RHSA-2026:3718 - Security Advisory

Topic

The 1.15.4 GA release of Red Hat OpenShift Pipelines Operator..
For more details see [product documentation](https://docs.redhat.com/en/documentation/red_hat_openshift_pipelines).

Description

The 1.15.4 release of Red Hat OpenShift Pipelines Operator.

Solution

Red Hat OpenShift Pipelines is a cloud-native, continuous integration and
continuous delivery (CI/CD) solution based on Kubernetes resources.
It uses Tekton building blocks to automate deployments across multiple
platforms by abstracting away the underlying implementation details.
Tekton introduces a number of standard custom resource definitions (CRDs)
for defining CI/CD pipelines that are portable across Kubernetes distributions.

Affected Products

• Red Hat OpenShift Pipelines

Fixes

CVEs

• CVE-2024-24790
• CVE-2025-22868
• CVE-2025-22869
• CVE-2025-27144
• CVE-2025-30204

References

• https://access.redhat.com/security/updates/classification/
• https://docs.redhat.com/en/documentation/red_hat_openshift_pipelines