Security update for coreutils SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2025:02362-1 Final 1 1 2025-07-18T09:07:36Z current 2025-07-18T09:07:36Z 2025-07-18T09:07:36Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for coreutils This update for coreutils fixes the following issues: - CVE-2025-5278: Fixed heap buffer under-read may lead to a crash or leak sensitive data (bsc#1243767) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container bci/bci-base-fips:15.6-2025-2362,Container bci/bci-base-fips:latest-2025-2362,Container bci/bci-micro-fips:15.6-2025-2362,Container bci/bci-micro-fips:latest-2025-2362,Container bci/bci-micro:15.6-2025-2362,Container bci/bci-micro:latest-2025-2362,Container bci/bci-minimal:15.6-2025-2362,Container bci/bci-minimal:latest-2025-2362,Container bci/dotnet-aspnet:8.0-2025-2362,Container bci/dotnet-aspnet:latest-2025-2362,Container bci/dotnet-runtime:8.0-2025-2362,Container bci/dotnet-runtime:latest-2025-2362,Container bci/dotnet-sdk:8.0-2025-2362,Container bci/dotnet-sdk:latest-2025-2362,Container containers/open-webui-pipelines:0-2025-2362,Container suse/ltss/sle15.4/bci-base-fips:latest-2025-2362,Container suse/ltss/sle15.4/bci-base:latest-2025-2362,Container suse/manager/4.3/proxy-httpd:latest-2025-2362,Container suse/manager/4.3/proxy-salt-broker:latest-2025-2362,Container suse/manager/4.3/proxy-squid:latest-2025-2362,Container suse/manager/4.3/proxy-ssh:latest-2025-2362,Container suse/manager/4.3/proxy-tftpd:latest-2025-2362,Container suse/mariadb:latest-2025-2362,Container suse/postgres:16-2025-2362,Container suse/postgres:latest-2025-2362,Container suse/sle-micro-rancher/5.3:latest-2025-2362,Container suse/sle-micro-rancher/5.4:latest-2025-2362,Container suse/sle-micro/5.3/toolbox:latest-2025-2362,Container suse/sle-micro/5.4/toolbox:latest-2025-2362,Container suse/sle-micro/5.5/toolbox:latest-2025-2362,Container suse/sle-micro/5.5:latest-2025-2362,Container suse/sle-micro/base-5.5:latest-2025-2362,Container suse/sle-micro/kvm-5.5:latest-2025-2362,Container suse/sle-micro/rt-5.5:latest-2025-2362,Container suse/sle15:15.6-2025-2362,Container suse/sle15:latest-2025-2362,SUSE-2025-2362,SUSE-SLE-Micro-5.3-2025-2362,SUSE-SLE-Micro-5.4-2025-2362,SUSE-SLE-Micro-5.5-2025-2362,SUSE-SLE-Module-Basesystem-15-SP6-2025-2362,SUSE-SLE-Module-Basesystem-15-SP7-2025-2362,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-2362,SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-2362,SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-2362,SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-2362,SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-2362,SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-2362,SUSE-SLE-Product-SLES_SAP-15-SP4-2025-2362,SUSE-SLE-Product-SLES_SAP-15-SP5-2025-2362,SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2025-2362,SUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-2362,openSUSE-SLE-15.6-2025-2362 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2025/suse-su-202502362-1/ Link for SUSE-SU-2025:02362-1 https://lists.suse.com/pipermail/sle-security-updates/2025-July/021851.html E-Mail link for SUSE-SU-2025:02362-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1243767 SUSE Bug 1243767 https://www.suse.com/security/cve/CVE-2025-5278/ SUSE CVE CVE-2025-5278 page Container bci/bci-base-fips:15.6 Container bci/bci-base-fips:latest Container bci/bci-micro-fips:15.6 Container bci/bci-micro-fips:latest Container bci/bci-micro:15.6 Container bci/bci-micro:latest Container bci/bci-minimal:15.6 Container bci/bci-minimal:latest Container bci/dotnet-aspnet:8.0 Container bci/dotnet-aspnet:latest Container bci/dotnet-runtime:8.0 Container bci/dotnet-runtime:latest Container bci/dotnet-sdk:8.0 Container bci/dotnet-sdk:latest Container containers/open-webui-pipelines:0 Container suse/ltss/sle15.4/bci-base-fips:latest Container suse/ltss/sle15.4/bci-base:latest Container suse/manager/4.3/proxy-httpd:latest Container suse/manager/4.3/proxy-salt-broker:latest Container suse/manager/4.3/proxy-squid:latest Container suse/manager/4.3/proxy-ssh:latest Container suse/manager/4.3/proxy-tftpd:latest Container suse/mariadb:latest Container suse/postgres:16 Container suse/postgres:latest Container suse/sle-micro-rancher/5.3:latest Container suse/sle-micro-rancher/5.4:latest Container