RHBA-2025:7656 - Bug Fix Advisory

Topic

Updated images are now available for Red Hat Advanced Cluster Security for
Kubernetes (RHACS). The updated image includes bug fixes.

Description

This release of RHACS includes the following bug fixes:

• Fixed an issue where you could approve global exception requests without having the global access scope, potentially affecting clusters you don't have access to. (ROX-27669)
• Fixed an issue where disabling TLS certificate validation in the email notifier settings did not skip TLS verification even if you selected the option. (ROX-28250)
• Fixed an issue where API responses from Central would not include the "Content-Length" HTTP response header on successful requests, which could affect your integrations that rely on this header. (ROX-28931)
• Fixed an issue where the number of failed policies reported in Configuration Management for a deployment were calculated incorrectly. (ROX-28878)
• Increased the default client timeout from 60 seconds to 180 seconds for GraphQL-based requests to avoid long-running request timeouts. (ROX-28954)

Solution

If you are using an earlier version of RHACS 4.7.0, you are advised to upgrade to patch release 4.7.3.

Affected Products

• Red Hat Advanced Cluster Security for Kubernetes 4 x86_64
• Red Hat Advanced Cluster Security for Kubernetes for IBM Z and LinuxONE 4 s390x
• Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4 ppc64le
• Red Hat Advanced Cluster Security for Kubernetes for ARM 4 aarch64

Fixes

• ROX-29206 - Release RHACS 4.7.3

CVEs

• CVE-2024-8176
• CVE-2024-12133
• CVE-2024-12243
• CVE-2025-0395

References

• https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.7/html/release_notes/release-notes-47