RHSA-2025:8278 - Security Advisory

Topic

Errata Advisory for Red Hat OpenShift GitOps v1.16.1 security update.

Description

Errata Advisory for Red Hat OpenShift GitOps v1.16.1 security release.

Security Fix(es):

• openshift-gitops-argocd-container: Improper URL Sanitization in Argo CD Repository Page Allows Cross-Site Scripting (XSS) [gitops-1.16](CVE-2025-47933)
• openshift-gitops-1/gitops-operator-bundle: Improper URL Sanitization in Argo CD Repository Page Allows Cross-Site Scripting (XSS) [gitops-1.16](CVE-2025-47933)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat OpenShift GitOps 1.16 for RHEL 9 x86_64
• Red Hat OpenShift GitOps 1.16 for RHEL 8 x86_64
• Red Hat OpenShift GitOps for IBM Power, little endian 1.16 for RHEL 9 ppc64le
• Red Hat OpenShift GitOps for IBM Power, little endian 1.16 for RHEL 8 ppc64le
• Red Hat OpenShift GitOps for IBM Z and LinuxONE 1.16 for RHEL 9 s390x
• Red Hat OpenShift GitOps for IBM Z and LinuxONE 1.16 for RHEL 8 s390x
• Red Hat OpenShift GitOps for ARM 64 1.16 for RHEL 9 aarch64
• Red Hat OpenShift GitOps for ARM 64 1.16 for RHEL 8 aarch64

Fixes

• GITOPS-6721 - rhel9/redis-7 image in GitOps 1.16.0 flagged for CVE-2020-11023
• GITOPS-6759 - [cherry-pick]- Redis HA Server StatefulSet SecurityContext Not Updated During Upgrade

CVEs

• CVE-2024-8176
• CVE-2024-12087
• CVE-2024-12088
• CVE-2024-12133
• CVE-2024-12243
• CVE-2024-12747
• CVE-2024-52005
• CVE-2024-56171
• CVE-2025-0395
• CVE-2025-24528
• CVE-2025-24928
• CVE-2025-26465
• CVE-2025-47933

References

• https://access.redhat.com/security/updates/classification/#important