<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 29 Sep 2026 07:34:53 +0000</lastBuildDate>
    <item>
      <title>CVE-2025-5278 — Coreutils: heap buffer under-read in gnu coreutils sort via key specification</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2025-5278</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; coreutils, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Cert Manager support for Red Hat OpenShift release 1.20, Red Hat Cost Management 4, Red Hat Discovery 2, Red Hat Insights proxy 1.5, Red Hat OpenShift distributed tracing 3.10.2, Red Hat Update Infrastructure 5 and 3 more&lt;/p&gt;
&lt;p&gt;A flaw was found in GNU Coreutils. The sort utility&amp;#39;s begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; coreutils, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Cert Manager support for Red Hat OpenShift release 1.20, Red Hat Cost Management 4, Red Hat Discovery 2, Red Hat Insights proxy 1.5, Red Hat OpenShift distributed tracing 3.10.2, Red Hat Update Infrastructure 5 and 3 more&lt;/p&gt;
&lt;p&gt;A flaw was found in GNU Coreutils. The sort utility&amp;#39;s begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2025-5278</guid>
    </item>
  </channel>
</rss>
