Issued:

2025-03-10

Updated:

2025-03-10

RHSA-2025:2526 - Important: ACS 4.5 enhancement update

Synopsis

Important: ACS 4.5 enhancement update

Type/Severity

Security Advisory Important

Topic

Updated images are now available for Red Hat Advanced Cluster Security (RHACS).

Description

This release of RHACS 4.5 provides these changes:

• Fix rhacs-main-container: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (CVE-2025-22868)
• ROX-27347: Fix vulnerability report job getting stuck in waiting state after central restart.

Solution

If you are using an earlier version of RHACS 4.5, you are advised to upgrade to patch release 4.5.7.

Affected Products

Fixes

• This content is not included.ROX-28410

CVEs

• CVE-2020-11023
• CVE-2022-49043
• CVE-2024-11187
• CVE-2025-1094
• CVE-2025-1244
• CVE-2025-22868

References

• https://access.redhat.com/security/updates/classification/#important
• https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.5/html/release_notes/release-notes-45

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.