Red Hat Security AdvisoryRHSA-2025:23206
Red Hat OpenShift GitOps v1.17.3 security update
Released 2025-12-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift GitOps 1.17 registry.redhat.io/openshift-gitops-1/argocd-rhel8, registry.redhat.io/openshift-gitops-1/argocd-rhel9, registry.redhat.io/openshift-gitops-1/dex-rhel8 +1
Fixes 4 records
Priority HIGH 84
Redis is an open source, in-memory database that persists on disk.
CVSS 3.1CRITICAL 10.0· Network · Low privileges · No interaction · EPSS 0.82638 · Published 2025-10-03 · Fixed in 8.2.2 CWE-416
Priority MEDIUM 53
Applications and libraries which misuse connection.serverAuthenticate (via callback field ServerConfig.PublicKeyCallback) may be susceptible to an authorization bypass.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.03181 · Published 2024-12-11 · Partial fix · 0.31.0 CWE-285
Priority MEDIUM 42
A flaw was found in OpenShift GitOps.
CVSS 3.1CRITICAL 9.1· Network · High privileges · No interaction · EPSS 0.00691 · Published 2025-12-15 · Fixed in 1.16.2, sha256:c41c99f360a2515bce55c42e309e2c72500ba66d3a2c461412dee7de5ea9a9fa +3 CWE-266
Priority LOW 32
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01072 · Published 2024-12-18 · Partial fix · 0.33.0 CWE-1333