- Issued:
- 2026-11-03
- Updated:
- 2026-11-03
RHSA-2026:94584 - Security Advisory
Synopsis
Important: Red Hat OpenShift GitOps v1.22.3 security update
Type/Severity
Security Advisory: Critical
Topic
Important: Red Hat OpenShift GitOps v1.22.3 security update
Description
An update is now available for Red Hat OpenShift GitOps.
Solution
Before applying this update, make sure all previously released errata relevant to your system have been applied.
For details on how to apply this update, refer to:
Affected Products
- Red Hat OpenShift GitOps
Fixes
- GITOPS-10775 - Argo Rollouts controller version string is malformed in two different ways across GitOps releases.
- GITOPS-11708 - Image Updater: forceUpdate on one image randomly re-add registry prefixes to other images and stray "image.name" keys appears when manifestTargets.helm.name is omitted
amd64
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:ab710cf1bb2c4fff8330474b7c9a8254f1ac1d7a6337ad6a2716b82a42bd2594 |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:a4492e603ffa70327ac27094723819e55f2b2b038338eea8eac2e7c2f425a420 |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:0e2cf2b70f33f7061932414513929c986316ee9559fe49b026e8559752e7e0a3 |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:25f341d63e57d977f4b53a73cc42bdb02f716c1d52d913b03b499d662641edf7 |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:7470b6d66a0fbb25c85dd0f410de2f433b3ef1c56e7ee9983d7a28f9cbcbcf31 |
| registry.redhat.io/openshift-gitops-1/argocd-promoter-extension-rhel9@sha256:5f69198142771272257115b9e49dd4ce57b8cc7678698815731c53be71984f29 |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:1123acde89b8829c7ff1609a9ae17259a1d0e94a958944931aa60264a364d9d3 |
| registry.redhat.io/openshift-gitops-1/console-plugin-4-18-rhel9@sha256:7ac44805123ac2a74ef26a39af81d1108a82b2375f6db822c495a1a90a90f72a |
| registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:a6d9927bb83c40da1e1ddec30ac41e15c9c4ea98228d05e57468a4d5bd590d1b |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:4b0344037e328e9e0d958f39ef3ce2c2fb23245b35984023ae9c4797f8d06ca0 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:aeaad803f730ad06c544d49767948366e70684c96a840a5a063091a4724ac6fd |
| registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:53525a2ad1ebf4434b0fbaba49a130822cebd9675c814953eb8d62ba60fc64d6 |
| registry.redhat.io/openshift-gitops-1/gitops-promoter-rhel9@sha256:ca0d487ba859c598908dcd08b463994205ec0dc8130e8fa082da01a3ddc1618c |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:4f3801c5346e2a4a5a22ec0d50ea32fd622d16e869a7fd598c1e99494c3b93e4 |
arm64
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:995f2a8ec5ceab15b0d32e4f30949399d565274caf7a9705bdec43ab736cf057 |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:81e1f5d5c86ccae5dc4b3cb2aa50bcc6a6110997c5e9a14ca8f765c4b4e62688 |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:8aec7ee0b1a06f8945e276a2e231b5afd0865b0353d6b1230327fbf9b15659a3 |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:67c2feddb15ca6b2895dd0a76f00abf9c29b404026713146bffac3b2b4eb5bc5 |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:31362fb4e2221920a01122bf988953f822c5ec8839c078ddbef6412051ba09c1 |
| registry.redhat.io/openshift-gitops-1/argocd-promoter-extension-rhel9@sha256:230faaa0401f48d89320c1c9061e9351d1814a9ce4f8d239698e3da7f31a3b8e |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:3733413c3471760970c142532344267e88f4f0d24adb54b6f08eaaaf55f0847a |
| registry.redhat.io/openshift-gitops-1/console-plugin-4-18-rhel9@sha256:2ddbde6e9deaa586bc094140848b38155c7b3d4484fc97c0512e3ed0b6987519 |
| registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:2b546d09dcad932d2ba9a45368bb0b076bc1be4365c477db5f588222f9050900 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:3b3850e29736e4136ed8fe772b8f138bd01914d6a9dc9925ba1469f68c69908b |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:ae034b1c5929b4259451b382abd9c8c70e1a228d4e0d74a16ca7988aa70d2a3f |
| registry.redhat.io/openshift-gitops-1/gitops-promoter-rhel9@sha256:ce61120996f70e7993f2bb41de37ac1e1a635fbebf536fbc2909da143cfc12b4 |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:b7974d54482f40cc7cd3b49a38b2a913045e5e2aa4a76a8f44a89217f6a7b3af |
ppc64le
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:a6685a26123f247a9f546e1706649542edd81b2714742733bdc639f1547c936e |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:80fd0b569c08bd2306f832a4b1b65ecb17716cb0ecf268ab585a53f226958ffc |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:72d692022b612cc478008ecf9bdd920b5ec66ea7cfb30e79b9aa20024d6f4a3b |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:d41854e5d2a4b3be40fadaded862c4e234b669a4f30da4ebd6b301cb939efe63 |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e71dbe4a3a6ad15f9721c9859c06dae6001767c3f3fbbf8b8836f85d5011161b |
| registry.redhat.io/openshift-gitops-1/argocd-promoter-extension-rhel9@sha256:9e941b12902183dd2ba552f221f17b4a3beecc20f15b530f614ce1bddfa2118f |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:6849457a2ac1f327bead5ec8be8baf82b5db804f24edc33fa5115f5db96936b8 |
| registry.redhat.io/openshift-gitops-1/console-plugin-4-18-rhel9@sha256:c47074588059e42ccdd2247f3bd5bf939485e639c3f0e28c39a558225a24db79 |
| registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:8c56badb229403fb21762007ec20b8144785bdb348ec7a941b104c6e63212400 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:84f8efbf4d60b681646aaf18d40fe13d5ecdc306ed2d8b3858c0ec1d6f408bef |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:e040bce1817f57a0c9bebc65360ef757ede98b3d0792eb9797178b6e40cd3287 |
| registry.redhat.io/openshift-gitops-1/gitops-promoter-rhel9@sha256:792737e04ea6930735c08893cb277002b87ceb7ec3d86d42c273ed54666dbee6 |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:bceb72ac2f3f5e6011a2b54289edf230a441c3d0b226d4e9f6714611ced3d7bd |
s390x
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:9965a218849d2024aa94610525235a7c2b1a1127cad88398b356816d4e53b458 |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:35f0df741302d8b84224e84096db0d3994af14ab9514fca7f20b2ecc1973e26c |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:43736adf22d8a2765fb9d02230530acf517fd48e52afb4253ffc006a99bbbb0a |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:0eed82c4b7f1a7514d63d88de50bbb7491d75d821a01d718e6d0668ed5020471 |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e1dfaa38f7a19e892d524f690606c2665ad5d1b7e4421d9da94a8ed2fb959667 |
| registry.redhat.io/openshift-gitops-1/argocd-promoter-extension-rhel9@sha256:db70e4cf4f29637eeceaaf2daa23448552e90c5e67d51fd20463964fce9db631 |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:f7034c2bc0a0db6c35f28de6326b098bbdb740bdad9d200a1894431ddc118ef4 |
| registry.redhat.io/openshift-gitops-1/console-plugin-4-18-rhel9@sha256:32a9ebcdffe18e153a9ee9a43c04e630124b71d1b938706507897b8c557b2d0c |
| registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:02ab0f47226d2f35b3a01f0c84ac1555b6de158293664a2e4a27dc2eeace6208 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:757b953ed54d76ed1b8957dd9ac8492f88f22ea89c15892dec097f99b2b6549f |
| registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:62609b1e8655094c4d7a5b6a39a28a9eb64e622ce80ad9cc03b4ff6c6689691f |
| registry.redhat.io/openshift-gitops-1/gitops-promoter-rhel9@sha256:07d17919f00db9301434d932e2d372f587f33ce200476537c0943db7d93ae79a |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:691fb6c9f1effa6245d987194a1b6db5ae88a58646ec27b92ae1a39f12065259 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.