RHBA-2025:14522HighCVSS 8.8

Red Hat Bug Fix Advisory: Red Hat Quay v3.11.13 bug fix release

Published
September 2, 2025
Last Modified
November 5, 2026

🔗 CVE IDs covered (1)

CVE-2025-32023 →

📋 Description

CVE-2025-32023 — redis: Redis Hyperloglog Out-of-Bounds Write Vulnerability

🎯 Affected products31

  • Quay v3
  • quay/clair-rhel8@sha256:664c98a082220574893c4a450a9786056a8b29595061c0e1f406c2f5217bb716_s390x as a component of Quay v3
  • quay/clair-rhel8@sha256:b280faa0f428c1a93ec258998f475fbde3147fedce60ec88a854012f029a682f_ppc64le as a component of Quay v3
  • quay/clair-rhel8@sha256:b5498745d0c5e84e9dcee39cce1161d1bb11d1c4d7ce8ee76ad9768bec450285_amd64 as a component of Quay v3
  • quay/quay-bridge-operator-bundle@sha256:11a4ca3d6ab748d74feb485220bf71a0997c0cc66365e1147941ba088b5ce4fc_ppc64le as a component of Quay v3
  • quay/quay-bridge-operator-bundle@sha256:2b6b1a0b56cfb348ed4035b13d31501ff5757c101ed21027b330a7852576b891_amd64 as a component of Quay v3
  • quay/quay-bridge-operator-bundle@sha256:fdc74412fb2da7c215728fac91583905ef25186972fab633c102e06a1245ccf0_s390x as a component of Quay v3
  • quay/quay-bridge-operator-rhel8@sha256:99e0954413bb30750fd312ad9526d84e384087f4c669010870eea9c9e62fccae_ppc64le as a component of Quay v3
  • quay/quay-bridge-operator-rhel8@sha256:9d37342ba28aac7f446151a68815934de84058cd843e74d8dca57a0c5f993e31_amd64 as a component of Quay v3
  • quay/quay-bridge-operator-rhel8@sha256:c780e56c036fc7540b6d94541e9d111e5ce139ea3a4b373bec3035ddb7ed6c34_s390x as a component of Quay v3
  • quay/quay-builder-qemu-rhcos-rhel8@sha256:215f56bcc261e589d54b761a72362b97e3d1c5a87307382a93d9b83d49c5728f_ppc64le as a component of Quay v3
  • quay/quay-builder-qemu-rhcos-rhel8@sha256:36af9879c242f7e81e9e6485e2066880dad44bfb71b0fee5f8391a3108e39f2b_s390x as a component of Quay v3
  • quay/quay-builder-qemu-rhcos-rhel8@sha256:f880ae12cb1e9e72fd0f043ec8159cff290df0e2cc07739b7924fad79423478e_amd64 as a component of Quay v3
  • quay/quay-builder-rhel8@sha256:672633f7c82982f523df1a1c371669d030fe609cd188db09a444a0359ee572a9_ppc64le as a component of Quay v3
  • quay/quay-builder-rhel8@sha256:d2b4c268a9fdac0f3865955f10fc3d9c6c003b9d916bf030dd86cb806e6444b2_amd64 as a component of Quay v3
  • quay/quay-builder-rhel8@sha256:d318d9eda337f03dd44e172bd0dac3a96e28497a4e69c923b3b9d90ebb9bc9c6_s390x as a component of Quay v3
  • quay/quay-container-security-operator-bundle@sha256:56db2fd54dbe982dde6a4558b664b19a676a8ac99bfbc8082d097cd6d71a03ea_amd64 as a component of Quay v3
  • quay/quay-container-security-operator-bundle@sha256:934ba842629e0458efb697d8c5bf24fa1d01bdc1cc4bbf42f947700060020846_ppc64le as a component of Quay v3
  • quay/quay-container-security-operator-bundle@sha256:a0a6690ddc3b438e5d590c125953a908d65d9ec7b1c27cbadebeb07d308a1d8b_s390x as a component of Quay v3
  • quay/quay-container-security-operator-rhel8@sha256:1dba33822733fa5a730eacb69ab0308433bd936e53dc90d37e0c64484d7544a1_ppc64le as a component of Quay v3
  • quay/quay-container-security-operator-rhel8@sha256:996cf3fcaf2d848abbc9b38f38402d3b4a6e06493841d97b3190bdec6267642e_s390x as a component of Quay v3
  • quay/quay-container-security-operator-rhel8@sha256:cf64fc679f36fadec6fb2c44a99b470d30742dcdfefacc494c4d246c663ad791_amd64 as a component of Quay v3
  • quay/quay-operator-bundle@sha256:9e50d3a84e0e409fdf9938d76710113441fe91fde9f50d1d39bfc82e913a18f6_ppc64le as a component of Quay v3
  • quay/quay-operator-bundle@sha256:f19ae051041c46fe7587f903a9c6221bcbe8be2c4cc0235739f7592eb93ae164_amd64 as a component of Quay v3
  • quay/quay-operator-bundle@sha256:f765b04dd94b37f7a87121c054ef374d74b4b4cac7e23099c4d487fc8a50000f_s390x as a component of Quay v3
  • quay/quay-operator-rhel8@sha256:48288694f6dd56dbedeab0c7b4ff7a85c9615385f36cd7c2b3b613ee592abcf8_amd64 as a component of Quay v3
  • quay/quay-operator-rhel8@sha256:ac14b223828aa02922911e5ce160e48499d80cdb25f2cd884d4b3f185580bd27_ppc64le as a component of Quay v3
  • quay/quay-operator-rhel8@sha256:b08c9216eba84f96522e2b45088cdc013c0011768edcd5cfa831135c1772e10a_s390x as a component of Quay v3
  • quay/quay-rhel8@sha256:4f8c1d4a552681a6a1f02b913f1123801728d927544cc47725a7aa208846ba94_s390x as a component of Quay v3
  • quay/quay-rhel8@sha256:8512fc879068672770742091e802b4103573937826cdebeca22413bf318400ba_amd64 as a component of Quay v3
  • +1 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Prevent users, specially unprivileged or untrusted users, to execute hyperloglog operations by using ACL to restrict hyperloglog commands.

🔗 References (2)