- Issued:
- 2026-04-30
- Updated:
- 2026-05-05
RHBA-2026:12433 - Bug Fix Advisory
Synopsis
Red Hat OpenShift GitOps v1.20.3 bug fix and enhancement update
Type/Severity
Bug Fix Advisory
Topic
Red Hat OpenShift GitOps v1.20.3 bug fix and enhancement update
Description
An update is now available for Red Hat OpenShift GitOps.
Bug Fix(es) and Enhancement(s):
- GITOPS-9699 (CVE-2026-42880 Kubernetes Secret Extraction via ArgoCD ServerSideDiff [gitops-1.20])
Solution
Before applying this update, make sure all previously released errata relevant to your system have been applied.
For details on how to apply this update, refer to:
Fixes
- GITOPS-9699 - CVE-2026-42880: Kubernetes Secret Extraction via ArgoCD ServerSideDiff [gitops-1.20]
CVEs
(none)
amd64
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:58bcb00e510f89d9f1ad42dc5d9f1154f98ac8a58cb1b2a0c387bfe4f7660710 |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f393bbb1dba662e6387dbaacdcd0dc2bb4a8e486218273c66ec9f50e8bc360fb |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:66c8d917f40f7392692198310bd126a9e92d6356b13d42242ce037e671b3398e |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:bcde82b5b8b78976b401454ad1ed6b58bb8adaf7f5cbe5264e589a6b477d6f53 |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:b06d918cd673cb2a6511177e34d8150fbf37b0feefaa6e96675bcfda3dc5d573 |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:d126e9cb83898ac364bff9ee71fbf20fb16751f9e5fe6d237a41b0810ed5b70b |
| registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:6d16d32879c21194a75fcbd2bd7a08c0dece7e876c8b5a490e589460c31772f1 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:776f2333090bb5fca15fedef6ad8527cc719cc653392c7131c1c269cc00d2e41 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:e766b865245c39936e9cfd650dc187dd45903d866d931f5bf5fc7a24f3f7daa5 |
| registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:407b2310e342ddde5229624bac66ec364840c368f36e4831502a8ce4e45d972b |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:df5d5ac6b2e66bb3500b7b0b4750336ba42c2154cf9ecd9ad22bafab89f19263 |
arm64
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:1a7f35f6a4bce49d2068b3a1c876d05b5cbfd89bbd6ac19dc8f04f57494869ae |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:14579fb8c01043418b1180ff8c8341f18161544a2072151fa977c09f15151d22 |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a70018a41022e1476a644fc4fd52b2889b763c96f23ed1f71b89956717494865 |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4da1b7b3189054bb621aa106298cc2bcf3d02cb91a36e5363a18dfd612252320 |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:14e5938a315a67d3fda421c65a20b097ab159be4ad031b3035b948dc4515d558 |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:007eadbc0e74cc6e603d0c1de0eef404ec7a0849355563bd94c0312396200789 |
| registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:f79e4f91fc209ed6de6f5983d422a64f540290d20f99016c49ecddaec9205596 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:0d97d01f6796597cdb0627d02c9f5836e74f2024d34acad3fef13e95b1aa9aa5 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:fa1fcef68d6d858e6cd292da8bab5373405bf86e3fccfd8b14f2780f9a1eb978 |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:97383379b6e5c6d0245a7a3568216cdee54c25a7e2509693c0382d8cc4505354 |
ppc64le
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8c0d04403c2d09ae0856fc71a77ec2115a98c72d472c000158acd45ece7c8778 |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1294587dd6ee8821ed7499fcc4c11b336ea6bda4bee6316caa24cbb15595d425 |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:0d4ad1f17e7255f4d162bc2965a636982f813afab6e012ce60d2fed7a61c6ac8 |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:86b44929860d7967c829a4ceddc46cb3b312d89cea2bc615b55e2a2cc8fe32dc |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:6ca26d9abf4896f1dd209b1518c986d2940e0b1a9d21564020a555e1f135d12e |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:9af499c49ef9616512081baeaaae96d437639ce2aa348b2dacb9d803e913844e |
| registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:d0367c2f27364cb4f9f494cabc4c062bd1f550443299e3ab7c48e7a1f08730b3 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:55399d2dd0fad6f63f05aa49e434847958391a863b2f607d8be6d7e781b8b7ec |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:e7d38d8bf66e2fcfc124a0f0ba15b33fec21d23d3cefda2201aa4d0f2397fc18 |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:caef68abcb44b186bcf69cd3557983b7da189bea125cf65bc92e74148eb5c444 |
s390x
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:7254d6fb620373192a144f0d7c5a3cd31c92baf130bbb2dc4a99be283488924c |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6e4afba0bfbe3b6d727faa6a2dcb8dae618d6bf548052483909af5262704e1a5 |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:c9849fc3254f51f999e587e838c4a208eeaabe1bdac50a0924487fe248b7ced3 |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:5731b669139fe6fc7a6c56342b7ca2055b74b44d41fc59757b96ccbfe2f008d7 |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:b8b5a507013980e7750c4edbe3e07f4b16f4792ac904cfe6ecd6be036afb4192 |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:4b1d0d11ef2352bd08ed140d6a0a57c41b087c4cec85089873349da2fa32fc7e |
| registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:b07da7bffb7e86461f16343dfb854d80242adb49ac9fd99c93c1b2cf0a157a4b |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:53b96010bc3ae866c47d15de5c7333d1480ecc3eb3bed8da8dc628cbe28b2da1 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:74abc86fa908da7f0214c8a6a9abfbb7cbbf403b4ef9c56326f36e6cc2d1bd6c |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5cd813be411ef842058232c84202cc4a20c1d578e88b3778f625da8cf522b321 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
