VDB
RHSA-2026:50205
RHSA-2026:50205
PUBLISHED
CVSS 6.300000190734863 MEDIUM
A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.
Risk Scores
CVSS 3.1
6.300000190734863
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le as a component of Red Hat OpenShift distributed tracing 3.10.2 | * |
| Red Hat | registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64 as a component of Red Hat OpenShift distributed tracing 3.10.1 | * |
| Red Hat | registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x as a component of Red Hat OpenShift distributed tracing 3.10.1 | * |
| Red Hat | registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64 as a component of Red Hat OpenShift distributed tracing 3.10.2 | * |
| Red Hat | registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64 as a component of Red Hat OpenShift distributed tracing 3.10.1 | * |
| Red Hat | registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le as a component of Red Hat OpenShift distributed tracing 3.10.1 | * |
| Red Hat | registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:75a06c4af8c69609f32ea93e4af91f4b7b244586bc9bec314e826772bec58bf2_ppc64le as a component of Red Hat OpenShift distributed tracing 3.10.2 | * |
| Red Hat | registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64 as a component of Red Hat OpenShift distributed tracing 3.10.2 | * |
| Red Hat | registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:a67bdb7df46656eaedc60de5d86fa62f6a16e7b157bd34575f2926c04e9a311f_s390x as a component of Red Hat OpenShift distributed tracing 3.10.1 | * |
| Red Hat | registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64 as a component of Red Hat OpenShift distributed tracing 3.10.1 | * |
| Red Hat | registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:a14ce218cde5a6aade253140ed32557f408eaf2abc61d41218cc566a9ddd3737_ppc64le as a component of Red Hat OpenShift distributed tracing 3.10.1 | * |
| Red Hat | registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:589887e35b27614cf2c9749377ffafe41e4280b2738dbc76ce8f67c13244a86f_arm64 as a component of Red Hat OpenShift distributed tracing 3.10.2 | * |
| Red Hat | registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:356d387d225f1d73142d8ce3fb50086e4412c84313a2707032fdfc9c7ba4ab03_amd64 as a component of Red Hat OpenShift distributed tracing 3.10.1 | * |
| Red Hat | registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:79a1d157a3b9e7130653068bd30b2bab7f27c8fd669e604594b69dc230e4b80f_arm64 as a component of Red Hat OpenShift distributed tracing 3.10.2 | * |
| Red Hat | registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:12db5b608310ed1c220e5424469899bdf7d704912d86bc4500e7d8f0b75953a9_s390x as a component of Red Hat OpenShift distributed tracing 3.10.1 | * |
| Red Hat | registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:73720c25cac560d195b72d0a504ba259df85eb90f1d846bfe63138632409f3f3_amd64 as a component of Red Hat OpenShift distributed tracing 3.10.2 | * |
| Red Hat | registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:03af0af704f201e97cc36cb588092366e613a26794d25ec76d805f0de00fbb77_amd64 as a component of Red Hat OpenShift distributed tracing 3.10.2 | * |
| Red Hat | registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:31162741b966e9106e72c097e61d64e713adb2fb04d3881be326118a98f77b09_amd64 as a component of Red Hat OpenShift distributed tracing 3.10.1 | * |
| Red Hat | registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:03fd3e2921ac7557fd5aa6b4d0714f9ee634efd1259b789638d478978fcd4f39_s390x as a component of Red Hat OpenShift distributed tracing 3.10.2 | * |
| Red Hat | registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:4873d91250b9fad16135ca6b4b34fce6da9919a6a31dca517be3535b6a436595_arm64 as a component of Red Hat OpenShift distributed tracing 3.10.1 | * |
…and 6 more
Timeline
- Aug 4, 2026 CVE Published
- Aug 30, 2026 CVE Updated
- Aug 30, 2026 Distribution Patch
- Aug 30, 2026 Distribution Patch
- Aug 30, 2026 Security Advisory
- Aug 30, 2026 Security Advisory
- Aug 30, 2026 Security Advisory
- Aug 30, 2026 Security Advisory
- Aug 30, 2026 Security Advisory
- Aug 30, 2026 Security Advisory
- Aug 30, 2026 Security Advisory
- Aug 30, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:50205 advisory
- https://access.redhat.com/security/cve/CVE-2025-5278 advisory
- https://access.redhat.com/security/cve/CVE-2026-27145 advisory
- https://access.redhat.com/security/cve/CVE-2026-33811 advisory
- https://access.redhat.com/security/cve/CVE-2026-33814 advisory
- https://access.redhat.com/security/cve/CVE-2026-39820 advisory
- https://access.redhat.com/security/cve/CVE-2026-39823 advisory
- https://access.redhat.com/security/cve/CVE-2026-42504 advisory
- https://access.redhat.com/security/cve/CVE-2026-42507 advisory
- https://access.redhat.com/security/cve/CVE-2026-5435 advisory
- https://access.redhat.com/security/cve/CVE-2026-54369 advisory
- https://access.redhat.com/security/cve/CVE-2026-54370 advisory
- https://access.redhat.com/security/cve/CVE-2026-5450 advisory
- https://access.redhat.com/security/cve/CVE-2026-5928 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/red_hat_build_of_opentelemetry advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_50205.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2368764 issue
- https://www.cve.org/CVERecord?id=CVE-2025-5278 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-5278 advisory
…and 68 more