107 matches found
Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.21.6 security update
Important: Red Hat OpenShift GitOps v1.21.6 security update An update is now available for Red Hat OpenShift GitOps...
Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.20.9 security update
Important: Red Hat OpenShift GitOps v1.20.9 security update An update is now available for Red Hat OpenShift GitOps...
Critical: Red Hat Security Advisory: Red Hat OpenShift GitOps CLI tools version 1.22.2
Red Hat OpenShift GitOps CLI tools version 1.22.2 Red Hat OpenShift GitOps CLI tools version 1.22.2...
Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.20.8 security update
Important: Red Hat OpenShift GitOps v1.20.8 security update An update is now available for Red Hat OpenShift GitOps...
Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.21.5 security update
Important: Red Hat OpenShift GitOps v1.21.5 security update An update is now available for Red Hat OpenShift GitOps. Bug Fixes and Enhancements: GITOPS-10364 ArgoCD server excessively reinitializes OIDC provider 10x/min causing continuous session token failures and user logouts after upgrade to...
Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.22.1 security update
Important: Red Hat OpenShift GitOps v1.22.1 security update An update is now available for Red Hat OpenShift GitOps. Bug Fixes and Enhancements: GITOPS-11489 cherry-pick argo-cd Repo-server health check timeout → CrashLoopBackOff gRPC grpclb DNS to release-3.5...
Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.21.4 security update
Important: Red Hat OpenShift GitOps v1.21.4 security update An update is now available for Red Hat OpenShift GitOps. Bug Fixes and Enhancements: GITOPS-10472 GITOPS-10477...
Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.20.7 security update
Important: Red Hat OpenShift GitOps v1.20.7 security update An update is now available for Red Hat OpenShift GitOps. Bug Fixes and Enhancements: GITOPS-10464 GITOPS-10466 GITOPS-7957...
Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.19.7 security update
Important: Red Hat OpenShift GitOps v1.19.7 security update An update is now available for Red Hat OpenShift GitOps...
Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.19.6 security update
Important: Red Hat OpenShift GitOps v1.19.6 security update An update is now available for Red Hat OpenShift GitOps...
CVE-2026-14251
A flaw was found in the OpenShift GitOps operator. The ClusterRole reconciler does not validate resource ownership when reconciling ClusterRole objects. A namespace-scoped Argo CD instance can trigger deletion of a ClusterRole owned by a cluster-scoped Argo CD instance by crafting a name collisio...
CVE-2026-14251 Gitops-operator: gitops-operator: missing allowednamespace check in reconcilerhook for clusterrole/role cases enables potential privilege escalation and dos
A flaw was found in the OpenShift GitOps operator. The ClusterRole reconciler does not validate resource ownership when reconciling ClusterRole objects. A namespace-scoped Argo CD instance can trigger deletion of a ClusterRole owned by a cluster-scoped Argo CD instance by crafting a name collisio...
CVE-2026-14251
A flaw was found in the OpenShift GitOps operator. The ClusterRole reconciler does not validate resource ownership when reconciling ClusterRole objects. A namespace-scoped Argo CD instance can trigger deletion of a ClusterRole owned by a cluster-scoped Argo CD instance by crafting a name collisio...
EUVD-2026-44596
A flaw was found in the OpenShift GitOps operator. The ClusterRole reconciler does not validate resource ownership when reconciling ClusterRole objects. A namespace-scoped Argo CD instance can trigger deletion of a ClusterRole owned by a cluster-scoped Argo CD instance by crafting a name collisio...
CVE-2026-14251
A flaw was found in the OpenShift GitOps operator. The ClusterRole reconciler does not validate resource ownership when reconciling ClusterRole objects. A namespace-scoped Argo CD instance can trigger deletion of a ClusterRole owned by a cluster-scoped Argo CD instance by crafting a name collisio...
CVE-2026-14251
A flaw was found in the OpenShift GitOps operator. The ClusterRole reconciler does not validate resource ownership when reconciling ClusterRole objects. A namespace-scoped Argo CD instance can trigger deletion of a ClusterRole owned by a cluster-scoped Argo CD instance by crafting a name collisio...
CVE-2026-14251: Missing Authorization
A flaw was found in the OpenShift GitOps operator. The ClusterRole reconciler does not validate resource ownership when reconciling ClusterRole objects. A namespace-scoped Argo CD instance can trigger deletion of a ClusterRole owned by a cluster-scoped Argo CD instance by crafting a name collisio...
EUVD-2026-43648
A flaw was identified in Argo CD, the GitOps engine used by Red Hat OpenShift GitOps, that could allow an unauthenticated attacker with network access to the Argo CD repo-server to achieve remote code execution. Under certain conditions, the attacker may then manipulate cached data to deploy...
Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.19.5 security update
Important: Red Hat OpenShift GitOps v1.19.5 security update An update is now available for Red Hat OpenShift GitOps...
Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.21.1 security update
Important: Red Hat OpenShift GitOps v1.21.1 security update An update is now available for Red Hat OpenShift GitOps. Bug Fixes and Enhancements: GITOPS-10083 RC 1.21.0-7: Missing permission for web-based terminal in Argocd UI GITOPS-10178 OpenShift GitOps operator v1.21.0 breaks Redis-HA...