suse/sle-micro/5.3/toolbox:latest Container suse/sle-micro/5.4/toolbox:latest Container suse/sle-micro/5.5/toolbox:latest Container suse/sle-micro/5.5:latest Container suse/sle-micro/base-5.5:latest Container suse/sle-micro/kvm-5.5:latest Container suse/sle-micro/rt-5.5:latest Container suse/sle15:15.6 Container suse/sle15:latest SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Micro 5.5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Manager Proxy 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.6 coreutils-8.32-150400.9.9.1 coreutils-doc-8.32-150400.9.9.1 coreutils-lang-8.32-150400.9.9.1 coreutils-single-8.32-150400.9.9.1 coreutils-testsuite-8.32-150400.9.9.1 coreutils-8.32-150400.9.9.1 as a component of Container bci/bci-base-fips:15.6 coreutils-8.32-150400.9.9.1 as a component of Container bci/bci-base-fips:latest coreutils-8.32-150400.9.9.1 as a component of Container bci/bci-micro-fips:15.6 coreutils-8.32-150400.9.9.1 as a component of Container bci/bci-micro-fips:latest coreutils-8.32-150400.9.9.1 as a component of Container bci/bci-micro:15.6 coreutils-8.32-150400.9.9.1 as a component of Container bci/bci-micro:latest coreutils-8.32-150400.9.9.1 as a component of Container bci/bci-minimal:15.6 coreutils-8.32-150400.9.9.1 as a component of Container bci/bci-minimal:latest coreutils-8.32-150400.9.9.1 as a component of Container bci/dotnet-aspnet:8.0 coreutils-8.32-150400.9.9.1 as a component of Container bci/dotnet-aspnet:latest coreutils-8.32-150400.9.9.1 as a component of Container bci/dotnet-runtime:8.0 coreutils-8.32-150400.9.9.1 as a component of Container bci/dotnet-runtime:latest coreutils-8.32-150400.9.9.1 as a component of Container bci/dotnet-sdk:8.0 coreutils-8.32-150400.9.9.1 as a component of Container bci/dotnet-sdk:latest coreutils-8.32-150400.9.9.1 as a component of Container containers/open-webui-pipelines:0 coreutils-8.32-150400.9.9.1 as a component of Container suse/ltss/sle15.4/bci-base-fips:latest coreutils-8.32-150400.9.9.1 as a component of Container suse/ltss/sle15.4/bci-base:latest coreutils-8.32-150400.9.9.1 as a component of Container suse/manager/4.3/proxy-httpd:latest coreutils-8.32-150400.9.9.1 as a component of Container suse/manager/4.3/proxy-salt-broker:latest coreutils-8.32-150400.9.9.1 as a component of Container suse/manager/4.3/proxy-squid:latest coreutils-8.32-150400.9.9.1 as a component of Container suse/manager/4.3/proxy-ssh:latest coreutils-8.32-150400.9.9.1 as a component of Container suse/manager/4.3/proxy-tftpd:latest coreutils-8.32-150400.9.9.1 as a component of Container suse/mariadb:latest coreutils-8.32-150400.9.9.1 as a component of Container suse/postgres:16 coreutils-8.32-150400.9.9.1 as a component of Container suse/postgres:latest coreutils-8.32-150400.9.9.1 as a component of Container suse/sle-micro-rancher/5.3:latest coreutils-8.32-150400.9.9.1 as a component of Container suse/sle-micro-rancher/5.4:latest coreutils-8.32-150400.9.9.1 as a component of Container suse/sle-micro/5.3/toolbox:latest coreutils-8.32-150400.9.9.1 as a component of Container suse/sle-micro/5.4/toolbox:latest coreutils-8.32-150400.9.9.1 as a component of Container suse/sle-micro/5.5/toolbox:latest coreutils-8.32-150400.9.9.1 as a component of Container suse/sle-micro/5.5:latest coreutils-8.32-150400.9.9.1 as a component of Container suse/sle-micro/base-5.5:latest coreutils-8.32-150400.9.9.1 as a component of Container suse/sle-micro/kvm-5.5:latest coreutils-8.32-150400.9.9.1 as a component of Container suse/sle-micro/rt-5.5:latest coreutils-8.32-150400.9.9.1 as a component of Container suse/sle15:15.6 coreutils-8.32-150400.9.9.1 as a component of Container suse/sle15:latest coreutils-8.32-150400.9.9.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS coreutils-doc-8.32-150400.9.9.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS coreutils-lang-8.32-150400.9.9.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS coreutils-8.32-150400.9.9.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS coreutils-doc-8.32-150400.9.9.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS coreutils-lang-8.32-150400.9.9.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS coreutils-8.32-150400.9.9.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS coreutils-doc-8.32-150400.9.9.