- Issued:
- 2026-10-15
- Updated:
- 2026-11-02
RHSA-2026:83602 - Security Advisory
Synopsis
Important: Red Hat OpenShift GitOps v1.22.2 security update
Type/Severity
Security Advisory: Important
Topic
Important: Red Hat OpenShift GitOps v1.22.2 security update
Description
An update is now available for Red Hat OpenShift GitOps.
Solution
Before applying this update, make sure all previously released errata relevant to your system have been applied.
For details on how to apply this update, refer to:
Affected Products
- Red Hat OpenShift GitOps
Fixes
- GITOPS-10904 - ArgoCD removes unmanaged labels on resources, post upgrade to GitOps v1.21
- GITOPS-11441 - Image Updater: Helm write-back always falls back to stale tag when using sourceHydrator
- GITOPS-11521 - Promoter: Controller missing patch permissions for commitstatuses/status
- GITOPS-11592 - Image Updater: ValidateTLSConfig rejects valid cipher/min-version combinations, preventing webhook startup
- GITOPS-11648 - Image Updater accumulates zombie Git processes when the operator starts /manager as PID 1
CVEs
amd64
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:ea697becf01289e087296a183b5fc03ed4669cb44fdabec433909d3fff69ce33 |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a82f8ec909e149f97b51038abe5f18cf0b0be022ee25c845e8f2e3cfb80f5769 |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:4cef4a3651c7219d4d9d7e106bf3166d6f917b3e1806fca016c7d19f7fc4bb3a |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:cab79cd4914e89841359cec012274c2e0c3f5e33b490905b6782a0211913f33f |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:bd99afeadcbd789ad8dd7f93a7b88a2a1ea27b2155892ddb9799abea558112ec |
| registry.redhat.io/openshift-gitops-1/argocd-promoter-extension-rhel9@sha256:0cf38846853443060a5ddd39e4b5f97339d4b3abb697ff23eadec90683093293 |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:868f262db729d2ecd15985b3ad33eecfe0b67bb1c1774089d5bee59a963944bf |
| registry.redhat.io/openshift-gitops-1/console-plugin-4-18-rhel9@sha256:cdf9490f8a29683f132ae02e84a8a0a4c868014415db927de1c908ce35d8066a |
| registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:c26521bcd470baa1a1586c5da6cedba4d990ee6aa15838fb73ca667ac1079d9c |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:aecc69f70bc4f6c268f2a4d779376859fe373a56be8cbea7ab920ef35289c218 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:7d4f3f467ec9a64a7145e4ebe214375ad2e91a6c0c27e08380a06e136629da10 |
| registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:2ba58c50f771c08bbc5a1d8572c7b058df55bc71667cc66026d42840eb4bee6d |
| registry.redhat.io/openshift-gitops-1/gitops-promoter-rhel9@sha256:dd1bd750b6a274fd4a2e43c14b227d2289987d8d7fb4fad91a6afdb01a1a37ee |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:1232129514f4c97f56dc4a52c165dc0b8e0f0c718688612a906b2db3e26855a2 |
arm64
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:4ffcf2a01608abca545ff8507af62e64176bae49837d623012868d98ea2dc1d0 |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:742ab1d4784f69e05cdf9668b03842987bf4bbb67fa00d68a0f18b33583c1277 |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:c3cf248e0a3b9a0471a820203dae796279ba21880322de383d8f21112ecf5068 |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:4f7d8b29111f2b362f21c2f260894265382e1a8c58ce206d403cc9ea1eaf9088 |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:59dbb3178cc92d563748f5266292f8b1e5d1159601bebdb1bc124c03a8f1f995 |
| registry.redhat.io/openshift-gitops-1/argocd-promoter-extension-rhel9@sha256:2c9d5033587c26e29580af560d5d6fe394efe43f2e2fb956906bee6bb95977b8 |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:b0ce91f396bf191c76fa0740cd488ca52e5208ecd79fd64064f6fd7a3c8fd34b |
| registry.redhat.io/openshift-gitops-1/console-plugin-4-18-rhel9@sha256:37104f0feb939f926f5004b14470e03f434a3559d32fdef119eae152a562ee07 |
| registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:f098f4696fb5d4808576953b33e33278c03f8b0cc881b2d7c78542bd925ab904 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:9b8287f8de95dabd4a9dcc2a985bd379102e124d4e0203a565ed186556d21757 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:b0dd0c85797a7f48e8cd92ef6867cc2c5159eeac9cd9275c4efded36ea7ff2f8 |
| registry.redhat.io/openshift-gitops-1/gitops-promoter-rhel9@sha256:fac06e5c716ad1662a4da5abf7331d84b0cee0565f3337bae3c74df29dcf7bea |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:aeae7fd3f908104550728a7e5c082ab5e24cfb5ee3acc91b617d51896a1cd670 |
ppc64le
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:af9e88e52587c560ac3d080113f4fb2224a8910d6f21d4f5e0bbadfb3ad06402 |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:895b1b2e7b6cf10f1e85ddc1652f15fac2adc47fae1762a731ae4855a45fd447 |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:f15e9be47a0943853a404bd85ba790d5b93e4bf813e8bac797ed951ecf11d5d8 |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:2cede32de58468022f22cdf0ba29e247e0c7ecf99811509a180b5b388a0cf988 |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:0aea3db1f31674d3114325ff4e503c18c6b15e56f3d62ad21c2cc300c9495144 |
| registry.redhat.io/openshift-gitops-1/argocd-promoter-extension-rhel9@sha256:f79467ff3c296f91f5576d67bb0fa50c201be9fca78f1bb86fb8c7b534d67f56 |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:7633955b9a361ae8d1139207e2b775eda9bc51eecb58623443be0a788ffbf559 |
| registry.redhat.io/openshift-gitops-1/console-plugin-4-18-rhel9@sha256:16f3d62aeaf529b6f6528d5141c6d541528fbd6c03576c169413284d01f1aeab |
| registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:632bbd730a3f04385707517c87b87ff9a08b7a22a493d26456683f5499e4fcfc |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:dfee9f7638e88126433ead51b1524fc8e3a16b2c15e3f28607e6d870684c267b |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:69dac3a2b4c3f8031c047daac673f0f7fba2d4514ebabf75bcdee6189b21b3aa |
| registry.redhat.io/openshift-gitops-1/gitops-promoter-rhel9@sha256:a4969ee6916e589568f4c669db7e4af9cb29504bda6f2e7498e672827db08341 |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:6343b286d2b62fc6c2ac1aeaca3150180a1274dd4f27bcaf59b5ad75639dd023 |
s390x
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:ef708282223959f3ca691155fae8641822eec1f50faf4839edcfbfaa5eff7117 |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:523d9f9ec9832005a4bb99f8c99dfb62f03a7c3224157875ed4617e2a4f924a4 |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:6ab5cb7ec744ad828973ee490872448842e738b8609fcde20a04e55d2954cc29 |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:53a1801a910c5bf2404337e5d8637b33f66ac049028cdae435248da015a8fe06 |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:d5c1d20527ac83e72ee73a7b2120e40a7cf9aea069bb807a47da55dddc2c3f46 |
| registry.redhat.io/openshift-gitops-1/argocd-promoter-extension-rhel9@sha256:9cbdbd1f67999eb205ff5047f96b6d9f9987bbe5f53fb011d03d23cf23778a43 |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:8466ddfec8958ed4ed347fa281c5016942ab1c69a3dd51b11620dba04b0722ae |
| registry.redhat.io/openshift-gitops-1/console-plugin-4-18-rhel9@sha256:5b763ceb519d78818e085d71fa8b4f9edb74764b45054a3b9f526f4e886352a5 |
| registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:dc00f3471937a5aa3d5fd212fcefb47298e0352534a03fb85351be668038db1e |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:5b1035ab5a0895959a7fb4011bad00d91d631af89a8f638b118bfe92a3c1fc5b |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:b373a9976c91795fcd8993987cdb63561190e2fdf04ff77beb8d4a8d9ddbe3d0 |
| registry.redhat.io/openshift-gitops-1/gitops-promoter-rhel9@sha256:d7526e7d0cf353131e19e02c06cb6b765d3b174d01b9a68851cf5b102b00244b |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4d2b7af1762a2294db20e5e4cfcef03b03ea7e0c7752f0bd4fef99a9144f9cea |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
