Red Hat Security Advisory

RHSA-2026:94584

Important: Red Hat OpenShift GitOps v1.22.3 security update

Released 2026-11-03 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat OpenShift GitOps 1.22 registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9, registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9, registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9 +10

Fixes 3 records

TI-2026-54686 CVE-2026-78662

Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

LOW 39

Previously, a channel registered in the mux's chanList is not usable until it is established.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00431 Published 2026-09-02 Partial fix · 0.56.0 CWE-770

TI-2026-40995 CVE-2026-56855

Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

LOW 39

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.005 Published 2026-09-02 Partial fix · 0.56.0 CWE-770

TI-2026-79000 CVE-2026-114406 · GHSA-jrx5-4fv3-4mcq

Red Hat system CA store trusts weak eMudhra intermediate certificates

LOW 32

The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak pr…

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.0031 Published 2026-10-21 Partial fix · 2026.2.92_v9.0.319-100.3.el10_2, 2026.2.92_v9.0.319-100.3.el10_0 +138 CWE-295