- Issued:
- 2026-04-22
- Updated:
- 2026-04-22
RHSA-2026:9698 - Security Advisory
Synopsis
Important: Red Hat OpenShift GitOps v1.19.3 security update
Type/Severity
Security Advisory: Important
Topic
Important: Red Hat OpenShift GitOps v1.19.3 security update
Description
An update is now available for Red Hat OpenShift GitOps.
Bug Fix(es) and Enhancement(s):
- GITOPS-9158 (OpenShift Gitops Operator v1.19.2 has hardcoded pod-security labels which conflict OCP <= 4.16 )
- GITOPS-9587 (multiple CVEs in ose-kube-rbac-proxy images included in OpenShift GitOps v1.19.2 and v1.20.1)
Solution
Before applying this update, make sure all previously released errata relevant to your system have been applied.
For details on how to apply this update, refer to:
Affected Products
- Red Hat OpenShift GitOps
Fixes
- GITOPS-9158 - OpenShift Gitops Operator v1.19.2 has hardcoded pod-security labels which conflict OCP <= 4.16
- GITOPS-9587 - multiple CVEs in ose-kube-rbac-proxy images included in OpenShift GitOps v1.19.2 and v1.20.1
CVEs
amd64
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:1c5ed08bcdd5c13ba8b98054ddc1dfdc3837d24dcd3b670bdc4ff2453fc37789 |
| registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:83c466b8c9310f0dc498870c25d43b96ba051de4509d6134540c561b05a12d02 |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:98a3e4019e9f68050237f34cb7a89c125c317973158184fba55ace5f772cd76a |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:b8d4c24efc4d1eb910009373156f8fe1ae2c599a0dff0f278382aedd4cab9a1f |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:6b755ab049dfa8a5f89dbde3bed00275b9ff807b338b2a7ecdaefeaed83b0bbc |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:8f9477ae0de3e4b1d039bc6901cec348eb4d4bdde8b8b85775ddff4db2a08c1b |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:19e0b44f05c4131e6ce86ebba2626aac49c7b3dbdc4f1a403c025234ad17853d |
| registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a7940ced8ebfc480ff4e3daecd6362ec60bc94e7bcfa7d80275f2a3f97eb6f3e |
| registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:e60e4e0c97f98a424b1110f0dad7e0cc3f739c6b4076ffe0534d789eb99a35ec |
| registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:0acb623e826efb64e304c73a412605efcab0f944f93dbe87fe39c70d39403a64 |
| registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:9d16d9f172618c8f03b2b5b930220761ed97faa90ebd38f570d60bed5216b433 |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b27b5fd2989d7575476b2fd0f973424700223aeb1810136bf67d0a8f0659eaa4 |
arm64
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:b3da9ddc02f2caa947f034e64ed37769efa04ff17c98c8b57f21871e058d150d |
| registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:c1f0cff25f290e7e9834372bc5bb3e63aad754ae3fe13a11c502eec3f5c8a8b9 |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:df066f65a2ebc5a6910e8ff41bfab5c310b3a5739ffdb60501f9941d9961213f |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:38a8d2575efdebc83519349b0bba68f72abca3c4bff4731cee24b3983252ad13 |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:cc8347691a1ad2bbcffd256a632ad6ac6768b1491af96ab2df1dbc106bf8b189 |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:bb9a3e9293c5b5b131632a32a56b13c7093e2e9881e50d48940d2259facc3777 |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:879902f60fe7a589c6fb0fde87111cd39fc058b2958ef3b24f7a919af64eef79 |
| registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:afca2f8a7181495c6612461542ec7a2a12b4d4bc5795a0fb84302ff3c9c984fd |
| registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:c611a1baeca063e4cc10653601f9223f84f81cfec211a01c32b8f205b6eb3ad9 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:d1796795ff523d6866d3ccacf5a5b9b632e878b1129d6ceeacd8169535285999 |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:b5ac788322829cf0a9ae32fbb17c29d23722fc7b6d8df59a9e82926ceec239fa |
ppc64le
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:b1d6a23d9957dbe128ba317ed9a0c8028cbea913683bdd8557f6c4caba98d132 |
| registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:04673bdebda425bad1c73fa2c99e89016b90adde92ab5b18854a213099e16f99 |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:411b46c6b939f0baf070a0e916df823f8dedce22163a7c5be9774724eb6949e6 |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:f130e22e260da1e96c10d791f126c1ffc8585ba663918557295f281c4c2a9c17 |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:8d7aa2c0b97e86fb6d8ef542b5f6ab05bded9769d5beb4a3ae0e4dd4b77e6dae |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:943616dc45c24ce59a6962443814dce9f4076d5bd25c041830da5e9ada2dbf1b |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:23837525f1a838bb9b4b456bb0a06020406c965784f3353690b5f7738007ae75 |
| registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:9fce35bd136512e2b6bd09e6c82c73800c7b35e101578553ac26906c1982cbe1 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:563b17fbbbd1d838869ec0d40ccd981f022d14af4d649b668e87bae9f58335e7 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:13171c90460b93c0b375b1a2d3fb82340c29cfcab7e512f2117812d453a0f235 |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:c471def38bdc188df4fd701792dabc3636bb7fb0476a004c45e8ae0a5b95babc |
s390x
| registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:dff08eed24153cb98b9fdf25702c6edd88467516d3a750f915c2b8972a206b72 |
| registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:83e7e20877ca983a2f2cf64db0b9b8ac44b4979276f3d3a90cc971f04bf9affb |
| registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:2bb7b0c12f869e1169b7f71bca827916e1e035df0b60d956cf976df692ff5a0b |
| registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:3aca316cc39a16b92ca20177841b5d1643e26132f16b9b16dc1b8171587e21ed |
| registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:228a16b400172e8b31a8f727d700a50a3aa9a2347527be18495a12370e93ae2b |
| registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:6d93cb87458ad8e74f330e50a6294fca765ff752c5d68815b2ab738d3faa7060 |
| registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:acd235ec47951169c959d86c143e918598748f966067c6ecf339869c6d9a93c9 |
| registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:818a7de4db02d01bc27802d00564e42b4ff0b47df31083450ebe3c739bdc0cbd |
| registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:8ee05240161a2451ccc93b2cf69bff63c4a86386d7170cdd1f13f44fb75d5a36 |
| registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:aeeca8d0d5271705434296005e02d76b1650416703c28ae07a6f74b1ea75acd0 |
| registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:873c6e93e45c92a4bbe8ffd4a5f9bf68bc840cda6caa1b5f33a2411373c09c2f |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
