- Issued:
- 2026-10-07
- Updated:
- 2026-10-07
RHSA-2026:77269 - Security Advisory
Synopsis
Important: Red Hat OpenShift GitOps v1.21.5 security update
Type/Severity
Security Advisory: Important
Topic
Important: Red Hat OpenShift GitOps v1.21.5 security update
Description
An update is now available for Red Hat OpenShift GitOps.
Bug Fix(es) and Enhancement(s):
- GITOPS-10364 (ArgoCD server excessively reinitializes OIDC provider (~10x/min) causing continuous session token failures and user logouts after upgrade to GitOps 1.21.0)
- GITOPS-10429 ([Regression] openshift-gitops-server goroutine leak triggered by frequent Dex token renewal restarts (v1.21.0))
Solution
Before applying this update, make sure all previously released errata relevant to your system have been applied.
For details on how to apply this update, refer to:
Affected Products
- Red Hat OpenShift GitOps
Fixes
- GITOPS-10429 - [Regression] openshift-gitops-server goroutine leak triggered by frequent Dex token renewal restarts (v1.21.0)
amd64
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:406593b925ee30ec43661ea90368f705689de6234b1b422a1c819dac3c0daff5 |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:49cb6fac7a1ee4c44053822a447b2c57abf5a0e195076e2f1208af1eff26166c |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5b2c663350de430f0c970347a5676aafdb43c778695e3e98b093f3455c03a93 |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:0f73995b3f3ca9ba851492d938f4ff885a35b5c89b2360ef9c73c74bf568452b |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:b973526c361b32580e0b4fb9670ed602ee13b34b8474115d35e6aa3155212d9d |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:147b67179b88ec8c63aa3d3cc10e11a9ce6a0c940c4bf3911519ffb56d7b8909 |
| registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:92a8a5337c2a3efbe0dc84c76bb85d7bee8feed33c0b3f5366a3e715a47448a7 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:20123f697d4c8324f08149953a5114e316ccb3e6f3dcd6954d6ba84541673e20 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:8a0efea00453e415aca54cfb6860a7e1df5139b8fb27ad304d1116df89a45186 |
| registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e65eafa4600cfcf853d07f17596bf725693cdd8b6ef3ccd952936b134026158 |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:ed0346acdfba52961ff2df784da404f0c18597506907991040aef6d793227049 |
arm64
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:032920dfca6f029af5cae69f462449eec3a1d4119be7466607294b5828a79f1f |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:ffa4d96e59265f09ebb23f4fb3d607ffb58abd5a12ec9220c5728a7b59ef81c5 |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:19512146836efa84057b9e50b9d7900695172c0d5864d1e3bdcdfae4281cb899 |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:6cd5ad5b7adddd7982c35de161ffbf5b37d33cdecc4336cc8ea9159730a0557f |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:5868c23f6100c6dfb6480b7d5dcba931e2e921bf2a68d56c5154a905a6378e54 |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:1340e125539783821a958146cd51a9675b633d6e9e8c2fab335eb0a39d3722ec |
| registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:cf1e7307d5fc72f28a4e976a467a4ffbc68e8d69874dca7fc7a3161933013ff6 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8192f82e40797322c265b73128a7a363e989d6a8e0a7d62ca7e6aff03cd22c14 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ef62b46d0182b622476196c3c7ae79082436abe105979b94b5fde401b22ea904 |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:aa13ba5e240189bd2d8852a0cf4d65312c8fe46e3a8961d34a81f9855d12cf12 |
ppc64le
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:de9c1622fbd7cc50ad66bfd32390f597a46034b9104fd78704864fda25ee0fbd |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f53638b4470adcd01a4d023e82aa05a719deafed146c7a169b606e089307f231 |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:2a615abf1722e91dec261408f02c125006e7328f552aec5d2e597d47a46e9849 |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:a4be367f0b80db8ced20c8ebba2589c72ddfade14c1d695b163c980f9d67531d |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:2d125f10085f0f5528e4ec501e3382ed4970d4549178815b13a2c1d0b6e566ab |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:69082f001997c1e78caf3bab6a141c1caf5d01d08a6a118c2959af124469f420 |
| registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c74882ec2776b9c3e979f76fd5fff08fa88efd7c7f8e618717005829444d1a4d |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ceb8e85bb193407ce17267325344c81d654fb4d47cde9183643b98be423e66d2 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d57a0a97a0dd44a3946d272cc0e5f0034eab4f302750afebbf23c16e304cb360 |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:c2e59c1c80d518a5c66c207d8bf2587a64b976b178d0928be4f507a417089dff |
s390x
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:47724fa440a51c8cd9c82fbd205e1c1e4854764298e02281f528b21ad6879a5d |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:f32c3010f66d945f41d7289e79022f47bcadb4b81429a4f401ce2bc6ac64f6cb |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:56da59bec26f5db84d12f3b58dd6b14d1b675782d1004f503e93c85ff01bba8d |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4b236f6514c994331160be3251e19142313e3af3cf74172bedaf1c9a1164f42b |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:abae959302bc998a06d414ab6de56a695779d965ffe5456d79d3f3017325ac8e |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:669576fd9f27835fdac8f2fd891a6d2a5fc9a77b725636d376aeff091d11bb0c |
| registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3fe442406e293cd2f732344fd82d1402c7a7743e8ac898f9703c319375d8c9bc |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:850387be4a85c0e1218f0f332a8b3123fc6f811a4c369c7a03115ca36a8627c2 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:086539efbbc1ecdbf2e5f9b9cf92e17ea21021330aa291213b926c5cc1d12545 |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5862daf125bc6a1ca9ffef0fb36ed860293ae6d146f0952fa92b1a1d36b3b227 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
