RHBA-2025:11488 - Bug Fix Advisory

Topic

Updated images are now available for Red Hat Advanced Cluster Security for
Kubernetes (RHACS). The updated image includes security and bug fixes.

Description

This release of ACS 4.6 provides these bug fixes:

• Before this update, the failure of Sensor to call `stream.Recv()` caused gRPC flow control to block image reprocessing every 4 hours. With this update, the reprocessing loop includes a timeout for sending messages to Sensors, which resolves the issue and resumes the image reprocessing as expected.
• Before this update, missing network policy configuration for port `9090` on long-running clusters from earlier releases prevented Elasticsearch from indexing those clusters. With this update, Elasticsearch integration for long-running cluster metrics resolves the issue, and you can now access search results from these clusters.
• Before this update, image digest mismatches caused signature verification to fail, even when the signatures were valid. With this update, a check verifies image references against signatures, resolving the issue and allowing OpenShift Container Platform to successfully verify image signatures for secure deployment.

This release provides security fixes for the CVEs listed in the advisory.

Solution

If you are using an earlier version of RHACS 4.6, you are advised to upgrade to this patch release 4.6.8.

Affected Products

• Red Hat Advanced Cluster Security for Kubernetes 4 x86_64
• Red Hat Advanced Cluster Security for Kubernetes for IBM Z and LinuxONE 4 s390x
• Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4 ppc64le
• Red Hat Advanced Cluster Security for Kubernetes for ARM 4 aarch64

Fixes

• ROX-30091 - Release RHACS 4.6.8

CVEs

• CVE-2019-17543
• CVE-2023-40403
• CVE-2024-12718
• CVE-2024-23337
• CVE-2024-53920
• CVE-2025-4138
• CVE-2025-4330
• CVE-2025-4435
• CVE-2025-4517
• CVE-2025-4802
• CVE-2025-6020
• CVE-2025-6021
• CVE-2025-47273
• CVE-2025-48060
• CVE-2025-49794
• CVE-2025-49796

References

• https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.6/html/release_notes/index