RHSA-2025:17731 - Security Advisory

Topic

Important: Red Hat OpenShift GitOps v1.17.2 security update

Description

An update is now available for Red Hat OpenShift GitOps.
Bug Fix(es) and Enhancement(s):

• GITOPS-7180: Redis HA Proxy pod fails to start with Security Context error
• GITOPS-7331: operator controller logs error when console link is disabled
• GITOPS-7461: Redis container fails with "runAsNonRoot and image will run as root" after upgrade to argocd-operator 0.14.1
• GITOPS-7564: OpenShift GitOps v1.17 must-gather images produce an empty must-gather
• GITOPS-7606: ApplicationSet: Bitbucket SCM/PR generator leaks HTTP connections

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Fixes

• https://issues.redhat.com/browse/GITOPS-7180
• https://issues.redhat.com/browse/GITOPS-7331
• https://issues.redhat.com/browse/GITOPS-7461
• https://issues.redhat.com/browse/GITOPS-7564
• https://issues.redhat.com/browse/GITOPS-7606

CVEs

• CVE-2025-22874
• CVE-2025-47907
• CVE-2025-59531
• CVE-2025-59537
• CVE-2025-59538
• CVE-2025-55191

References

• https://access.redhat.com/security/updates/classification/
• https://docs.redhat.com/en/documentation/red_hat_openshift_gitops/1.17/