- Issued:
- 2025-06-19
- Updated:
- 2025-11-24
RHSA-2025:9294 - Security Advisory
Synopsis
Red Hat OpenShift Pipelines Release 1.17.2
Type/Severity
Security Advisory: Important
Topic
The 1.17.2 GA release of Red Hat OpenShift Pipelines Operator.. For more details see [product documentation](https://docs.redhat.com/en/documentation/red_hat_openshift_pipelines).
Description
The 1.17.2 release of Red Hat OpenShift Pipelines Operator.
Solution
Red Hat OpenShift Pipelines is a cloud-native, continuous integration and continuous delivery (CI/CD) solution based on Kubernetes resources. It uses Tekton building blocks to automate deployments across multiple platforms by abstracting away the underlying implementation details. Tekton introduces a number of standard custom resource definitions (CRDs) for defining CI/CD pipelines that are portable across Kubernetes distributions.
Fixes
arm64
| registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel8@sha256:ca5b6198514a2b0b84cec25b2d84f5524c3f85e22c8a4f582bf58cdc13c33d33 |
| registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-controller-rhel8@sha256:345be53a679f0a9f4a011f55a5291b724c610e78716feaafc6c7ad2cd2b5f4ea |
| registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-webhook-rhel8@sha256:febd85b4ce1016a0c3257bbacb64f5b11a1ad3b28de3525f8564c1e216b4a01e |
| registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-cli-rhel8@sha256:4d55edc7c8f34aac5773d7e0c1c0b12f95799c536533bb52cbf8179669f94de4 |
| registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-controller-rhel8@sha256:c2be612b2bb129d2904ee13d855d05cede0ffb7918babe4edad07befc6e4a7df |
| registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-watcher-rhel8@sha256:c79676ac527508f78b68f32b7c6613429c799c13cf2e38e81f88e120f8ad3c67 |
| registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-webhook-rhel8@sha256:c99d4173b21e5241a3ff889c8b793e2c804d2e3e4339e78adfdf89786e0bf349 |
| registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:101ecb47e3f0b40279d1aec3a78b5d7f8be96b24239336c51a9565fde0532eda |
| registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel8@sha256:99fe167812ab4d23f15e22f610a59a5875a6e9abc0a60a3c5b5d44f357751a00 |
| registry.redhat.io/openshift-pipelines/pipelines-hub-api-rhel8@sha256:b863bbae0e48739eb7bf0590155f1de7ce65446f8a2a70677eb884a7267fbb04 |
| registry.redhat.io/openshift-pipelines/pipelines-hub-db-migration-rhel8@sha256:40ab6bab05f1880059d002ebc93f9d65bea0c773b026205e7a5252598c21606f |
| registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel8@sha256:a757047e35bb4d16bf57df0393a36acaa898ad1d282c02ad769a173c520d653b |
| registry.redhat.io/openshift-pipelines/pipelines-controller-rhel8@sha256:70f5900a3d06c2a572d2bcbf8fd6a844046532a3a50ffa4037beeeb818171073 |
| registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel8@sha256:1bbb46244380f64e3c42faf11d37d9bd266f74cde3b51943311353510fb703a1 |
| registry.redhat.io/openshift-pipelines/pipelines-events-rhel8@sha256:7fa9bae00522781d284185af3e298825d69afd6aa8d71da865a8786bf5b3b0b7 |
| registry.redhat.io/openshift-pipelines/pipelines-nop-rhel8@sha256:ab5b19c4d72e1a9ae4283f8abf8495c99035b5c9a46b9397e1b153693f0a58d8 |
| registry.redhat.io/openshift-pipelines/pipelines-resolvers-rhel8@sha256:a8e02641fb831ad130cad9a8789c26bb34121ec5503666aed50b671a5de5573a |
