . Keep updated on a significant concern in coreutils impacting SUSE platforms. Act promptly to reduce potential threats!. SUSE, coreutils update, moderate security issue, buffer under-read, Linux patch. . LinuxSecurity.com Team
Jul 17, 2025
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!