RHBA-2025:13257HighCVSS 8.8

Red Hat Bug Fix Advisory: Red Hat Quay v3.14.4 bug fix release

Published
August 14, 2025
Last Modified
November 5, 2026

🔗 CVE IDs covered (1)

CVE-2025-32023 →

📋 Description

CVE-2025-32023 — redis: Redis Hyperloglog Out-of-Bounds Write Vulnerability

🎯 Affected products31

  • Quay v3
  • quay/clair-rhel8@sha256:55b885da90f3047c4a1c322faba1caa5dba7fa809aba8f8c14fca755f45fdd57_s390x as a component of Quay v3
  • quay/clair-rhel8@sha256:8acae810ccbcd9ea6d994b7cfc3e9aeffe2f609086c032c278708321d1deeab5_amd64 as a component of Quay v3
  • quay/clair-rhel8@sha256:d2e065b4872f5323a0d67142dcf32988d0936f3d7e0de97447b1c7ad82a83256_ppc64le as a component of Quay v3
  • quay/quay-bridge-operator-bundle@sha256:a28c001dfb6f8b4da015645133b47e5aaa2118232f0f199931ab69593585167a_amd64 as a component of Quay v3
  • quay/quay-bridge-operator-bundle@sha256:f1ca7d1183829822a5596a7cb0839b12f5504355d6f90ac1da73d733f7cba121_ppc64le as a component of Quay v3
  • quay/quay-bridge-operator-bundle@sha256:f461a548d87d427a093a5b837f97e58f09beb6ee95cd8ada8fbea498bd56decf_s390x as a component of Quay v3
  • quay/quay-bridge-operator-rhel8@sha256:1c0eef94dbee87d6ac8aa8a22685d2d45cf2baaadde3afae14d2be5ebb568e43_amd64 as a component of Quay v3
  • quay/quay-bridge-operator-rhel8@sha256:76b2425a6822a1b887661fa3e5a0fa59f0075632a4fce331a445644380283e54_s390x as a component of Quay v3
  • quay/quay-bridge-operator-rhel8@sha256:a732b03118823ac5047abe07ea619c3a604cc7407f6df72aafaed55a0900c5ff_ppc64le as a component of Quay v3
  • quay/quay-builder-qemu-rhcos-rhel8@sha256:b8705c4109df5c520d54f6f073b6b89c803c4b64fc2650fab548949192ac2c8a_s390x as a component of Quay v3
  • quay/quay-builder-qemu-rhcos-rhel8@sha256:c6ecaa847b6eaaffd535b7272589cca497b1ea527b9e88a289932481ec9e8086_amd64 as a component of Quay v3
  • quay/quay-builder-qemu-rhcos-rhel8@sha256:fa9cda7e2ee1ec40f0b41f57b2cff95d1e2aef5200ca5326476ad4b318d7eb00_ppc64le as a component of Quay v3
  • quay/quay-builder-rhel8@sha256:15ce61d0816027b4537093db5874998c40d1731d777b4712ace881554e7ce73d_amd64 as a component of Quay v3
  • quay/quay-builder-rhel8@sha256:26a05d623019edde15e6672372394bd419ba0e366ee32858aba22622b1d94b35_s390x as a component of Quay v3
  • quay/quay-builder-rhel8@sha256:f6c0f9a05f5a1304a33e5de8c02d031130efcaafedc1f2a525c786d3f9951b65_ppc64le as a component of Quay v3
  • quay/quay-container-security-operator-bundle@sha256:3eaa4c7919040b52ae9ff4efa7107de10c5bff6a9dd5395f2164ae2a383c5e09_ppc64le as a component of Quay v3
  • quay/quay-container-security-operator-bundle@sha256:42a2d1fc2cd57ed8c389a3422b4d7f2fb10fdf7bd2a8f7c76b993d2d14af67f5_s390x as a component of Quay v3
  • quay/quay-container-security-operator-bundle@sha256:4533fd1ab37aba2c5df10422180cd45bd4f4673293c758262fb4349b0e93f9c2_amd64 as a component of Quay v3
  • quay/quay-container-security-operator-rhel8@sha256:5e06bb8c4bc30b8b86c698e4e3a2ab6d7f986a3726b6fcfe033a050d69e668ef_amd64 as a component of Quay v3
  • quay/quay-container-security-operator-rhel8@sha256:e6ec3ea3bf874c7ce67782ee2121406073f799c8a83686d6ccfbf171dca47ab1_ppc64le as a component of Quay v3
  • quay/quay-container-security-operator-rhel8@sha256:ec4b76d598b0f71bb6267a2003f07d9b448021c120f004bc40eacaefed497d1d_s390x as a component of Quay v3
  • quay/quay-operator-bundle@sha256:06f6d189e18f65f3efec205eb784195f49d72b192b69cb79cb58dd9405d7fc99_amd64 as a component of Quay v3
  • quay/quay-operator-bundle@sha256:9562750901530eb7dcb2f8ffe70c91a6aeb231263e5b9cdcf769202ba3090ce2_ppc64le as a component of Quay v3
  • quay/quay-operator-bundle@sha256:b58c3f7dc930bcbd984adde084a253099bc0c60cb0a9429cc1bc091229186641_s390x as a component of Quay v3
  • quay/quay-operator-rhel8@sha256:4ac88e6d8f41224c233216daffd5423b1094e3307e7f71293a431b5bef69a36a_amd64 as a component of Quay v3
  • quay/quay-operator-rhel8@sha256:bd392522e9113200e92fcf342b87315e52905100442df4c366f1a235a28a0501_s390x as a component of Quay v3
  • quay/quay-operator-rhel8@sha256:d9676de26057e18fe74c423a59c2349fcc689db05c08ccb2d0bc5c99ee375efb_ppc64le as a component of Quay v3
  • quay/quay-rhel8@sha256:dcc0563e68249ad654f598b7f4b022b9fc5201857184911ed5179593619b1013_s390x as a component of Quay v3
  • quay/quay-rhel8@sha256:f8f5825f79b0c43d3db40c42e5c2f937019b5765e717b09902e0e0e2553983bd_ppc64le as a component of Quay v3
  • +1 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Prevent users, specially unprivileged or untrusted users, to execute hyperloglog operations by using ACL to restrict hyperloglog commands.

🔗 References (5)