RHBA-2023:4281 - Bug Fix Advisory

Topic

Updated images are now available for Red Hat Advanced Cluster Security.

Description

This release of RHACS includes the following fixes:

• Fixed an issue where an operator-based RHACS installation failed to upgrade from versions earlier than RHACS 3.71.

The failure occurred because the older versions did not implement PSP auto-sensing on the Kubernetes cluster 1.25 or later.

• Previously, if you were using RHACS with Istio, the Scanner pods would crash if Istio reported the version as `latest` instead of the actual version number, such as `1.17`.

The updated image fixes this issue.

• Fixed an issue where upgrading from RHACS 3.74.3 to RHACS 4.1.1 failed with an "insert...violates foreign key restraint" error.

Solution

If you are using an earlier version of RHACS 4.1, you are advised to upgrade to patch release 4.1.2.

For details on how to apply this update, which includes the changes described in this advisory, see https://access.redhat.com/articles/11258

Affected Products

• Red Hat Advanced Cluster Security for Kubernetes 4 x86_64
• Red Hat Advanced Cluster Security for Kubernetes for IBM Z and LinuxONE 4 s390x
• Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4 ppc64le

Fixes

• ROX-18534 - Release RHACS 4.1.2

CVEs

• CVE-2023-2828

References

• https://docs.openshift.com/acs/4.1/release_notes/41-release-notes.html