Red Hat Product Errata RHSA-2025:8269 - Security Advisory
Issued:
2025-05-28
Updated:
2025-05-28

RHSA-2025:8269 - Security Advisory

Synopsis

Important: Red Hat OpenShift GitOps 1.16.1 security release

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Errata advisory for Red Hat OpenShift GitOps 1.16.1 security release.

Description

The Red Hat OpenShift GitOps 1.16.1 release provides security updates to
the Argo CD CLI, Argo Rollouts CLI and MicroShift GitOps.

Security Fix(es):

  • openshift-gitops-1/argocd-rhel9: Improper URL Sanitization in Argo CD Repository Page Allows Cross-Site Scripting (XSS) [gitops-1.16](CVE-2025-47933)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat OpenShift GitOps 1.16 for RHEL 9 x86_64
  • Red Hat OpenShift GitOps 1.16 for RHEL 8 x86_64
  • Red Hat OpenShift GitOps for IBM Power, little endian 1.16 for RHEL 8 ppc64le
  • Red Hat OpenShift GitOps for IBM Z and LinuxONE 1.16 for RHEL 8 s390x
  • Red Hat OpenShift GitOps for ARM 64 1.16 for RHEL 9 aarch64
  • Red Hat OpenShift GitOps for ARM 64 1.16 for RHEL 8 aarch64

Fixes

  • GITOPS-6885 - microshift-gitops-release-info RPM references missing argocd-rhel9 image

Red Hat OpenShift GitOps 1.16 for RHEL 9

SRPM
microshift-gitops-1.16.1-10.el9.src.rpm SHA-256: be27d40a517dc2471c4cd41dc168576a6fc810fe07c88e6ad413df23cb208173
openshift-gitops-argocd-cli-1.16.1-10.el9.src.rpm SHA-256: bc87d667573ff8b1a112d1550988ee9237922de09961fa196e5798b190ab5ee6
x86_64
microshift-gitops-1.16.1-10.el9.x86_64.rpm SHA-256: 49cd84510d4d9d9796412a8e227e70f8f4069dd26e9f596d1d8bf23c6e4980e3
microshift-gitops-release-info-1.16.1-10.el9.noarch.rpm SHA-256: 5facdbd8d5cc6bee411834a7842b53df1b6b0f23273eaa02dc599477c1bcf77c
openshift-gitops-argocd-cli-1.16.1-10.el9.x86_64.rpm SHA-256: e7ecd1f1a2f08456b57af6b26b7b6ba51bc0040e13c79c99988022876e2f2e70
openshift-gitops-argocd-cli-redistributable-1.16.1-10.el9.x86_64.rpm SHA-256: 4b116380aec3873e6cbd3b81b14682d724fd52ec86aff06601feab526dc56163

Red Hat OpenShift GitOps 1.16 for RHEL 8

SRPM
openshift-gitops-argocd-cli-1.16.1-26.el8.src.rpm SHA-256: 1424a03647fb8b693ac76b90e4e6b9a51429cfce1d45f1a8efb8965919578628
x86_64
openshift-gitops-argocd-cli-1.16.1-26.el8.x86_64.rpm SHA-256: 023a35b8b2fbe82d7bf11c6122e3d607f090e08cbc2912b8623cf0a9f771e007
openshift-gitops-argocd-cli-redistributable-1.16.1-26.el8.x86_64.rpm SHA-256: cb282c294e9438a2820c181f41eb319c5d0cdbf98927613469e475624f1a7362

Red Hat OpenShift GitOps for IBM Power, little endian 1.16 for RHEL 8

SRPM
openshift-gitops-argocd-cli-1.16.1-26.el8.src.rpm SHA-256: 1424a03647fb8b693ac76b90e4e6b9a51429cfce1d45f1a8efb8965919578628
ppc64le
openshift-gitops-argocd-cli-1.16.1-26.el8.ppc64le.rpm SHA-256: 72eccb5fe4950101ebfef69ceced7ec4972f211c07bb9229df314215d8d56d7f

Red Hat OpenShift GitOps for IBM Z and LinuxONE 1.16 for RHEL 8

SRPM
openshift-gitops-argocd-cli-1.16.1-26.el8.src.rpm SHA-256: 1424a03647fb8b693ac76b90e4e6b9a51429cfce1d45f1a8efb8965919578628
s390x
openshift-gitops-argocd-cli-1.16.1-26.el8.s390x.rpm SHA-256: 16b462641ab02cba0ed29ece73bd5061f1836668dfb78012f04dcd4d8404cf0b

Red Hat OpenShift GitOps for ARM 64 1.16 for RHEL 9

SRPM
microshift-gitops-1.16.1-10.el9.src.rpm SHA-256: be27d40a517dc2471c4cd41dc168576a6fc810fe07c88e6ad413df23cb208173
openshift-gitops-argocd-cli-1.16.1-10.el9.src.rpm SHA-256: bc87d667573ff8b1a112d1550988ee9237922de09961fa196e5798b190ab5ee6
aarch64
microshift-gitops-1.16.1-10.el9.aarch64.rpm SHA-256: ac5616e9f0e5f30769b5889eaf67198582032a1daf3c546dbd5c54e741cc650b
microshift-gitops-release-info-1.16.1-10.el9.noarch.rpm SHA-256: 5facdbd8d5cc6bee411834a7842b53df1b6b0f23273eaa02dc599477c1bcf77c
openshift-gitops-argocd-cli-1.16.1-10.el9.aarch64.rpm SHA-256: cc6955f5766462ff052cdc1cef5f363b41099a38f0041825734037411d22e0af

Red Hat OpenShift GitOps for ARM 64 1.16 for RHEL 8

SRPM
openshift-gitops-argocd-cli-1.16.1-26.el8.src.rpm SHA-256: 1424a03647fb8b693ac76b90e4e6b9a51429cfce1d45f1a8efb8965919578628
aarch64
openshift-gitops-argocd-cli-1.16.1-26.el8.aarch64.rpm SHA-256: 515e5ba6d1923f28f5786964d52429eda37c7b65dfdfb28a4804a244f92a4b32

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.