RHEA-2023:7235 - Product Enhancement Advisory

Topic

Updated images are now available for Red Hat Advanced Cluster Security. The updated image includes new features and bug fixes.

Description

Release of ACS 4.3 provides these changes:

New features:

• Increased support for hardware and software
• Vulnerability reporting 2.0 is generally available
• Watch and scan images in Vulnerability Management 2.0
• View administration events information
• Scan images by using the roxctl CLI
• Invite users to your RHACS instance

Notable technical changes:

• When audit logging is enabled, audit log messages now include the source IP address of the audit log request.
• The default policy "Iptables Executed in Privileged Container" has been renamed to "Iptables or nftables Executed in Privileged Container" and now also detects the nft process which is used by nftables.
• Risk reprocessing timing has been shifted to improve system performance by debouncing expensive risk calculations.

For more information on new features and notable technical changes, see the Red Hat Advanced Cluster Security for Kubernetes 4.3 Release Notes.

Solution

To take advantage of the new features, bug fixes, and enhancements in RHACS 4.3, you are advised to upgrade to RHACS 4.3.0.

Affected Products

• Red Hat Advanced Cluster Security for Kubernetes 4 x86_64
• Red Hat Advanced Cluster Security for Kubernetes for IBM Z and LinuxONE 4 s390x
• Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4 ppc64le

Fixes

• ROX-20653 - Release RHACS 4.3.0

CVEs

• CVE-2023-39325
• CVE-2023-40217
• CVE-2023-44487

References

• https://docs.openshift.com/acs/4.3/release_notes/43-release-notes.html