RHSA-2026:40924 - Security Advisory

标题

external secrets operator for Red Hat OpenShift 1.0.0

描述

The External Secrets Operator for Red Hat OpenShift builds on top of Kubernetes, which integrates external secret management systems like AWS Secrets Manager, HashiCorp Vault, Google Secrets Manager, Azure Key Vault, IBM Cloud Secrets Manager, and many more. The operator reads information from external APIs and automatically injects the values into a Kubernetes Secret.

解决方案

Before installing the operator, make sure all previously released errata relevant to your system have been applied.

The steps to apply the upgraded images will differ depending on the installation plan approval policy that will be used
while installing the external secrets operator for Red Hat OpenShift.

• If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a

new version of the Operator. No further action is required to upgrade. This is the default setting.

• If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.

受影响的产品

• External Secrets Operator for Red Hat OpenShift

修复

CVE

• CVE-2025-61726
• CVE-2025-68121

参考

• https://access.redhat.com/security/updates/classification/
• https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/security_and_compliance/external-secrets-operator-for-red-hat-openshift