RHBA-2025:16395HighCVSS 8.8

Red Hat Bug Fix Advisory: Red Hat Quay v3.12.12 bug fix release

Published
September 23, 2025
Last Modified
November 5, 2026

🔗 CVE IDs covered (1)

CVE-2025-32023 →

📋 Description

CVE-2025-32023 — redis: Redis Hyperloglog Out-of-Bounds Write Vulnerability

🎯 Affected products31

  • Quay v3
  • quay/clair-rhel8@sha256:b073e898f754a957128036c741b95e5f3f6bbc98c28016c4f114c42714d1aaba_amd64 as a component of Quay v3
  • quay/clair-rhel8@sha256:b6612509c1d373630490567108a00ceb01fba992f374a2bea00d0193ed2b836e_s390x as a component of Quay v3
  • quay/clair-rhel8@sha256:e06917042d4df095767c57e8b7032a90978842ed5c050b5d224131e737fc937f_ppc64le as a component of Quay v3
  • quay/quay-bridge-operator-bundle@sha256:46bc4af0e35f1c7e15be1b1216c9a9729ac6a2cd6afb0e8eecf039b07d87ad19_s390x as a component of Quay v3
  • quay/quay-bridge-operator-bundle@sha256:4c4c98b6cecd51c6644eb79b85789b7ebbcdc662edbb66ce435ea3b5e58d9273_amd64 as a component of Quay v3
  • quay/quay-bridge-operator-bundle@sha256:6bd8b2b1763f64591ce18d5d5cda64bedb28f50f334ed959ca650722d58d8b4f_ppc64le as a component of Quay v3
  • quay/quay-bridge-operator-rhel8@sha256:10614cb306ee729afd0a3227ac31a419124f801fc8dc32a93d311beb90354611_ppc64le as a component of Quay v3
  • quay/quay-bridge-operator-rhel8@sha256:47bb98ec66982da4a169ab85c67831a370c8beda4f998f6827f7d1718f221528_amd64 as a component of Quay v3
  • quay/quay-bridge-operator-rhel8@sha256:7fe583bfbc014cb8b6e68a71689b2f4e8c020f71278eaf36191b55266443c189_s390x as a component of Quay v3
  • quay/quay-builder-qemu-rhcos-rhel8@sha256:1b36a4a98ebe17e66fab4b82fc483757bccfcc5aa6c8e1c01fc177c7a8b99506_s390x as a component of Quay v3
  • quay/quay-builder-qemu-rhcos-rhel8@sha256:9e589ef110d149c733fa8f2e51534e5e0d652958fb24626ee4f0ff7d49ebd6a6_ppc64le as a component of Quay v3
  • quay/quay-builder-qemu-rhcos-rhel8@sha256:a6787b4ebf263864a444b6d24796612af57b572bb13b2aa6baaf8e8a257cc5c3_amd64 as a component of Quay v3
  • quay/quay-builder-rhel8@sha256:353eaa68bea50264aa31ead900df7b118148b58fa2411a4ecd155c960c028d13_s390x as a component of Quay v3
  • quay/quay-builder-rhel8@sha256:5114a2d9f7c0116f85b27fe39a919eae0113a76c5b9d6d9beb8553c7358b43c2_ppc64le as a component of Quay v3
  • quay/quay-builder-rhel8@sha256:ea585ad957f5bbdb5aa886aebaae418cf132797cf0727608e2ae6ada739ba83d_amd64 as a component of Quay v3
  • quay/quay-container-security-operator-bundle@sha256:1c171ba04cfb5edb5ee2c51a7723e52f4e793025df47f35b928c8c1d3314a8f2_s390x as a component of Quay v3
  • quay/quay-container-security-operator-bundle@sha256:4118ac24588b6b5675d71a238e7b2882227c5b6b249fd3cadb8cc64235d6f81c_ppc64le as a component of Quay v3
  • quay/quay-container-security-operator-bundle@sha256:d17af97462de060dc21f997dac973d9f895ce91f80821f1a810d93dbcbda31e3_amd64 as a component of Quay v3
  • quay/quay-container-security-operator-rhel8@sha256:4fb11329cbb4b41de5a5fbae820d95b5610eea097215f3dad851fb7dd573a11b_amd64 as a component of Quay v3
  • quay/quay-container-security-operator-rhel8@sha256:a48077a1e13994284beb1e0d00af1e9282e22fa805f849d04aec6ff9664ccf04_s390x as a component of Quay v3
  • quay/quay-container-security-operator-rhel8@sha256:d71b24b4b7cc4aa165fab6e06c3ee7c2cff3f5da3cd0b93faffc3be6ac55a5d2_ppc64le as a component of Quay v3
  • quay/quay-operator-bundle@sha256:28e37ec35de1307405264cd4f79aaa6ce4d4ecbd6cbc27f4fef5db415c678d64_amd64 as a component of Quay v3
  • quay/quay-operator-bundle@sha256:5dc4c6886ac17ffe09f50ca014e61bea68aa04c93a08dd4d3e20a80b4c1e86e4_s390x as a component of Quay v3
  • quay/quay-operator-bundle@sha256:ef7c78058382c87b2c6dcc94fd98c7fe16679955cc3b27def8166b0dacc5a657_ppc64le as a component of Quay v3
  • quay/quay-operator-rhel8@sha256:343a2a0581040be2bd824ee5eb0aedae53d2284ebddc3f5fdc5e39362f714d9a_s390x as a component of Quay v3
  • quay/quay-operator-rhel8@sha256:b6ceb858f6a9341f249a71216f865519be3ccd011e2a7d7c26d6b7d4c0071393_amd64 as a component of Quay v3
  • quay/quay-operator-rhel8@sha256:f47a67dd1b54c43496c36cd9e41319faf98f5ee3a154455f2b74ea1b048930bd_ppc64le as a component of Quay v3
  • quay/quay-rhel8@sha256:5d36d48a5c8cb1d159d3afce09630d790b67e22ac6bd8d8e92c9ed353f6cb1c4_s390x as a component of Quay v3
  • quay/quay-rhel8@sha256:a7414a79e3de34afcf40075573084f15edf60489f4b7e2454579a55d900ec487_ppc64le as a component of Quay v3
  • +1 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Prevent users, specially unprivileged or untrusted users, to execute hyperloglog operations by using ACL to restrict hyperloglog commands.

🔗 References (2)