Red Hat Security Advisory: ACS 4.7 enhancement and security update

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products49

• RHACS 4.7 for RHEL 8
• advanced-cluster-security/rhacs-central-db-rhel8@sha256:96f1071284c5819b165d6345350e918402d0e6ca273004125e36afc12d9d938b_s390x as a component of RHACS 4.7 for RHEL 8
• advanced-cluster-security/rhacs-central-db-rhel8@sha256:afc65b5cb463514d1e22d65f6206b394be05c611945765b69bca3527e427dfc4_amd64 as a component of RHACS 4.7 for RHEL 8
• advanced-cluster-security/rhacs-central-db-rhel8@sha256:caa4ef8563d8899cd743fb25d855b5f2e46b3fd1fa3f432acaa0b59b9b5a2d4d_arm64 as a component of RHACS 4.7 for RHEL 8
• advanced-cluster-security/rhacs-central-db-rhel8@sha256:f2d7a2c0349c8f83af5f273a141440d82d315fcf27f5ba91ce6bb0ed9bb4b2ab_ppc64le as a component of RHACS 4.7 for RHEL 8
• advanced-cluster-security/rhacs-collector-rhel8@sha256:19a2009c68f3c047593d653ae879a2ce8bbb2af23a966bb6fdad325684db1008_s390x as a component of RHACS 4.7 for RHEL 8
• advanced-cluster-security/rhacs-collector-rhel8@sha256:27022231935bb9ffe0befaabdebac2160d3848b508e48a730985bd288ec4f567_arm64 as a component of RHACS 4.7 for RHEL 8
• advanced-cluster-security/rhacs-collector-rhel8@sha256:75ea5297043bfca6a9da827d71fe96a855af6bc61e259b547c2f9dae603be758_ppc64le as a component of RHACS 4.7 for RHEL 8
• advanced-cluster-security/rhacs-collector-rhel8@sha256:a0160b6abdc16c6a89a0de32651a8c72bb2f813f93677c9ce898c9e35cace237_amd64 as a component of RHACS 4.7 for RHEL 8
• advanced-cluster-security/rhacs-main-rhel8@sha256:2bb10273ac816df494ccb382db37f886f240bd042df4a43d0db2f40d3674b4a6_amd64 as a component of RHACS 4.7 for RHEL 8
• advanced-cluster-security/rhacs-main-rhel8@sha256:2ed0c3a6e7ba0eca9820d4d08684874c877cf9960191a29d5e329bbb3eaf1fcb_ppc64le as a component of RHACS 4.7 for RHEL 8
• advanced-cluster-security/rhacs-main-rhel8@sha256:7b718725f3b0561aa66e0e3473d0ebbe973de82a8d3d30d83920135ead7168d2_s390x as a component of RHACS 4.7 for RHEL 8
• advanced-cluster-security/rhacs-main-rhel8@sha256:ff7cb27e57f16901b836e871e59f4ecef063b97db06cde9e51f951d18ace442c_arm64 as a component of RHACS 4.7 for RHEL 8
• advanced-cluster-security/rhacs-operator-bundle@sha256:09b5751d9739adf5fadf6af360d61424bc5b07ab2cb88d1dac0fc1960d0a874c_arm64 as a component of RHACS 4.7 for RHEL 8
• advanced-cluster-security/rhacs-operator-bundle@sha256:12328277ebae26ac161f861d9971a8e777d390338ae4103cf98c6ed7ecb4b915_s390x as a component of RHACS 4.7 for RHEL 8
• advanced-cluster-security/rhacs-operator-bundle@sha256:6937beffd348474d4d9b06f14fabfeb74efb69cf7bc60e6e12eb5b45b03014d5_amd64 as a component of RHACS 4.7 for RHEL 8
• advanced-cluster-security/rhacs-operator-bundle@sha256:9578c678ae5edfd5a275a2c4f5e5100eb40c41c23e722e6df74b5e93830d4d70_ppc64le as a component of RHACS 4.7 for RHEL 8
• advanced-cluster-security/rhacs-rhel8-operator@sha256:01d568cf91f1c0464009d241ca814d7eae1cceea2934bf71a42d981f9ea60efc_arm64 as a component of RHACS 4.7 for RHEL 8
• advanced-cluster-security/rhacs-rhel8-operator@sha256:b89ee59ee33bdb7672fdb27b1ee15bf222151fc7440482c711346e1ad026a8fb_s390x as a component of RHACS 4.7 for RHEL 8
• advanced-cluster-security/rhacs-rhel8-operator@sha256:c8340d8f9209d0478fcfaac6568b9787c6e91471ededba2c1ddbe509d75b0a05_ppc64le as a component of RHACS 4.7 for RHEL 8
• advanced-cluster-security/rhacs-rhel8-operator@sha256:cbf95684b2ebc929086ac712c0dc1a00098c362f5cf95ffecff9c22e11dcefe3_amd64 as a component of RHACS 4.7 for RHEL 8
• advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7b21dd9b2ccae1d531d27aef4855dc562f8f37ff08901f411004b2fb18a51883_arm64 as a component of RHACS 4.7 for RHEL 8
• advanced-cluster-security/rhacs-roxctl-rhel8@sha256:86e5639c86bb43e19dfe6e0c0c7d77eaae25e1e6d4f649a760f2e2da60b0fb6a_s390x as a component of RHACS 4.7 for RHEL 8
• advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d0bc30e145867b4054ca3a85e2bbf25d92d65c3c15302b71e7019f31ee110e20_ppc64le as a component of RHACS 4.7 for RHEL 8
• advanced-cluster-security/rhacs-roxctl-rhel8@sha256:fbb9583f01c7df04d459afcaa54a6812fc5e831fe4eb6d49c9310b6751711984_amd64 as a component of RHACS 4.7 for RHEL 8
• advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:027fcafda81781e67001fecd9233a123da1755810f80057d89be3ec8e3e3f8e3_arm64 as a component of RHACS 4.7 for RHEL 8
• advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:034efe638599601eb16e634da3587f052caf9ecb6e720e37196feae14c5e5e74_ppc64le as a component of RHACS 4.7 for RHEL 8
• advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:0c9d830e30929a410944faed8bd3de2a768c1be21a561664cafd19d1a40ce957_amd64 as a component of RHACS 4.7 for RHEL 8
• advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3cf1f824206dd50a7c80a82d13f59f4b7aa519da0cd49a6bbe75e9edd929150d_s390x as a component of RHACS 4.7 for RHEL 8
• advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:3cd28198c86d291076fb00580ba3ffc4ef28e7fccfee4f2089356cb7b6455f0a_ppc64le as a component of RHACS 4.7 for RHEL 8
• +19 more not shown

✅ Remediation

If you are using an earlier version of RHACS, you are advised to upgrade to this release 4.7.0. Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (6)

• selfhttps://access.redhat.com/errata/RHSA-2025:2876
• externalhttps://access.redhat.com/security/updates/classification/#moderate
• externalhttps://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.7/html-single/release_notes/index#release-notes-47
• externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2248979
• externalhttps://issues.redhat.com/browse/ROX-28221
• selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_2876.json