RHSA-2025:2526: Important: ACS 4.5 enhancement update

Published Mar 10, 2025

Updated

Important: ACS 4.5 enhancement update

Other sources

This release of RHACS 4.5 provides these changes: Fix rhacs-main-container: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (CVE-2025-22868) ROX-27347: Fix vulnerability report job getting stuck in waiting state after central restart.

— Red Hat

Affected Software

3 affected components

Red Hat Red Hat Advanced Cluster Security for Kubernetes

Red Hat Red Hat Advanced Cluster Security for Kubernetes for IBM Z and LinuxONE

Red Hat Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian

Remediation

Event History

Mar 10, 2025

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Advisory Published

via Red Hat·03:37 PM

Frequently Asked Questions

What is the severity of RHSA-2025:2526?

The severity of RHSA-2025:2526 is classified as important.

How do I fix RHSA-2025:2526?

To fix RHSA-2025:2526, update your Red Hat Advanced Cluster Security for Kubernetes to the latest version.

Which products are affected by RHSA-2025:2526?

RHSA-2025:2526 affects Red Hat Advanced Cluster Security for Kubernetes and its versions for IBM Z, LinuxONE, and IBM Power.

What does RHSA-2025:2526 address?

RHSA-2025:2526 addresses unexpected memory consumption during token parsing due to a vulnerability in golang.org/x/oauth2.

When was RHSA-2025:2526 released?

RHSA-2025:2526 was released as an enhancement update for ACS 4.5.