Issued:
2025-05-15
Updated:
2025-05-15

RHSA-2025:7753 - Important: Errata Advisory for Red Hat OpenShift GitOps v1.15.2 security update

Synopsis

Important: Errata Advisory for Red Hat OpenShift GitOps v1.15.2 security update

Type/Severity

Security Advisory Important

Topic

Errata Advisory for Red Hat OpenShift GitOps 1.15.2 release

Description

Errata Advisory for Red Hat OpenShift GitOps 1.15.2 release

Security Fix(es):

  • openshift-gitops-operator-container: Namespace Isolation Break gitops-1.15
  • openshift-gitops-argocd-container: Go JOSE's Parsing Vulnerable to Denial of Service gitops-1.15
  • openshift-gitops-argocd-rhel9-container: Go JOSE's Parsing Vulnerable to Denial of Service gitops-1.15
  • openshift-gitops-dex-container: Go JOSE's Parsing Vulnerable to Denial of Service gitops-1.15
  • openshift-gitops-operator-bundle-container: Go JOSE's Parsing Vulnerable to Denial of Service gitops-1.15
  • openshift-gitops-container: Potential denial of service in golang.org/x/crypto gitops-1.15
  • openshift-gitops-argo-rollouts-container: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS gitops-1.15
  • openshift-gitops-argocd-container: Memory Exhaustion in Expr Parser with Unrestricted Input gitops-1.15
  • openshift-gitops-argocd-rhel9-container: Memory Exhaustion in Expr Parser with Unrestricted Input gitops-1.15
  • openshift-gitops-argocd-container: jwt-go allows excessive memory allocation during header parsing gitops-1.15
  • openshift-gitops-argocd-rhel9-container: jwt-go allows excessive memory allocation during header parsing gitops-1.15
  • openshift-gitops-operator-bundle-container: jwt-go allows excessive memory allocation during header parsing gitops-1.15
  • openshift-gitops-argocd-container: Prototype Pollution in redoc gitops-1.15
  • openshift-gitops-argocd-rhel9-container: Prototype Pollution in redoc gitops-1.15
  • openshift-gitops-dex-container: Unexpected memory consumption during token parsing in golang.org/x/oauth2 gitops-1.15

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

ProductVersionArch
Red Hat OpenShift GitOps1.15x86_64
Red Hat OpenShift GitOps1.15x86_64
Red Hat OpenShift GitOps for IBM Z and LinuxONE1.15s390x
Red Hat OpenShift GitOps for IBM Power, little endian1.15ppc64le
Red Hat OpenShift GitOps for ARM 641.15aarch64
Red Hat OpenShift GitOps for ARM 641.15aarch64

Fixes

CVEs

References

Additional information