| registry.redhat.io/openshift-pipelines/pipelines-sidecarlogresults-rhel8@sha256:ea914a72d313b3e661ccc5586dbc0044c9a3594cee8d7b8b6f0d144cca406563 |
| registry.redhat.io/openshift-pipelines/pipelines-webhook-rhel8@sha256:68e35c22e7db001910ed944b0a7cdfc320e1dda6fa1a93701de26df39554b76d |
| registry.redhat.io/openshift-pipelines/pipelines-workingdirinit-rhel8@sha256:d0f12f8f01562df55e85c1500959e9d8487dc6bd66b87027ffdf0a1fd9e4a286 |
| registry.redhat.io/openshift-pipelines/pipelines-results-api-rhel8@sha256:16d8e5a48413e1c8ce94c932710b9306d4cf06c43e7782571d1019ed578de430 |
| registry.redhat.io/openshift-pipelines/pipelines-results-retention-policy-agent-rhel8@sha256:fb4283fcb6241b59ef131c0d4e97e08a0ff711bb54334ecc4224ce4093b92e47 |
| registry.redhat.io/openshift-pipelines/pipelines-results-watcher-rhel8@sha256:70e9e8af93930e4976236b30a66a73372fc8f5714730400abfed97cf0225dd61 |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-controller-rhel8@sha256:2c12f03fb2a7679ed991d0bdf91479ef35b95d64eb92c95330e04b8f71f62ae8 |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-core-interceptors-rhel8@sha256:63efabe65365c7797f483aa34352e79024cd2cd74665fe6545f2fc0d9b3f385a |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-eventlistenersink-rhel8@sha256:76785f7abf9e08a4e54be416f13251b6ff2447654b943d396d27c8fb885d422f |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-webhook-rhel8@sha256:432d5085faea53c165db4a444b7f3cb8f81af5e04225f264102f90d43dda3fba |
ppc64le
| registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel8@sha256:93923a0fe9763456d65dbfd50f4958728133aa3af3c100dbb7b33b726b111cc6 |
| registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-controller-rhel8@sha256:f1fb58baa8f38c8c4d42e14d4eafb4cf7fd5eb4832c73dc9cc5e4220b553aff0 |
| registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-webhook-rhel8@sha256:4446d923fd2ee9578214d52107bc37be7cbf0bd98d3ba7b3746f3090736b510a |
| registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-cli-rhel8@sha256:43a865e2eb1c767d6692708b2b0246aea6444379b5d44291e9b4dac059030dcd |
| registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-controller-rhel8@sha256:68b6799466f4821b17b62574c1c7f11c4b43deccfcb14af62066330cf0631983 |
| registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-watcher-rhel8@sha256:5664033a3d90f3ccee88360aef1f9a10207ed7b0e8bf8091323a24a4974c4fd9 |
| registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-webhook-rhel8@sha256:dd1696ea436858e116f0656332450d6db48fd842199946430e1236a4a1a8d655 |
| registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:3bc62443688ad0965d39ff4fb7353c1fbec9f3207a498b9543894c949b8cd37b |
| registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel8@sha256:173d74c29d59663c3d03f41749fe31e5c560de130ce9ef2a8b1008b5d305f059 |
| registry.redhat.io/openshift-pipelines/pipelines-hub-api-rhel8@sha256:bc81e07f9488c9c952d33f4f93dec16affb7fc296727dfc64f2e791e5843aa90 |
| registry.redhat.io/openshift-pipelines/pipelines-hub-db-migration-rhel8@sha256:9bc83a7ef8a9c8f4cc25a234ba42269df627577fc60b3a680b1eded3817d458c |
| registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel8@sha256:8deece6f2a1b82d5078eb3dcf767664c8bfafa0441c1f5acfca5a9156fd79824 |
| registry.redhat.io/openshift-pipelines/pipelines-controller-rhel8@sha256:ae99c5f1a91ee5c5e73f17db10b3677646cf81b85b625336e82b695bf1180009 |
| registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel8@sha256:f487357c3919655f8c1a3ef5a7eda6b503e1188f48aca0ec40d21ff3f4c0dfb3 |
| registry.redhat.io/openshift-pipelines/pipelines-events-rhel8@sha256:24ef49b929a6e72023bbfee511f31970495018f4c3c56dcb6094abde97021ff4 |
| registry.redhat.io/openshift-pipelines/pipelines-nop-rhel8@sha256:83f80e0bb840ee7c30fa794969d089008657306ebb7356032a1b4f0b30d37ae7 |
| registry.redhat.io/openshift-pipelines/pipelines-resolvers-rhel8@sha256:8af7c75a5e2331fe229fa8c8dc5ba20ccb763b6edf87dc5783d4a5add05d041e |
| registry.redhat.io/openshift-pipelines/pipelines-sidecarlogresults-rhel8@sha256:5492bd7e244568e0ea8b0d2712d86d526f4a12750a7769367c24c9d0396bab51 |
| registry.redhat.io/openshift-pipelines/pipelines-webhook-rhel8@sha256:fd7d66760f45ff7c53ac13f83de1b541a06c348fc95ca69d856ee34556730654 |
| registry.redhat.io/openshift-pipelines/pipelines-workingdirinit-rhel8@sha256:f9988287d253ce0050b1e8c34afc8ebe4dd72b63dec817490a78a3b550d31aa7 |
| registry.redhat.io/openshift-pipelines/pipelines-results-api-rhel8@sha256:58dd444b93527600326e2fa35affaab5bdee0970a843bbd625badc6d344b0467 |
| registry.redhat.io/openshift-pipelines/pipelines-results-retention-policy-agent-rhel8@sha256:57066f120c6209f3421d50c4490d43907aa18293bbf84a0628c84af8108c015f |
| registry.redhat.io/openshift-pipelines/pipelines-results-watcher-rhel8@sha256:14696d9e3d0109e5e763221cc21542a72bf7e41b7ea0f6cd855dd71cfc0cf637 |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-controller-rhel8@sha256:a2725331be99ede3babe95eb1a590c7aacff088f7a0a5413940829a1f779b56f |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-core-interceptors-rhel8@sha256:61384070b1e5de1047f2777caa5e3fe2bbad47139456a72405dfbe4193f40e42 |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-eventlistenersink-rhel8@sha256:35d0d2bdf686060d5ed5a21fc72bcbd25a34c71798ad6ef399f40cd1292c2820 |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-webhook-rhel8@sha256:d0778279ed56d7c5f690761e194fa2dc3d63c6a7938dfd0e7ac13184a5bff601 |
s390x
| registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel8@sha256:fa3e4e087d67654dd36a0a11961b0a471f58167a9318d2e1416803712f95cb8f |
| registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-controller-rhel8@sha256:de2cc1a86f25a40b1d08f05c243d3fabdb269b710da731c5687a95cd85815c5d |
| registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-webhook-rhel8@sha256:9f47e05c0cd4e2987838c222d519996f2809952845e6baf2feef0bdec7aae022 |
| registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-cli-rhel8@sha256:e656cb74613d17defc4ee5da011d53256395df0588269be6839b77609a41e971 |
| registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-controller-rhel8@sha256:4f1958858fe43d7d62f166ab2a1df03abff731cebcf96754b99102fee53e04d2 |
| registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-watcher-rhel8@sha256:a50dd38a6864c3f997e3122536caa792169a336cfcbc01ba00862f5e23915e74 |
| registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-webhook-rhel8@sha256:12953fd08a6f0b5ca5f7aca003b76b810f0755aa6d4dec66d42beaeec9a418dc |
| registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:1f5d9be6bbd83415f10cb8921ad43c952c71c13e754b5852e0aefd4bb4d69d4d |
| registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel8@sha256:565094e155daf9d24d741d7ab72729e96e675d0a7838bec84729c34e83cb46cb |
| registry.redhat.io/openshift-pipelines/pipelines-hub-api-rhel8@sha256:d28c686ffdf64e23fd80e74a6d32751b26f7db535bd76d60a1c814bfab744453 |
| registry.redhat.io/openshift-pipelines/pipelines-hub-db-migration-rhel8@sha256:2d056d0cb096ef58a583c1abbed40dbeaec29139a5ac5309bd9082704fcde7a0 |
| registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel8@sha256:7ebf2ebe6d4958be43ad6e4d902502d904b719a549cf03e4b6dc696d65a67cd4 |
| registry.redhat.io/openshift-pipelines/pipelines-controller-rhel8@sha256:54d31d1b3a4b69e1cb82a1cc629f4fdf3676904d69f6870c97b832ae593f7f13 |
| registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel8@sha256:6c4fe34f759652cfd91e5c7fc4e3661fd17211f1759177b677a4be3d74210c94 |
| registry.redhat.io/openshift-pipelines/pipelines-events-rhel8@sha256:28d4486ba9d8af2e73d73c4dab37736c3a0d1cc47535d5f8aa30da4101e21eff |
| registry.redhat.io/openshift-pipelines/pipelines-nop-rhel8@sha256:fe1d9e850ccda9e01675a62851478b45ad1e4eef738a85d9915ead61f9f5d458 |
| registry.redhat.io/openshift-pipelines/pipelines-resolvers-rhel8@sha256:c4ad6f3490ad47c26bf345cbef6308099d71dfa17ac6ffb81fc0c539efeff95e |
| registry.redhat.io/openshift-pipelines/pipelines-sidecarlogresults-rhel8@sha256:8579d5d2666ec1573f8f32704e2a8f51b61fbbf3d19d38dbec8197d5f8a98b07 |
| registry.redhat.io/openshift-pipelines/pipelines-webhook-rhel8@sha256:48e75001b7cf0686e20f854c6a978ab504816c71fa1f7708fd706500ae80a2ae |
| registry.redhat.io/openshift-pipelines/pipelines-workingdirinit-rhel8@sha256:b0386dfd2e88192d6235fda8c3845a5c3875d93ff6ae97315fdb933e37aa94ee |
| registry.redhat.io/openshift-pipelines/pipelines-results-api-rhel8@sha256:04e240a6f49c945187f0e5c47770c108a6d8a3481ad029772c70a023780e334d |
| registry.redhat.io/openshift-pipelines/pipelines-results-retention-policy-agent-rhel8@sha256:a994d367bf6849fba5f402a05bfc58188c9315a6b6342ace9054ee8d15d93351 |
| registry.redhat.io/openshift-pipelines/pipelines-results-watcher-rhel8@sha256:9e12de49cd75225557884ab4a2d93ecc758455ca6f92545e27bd6d1bad185fb5 |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-controller-rhel8@sha256:bcaa90c14c005319f11a35d4a1339a529c785b95f5250afde3352bd3a14b81f6 |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-core-interceptors-rhel8@sha256:c046627f7a6071498375ae7d26a0ff3748516f400d27bd1bc752ccb2f2e70e93 |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-eventlistenersink-rhel8@sha256:f1eec667a7a29fbe5e45d2782adcd6ed581446429e67123f3f4e22dcf1f136d3 |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-webhook-rhel8@sha256:298deecc2d4f6e7cb6afcbb7e0efa0fc1e3d9cf53009cb17c189ebbdfdb5c349 |
amd64
| registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel8@sha256:43f914efbabff71cd7f5dad186b461fd87a28846b33f8c8b3d2ad38fece95983 |
| registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-controller-rhel8@sha256:9e921c3c512f1fd9a8c631ec6e28e06710c5788143e367ff25bec3cd680575fc |
| registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-webhook-rhel8@sha256:f7df3bb2a5830bb6d7f4634da2e71c9bcefcaeb3dac10d87505b48e1452327d0 |
| registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-cli-rhel8@sha256:2ae141be6eac137dd00187bc1ac12618cb9c44cfd0984be7dfccea43c8f133c1 |
| registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-controller-rhel8@sha256:6ffe06bdd3c40b2d064f04289d9dab74b2306bfc9346fba08955bac50a74e897 |
| registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-watcher-rhel8@sha256:d860644280ba29e7786d6fbb8ed47a98de34c96c1dc4e54dd13efc598b49a5f7 |
| registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-webhook-rhel8@sha256:a3829ce76d3752c6079a112758fe845c1df976fc3832f4b4887af48cf2323425 |
| registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:cbb6c6972a6b42c54b1896d484a8bfaee4c776d2940e0000d178b1cbcc934802 |
| registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel8@sha256:b46c905dbb8f06f0ed8725b8da8e59673923eaf70f93276cda3f9f542379a458 |
| registry.redhat.io/openshift-pipelines/pipelines-hub-api-rhel8@sha256:cf028d3dfc329a3261976293978b92eb8e0fa1ffbb9084c890b3947202f440c7 |
| registry.redhat.io/openshift-pipelines/pipelines-hub-db-migration-rhel8@sha256:3562769d8d8c9d5cbb846f1a4820578b0e943a5a55aa78aba7ec544f77e00032 |
| registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel8@sha256:31ed62e58c9d12bff8cd88a881eda9b5e68d8d416227d191228dd0d3b4af532c |
| registry.redhat.io/openshift-pipelines/pipelines-controller-rhel8@sha256:16f586efb58c6cc7bc1a8fde279d1de75bce5d66a3f0aee80b1ee6797124c609 |
| registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel8@sha256:153247f44f9f1d4a98cb86e82d820cdfac6a18aca93d590e65257539cc65eb4f |
| registry.redhat.io/openshift-pipelines/pipelines-events-rhel8@sha256:9ac4af3e216374bfeaf9c6a4c5ceb9b1c541fab4fd2ad32368187b06f33dff77 |
| registry.redhat.io/openshift-pipelines/pipelines-nop-rhel8@sha256:cadf1ab87ddab7c066b7a9235001b37dda241689328173c27b7291375e81850d |
| registry.redhat.io/openshift-pipelines/pipelines-resolvers-rhel8@sha256:812549c107b3917925cd951a61aab8651f6efb29efc91fe670fbba685343df8b |
| registry.redhat.io/openshift-pipelines/pipelines-sidecarlogresults-rhel8@sha256:9869a8906afe6565d7ab7657d6d63e728fa272e873b55d4148da7a19de4d26b4 |
| registry.redhat.io/openshift-pipelines/pipelines-webhook-rhel8@sha256:f19cd37f3e2963b0e3627cacdd1204e66a01c277ae272ccf0baa5d05d69eb0dd |
| registry.redhat.io/openshift-pipelines/pipelines-workingdirinit-rhel8@sha256:cf2b88d1a9c1c1ab840f38a35c3f72467b53295b85ac53fe5369fa422f13e410 |
| registry.redhat.io/openshift-pipelines/pipelines-results-api-rhel8@sha256:1b66b4f4f4ddf1546eabf89bdee4d25ccaa16e436d34b3f9eac52c0b74d88664 |
| registry.redhat.io/openshift-pipelines/pipelines-results-retention-policy-agent-rhel8@sha256:302ee42d84ca5bacebc6fc618a59c7736ba2a3277508cfa16148ebeae238339e |
| registry.redhat.io/openshift-pipelines/pipelines-results-watcher-rhel8@sha256:0091977f0a5f7a60d74051745de700d6809e25ae91670646f2e27e99615a6b18 |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-controller-rhel8@sha256:3f936164ccb605047bf2e5838481e97fe3634c1fa3a278daa15f640a7783ee9c |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-core-interceptors-rhel8@sha256:c3483fccfe962108a4099e19c5d52f108d35a379db90b266f16e27e41c0f595e |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-eventlistenersink-rhel8@sha256:9062c61b8889cb0e0763cac055ff66d10f2afcb5c80899123b0edb6ee4b30644 |
| registry.redhat.io/openshift-pipelines/pipelines-triggers-webhook-rhel8@sha256:155f2d5812eee88400fcd2151fadeb9ac094db046d0179dd763ce1ae0601098a |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
