- Issued:
- 2026-07-06
- Updated:
- 2026-07-06
RHSA-2026:35993 - Security Advisory
Synopsis
Important: Red Hat OpenShift GitOps v1.20.5 security update
Type/Severity
Security Advisory: Important
Topic
Important: Red Hat OpenShift GitOps v1.20.5 security update
Description
An update is now available for Red Hat OpenShift GitOps.
Bug Fix(es) and Enhancement(s):
- GITOPS-9568 (GitOps operator propagates argo CD tracking annotations to dynamic roleBindings)
- GITOPS-9971 ([Image Updater] Self-hosted Quay images redirect to quay.io, not self-hosted URL )
Solution
Before applying this update, make sure all previously released errata relevant to your system have been applied.
For details on how to apply this update, refer to:
Affected Products
- Red Hat OpenShift GitOps
Fixes
- GITOPS-9568 - GitOps operator propagates argo CD tracking annotations to dynamic roleBindings
- GITOPS-9971 - [Image Updater] Self-hosted Quay images redirect to quay.io, not self-hosted URL
amd64
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:bad330a10549c412490a17e52b5f57babfb9673480a02864f8e8a64c4cba3516 |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2be7e32661d961809eb05cfe0ec2a101a563e66a9199b15ceaba2aac11ec1863 |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:3fc61f793819741c803347cc1bfee2d2426bfeb17ac0c9e98b733cfd58d8d93d |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:3a2f823474b77b32725f395579574c7c2ceb4dbe70c19b505aad3fa3c29bccfd |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1c841bd930e4e4e59df7e33210d544d6f080a7355f307893941df7414aa80eac |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:522cd7ab503899f297be157de010cdb749fae31b0c3aebd440cbef497b45b24e |
| registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:acabb9904c17a48816b3030679b7444fb988791e5ac6c574815f8eb3be58b3fc |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:58e269fe645d9fcd1d840ab053413e0086f4c347308b87f18f29f92877900994 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:762dc1af011eaed0ec3b7cdd62bc49b09b02ea46d241ef039644f426677ecc15 |
| registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:5552180025966b3a68028a0bdb8a9437793514c1de023537f0319eb59b36ef7c |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fae968b2abc36d4dd27080cb32c024ebd6711d4d8cd28e3d61cf9480ded1a9ce |
arm64
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a087a4139b693574b43c7f7000cb5adbd33e65cf4a7a924b176aa445f33d8a7e |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:868dbe07b300c3d172ca709ccc55b97eb04ebb7fa3fb78c74b166cd4f9007701 |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:fbbaab81bbf16c97882d331ecf25c5d10e2dc78e6ac777294b66d8e42f9dcbd5 |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:bc54a9dd627d1f52753b476e2207b98c670d6f1a998668f04e31f2d5e780c786 |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:128ea1ffdb7a501922f6ba2d519ae86259cbfbc9279f1a935cff4518515ac434 |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:24e488cf8f816a025aa4f02e6766bddc6ad31d7145352e6a741a9227aabb4e0c |
| registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:b6e50ce64be518fedfd801d960ffecfaabbb9f94fa811a22b6f4c2c8c2b788fa |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:d830521d99d35c90042f71452493e9a4a763f7ca4db771d271591af23cb6582a |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:f3bcd107ca121ae0b3f49ced7999c2dff6284a7cb2c32d30e544ac3e8c6ff168 |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:7ccfa4a26bfe53ccfc19cef099742e103daf0ac36fcedfce3042310652b189ac |
ppc64le
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:f85b391fbf5fca2e1afc30ab78837fe4f11050e61eff860b5da87ca6b35d96db |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:99b964650352446c3e4551f3a22274d856fa7959e7eb24412cdd67459f9e5a2b |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:cc9005e2b08fbb537e4cd30a51c3188b24fa0e1c748563307647368e22579ecd |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:c5add8e64adc8f29754e99f6eb87864304a04bad45c68b3861f2ad1f654fa4a2 |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1c0b4c4630149a1298a17abc0553589a36f74f679937b295558f55a84907e22c |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:49d815500c37927509db7a58f76fcf54bd753ec8caedeb0d888d880257567ebc |
| registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:08fcd104d1c0422b6f499da852eae72faea56805091ba616d05a844723780750 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:372bbb7b687a59b0515751378363c748a2a48742f12a8e6b5eccb8792cf3298b |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:284affc582656126921f30fa0601f3c84b224cc762dfb334637630207a97b03d |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:e4ee4de4d75151601aa1c4a53d1cb0d0b494d350fbc81e85de420b6fa4283b84 |
s390x
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:6b00d2186683697eef95372e7940fb2282590a56040cdb529a698f7513cf690c |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:c826f87ba7007e6f88f549d6c817996ce7be0ec76dc4a9693e439ab4aa3885e1 |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ef93c183343d8744afba139cf25892ef20429b5acb593f70a0a5ee664f7d7394 |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:ade8b73deebb3ff2948b716476af1cfc8ecc0f83e22bd8b11f261cbbb43d4f23 |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:562d546a73bd85913e5f6774aae0629b3b827f5a3efc4dd6bca68105af74b1ca |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:3c36cd84145964c557f2e9ede0516882a58316b3aaf6e8919faae1e7f5580a3e |
| registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:758b58aa9b60d12144e1225655a7a0cd93cd26a41fc2cf4b64f69054352cc580 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8158736d03bd1a3858c0bef8470a7e142b71a84e96b2b3c3d216fd698d61536d |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:4ae4efce50e6034b8763b0e3151c260fb64b5da98f1aeac2228ff31ec6ddbb07 |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:fd77c850ba24cae6a44ae47ae3204f4948e0f07ea3aff7a67c32d5a202bd0e22 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
