- Issued:
- 2026-10-26
- Updated:
- 2026-10-26
RHSA-2026:90323 - Security Advisory
Synopsis
Important: Red Hat OpenShift GitOps v1.20.9 security update
Type/Severity
Security Advisory: Important
Topic
Important: Red Hat OpenShift GitOps v1.20.9 security update
Description
An update is now available for Red Hat OpenShift GitOps.
Solution
Before applying this update, make sure all previously released errata relevant to your system have been applied.
For details on how to apply this update, refer to:
Affected Products
- Red Hat OpenShift GitOps
Fixes
- GITOPS-10780 - GitOps console plugin: Delete ApplicationSet disabled for non-cluster-admin users (accessReview missing namespace)
- GITOPS-11176 - Console plugin "gitops-plugin" hides Topology Route/URL decorator on workloads in OCP web console
CVEs
amd64
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a9db60fa1586021acf17bfde92725590814374cc0df35c27884bb7c0795bf929 |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:82b003bcdfaee7317df64a27da3646b791ab10d3658d50c1e62bf4e24b193cf4 |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:09963981356c609cfe9431ff47c86b049ac24b77551099fd058c491f160fa07c |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:dea2f730c66d18415723603e5f668f88d0df8da43875437631089c955b8556a3 |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:479c1345117f72c672a244872816a1340f52a748b925014bcb11c0c0a9cd6052 |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:10850f6c444184237a28bb151ba321b2bbd80c74c996acd1f76cce9023b91a70 |
| registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:95a5e6d541e3a65f740d08335283e57dfb8759284b43a96d359ca028847ae5b0 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:072535fd69d6a253f873ef6523f60926c0d0270f57e5ddbd8f9289786a6620bf |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:7971d41140910e74147ea72d26836bcca048e318d82d8a6cec72602d2be532a5 |
| registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:56d79517af6478c954f5349867d566d55e50cd1764bfa5344f1c25a5b7fcabc1 |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:f279fec0d78c7c95dc1bf35137b7eaf905e5f0cb2948771b14e764c977010eb9 |
arm64
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:c48538aea8a57c344bb2ead9703930cfacf1c3629fd597cb3408d170f4326a32 |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:0ad6f243c58401d2d5595ae948966ade9f3fd6de96481a89cb1215d2aa9b2112 |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:ef85a982bb8cba45123b745e8a63f2f4b81532da86a74226b1dc726165bd75b1 |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:cc5db039c38d0b0b4006651f3c4f6f392de4db369b56654698828990a2a4abb6 |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f51f48fdbaf708c88cef27530ffaca055685f59c0ab4af7c9334fff966715127 |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:fd5936a5a9921d8e5137cfa622ca30a9efe5f8f52be461e4bb27b91cd12d4e6a |
| registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:3298f57f32220d3b2edd4310fd9aa37feb9650c2254f4c5493177bc86c04bf70 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:ad37c2e0ab3be504a563679fd74f023f2c430ded9037b60e0f62f07ce4a4b9f2 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:2f8735216e077e2bba04898616894ad7b93bcb2bc84b0cede0d960fb10ef2af1 |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:b5a9a42ee09b037d88a6ee0def7ffd6f099993098f74745afe3738f88399f0d1 |
ppc64le
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a344efac20f0f2f1769980900cf19afbf2980f11e6a641e8c4b488557ee8939c |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8cbba3b3c4bcb2469ae11f84c5ac473c27af05ac1473004cf509c03d324ecff3 |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:05388d001c6a64044069de29943cc2a32cb06d2a994807207d094b8e2f9d75cb |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:eaad816c25ff6642fd05059632ba0ebfc7834bf63334326dd8e287e699d6992b |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:38ad7e819d8c0d159c1aa33cf42923c0ef4760dd57f1bd3cf395de7b1718e41b |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:9726c9ea4e7465db945bbe2f93984c054179be3b31e6f10f90e251d6ba28e457 |
| registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:f21c9e87bef191d1349a719399f0e38d3d69ae2d136812c3e8e3b0a33b79441c |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:8cc553d253eafb331ba3c227392cc326261927cd9f97c58f754317b4f3cc8ffa |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:0c75ca958619a3684ba671287dc4f92037509b88dac513aad86661b4097b00f2 |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:5ee7aefb24d9854ec2ccd26318dc9bca442e47ad85d7b52f21a8d8bed30b73ef |
s390x
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:525ed2c85746300276659cd92679a78f9fc42c122e55ff328674e2354ba452ad |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:fc94a822ab7401258e02a1dd47c96525d700998b81c1b9af18f83c734f9f2bab |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a5206c510ca0138916edaf71fe102cd3c56470103bbe4b6a7e2f33b0f20ced41 |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:703910b317fb3432250f995fe301f5e6c83c487b985392cb7347a9e2873c08f9 |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:1cef96afd6e8ea6acf2c3c8d7b72c0179399897b172e58caa23981e49e8e8db2 |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:faff652f98e90ec79f4043b3fdfacc63c4bc9800159fb4f7f8569cd6eb661d66 |
| registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:429294d371842cf9d7496e059dc90e41d1bd484fcbe8e52b9caffced30d7ffb7 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:e1b0b3ea39896f3e52098155b2acfb250ec613070fc02a45b4120d3180479cf2 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:44383f1be329751a33aeed6e0b7c5987e3168bf8571b663dcecacc139b42c5a1 |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:992574b553332f93d6941c390ee19e8f6c8e06c499f3ad6560493732c6f3d998 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