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS coreutils-lang-8.32-150400.9.9.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS coreutils-8.32-150400.9.9.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS coreutils-doc-8.32-150400.9.9.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS coreutils-lang-8.32-150400.9.9.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS coreutils-8.32-150400.9.9.1 as a component of SUSE Linux Enterprise Micro 5.3 coreutils-8.32-150400.9.9.1 as a component of SUSE Linux Enterprise Micro 5.4 coreutils-8.32-150400.9.9.1 as a component of SUSE Linux Enterprise Micro 5.5 coreutils-8.32-150400.9.9.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 coreutils-doc-8.32-150400.9.9.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 coreutils-lang-8.32-150400.9.9.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 coreutils-8.32-150400.9.9.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 coreutils-doc-8.32-150400.9.9.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 coreutils-lang-8.32-150400.9.9.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 coreutils-8.32-150400.9.9.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS coreutils-doc-8.32-150400.9.9.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS coreutils-lang-8.32-150400.9.9.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS coreutils-8.32-150400.9.9.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS coreutils-doc-8.32-150400.9.9.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS coreutils-lang-8.32-150400.9.9.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS coreutils-8.32-150400.9.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 coreutils-doc-8.32-150400.9.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 coreutils-lang-8.32-150400.9.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 coreutils-8.32-150400.9.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 coreutils-doc-8.32-150400.9.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 coreutils-lang-8.32-150400.9.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 coreutils-8.32-150400.9.9.1 as a component of SUSE Manager Proxy 4.3 coreutils-doc-8.32-150400.9.9.1 as a component of SUSE Manager Proxy 4.3 coreutils-lang-8.32-150400.9.9.1 as a component of SUSE Manager Proxy 4.3 coreutils-8.32-150400.9.9.1 as a component of SUSE Manager Server 4.3 coreutils-doc-8.32-150400.9.9.1 as a component of SUSE Manager Server 4.3 coreutils-lang-8.32-150400.9.9.1 as a component of SUSE Manager Server 4.3 coreutils-8.32-150400.9.9.1 as a component of openSUSE Leap 15.6 coreutils-doc-8.32-150400.9.9.1 as a component of openSUSE Leap 15.6 coreutils-lang-8.32-150400.9.9.1 as a component of openSUSE Leap 15.6 coreutils-single-8.32-150400.9.9.1 as a component of openSUSE Leap 15.6 coreutils-testsuite-8.32-150400.9.9.1 as a component of openSUSE Leap 15.6 A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data. CVE-2025-5278 Container bci/bci-base-fips:15.6:coreutils-8.32-150400.9.9.1 Container bci/bci-base-fips:latest:coreutils-8.32-150400.9.9.1 Container bci/bci-micro-fips:15.6:coreutils-8.32-150400.9.9.1 Container bci/bci-micro-fips:latest:coreutils-8.32-150400.9.9.1 Container bci/bci-micro:15.6:coreutils-8.32-150400.9.9.1 Container bci/bci-micro:latest:coreutils-8.32-150400.9.9.1 Container bci/bci-minimal:15.6:coreutils-8.32-150400.9.9.1 Container bci/bci-minimal:latest:coreutils-8.32-150400.9.9.1 Container bci/dotnet-aspnet:8.0:coreutils-8.32-150400.9.9.1 Container bci/dotnet-aspnet:latest:coreutils-8.32-150400.9.9.1 Container bci/dotnet-runtime:8.0:coreutils-8.32-150400.9.9.1 Container bci/dotnet-runtime:latest:coreutils-8.32-150400.9.9.1 Container bci/dotnet-sdk:8.0:coreutils-8.32-150400.9.9.1 Container bci/dotnet-sdk:latest:coreutils-8.32-150400.9.9.1 Container containers/open-webui-pipelines:0:coreutils-8.32-150400.9.9.1 Container suse/ltss/sle15.4/bci-base-fips:latest:coreutils-8.32-150400.9.9.1 Container suse/ltss/sle15.4/bci-base:latest:coreutils-8.32-150400.9.9.1 Container suse/manager/4.3/proxy-httpd:latest:coreutils-8.32-150400.9.9.1 Container suse/manager/4.3/proxy-salt-broker:latest:coreutils-8.32-150400.9.9.1 Container suse/manager/4.3/proxy-squid:latest:coreutils-8.32-150400.9.9.1 Container suse/manager/4.3/proxy-ssh:latest:coreutils-8.32-150400.9.9.1 Container