RHBA-2025:12510HighCVSS 8.8

Red Hat Bug Fix Advisory: Red Hat Quay v3.10.13 bug fix release

Published
August 8, 2025
Last Modified
November 5, 2026

🔗 CVE IDs covered (1)

CVE-2025-32023 →

📋 Description

CVE-2025-32023 — redis: Redis Hyperloglog Out-of-Bounds Write Vulnerability

🎯 Affected products31

  • Quay v3
  • quay/clair-rhel8@sha256:02a7a76ed0f1b99093bc32a5505bb193de88f12ec96fcdece6c82e079ea6e54e_amd64 as a component of Quay v3
  • quay/clair-rhel8@sha256:702b75579f39ab22533a324f1a1e052d8c650cea3d7773be6c384c236176b050_ppc64le as a component of Quay v3
  • quay/clair-rhel8@sha256:a01845d393ad49722dbd2819b772c9e1ddb59c2d4994ca53d125658d7a9a510d_s390x as a component of Quay v3
  • quay/quay-bridge-operator-bundle@sha256:54bb18a0a3e90166bb09e52971ae9d8fc88bdd92252c4c4f8ab2f6ba8964d2b9_amd64 as a component of Quay v3
  • quay/quay-bridge-operator-bundle@sha256:652011fde892e32eb566be05cf38c673c2e69c5cfde42216df0ab9d0e6de0fd1_ppc64le as a component of Quay v3
  • quay/quay-bridge-operator-bundle@sha256:ab712177ebaf1790a85aa5dc4664b87cb0aa664cd594aec0842f3b7e0faa68b0_s390x as a component of Quay v3
  • quay/quay-bridge-operator-rhel8@sha256:05e111be34e3df3e2743b0b845417b7fc4e34c520c25005222a1d5c3c9e5794c_ppc64le as a component of Quay v3
  • quay/quay-bridge-operator-rhel8@sha256:609bb1d1fc0b520de30d85828eba7428855408bc5f8c6cfb347d46c499c98a43_s390x as a component of Quay v3
  • quay/quay-bridge-operator-rhel8@sha256:e7b49e466b963637164a46797aeffe2473d759d38bbb60327972d54ee1f0dc89_amd64 as a component of Quay v3
  • quay/quay-builder-qemu-rhcos-rhel8@sha256:8bddab6821be4138905acb803f7770c0f79acaafdca8d7654921e59081ac4bed_s390x as a component of Quay v3
  • quay/quay-builder-qemu-rhcos-rhel8@sha256:d4f9f16358a5a4d302627f75d548b1d9e3ee01713ab37fe2a6c0e4e91fde10ba_amd64 as a component of Quay v3
  • quay/quay-builder-qemu-rhcos-rhel8@sha256:f1ba0934e033deed03e8b40684ec67c6db1b0b25ebf4364eaf7a79868b04a20a_ppc64le as a component of Quay v3
  • quay/quay-builder-rhel8@sha256:039d17df21663596d44c8ec5ddcdd0c1c04f10e454d4a6ddb88697c2eb391bc0_ppc64le as a component of Quay v3
  • quay/quay-builder-rhel8@sha256:0865355f42aef2ce87d5ee4ab5fbef708e5330f11e90fe08211af143a2e765b0_amd64 as a component of Quay v3
  • quay/quay-builder-rhel8@sha256:eacf1c315b27f74565d3ffd597a2273e3c8190a63ab8b15ff00c57254d0cf012_s390x as a component of Quay v3
  • quay/quay-container-security-operator-bundle@sha256:5bcafcfc1233203af7383aa748b48bbabb563053d5803b60584b15a8cd47bfb1_s390x as a component of Quay v3
  • quay/quay-container-security-operator-bundle@sha256:8b435d1bee32338f8b03032a728f8407f06c62ab943f94aac87a3fa7c9b5b5ed_ppc64le as a component of Quay v3
  • quay/quay-container-security-operator-bundle@sha256:bb0666ded951a87e86987f40ce76041a37d25496b513fb8832364cc5b8491622_amd64 as a component of Quay v3
  • quay/quay-container-security-operator-rhel8@sha256:a4b3baba923ea83daf99e3b05eede7c9f16dc1a9ebc5b6cd6bc1b4a994263e8b_s390x as a component of Quay v3
  • quay/quay-container-security-operator-rhel8@sha256:c2da0741532f9260674d1707bb41f23873ad9719233dbefa9ad926f64ee7d817_amd64 as a component of Quay v3
  • quay/quay-container-security-operator-rhel8@sha256:e78e00a5b9772568b3043ab6aa5c34b262d3bc4c2d13a60694e7a7dac717490a_ppc64le as a component of Quay v3
  • quay/quay-operator-bundle@sha256:43021a7198d1777360a61ce4c940a3320a0135bf073fdeaac6062810e26ffe41_s390x as a component of Quay v3
  • quay/quay-operator-bundle@sha256:c431ad9dfd69c049e6d9583928630c06b8612879eeed57738fa7be206061fee2_amd64 as a component of Quay v3
  • quay/quay-operator-bundle@sha256:de66eb020f718b872f2e8598c80da05679d0c78ed561fd7ef62e4711d623747e_ppc64le as a component of Quay v3
  • quay/quay-operator-rhel8@sha256:4a0baf8cc9406b9bbab63396fbaf5c255fb888848de21b21bb4b72a28e68edf2_amd64 as a component of Quay v3
  • quay/quay-operator-rhel8@sha256:ae157d35c624e330e9c110c198157b8c7ff9b66e1672ab8d9087722356b822d4_s390x as a component of Quay v3
  • quay/quay-operator-rhel8@sha256:b1c5ee5fce911e8bc4ea91046fdadb1324b0c23f5c14843fffeea0f451d665ed_ppc64le as a component of Quay v3
  • quay/quay-rhel8@sha256:1b8dd8217367bd9cd053eb1c4b6a1c6915050a1bdc246cdf6e0522d6a096c35f_ppc64le as a component of Quay v3
  • quay/quay-rhel8@sha256:648c75f9d078fd4ef3b97abe7db3936324d35516403050d54d17d17715f6bb22_s390x as a component of Quay v3
  • +1 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Prevent users, specially unprivileged or untrusted users, to execute hyperloglog operations by using ACL to restrict hyperloglog commands.

🔗 References (2)