RHSA-2026:67714 - Security Advisory

Topic

Updated images are now available for Red Hat Advanced Cluster Security
(RHACS), which typically include new features, bug fixes, and/or
security patches.

Description

See the release notes (link in the references section) for a
description of the fixes and enhancements in this particular release.

Solution

If you are using an earlier version of RHACS, you are advised to
upgrade to the version of RHACS mentioned in the synopsis and release
notes in order to take advantage of the enhancements, bug fixes, and/or
security patches in the release.

Affected Products

• Red Hat Advanced Cluster Security for Kubernetes

Fixes

• ROX-35908 - Compliance report is not downloadable when a node profile is selected on HCP clusters
• ROX-36237 - ValidatingWebhookConfiguration "stackrox" uses incorrect namespace label selector "namespace.metadata.stackrox.io/name"
• ROX-36405 - SecurityPolicy CR: clusterlabel scope silently ignored due to YAML/JSON field name mismatch
• ROX-36628 - RHACS Scanner: false positive CVE-2026-45134 on PyPI langsmith due to npm/PyPI fix-version mismatch
• ROX-36824 - ACS diagnostic bundle includes unredacted openshift.io/token-secret.value annotation value

CVEs

• CVE-2026-33818
• CVE-2026-46600
• CVE-2026-56853
• CVE-2026-56858
• CVE-2026-56859
• CVE-2026-56860
• CVE-2026-56862
• CVE-2026-56864
• CVE-2026-56865
• CVE-2026-67313
• CVE-2026-67321
• CVE-2026-75838
• CVE-2026-82417
• CVE-2026-84375

References

• https://access.redhat.com/security/updates/classification/
• https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.11/html-single/release_notes/index#about-this-release-4114_release-notes-411