RHEA-2025:19360 - Product Enhancement Advisory

Topic

Updated images are now available for Red Hat Advanced Cluster Security
(RHACS), which typically include new features, bug fixes, and/or
security patches.

Description

See the release notes (link in the references section) for a
description of the fixes and enhancements in this particular release.

Solution

If you are using an earlier version of RHACS, you are advised to
upgrade to the version of RHACS mentioned in the synopsis and release
notes in order to take advantage of the enhancements, bug fixes, and/or
security patches in the release.

Fixes

• ROX-29160 - Support built-in policy that verifies Red Hat images against official release keys
• ROX-30087 - Support Implicit Machine-to-Machine (m2m) Token Exchange for External JWT Issuers
• ROX-29959 - Declarative configuration for machine to machine access
• ROX-29070 - Support declarative configuration for ACS machine access configuration
• ROX-30654 - Add support for configuring the EHLO/HELO hostname for SMTP notifiers in RHACS
• ROX-28326 - Expose ACS product data as Prometheus metrics
• ROX-31049 - Update buildah to get fixes for mediaType
• ROX-31365 - Filling policy category names within Walk for Policies leads to DB conn exhaustion
• ROX-29772 - [BE] CO doesn't allow to schedule a NODE and RHCOS profile at the same time
• ROX-30821 - RHCOS BSI Profile in RHACS appears under 'Others' tab

CVEs

(none)

References

• https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.9/html-single/release_notes/index