- Issued:
- 2025-06-04
- Updated:
- 2025-11-21
RHSA-2025:8512 - Security Advisory
Synopsis
Red Hat OpenShift Pipelines Release 1.16.4
Type/Severity
Security Advisory: Important
Topic
The 1.16.4 GA release of Red Hat OpenShift Pipelines Operator.. For more details see [product documentation](https://docs.redhat.com/en/documentation/red_hat_openshift_pipelines).
Description
The 1.16.4 release of Red Hat OpenShift Pipelines Operator.
Solution
Red Hat OpenShift Pipelines is a cloud-native, continuous integration and continuous delivery (CI/CD) solution based on Kubernetes resources. It uses Tekton building blocks to automate deployments across multiple platforms by abstracting away the underlying implementation details. Tekton introduces a number of standard custom resource definitions (CRDs) for defining CI/CD pipelines that are portable across Kubernetes distributions.
Fixes
arm64
| registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel8@sha256:15b283d200e626cc945bd5bfb71b883948e07ed70e97fd4da5dc678aae183808 |
| registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-controller-rhel8@sha256:f91136b01f4cd2b7b941e23f53d8c9eecd06b4fa88e149255874c7f154450bf1 |
| registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-webhook-rhel8@sha256:d29f484e3a4e024b5b53c55e736f7e64654445a6a6bbc696dbb07eaf239a526a |
| registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-cli-rhel8@sha256:996a3369ab3ae1cceb72c01541faf3e2bf28e90804105404bee118d11ced55d6 |
| registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-controller-rhel8@sha256:e33e2baf7e56f537d44fd80611be080558d74f32323d098a14f175a98677a217 |
| registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-watcher-rhel8@sha256:4e3a69c7125f19c894a35c36b269781fb6796fadf505282113b117cb9d2d82f5 |
| registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-webhook-rhel8@sha256:290045fb7b30bd2570359e7d893ad723c3d2b0bf45e15b932d8b338e1466d5fb |
| registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:75638a356cce46e8ed20a5ba471dc4306e855ce86f8c2878d5cd37a00ee1085a |
| registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel8@sha256:437fb65825288c54d223ca2de92c1f17ce18d78194b192dce3160f5420e2e7a0 |
| registry.redhat.io/openshift-pipelines/pipelines-hub-api-rhel8@sha256:815d48f3ba930b7f061a802c0f250f35f2c1aea1117f339c53cf2c31718b1c0b |
| registry.redhat.io/openshift-pipelines/pipelines-hub-db-migration-rhel8@sha256:dfb9fd3ed3310e6654fc0d6d3a54f3f46565fccd0df4874f3fceba34e15006dc |
| registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel8@sha256:c44166269b6e1d69775ceb0f5e7a23d32867478e84bdab78c1cb0c5db8286d84 |
| registry.redhat.io/openshift-pipelines/pipelines-controller-rhel8@sha256:bf8f2adb9ff8883bb5361677e7dd34fffab3b5ea43ea59fa1a51950728f97801 |
| registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel8@sha256:6cc8fc9d465b1fbf8dbebb6ad63577e81e6d324e0547d7c869124300e82df88a |
| registry.redhat.io/openshift-pipelines/pipelines-events-rhel8@sha256:6f708f34340b3881f9d632d9c87807483035bdb06019f764499ed2a94c84435b |
| registry.redhat.io/openshift-pipelines/pipelines-nop-rhel8@sha256:666280b7e2ed54745c7a09b27d69edb5544de3d7b412ece9eedacf44eea002b5 |
| registry.redhat.io/openshift-pipelines/pipelines-resolvers-rhel8@sha256:ff53b6b7138b21719f39be9fd0373d9bb046c8c3a09fe6bda1ed03af761ca668 |
