RHSA-2026:36207 - Security Advisory

Topic

Updated images are now available for Red Hat Advanced Cluster Security
(RHACS), which typically include new features, bug fixes, and/or
security patches.

Description

See the release notes (link in the references section) for a
description of the fixes and enhancements in this particular release.

Solution

If you are using an earlier version of RHACS, you are advised to
upgrade to the version of RHACS mentioned in the synopsis and release
notes in order to take advantage of the enhancements, bug fixes, and/or
security patches in the release.

Affected Products

• Red Hat Advanced Cluster Security for Kubernetes

Fixes

• ROX-30686 - Slow alert queries
• ROX-35012 - Loading compliance profiles fails at scale
• ROX-35227 - Artifactory Test function always returns True, even when auth fails
• ROX-35239 - Restore static-linked roxctl cli
• ROX-35300 - cert-watcher sidecar causes CPU throttling in ACS CS

CVEs

• CVE-2026-25681
• CVE-2026-27136
• CVE-2026-33811
• CVE-2026-39821
• CVE-2026-39828
• CVE-2026-39829
• CVE-2026-39830
• CVE-2026-39835
• CVE-2026-42264
• CVE-2026-46595
• CVE-2026-53488
• CVE-2026-9165

References

• https://access.redhat.com/security/updates/classification/
• https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.11/html-single/release_notes/index#about-this-release-4111_release-notes-411