RHSA-2025:7753: Important: Errata Advisory for Red Hat OpenShift GitOps v1.15.2 security update
Errata Advisory for Red Hat OpenShift GitOps 1.15.2 release<br>Security Fix(es):<br><li> openshift-gitops-operator-container: Namespace Isolation Break gitops-1.15 </li> <li> openshift-gitops-argocd-container: Go JOSE's Parsing Vulnerable to Denial of Service gitops-1.15 </li> <li> openshift-gitops-argocd-rhel9-container: Go JOSE's Parsing Vulnerable to Denial of Service gitops-1.15 </li> <li> openshift-gitops-dex-container: Go JOSE's Parsing Vulnerable to Denial of Service gitops-1.15 </li> <li> openshift-gitops-operator-bundle-container: Go JOSE's Parsing Vulnerable to Denial of Service gitops-1.15 </li> <li> openshift-gitops-container: Potential denial of service in golang.org/x/crypto gitops-1.15 </li> <li> openshift-gitops-argo-rollouts-container: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS gitops-1.15 </li> <li> openshift-gitops-argocd-container: Memory Exhaustion in Expr Parser with Unrestricted Input gitops-1.15 </li> <li> openshift-gitops-argocd-rhel9-container: Memory Exhaustion in Expr Parser with Unrestricted Input gitops-1.15 </li> <li> openshift-gitops-argocd-container: jwt-go allows excessive memory allocation during header parsing gitops-1.15 </li> <li> openshift-gitops-argocd-rhel9-container: jwt-go allows excessive memory allocation during header parsing gitops-1.15 </li> <li> openshift-gitops-operator-bundle-container: jwt-go allows excessive memory allocation during header parsing gitops-1.15 </li> <li> openshift-gitops-argocd-container: Prototype Pollution in redoc gitops-1.15 </li> <li> openshift-gitops-argocd-rhel9-container: Prototype Pollution in redoc gitops-1.15 </li> <li> openshift-gitops-dex-container: Unexpected memory consumption during token parsing in golang.org/x/oauth2 gitops-1.15</li> For more details about the security issue(s), including the impact, a CVSS<br>score, acknowledgments, and other related information, refer to the CVE page(s)<br>listed in the References section.
Other sources
Important: Errata Advisory for Red Hat OpenShift GitOps v1.15.2 security update
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2025:7753?
The severity of RHSA-2025:7753 is high due to significant vulnerabilities affecting namespace isolation and potential denial of service.
How do I fix RHSA-2025:7753?
To fix RHSA-2025:7753, update to the patched versions of Red Hat OpenShift GitOps as mentioned in the advisory.
What are the vulnerabilities described in RHSA-2025:7753?
RHSA-2025:7753 addresses vulnerabilities in the openshift-gitops-operator-container and openshift-gitops-argocd-container related to namespace isolation and denial of service.
Which products are affected by RHSA-2025:7753?
Products affected by RHSA-2025:7753 include Red Hat OpenShift GitOps and its variants for IBM Z, LinuxONE, ARM 64, and IBM Power.
Is there a workaround for RHSA-2025:7753?
Currently, there are no official workarounds for RHSA-2025:7753; the recommended action is to apply the updates.