| registry.redhat.io/openshift-pipelines/pipelines-sidecarlogresults-rhel8@sha256:724ef21f2461cf293cead8288f7a587d7750c18c4a5426a70bb4a0f257a9468e |
| registry.redhat.io/openshift-pipelines/pipelines-webhook-rhel8@sha256:330c16ed91d854c6a87e89d49655d11b45f622640e9290ed3e57a42e980d8d51 |
| registry.redhat.io/openshift-pipelines/pipelines-workingdirinit-rhel8@sha256:f402dd74e20d3ce68b0f76727a376b9ded464a91dc9c0651fd6a082187e2c75d |
| registry.redhat.io/openshift-pipelines/pipelines-results-api-rhel8@sha256:b40ddf5423fb2aaeed4da7f91aad79f6c9ef524d262079d62ea5caa1ae977706 |
| registry.redhat.io/openshift-pipelines/pipelines-results-retention-policy-agent-rhel8@sha256:a34e2edc34572892254cca5d12d529f37273639402858d28bef4a6a3e5687bc6 |
| registry.redhat.io/openshift-pipelines/pipelines-results-watcher-rhel8@sha256:65d1f9f790acaee3a9047762364b7d439234b6d68245c568df9610e9ee902f57 |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-controller-rhel8@sha256:6f09eb951528228dd34555e600c4f093360102ab4c547bdf11e27a6818351d7d |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-core-interceptors-rhel8@sha256:f23ab04c71fa16b7791ffa9d844c00f1434a5157d40b85f00b9f219349d08f7d |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-eventlistenersink-rhel8@sha256:6171c08343aa92a2eeea9526d2f0ee0152e73c3b53cf7bd45bb888d9facfbc24 |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-webhook-rhel8@sha256:8939f6f8a3140d22f9cefe014a2fc8251f4b7a4d09b6d37ade646c8b58836ba5 |
ppc64le
| registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel8@sha256:ae6f3d0387f2faddf51f1c57b346dc6dbff8b8a776bb62cee175556c35c097b0 |
| registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-controller-rhel8@sha256:323096820524c1968e0e853115104842c9ed1045115cfe9edcec4418e4772bbe |
| registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-webhook-rhel8@sha256:946a87865d10c1bd451799e556d437f42f12019afb393a83c68058b889dfd0fc |
| registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-cli-rhel8@sha256:086c871b5b06e1334b534d230063fc63bdfa832f3c3a5fb7662bbc6ac662f7c3 |
| registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-controller-rhel8@sha256:a91b4906b0dac090f5f98bdc554e326fecbed22e94a07e2547213ad5bd0da5e2 |
| registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-watcher-rhel8@sha256:f2c666283cc300ccc8a541154482ce756c69c782eb4a3e85a78f2f77fdccff10 |
| registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-webhook-rhel8@sha256:6881559eea85cda6f71163341313c8490924c44c0ca4f20b1fe70b8bfe0a2471 |
| registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:69b7a872672633b49ad8926be0c6bc610b728760107fc09bf2ee868a39df6f18 |
| registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel8@sha256:e2e1190cc6148cf4546d1225ba15b9bb91bc22d289c0d4dffe2bc92b5fb305e7 |
| registry.redhat.io/openshift-pipelines/pipelines-hub-api-rhel8@sha256:75759139d8a00844682f4e4ec25de8961369b08807746a40c889bd12a8100e64 |
| registry.redhat.io/openshift-pipelines/pipelines-hub-db-migration-rhel8@sha256:65b75c923433ea697246d227478563780ed08c806d9a18c2919cda3bc9022832 |
| registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel8@sha256:3fc1b957039ba40b8d5353cd624b930f2bc5c5cb47335f7eb3255a8d792a3060 |
| registry.redhat.io/openshift-pipelines/pipelines-controller-rhel8@sha256:97258af0254c6af6c72b05a511a9f789586b0d7fb2d684c900e59c4cd018e5a9 |
| registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel8@sha256:e0daf0f21270e67f9dfe2749d11a188f802a5ff67ec38d207c83b37f1683ea79 |
| registry.redhat.io/openshift-pipelines/pipelines-events-rhel8@sha256:00362d02d8f3c118a7d11159a53b70cf7da645f47856a02a4fe0ba49a17d2901 |
| registry.redhat.io/openshift-pipelines/pipelines-nop-rhel8@sha256:d1ce51c6ec9ea88311e9e203771ca6aa8538c0f3309f8790d52d6136bc3098df |
| registry.redhat.io/openshift-pipelines/pipelines-resolvers-rhel8@sha256:4308f0b4694dbfe368f3fb1d74c0bc073165b06aa2b53fa972a66e0ebc17a6fe |
| registry.redhat.io/openshift-pipelines/pipelines-sidecarlogresults-rhel8@sha256:b1f23913867d56ca805611582aedc3e4b2a8e97216f7c1cbd96c73b2c5a23826 |
| registry.redhat.io/openshift-pipelines/pipelines-webhook-rhel8@sha256:1b9e1e944dd7ed3b01c542edd82e005ec6e9b291c331e1c3512f7b56f8991308 |
| registry.redhat.io/openshift-pipelines/pipelines-workingdirinit-rhel8@sha256:ee3bed935fc6f2bc99650d98efe25c4aa435f5e2dfe6559399b67802120f96fd |
| registry.redhat.io/openshift-pipelines/pipelines-results-api-rhel8@sha256:6ccbb5c469d77f7ac135ede652abc8e3f789543d9545c245b5eddc51c26e16eb |
| registry.redhat.io/openshift-pipelines/pipelines-results-retention-policy-agent-rhel8@sha256:2b3ef5be2eca3dd51aab32d0e17a1877cc2fe450281640a44a1526019b885df6 |
| registry.redhat.io/openshift-pipelines/pipelines-results-watcher-rhel8@sha256:8bfc0d94e1a9fc19b2a67f97d663740e2dee618eaf832987ae1a2ff7bb1fb390 |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-controller-rhel8@sha256:2d1b66f719ca541585f3dc43440d5846eeb959c09e884095820abd9ecd3ffdf7 |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-core-interceptors-rhel8@sha256:272a4367b75e3ff28c2591c90d70312b39e826d9590b972efc1afbfac788f8e3 |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-eventlistenersink-rhel8@sha256:9dc866cb8afe9ef8958e3eac1c5ce6a54712277fddbcfa44687f547ffba446d2 |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-webhook-rhel8@sha256:d4665415602f8ddf79f2343981354abaf106fb618118f5c18a78cb7bb2c82923 |
s390x
| registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel8@sha256:c272f2b6955fb30660d0b585731de6746a9753147a767623b16d9eaea483fc34 |
| registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-controller-rhel8@sha256:4cd5e5491d9b45bdd7ac381c9a4450a9cebb360d7ff3f6efe69a0aa0ad632e5b |
| registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-webhook-rhel8@sha256:d4f16961ba764c599d214effef34cebb85bdea92a899676e4848da1021a40d45 |
| registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-cli-rhel8@sha256:349986baea785f401fbb5d7615d67d3ea5b50e269504d265c93c8b27f36ee9c6 |
| registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-controller-rhel8@sha256:94b884ed40d1a545992af4202516196ba2994b61ecef7f5d8d461cb3171ef19a |
| registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-watcher-rhel8@sha256:4f7de8cd36f9e3a97c7482b3cdc0042c23461ed46d4d4e13feeaece10b12a8f5 |
| registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-webhook-rhel8@sha256:34bcfd7703aa3592065b721202d36c1cea7d64e974fe7a3ca18161765c2c282a |
| registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:b0a21eb4c412dd290f5c8bf5783e65f41b5aa508190794982bde148eade6f8df |
| registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel8@sha256:9cc3fcf306add7340616a5ee814213870a6b1425644af8a380eb4f08ec99faa2 |
| registry.redhat.io/openshift-pipelines/pipelines-hub-api-rhel8@sha256:3b3a7b185c0de4437b7e5e8a0e036285233ffd06e644fcdff7a1d18a778fad0b |
| registry.redhat.io/openshift-pipelines/pipelines-hub-db-migration-rhel8@sha256:5854cbdf6484b1c1abfa593847df3e35c1a5292b45c9fd72f336fbf18c04fc1d |
| registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel8@sha256:406517f877eca2bda9cfd946bbf453f7e7cf71038ab25742005dd205c10a85f6 |
| registry.redhat.io/openshift-pipelines/pipelines-controller-rhel8@sha256:7e1591ba7913a5f9834576752c71e02b97ee74beaf8e37be1470e8daf67aaf20 |
| registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel8@sha256:3cd2bb45e0b14f52e5781b6240c3679748734feb00040935655b178cc8128dd5 |
| registry.redhat.io/openshift-pipelines/pipelines-events-rhel8@sha256:82900a5df8a001bdf454804cfa4a39c07ba98ce240f454b25e2b35d824eb416b |
| registry.redhat.io/openshift-pipelines/pipelines-nop-rhel8@sha256:2795f5bc2042034320f0f8ff61ca704f09319b68b78c80c2d655ae6de0b03b46 |
| registry.redhat.io/openshift-pipelines/pipelines-resolvers-rhel8@sha256:1dcedd172cb38e10ab3be151887b5488d3470019c2cc96c99ba1679fc467a9b4 |
| registry.redhat.io/openshift-pipelines/pipelines-sidecarlogresults-rhel8@sha256:7932cd7d4071d7f413ff6571ff6a8aa296d3fceb678116fbb49bb22cd17f1351 |
| registry.redhat.io/openshift-pipelines/pipelines-webhook-rhel8@sha256:fe23723685c97386b044714cfd31c85e2928ded9f350c5e62e2f8139e1048759 |
| registry.redhat.io/openshift-pipelines/pipelines-workingdirinit-rhel8@sha256:22560daf964ea63a2546b4b86134d9e3a7324e73b13c278b736ae8be41ab98a3 |
| registry.redhat.io/openshift-pipelines/pipelines-results-api-rhel8@sha256:2ec8dd1c91b0f56dd0873cba5a36c72fd7311f687fe5c1c06a2e6ef75bd9509f |
| registry.redhat.io/openshift-pipelines/pipelines-results-retention-policy-agent-rhel8@sha256:97bf81fbd919c1b4c927d50cb0e2dd57f796ebe409ff2cf4427249782c8e4b4d |
| registry.redhat.io/openshift-pipelines/pipelines-results-watcher-rhel8@sha256:75f89e4d2fd74a046fee08f6ad7401e647cb62b652a10bd44c1e7eb03a33e001 |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-controller-rhel8@sha256:791df1fcabbe49d29d549ed3b534f4ad485f9aa94cae3476ba5e0713fbcd197b |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-core-interceptors-rhel8@sha256:e3ccadd7ba8e8c3e8e6a20f86b779d44360c5b822ae5f07fa9aa1286d6b3da41 |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-eventlistenersink-rhel8@sha256:b5f66f690af23ce753ea07bad1cd51ce920dcc73f2ac323fa885eb0f1a25a486 |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-webhook-rhel8@sha256:eda9e597331299560e5c198cba0e382702b7c87b037ce0adddbef19e7d4bb623 |
amd64
| registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel8@sha256:db1807cb3c11899460267146f0c578ad6ede8a3008da7907d98ef78f75983fe2 |
| registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-controller-rhel8@sha256:1d1ff96cf12512c5e8c7f8d55f78ae8872e972fbb9348a07b7ac97c8d2bd2fcc |
| registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-webhook-rhel8@sha256:29d9a80aa05100032295114ef4af5a2a38620c2a24f91527f35af9c548f38d0d |
| registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-cli-rhel8@sha256:082f23a8a28b734fbb085d7cec25c7d8516dc993f60f62b10e283efd2cef223b |
| registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-controller-rhel8@sha256:131f6596c1d8cedebe967962e8ffde7e99cc5f64b5335ab1801da430ef0339cf |
| registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-watcher-rhel8@sha256:154d003901326d21c1cf3073daffa7c24fd48c7a332faacf9ccd92f3b3793a4d |
| registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-webhook-rhel8@sha256:5247ad821574793b087f1893f468c3da2cbd152aa2796662b3d7746d15668651 |
| registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:518e6c4355340e342bd9e04d8ee844384978a2d6fff7d6dea6a48fb2e1f63e8e |
| registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel8@sha256:4d3914772a435359771dddbd77619ea4c751dc7b4d4ff961e764177f0b2ff40e |
| registry.redhat.io/openshift-pipelines/pipelines-hub-api-rhel8@sha256:2b67c012a0650863d30708a90f11ae4314fddb9480dbf79bdd89f8daa4608b0a |
| registry.redhat.io/openshift-pipelines/pipelines-hub-db-migration-rhel8@sha256:ad542fdb8351ed7f46f83c4a09b45c66eb939b92048d14c1d661225ca43443db |
| registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel8@sha256:e429f4c2eb8849f92fc264ffcabc013af70b70923f07893549103d4ff81198e8 |
| registry.redhat.io/openshift-pipelines/pipelines-controller-rhel8@sha256:df5cb2b09fae89561d17cc37f41be922d866aeaa923cb13b2c16f2b6f7f056d4 |
| registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel8@sha256:fc6c1b7e4097ec9928111e271b7be33383580f960cc5bbf03a5539c1c539cb1b |
| registry.redhat.io/openshift-pipelines/pipelines-events-rhel8@sha256:fa7e88adc5d278674b82866290c8c8704161a2663558279ff9b5de437703945a |
| registry.redhat.io/openshift-pipelines/pipelines-nop-rhel8@sha256:dea2f05afffdc6954d1939501e43bac96b8788c8e724a92343dca2af29088847 |
| registry.redhat.io/openshift-pipelines/pipelines-resolvers-rhel8@sha256:01de32880d5d9faf800cd22da3b34a618cdac30decadf93509ddb431ac949f59 |
| registry.redhat.io/openshift-pipelines/pipelines-sidecarlogresults-rhel8@sha256:db3db75daf98b57917bd58b939cd3aa7af52681e9e6c57913428dbc28324b37b |
| registry.redhat.io/openshift-pipelines/pipelines-webhook-rhel8@sha256:bfaf450894c2244496f0e190704ac27e0a25b678dcb1f99bc85dfe7e4bb03462 |
| registry.redhat.io/openshift-pipelines/pipelines-workingdirinit-rhel8@sha256:40240ba79c4f01be6d4c306cb8e9c3c98faeeffc1a3c76226935456953b1defc |
| registry.redhat.io/openshift-pipelines/pipelines-results-api-rhel8@sha256:4fc590092485d508253aaf73a747668c772f80d703d2816019fe58562045867f |
| registry.redhat.io/openshift-pipelines/pipelines-results-retention-policy-agent-rhel8@sha256:6a4cb39b99fd66418a974b721d33ed3254d190e92edfad4ff3673d02e2bc7f63 |
| registry.redhat.io/openshift-pipelines/pipelines-results-watcher-rhel8@sha256:4c83b61109e3225608a9280089a0377b32e111b9c4da819e2836087525187ecf |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-controller-rhel8@sha256:bf45263615b6419c66c523605b1bba9313233c4ce5bce4ae6ce6267b38a70519 |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-core-interceptors-rhel8@sha256:e93188bf06391a247d38c9d929b19034c57fafa99333efc3c3f175056be446fd |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-eventlistenersink-rhel8@sha256:95afac8b5caf4a4d320dcbaf599ad213649e37e1fcb963950a110ee8a109c692 |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-webhook-rhel8@sha256:e66797179156d8c0dc44157d82306c5a3fecc50ecc7d8a4eb7d36ddbef3a0cbb |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
