RHSA-2026:2350HighCVSS 8.7

Red Hat Security Advisory: RHACS 4.9.3 security and bug fix update

Published
February 9, 2026
Last Modified
August 30, 2026

🔗 CVE IDs covered (9)

CVE-2025-12816 →CVE-2025-15284 →CVE-2025-66031 →CVE-2025-66564 →CVE-2025-68973 →CVE-2025-58183 →CVE-2025-66506 →CVE-2025-68428 →CVE-2026-22029 →

📋 Description

CVE-2025-12816 — node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications CVE-2025-15284 — qs: qs: Denial of Service via improper input validation in array parsing CVE-2025-58183 — golang: archive/tar: Unbounded allocation when parsing GNU sparse map CVE-2025-66031 — node-forge: node-forge ASN.1 Unbounded Recursion CVE-2025-66506 — github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token CVE-2025-66564 — github.com/sigstore/timestamp-authority: Sigstore Timestamp Authority: Denial of Service via excessive OID or Content-Type header parsing CVE-2025-68428 — jspdf: jsPDF Local File Inclusion/Path Traversal vulnerability CVE-2025-68973 — GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write CVE-2026-22029 — @remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects

🎯 Affected products46

  • Red Hat Advanced Cluster Security for Kubernetes 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:0b85460655f6f540e6278f5bd08e6c52ea3a3e4acb54a79d524247227f5e9d7c_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:294c8f3d3cce71c22e6bde11783c04fa5db2ae19ad2a741c418005faa41da67a_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:4efd0780d62b6dddbd5eef4ae8c1620b8e72dfa1551d89e8c9b281ed50afc2f9_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:cf5beedfa9139034d92f170115321be8f442b152628f1c91841a1be1cadfda33_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:0115106585032e52bedca4443f008c755c3fbc5e4fdf4f4be974cb6be9345b86_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:32faefcdb174ed2e92291cc075ab321e8fa462fcbd951e7edaa019011e87ccad_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:cfb6a722aa6ede9218d9d7a28c7aae1b1455bc0ba5a41ba488e95ee504cccd70_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:d63ab6fcf507a4dc7c38df369111c44725ffdc3384840cd7cfbb89fe216af914_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:01d01a649ed0c466925ebdfc7e632c7c01f0e59ef5d764d2f2dcf51f355b68ec_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1324d938cf5047df9125eb4bf6a9565fc4443b62c24e34494c1f57d1f8b5bdb1_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:e87ce042d9afb90c643de99cfaa98314230a2d9a01ad1230cd0596413991f4f5_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:f49305d1e529f1be7d213f548cc6d49d958ff578eb4e41320250634497a1dfb2_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:d8111014ef89a6679f19c48888189ddff4e3bb4269d1ccd09c7114ba6e5360d6_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1dceed562203416b6d853e66402a2ec69370a53cc119953aeb442288ecebfa4f_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1e9116742efaed46b4b93ba1ff8eb026ffa5bbe5146690d020389b95bec77051_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:6f0060cfb71c9ee2788f2bcebd1d9aa40e337c10921a4c631c0119c80721b539_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:d9c49f3d6b2d8ec68784c59bf75810bd4290f4118eb7e512fd6150193600abc4_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0f27626c8a671458174b6a3dc08268ec13f1b1ce297ca26b085a5799971470d6_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:92cc9e13e92ad25bc2ca62705136be35b16699d1ddc9c8f5653cfb7b9e9f9e72_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:96ba7c71703db09c15f1633d2b5c14a22231a6f87fffacb639542f4ad2429551_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:baa02b25c952aa9e463fdd8bde3ae196621ca09cabd508b9638a82c528b6acda_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:34d1530a0759075f9a6d7cb31d45efac05575e0db2ea43adc3379f24b1524060_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:50a2768f8ffcbdc15ed719eb6e5c08da0a9e31b2f17c77cf0b305c4f3d5d8135_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d9662472c1cd18a4a0ec5103b30cb7576ae926d43ed290c88586a9304d01d3c3_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e2d7323de0313fc7e498791d2294fe4c46448638753349002dfa0e16580f9435_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:44c28896965619b9b4804dd9099303f076533dd664766cff932ca27a9b3b2805_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:7830f4f7b3673034dacbe1d48daf493afc3282fd1509b12b2e8d7716179c036b_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:83b76afb22949a7488a6480e16810b74136e395380a5f2050e2f2419aa90a337_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9
  • registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e9b1465496174394f2e54facebca1f1d0cd6dc54ddb0a82265b3feddd3d1867e_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9
  • +16 more not shown

✅ Remediation

If you are using an earlier version of RHACS, you are advised to upgrade to the version of RHACS mentioned in the synopsis and release notes in order to take advantage of the enhancements, bug fixes, and/or security patches in the release. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: To mitigate this issue, users should avoid processing untrusted or unverified input with GnuPG. Exercise caution when handling GnuPG-encrypted or signed data from unknown or suspicious sources, as specially crafted input could trigger the vulnerability. This operational control reduces the attack surface by limiting exposure to malicious data.

🔗 References (13)