RHSA-2026:77267HighCVSS 7.5

Red Hat Security Advisory: Red Hat OpenShift GitOps v1.22.1 security update

Published
October 7, 2026
Last Modified
October 25, 2026

🔗 CVE IDs covered (2)

CVE-2026-33818 →CVE-2026-77459 →

📋 Description

CVE-2026-33818 — encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-77459 — argo-cd: github.com/argoproj/argo-cd/v3: github.com/argoproj/argo-cd/v2: argo-cd: AppProject restrictions bypassed by PreDelete/PostDelete resource hooks

🎯 Affected products54

  • Red Hat OpenShift GitOps 1.22
  • registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:373acc13d0973ccd162df093b997651d756268cdc5403afd3dd1956646ff1330_amd64 as a component of Red Hat OpenShift GitOps 1.22
  • registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:6e0c0ac149bcd8eabbc425449cf78e884186bad5129448c3c5f697c7f1417acb_s390x as a component of Red Hat OpenShift GitOps 1.22
  • registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:7c8c166ffe7d5dd408611c4269963afcb130a0459f74b8e761b669a8c3ccf861_ppc64le as a component of Red Hat OpenShift GitOps 1.22
  • registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:9fe751b49b725133568fc8b3ab995a3c8131be1298fd5519c049c8296bf6ccd1_arm64 as a component of Red Hat OpenShift GitOps 1.22
  • registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:07b8f811de4c482330c5bc29f95f095cdfc5660df116ce5ba893cb54fe34f1ba_ppc64le as a component of Red Hat OpenShift GitOps 1.22
  • registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:451bc1b6710e8895e2906f18de12e7ce719361c5ec682cab07b589aa83bfe6f3_arm64 as a component of Red Hat OpenShift GitOps 1.22
  • registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:50f202ab12bd2d85e36a06c93f97a39056208ec721a75e47118ad93b8e0638d0_amd64 as a component of Red Hat OpenShift GitOps 1.22
  • registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:a4a4e5d4e90b9a2948f6824ea4333224e54201e5fce53594f4b5830c3b482083_s390x as a component of Red Hat OpenShift GitOps 1.22
  • registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:2b236889ca1c040865266e0bbf00ce4b1a943cd387217e3d83e8e4d47aee1431_arm64 as a component of Red Hat OpenShift GitOps 1.22
  • registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:7dd2807b41a796115293516624e93d7c1197543f6a3dda1320ccbe8b60bf911e_amd64 as a component of Red Hat OpenShift GitOps 1.22
  • registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:ad1e2fb0f8f52a4dcd3e6aee192057328121ecf623d69f58f135cc12dcfaf13c_s390x as a component of Red Hat OpenShift GitOps 1.22
  • registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:ef099d69ccea3577620882c4f0c29709589e902d433beeced64df16c8fcbd23f_ppc64le as a component of Red Hat OpenShift GitOps 1.22
  • registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:566bcafd189a44f151c8415c4d99bb8e6bc9645a0a207339924dec5d5d979e33_ppc64le as a component of Red Hat OpenShift GitOps 1.22
  • registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:cb9d9154e0573fcd6344123c5f61a66adce4a15f5a1a74f51464a06edb985f3b_s390x as a component of Red Hat OpenShift GitOps 1.22
  • registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:e2c45c0d94927831b48c8b54b26d2fa861f64920a2d654697bd04972660194d8_arm64 as a component of Red Hat OpenShift GitOps 1.22
  • registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:f291e4a001e7200e6f78baa2098da5286d44480c993838b7d8ea02faa230f669_amd64 as a component of Red Hat OpenShift GitOps 1.22
  • registry.redhat.io/openshift-gitops-1/argocd-promoter-extension-rhel9@sha256:14aa615e31fa2b6f44dc1c689470007593d44ad9c39a98b72ae1dd5c4a73298c_arm64 as a component of Red Hat OpenShift GitOps 1.22
  • registry.redhat.io/openshift-gitops-1/argocd-promoter-extension-rhel9@sha256:2d59876119954e6870993a09727b5290dc1b66cbe54062babb44ea8678a854ea_s390x as a component of Red Hat OpenShift GitOps 1.22
  • registry.redhat.io/openshift-gitops-1/argocd-promoter-extension-rhel9@sha256:2f95b6dadaeb9861326756ea57fdef68a8fbfb63b180d3e76ff1a8aedc2b1a69_ppc64le as a component of Red Hat OpenShift GitOps 1.22
  • registry.redhat.io/openshift-gitops-1/argocd-promoter-extension-rhel9@sha256:bacbd05bdb3ac2111be9c91fce655d40f82fad8a95d4a5917397db8b35fa7603_amd64 as a component of Red Hat OpenShift GitOps 1.22
  • registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:077f0a2f82756ab38c72ebd0140cfb293f8067cebb9427d5cf5c85f683c7fef5_ppc64le as a component of Red Hat OpenShift GitOps 1.22
  • registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:0d4be984b53ece8691851713ef4c3101ca072c639ec0aa3b890d7da48291e0ab_s390x as a component of Red Hat OpenShift GitOps 1.22
  • registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b641491d57a12089873cf5a0339c023ff8ad3abf4547dfa8f815d4839b68626f_arm64 as a component of Red Hat OpenShift GitOps 1.22
  • registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b70caabf383cedf5816ac6fbecbb651dc86f9206838c929b52cc8d24a70593b7_amd64 as a component of Red Hat OpenShift GitOps 1.22
  • registry.redhat.io/openshift-gitops-1/console-plugin-4-18-rhel9@sha256:0bd6eac45f81bd48a9ff92348466fce53b3c1b1fc2d7dd1bc7f986edbbb75d63_amd64 as a component of Red Hat OpenShift GitOps 1.22
  • registry.redhat.io/openshift-gitops-1/console-plugin-4-18-rhel9@sha256:8b009d5f0e6bfe893ce0f94231fa686f88b2a3b3184c01f6e8cf8caaea28537c_ppc64le as a component of Red Hat OpenShift GitOps 1.22
  • registry.redhat.io/openshift-gitops-1/console-plugin-4-18-rhel9@sha256:a68a154251a64e0a22b79ab12884f18d86e6d20cdd23a680b8b8ea60f3180efa_arm64 as a component of Red Hat OpenShift GitOps 1.22
  • registry.redhat.io/openshift-gitops-1/console-plugin-4-18-rhel9@sha256:dde789bd044eada1c0af649ecc29041157d9fbb3ef4c594bb064280f6e62394d_s390x as a component of Red Hat OpenShift GitOps 1.22
  • registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:3fa8812a9a7b8607bc5f57243cc7b3ec33757aed11d589a58af1fcbb6368113a_s390x as a component of Red Hat OpenShift GitOps 1.22
  • +24 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (6)