RHSA-2026:2350 - Security Advisory

Topic

Updated images are now available for Red Hat Advanced Cluster Security
(RHACS), which typically include new features, bug fixes, and/or
security patches.

Description

See the release notes (link in the references section) for a
description of the fixes and enhancements in this particular release.

Solution

If you are using an earlier version of RHACS, you are advised to
upgrade to the version of RHACS mentioned in the synopsis and release
notes in order to take advantage of the enhancements, bug fixes, and/or
security patches in the release.

Fixes

• ROX-32507 - DB error: error committing cursor transaction: failed to deallocate cached statement
• ROX-31448 - central: excessive use of connections and ignores transactions
• ROX-31984 - Commit and Rollback fail when tx context is done
• ROX-32125 - Centrals restored from backup do not rotate certificates
• ROX-32281 - Bump Go to 1.25

CVEs

• CVE-2025-12816
• CVE-2025-15284
• CVE-2025-58183
• CVE-2025-66031
• CVE-2025-66506
• CVE-2025-66564
• CVE-2025-68428
• CVE-2025-68973
• CVE-2026-22029

References

• https://access.redhat.com/security/updates/classification/
• https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.9/html-single/release_notes/index#about-this-release-493_release-notes-49