Red Hat Security Advisory: RHACS 4.11.3 security and bug fix update

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products48

• Red Hat Advanced Cluster Security for Kubernetes 4.11
• registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:52685f11f72313c2396f3c6d8c548bd592a8de888446c4b6b358f268cc763360_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11
• registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:70e7da6f37bc96cbe97db496a3cdc244dd99024ab42f70496713049abf7e4aa8_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11
• registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:ab7725c8dde19398513ce27684b6f0a4cfce97248a2b56294072831c98f46edb_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11
• registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel9@sha256:d485e4e93455c21b7ed75365470cb91d15aedd0b22c9d2e5ba2ac34cf811e76d_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11
• registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:2bedabdf9c2ee54e4869814b1930bd7b00feccb40aa5ae73d397cdfcc5ee59fe_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11
• registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:333ee82306f32b4b1f1ea58d9f8cd581331698f2702dde5fcd0e6a302fe8ec73_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11
• registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:6473da59faebc826bc0eed63d39a0048b33eed635f05249cc173bbb58eac77a4_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11
• registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel9@sha256:7a9bea92d4f70c433a93caf281410009c070f6d6ade6d29278e5ab9e6e60cd9b_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11
• registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:156c8b37344c518dd085d44eabe8b792cb10d9d3bd35a76ebe4847df36b9bd7a_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11
• registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel9@sha256:ef108eaeaadc14e03a0523eadfb1a99d64898eeabc4c8e7a55496719b7501fb9_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11
• registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:090d388f5dc4d38dfee8a752f099715b16f0a324b551048777dbe2ab6be28eba_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11
• registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:64e48305b10b1ed314fe1cf911ba251f457344bc5e5f9465cdbf0697c0c51c85_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11
• registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:a3ff0d9d28dd9ca914dc632a510d75753ae76ad1e5a3da6b98eec7f469f5d392_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11
• registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:e0815dc0c59423afd80717aaaacd02e01c665fc7bdb1be1ce9d0fb80e14b1d76_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11
• registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:fd9d4f26c7464409ffd491bbadf19d5bbdc767b7a899086c04c18e9d0f87629d_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11
• registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:23ed0c324bdb30ae3d262d98fc82ad38ecb8f2223d474461f69117693c8d30a9_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11
• registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:2a11452e54e489428495c12246e8bffcf4bc87930d349fa12ebd9037fde2253b_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11
• registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:92aa6f15eac0876da21a29cfa064283a1786a95c4f17fa7fb3ce168121ce59be_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11
• registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator@sha256:ff4002d00791aef24f62c22c900eb05acb8b14844bf99401d5544546a13bbf78_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11
• registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:2828cf4cb8d0b22ee3a65aa85d05f2e90c0e37456baeb5ca479f9d2f20cd3574_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11
• registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:3274408af0c9c02d0f406eeafb7094092562c9d0b12bd8b05f1521d28b0d160a_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11
• registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:9ff667c4d2c22b4591300cf21070affeae2153d94e4c0b7e1f1ee6196b730ef0_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11
• registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel9@sha256:e9c01f317c879c71ce22e676a1c6ea2998ae936e45253f949451b1963b42437e_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11
• registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:25248a275383dba071f4fcc6305bddb07f874fac6156f013990d660bf529fee5_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11
• registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:48c32f329ceb647cb25e730ed27dfb1fe0f57fb7252e6ffc63e18792369f1552_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11
• registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:510adcaa3fc140cbef67b6da032dbfd6ac94ca5b5eb802f35ca151f5f2c86437_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11
• registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel9@sha256:63943bf2208bc2bb5d5b82bd706efdd59859bc14d65970def819dd9d70fc2294_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11
• registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:036fb13285e7c0f6f48470e243328409088b0978f44a89938c0b33d8e55f83dc_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11
• registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel9@sha256:219e88f2cbe0c2966916efb71dba595c4708e0f5cafb3d637296ac1534d5e26d_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.11
• +18 more not shown

✅ Remediation

If you are using an earlier version of RHACS, you are advised to upgrade to the version of RHACS mentioned in the synopsis and release notes in order to take advantage of the enhancements, bug fixes, and/or security patches in the release. Workaround: To mitigate this vulnerability, do not pass untrusted input to the expand() function.

🔗 References (5)

• selfhttps://access.redhat.com/errata/RHSA-2026:59204
• externalhttps://access.redhat.com/security/cve/CVE-2026-69152
• externalhttps://access.redhat.com/security/updates/classification/
• externalhttps://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.11/html-single/release_notes/index#about-this-release-4113_release-notes-411
• selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_59204.json