RHBA-2025:11995 - Bug Fix Advisory

Topic

Updated images are now available for Red Hat Advanced Cluster Security.

Description

This release of ACS 4.8 provides these bug fixes:

• In RHACS 4.8, Central fails to create a backup because it uses pg_dump from PostgreSQL version 13 with the PostgreSQL 15 database. With this release, the pg_dump version in Central is updated to resolve the backup failures.
• Before this update, the network flow table migration during the 4.8 upgrade took an extended period of time, often timing out after 2 hours. This release implements batch network flow updates to reduce the migration time.
• Before this update, Sensor’s failure to call stream.Recv() caused gRPC flow control to block image reprocessing every 4 hours. This update resolves the issue by including a timeout for sending messages to Sensors in the reprocessing loop, allowing image reprocessing to resume as expected.
• Before this update, removing a network entity from the network tree failed to properly remove its parent node when it had no children or value. This led to a memory leak, causing increased memory usage and potential application crashes, especially noticeable when external IPs were enabled. This release resolves the memory leak by ensuring that RHACS removes parent nodes along with their child nodes, thereby optimizing network tree memory usage, reducing potential crashes, and improving system performance, particularly with external IPs enabled.
• Before this update, excessive logging of telemetry collection status resulted in an abundance of log entries. This update configures telemetry collection to not emit repeated logs continuously, resolving the issue and significantly reducing log volume.
• Before this update, Central sometimes stored external IPs in the database even after users deleted their corresponding deployments. This resulted in inaccessible and stale data, leading to a loss of storage and memory and potential memory exhaustion. With this release, Central no longer stores external IP information for deleted deployments, resolving these issues.

Solution

If you are using an earlier version of RHACS 4.8, you are advised to upgrade to patch release 4.8.1.

Affected Products

• Red Hat Advanced Cluster Security for Kubernetes 4 x86_64
• Red Hat Advanced Cluster Security for Kubernetes for IBM Z and LinuxONE 4 s390x
• Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4 ppc64le
• Red Hat Advanced Cluster Security for Kubernetes for ARM 4 aarch64

Fixes

• ROX-30193 - Release RHACS 4.8.1

CVEs

• CVE-2019-17543
• CVE-2024-12718
• CVE-2024-23337
• CVE-2024-34397
• CVE-2024-52533
• CVE-2024-53920
• CVE-2025-4138
• CVE-2025-4330
• CVE-2025-4373
• CVE-2025-4435
• CVE-2025-4517
• CVE-2025-6020
• CVE-2025-6021
• CVE-2025-47273
• CVE-2025-48060
• CVE-2025-49794
• CVE-2025-49796

References

• https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.8/html/release_notes/release-notes-48