RHBA-2025:14521HighCVSS 8.8

Red Hat Bug Fix Advisory: Red Hat Quay v3.13.8 bug fix release

Published
August 27, 2025
Last Modified
November 5, 2026

🔗 CVE IDs covered (1)

CVE-2025-32023 →

📋 Description

CVE-2025-32023 — redis: Redis Hyperloglog Out-of-Bounds Write Vulnerability

🎯 Affected products31

  • Quay v3
  • quay/clair-rhel8@sha256:1ee661a128ff7a4ca9fe33f2cefe7d17f3aed9b56865b0c6ede43cd3d87750a4_amd64 as a component of Quay v3
  • quay/clair-rhel8@sha256:1f24ed706144287fd1107374b211f9e2bc954f396f17772ab60fd96c17cab47f_s390x as a component of Quay v3
  • quay/clair-rhel8@sha256:31f1254d001ea74644b68f51b0ca7f467f5c06d942e5f4f6e09e560dc8c592c2_ppc64le as a component of Quay v3
  • quay/quay-bridge-operator-bundle@sha256:16980744b4d7dc06bb2fb6111c5ce8bd99fa56c71fa03d7930556a470d9eb736_ppc64le as a component of Quay v3
  • quay/quay-bridge-operator-bundle@sha256:8a1eae2af0f39b3590addbf4d92987651bc2a0b79ee75d486d8c64af965e5b29_s390x as a component of Quay v3
  • quay/quay-bridge-operator-bundle@sha256:b8aa74c5b2635a6d3413eeac6fc0f6eb9a2e459089aaabbf626ea3ef92a67ce0_amd64 as a component of Quay v3
  • quay/quay-bridge-operator-rhel8@sha256:5e3a6a447579e6a46c0b2ecd6600ac91a7db29c9beac6572c34898eb75ad9adf_s390x as a component of Quay v3
  • quay/quay-bridge-operator-rhel8@sha256:a3d79c954d3ab0a488fc16992fb4a6166e11e74198241b2a8432cbc6b5a5291b_ppc64le as a component of Quay v3
  • quay/quay-bridge-operator-rhel8@sha256:d314b014726586ffac5871a5de4ae8c44c9ae9ad66b8d3d7d141904d5dd98718_amd64 as a component of Quay v3
  • quay/quay-builder-qemu-rhcos-rhel8@sha256:0c95660d70d43250ed9a8020e0c3a824764b517fdc1e052a0a0c9293d6a6eccf_amd64 as a component of Quay v3
  • quay/quay-builder-qemu-rhcos-rhel8@sha256:9bd435c7a788405fbe848fc4af8ca2f06892f9a57b5ae45f2aabb75730e599c5_ppc64le as a component of Quay v3
  • quay/quay-builder-qemu-rhcos-rhel8@sha256:a1686339b8076c93b4804f74e7662eaa79e645bad5169543388d4f0ee94223bc_s390x as a component of Quay v3
  • quay/quay-builder-rhel8@sha256:37a54cb73b9f7ebf35d105ff2eceb245b4b5d6a17cd59b2231340732a20d1300_amd64 as a component of Quay v3
  • quay/quay-builder-rhel8@sha256:4e723c745572096f6b8ad9be2824cab346b2368f3c1a7c3f932b5ff07352e98e_ppc64le as a component of Quay v3
  • quay/quay-builder-rhel8@sha256:ecee959ff9f8941775cc2215ff1f422b150d504e54be989a7ae34b51d0fee1d5_s390x as a component of Quay v3
  • quay/quay-container-security-operator-bundle@sha256:2703de775b2ba3d918b2ef2e793e50483ec79b4548a9b805a0038229ef4e2c05_ppc64le as a component of Quay v3
  • quay/quay-container-security-operator-bundle@sha256:783380361431859301477dfe63b6915240e934ffd07a2af2651094579be47a15_amd64 as a component of Quay v3
  • quay/quay-container-security-operator-bundle@sha256:bf4365ef885ac75a4fb267b4ff0f78b0a4a66fbc6989e08d26d2fff2303cc037_s390x as a component of Quay v3
  • quay/quay-container-security-operator-rhel8@sha256:9b5704ad2378faa18549f903f1c1aa9eba16400cd4870024a502167b94d16266_ppc64le as a component of Quay v3
  • quay/quay-container-security-operator-rhel8@sha256:f91346c06de18304d2069173dff6acbf6579e48102653200606e9bd03bf1dc3f_s390x as a component of Quay v3
  • quay/quay-container-security-operator-rhel8@sha256:f9c9389872049907df9dc7a608fea46b556e81d74cb614977efada54fd38c8a4_amd64 as a component of Quay v3
  • quay/quay-operator-bundle@sha256:4a004584fa6c7187481e8c8480f17e0e4edd18c32f52a2e271c68d02f1a9655f_amd64 as a component of Quay v3
  • quay/quay-operator-bundle@sha256:6ef1cc4866f961a819a86807d87f05d450a885c86576bddbcd02f5409725842e_s390x as a component of Quay v3
  • quay/quay-operator-bundle@sha256:869e00b7d0f624d9a4f49ccb3575fc9c9aeb02d65334cc4f1780be0568ece9eb_ppc64le as a component of Quay v3
  • quay/quay-operator-rhel8@sha256:c5aa967417f760b93bbd93ddf33f137440b0270c46bf00099773bf2ae88512e4_s390x as a component of Quay v3
  • quay/quay-operator-rhel8@sha256:f4051caccc2b3480e5f56449d775b093ddef5976366448cb97cb7f3639e81e7c_ppc64le as a component of Quay v3
  • quay/quay-operator-rhel8@sha256:fe30a0c9fab208974711a6d8bddcc7118d3398bccd76bfc0b925f4536b92414e_amd64 as a component of Quay v3
  • quay/quay-rhel8@sha256:0006f9e6699c201a49405ab0def316f485f701fe8b6154a94509b0a9c16c60c3_ppc64le as a component of Quay v3
  • quay/quay-rhel8@sha256:5db65b09004a74967eb7786c461534bf54e779bc0e2c0e19856c2dc23899780b_amd64 as a component of Quay v3
  • +1 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Prevent users, specially unprivileged or untrusted users, to execute hyperloglog operations by using ACL to restrict hyperloglog commands.

🔗 References (2)