RHBA-2024:8204 - Bug Fix Advisory

Topic

Updated images are now available for Red Hat Advanced Cluster Security (RHACS). The updated image includes bug fixes.

Description

This release of RHACS includes the following bug fixes:

• Fixed incorrect timestamp data for the First discovered column on the Workload CVE single page when viewing affected images.
• Fixed incorrect CVE counts when viewing an image in the Vulnerability Management window that contains CVEs with an unknown severity.
• In runtime monitoring, process names and arguments could cause serialization problems when containing invalid UTF-8 characters. This resulted in error messages in the collector logs. Those characters are now filtered and replaced with a `?` when necessary.
• Fixed a panic issue where the Central pod restarted on systems that were using Scanner V4. When this issue occurred, the logs displayed an "invalid memory address or nil pointer dereference" runtime error.

Solution

To take advantage of the bug fixes in RHACS 4.5, you are advised to upgrade to RHACS 4.5.4.

Affected Products

• Red Hat Advanced Cluster Security for Kubernetes 4 x86_64
• Red Hat Advanced Cluster Security for Kubernetes for IBM Z and LinuxONE 4 s390x
• Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4 ppc64le

Fixes

• ROX-26569 - Release RHACS 4.5.4

CVEs

• CVE-2024-5535

References

• https://docs.openshift.com/acs/4.5/release_notes/45-release-notes.html