RHEA-2024:1964 - Product Enhancement Advisory

Topic

Updated images are now available for Red Hat Advanced Cluster Security
(RHACS). The updated image includes new features and bug fixes.

Red Hat Product Security has rated this update as having a security impact
of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE link(s) in the References section.

Description

The release of RHACS 4.4.1 provides these changes:

Bug fix:

• Fixed an issue that prevented the filtering of newly added or updated policies by category by using the roxctl CLI.

Known issue:

• Currently, there is an issue for OpenShift Container Platform 4.12 on the IBM Power architecture where the CORE_BPF collection method does not work properly. From RHACS 4.4.1 and later, Collector automatically uses the EBPF collection method in this particular case when CORE_BPF is selected.

Removed feature:

• Support for older Helm versions has been removed. Rendering the Helm charts stackrox-central-services and stackrox-secured-cluster-services now requires Helm version 3.9.0 or later.

For more information, see https://docs.openshift.com/acs/4.4/release_notes/44-release-notes.html

Solution

If you are using an earlier version of RHACS 4.4, you are advised to upgrade to patch release 4.4.1.

Affected Products

• Red Hat Advanced Cluster Security for Kubernetes 4 x86_64
• Red Hat Advanced Cluster Security for Kubernetes for IBM Z and LinuxONE 4 s390x
• Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4 ppc64le

Fixes

• ROX-23801 - Release RHACS 4.4.1

CVEs

• CVE-2021-43618
• CVE-2022-48624
• CVE-2023-4408
• CVE-2023-28322
• CVE-2023-38546
• CVE-2023-46218
• CVE-2023-50387
• CVE-2023-50868
• CVE-2023-52425
• CVE-2024-28834

References

• https://docs.openshift.com/acs/4.4/release_notes/44-release-notes.html