RHSA-2026:4467 - Security Advisory

标题

Updated images are now available for Red Hat Advanced Cluster Security
(RHACS), which typically include new features, bug fixes, and/or
security patches.

描述

See the release notes (link in the references section) for a
description of the fixes and enhancements in this particular release.

解决方案

If you are using an earlier version of RHACS, you are advised to
upgrade to the version of RHACS mentioned in the synopsis and release
notes in order to take advantage of the enhancements, bug fixes, and/or
security patches in the release.

修复

• ROX-32844 - Policy store has potential connection leak
• ROX-32843 - Machine-to-machine auth may be a source of Central DB connection hoarding
• ROX-33084 - TLS failure when doing local image scanning in co-located deployments during CA rotation
• ROX-32845 - DeleteClusterCVEsForCluster has potential connection leak
• ROX-31172 - Misleading Sensor logs on TLS connection failure to Central

CVE

• CVE-2025-13465
• CVE-2025-61726
• CVE-2025-61728
• CVE-2025-61729
• CVE-2025-66418
• CVE-2025-66471
• CVE-2026-21441
• CVE-2026-24040
• CVE-2026-24737

参考

• https://access.redhat.com/security/updates/classification/
• https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.9/html-single/release_notes/index#about-this-release-494_release-notes-49