Issued:

2026-07-06

Updated:

2026-07-06

RHSA-2026:35993 - Important: Red Hat OpenShift GitOps v1.20.5 security update

Synopsis

Important: Red Hat OpenShift GitOps v1.20.5 security update

Type/Severity

Security Advisory Important

Topic

Important: Red Hat OpenShift GitOps v1.20.5 security update

Description

An update is now available for Red Hat OpenShift GitOps. Bug Fix(es) and Enhancement(s):

• GITOPS-9568 (GitOps operator propagates argo CD tracking annotations to dynamic roleBindings)
• GITOPS-9971 ([Image Updater] Self-hosted Quay images redirect to quay.io, not self-hosted URL )

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

Fixes

(none)

CVEs

• CVE-2026-33811
• CVE-2026-39821

References

• https://access.redhat.com/security/updates/classification/

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at Security Contacts and Procedures.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.