suse/manager/4.3/proxy-tftpd:latest:coreutils-8.32-150400.9.9.1 Container suse/mariadb:latest:coreutils-8.32-150400.9.9.1 Container suse/postgres:16:coreutils-8.32-150400.9.9.1 Container suse/postgres:latest:coreutils-8.32-150400.9.9.1 Container suse/sle-micro-rancher/5.3:latest:coreutils-8.32-150400.9.9.1 Container suse/sle-micro-rancher/5.4:latest:coreutils-8.32-150400.9.9.1 Container suse/sle-micro/5.3/toolbox:latest:coreutils-8.32-150400.9.9.1 Container suse/sle-micro/5.4/toolbox:latest:coreutils-8.32-150400.9.9.1 Container suse/sle-micro/5.5/toolbox:latest:coreutils-8.32-150400.9.9.1 Container suse/sle-micro/5.5:latest:coreutils-8.32-150400.9.9.1 Container suse/sle-micro/base-5.5:latest:coreutils-8.32-150400.9.9.1 Container suse/sle-micro/kvm-5.5:latest:coreutils-8.32-150400.9.9.1 Container suse/sle-micro/rt-5.5:latest:coreutils-8.32-150400.9.9.1 Container suse/sle15:15.6:coreutils-8.32-150400.9.9.1 Container suse/sle15:latest:coreutils-8.32-150400.9.9.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:coreutils-8.32-150400.9.9.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:coreutils-doc-8.32-150400.9.9.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:coreutils-lang-8.32-150400.9.9.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:coreutils-8.32-150400.9.9.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:coreutils-doc-8.32-150400.9.9.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:coreutils-lang-8.32-150400.9.9.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:coreutils-8.32-150400.9.9.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:coreutils-doc-8.32-150400.9.9.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:coreutils-lang-8.32-150400.9.9.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:coreutils-8.32-150400.9.9.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:coreutils-doc-8.32-150400.9.9.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:coreutils-lang-8.32-150400.9.9.1 SUSE Linux Enterprise Micro 5.3:coreutils-8.32-150400.9.9.1 SUSE Linux Enterprise Micro 5.4:coreutils-8.32-150400.9.9.1 SUSE Linux Enterprise Micro 5.5:coreutils-8.32-150400.9.9.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:coreutils-8.32-150400.9.9.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:coreutils-doc-8.32-150400.9.9.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:coreutils-lang-8.32-150400.9.9.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:coreutils-8.32-150400.9.9.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:coreutils-doc-8.32-150400.9.9.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:coreutils-lang-8.32-150400.9.9.1 SUSE Linux Enterprise Server 15 SP4-LTSS:coreutils-8.32-150400.9.9.1 SUSE Linux Enterprise Server 15 SP4-LTSS:coreutils-doc-8.32-150400.9.9.1 SUSE Linux Enterprise Server 15 SP4-LTSS:coreutils-lang-8.32-150400.9.9.1 SUSE Linux Enterprise Server 15 SP5-LTSS:coreutils-8.32-150400.9.9.1 SUSE Linux Enterprise Server 15 SP5-LTSS:coreutils-doc-8.32-150400.9.9.1 SUSE Linux Enterprise Server 15 SP5-LTSS:coreutils-lang-8.32-150400.9.9.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:coreutils-8.32-150400.9.9.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:coreutils-doc-8.32-150400.9.9.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:coreutils-lang-8.32-150400.9.9.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:coreutils-8.32-150400.9.9.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:coreutils-doc-8.32-150400.9.9.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:coreutils-lang-8.32-150400.9.9.1 SUSE Manager Proxy 4.3:coreutils-8.32-150400.9.9.1 SUSE Manager Proxy 4.3:coreutils-doc-8.32-150400.9.9.1 SUSE Manager Proxy 4.3:coreutils-lang-8.32-150400.9.9.1 SUSE Manager Server 4.3:coreutils-8.32-150400.9.9.1 SUSE Manager Server 4.3:coreutils-doc-8.32-150400.9.9.1 SUSE Manager Server 4.3:coreutils-lang-8.32-150400.9.9.1 openSUSE Leap 15.6:coreutils-8.32-150400.9.9.1 openSUSE Leap 15.6:coreutils-doc-8.32-150400.9.9.1 openSUSE Leap 15.6:coreutils-lang-8.32-150400.9.9.1 openSUSE Leap 15.6:coreutils-single-8.32-150400.9.9.1 openSUSE Leap 15.6:coreutils-testsuite-8.32-150400.9.9.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-202502362-1/ https://www.suse.com/security/cve/CVE-2025-5278.html CVE-2025-5278 https://bugzilla.suse.com/1243767 SUSE Bug 1243767