RHSA-2026:20947 - Security Advisory

Topic

Important: Red Hat OpenShift GitOps v1.20.4 security update

Description

An update is now available for Red Hat OpenShift GitOps.
Bug Fix(es) and Enhancement(s):

• GITOPS-8784 (Service-CA annotation removed from argocd-server Service during v1.12.3 -> v1.12.4 upgrade path, persists in later versions)
• GITOPS-9549 (argocd-operator fails to update some fields of the 'copyUtil' initContainer of Dex Deployment )

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat OpenShift GitOps

Fixes

• GITOPS-8784 - Service-CA annotation removed from argocd-server Service during v1.12.3 -> v1.12.4 upgrade path, persists in later versions
• GITOPS-9549 - argocd-operator fails to update some fields of the 'copyUtil' initContainer of Dex Deployment

CVEs

• CVE-2026-32281
• CVE-2026-32282
• CVE-2026-42880

References

• https://access.redhat.com/security/updates/classification/
• https://docs.redhat.com/en/documentation/red_hat_openshift_gitops/1.20/