4.13.55

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.13.55-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-sdn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.13-e2e-aws-sdn-serial
- aws-sdn-upgrade-4.13-micro Succeeded periodic-ci-openshift-release-master-nightly-4.13-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.13-micro Succeeded (2 retries) periodic-ci-openshift-release-master-ci-4.13-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.13-fips-payload-scan
- gcp-ovn-rt-upgrade-4.13-minor Succeeded periodic-ci-openshift-release-master-ci-4.13-upgrade-from-stable-4.12-e2e-gcp-ovn-rt-upgrade
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.13-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.13-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.12.19, 4.12.20, 4.12.21, 4.12.22, 4.12.23, 4.12.24, 4.12.25, 4.12.26, 4.12.27, 4.12.28, 4.12.29, 4.12.30, 4.12.31, 4.12.32, 4.12.33, 4.12.34, 4.12.35, 4.12.36, 4.12.37, 4.12.38, 4.12.39, 4.12.40, 4.12.41, 4.12.42, 4.12.43, 4.12.44, 4.12.45, 4.12.46, 4.12.47, 4.12.48, 4.12.49, 4.12.51, 4.12.53, 4.12.54, 4.12.55, 4.12.56, 4.12.57, 4.12.58, 4.12.59, 4.12.60, 4.12.62, 4.12.63, 4.12.64, 4.12.65, 4.12.66, 4.12.67, 4.12.68, 4.13.10, 4.13.11, 4.13.12, 4.13.13, 4.13.14, 4.13.15, 4.13.16, 4.13.17, 4.13.18, 4.13.19, 4.13.21, 4.13.22, 4.13.23, 4.13.24, 4.13.25, 4.13.26, 4.13.27, 4.13.28, 4.13.29, 4.13.3, 4.13.30, 4.13.31, 4.13.32, 4.13.33, 4.13.34, 4.13.35, 4.13.36, 4.13.37, 4.13.39, 4.13.4, 4.13.41, 4.13.43, 4.13.44, 4.13.45, 4.13.46, 4.13.48, 4.13.49, 4.13.5, 4.13.50, 4.13.51, 4.13.6, 4.13.7, 4.13.8, 4.13.9

Upgrades to:

4.14.48 (changes) - F S S S
4.14.47 (changes) - F F F F F
4.14.0-0.nightly-2025-02-21-074459 (changes) - Failed Success
4.14.0-0.nightly-2025-02-20-181140 (changes) - F F F F
4.14.0-0.nightly-2025-02-20-131712 (changes) - Success
4.14.0-0.nightly-2025-02-20-023649 (changes) - F F F S
4.14.0-0.nightly-2025-02-19-155533 (changes) - Success
4.14.0-0.nightly-2025-02-19-115923 (changes) - Success
4.14.0-0.nightly-2025-02-19-075817 (changes) - Success
4.14.0-0.nightly-2025-02-19-013648 (changes) - Failed Success
4.14.0-0.nightly-2025-02-18-072415 (changes) - Success
4.14.0-0.nightly-2025-02-18-022555 (changes) - Success
4.14.0-0.nightly-2025-02-17-165405 (changes) - Success
4.14.0-0.nightly-2025-02-15-204411 (changes) - F F F F
4.14.0-0.nightly-2025-02-14-202128 (changes) - Success
4.14.0-0.nightly-2025-02-14-132116 (changes) - Success
4.14.0-0.nightly-2025-02-14-062318 (changes) - Success
4.14.0-0.nightly-2025-02-13-184836 (changes) - Success
4.14.0-0.nightly-2025-02-13-133601 (changes) - Success
4.14.0-0.nightly-2025-02-12-220429 (changes) - Success
4.14.0-0.nightly-2025-02-12-172141 (changes) - Success
4.14.0-0.nightly-2025-02-11-193826 (changes) - Success
4.14.0-0.nightly-2025-02-11-061249 (changes) - Success
4.14.0-0.nightly-2025-02-10-215420 (changes) - Success
4.14.0-0.nightly-2025-02-10-171503 (changes) - Success
4.14.0-0.nightly-2025-02-09-092343 (changes) - Success
4.14.0-0.nightly-2025-02-09-015729 (changes) - Failed Success
4.14.0-0.nightly-2025-02-07-092236 (changes) - Success
4.14.0-0.ci-2025-02-21-185109 (changes) - F F F P F F F F
4.14.0-0.ci-2025-02-21-050545 (changes) - F F F F S
4.14.0-0.ci-2025-02-20-150051 (changes) - F F F F F F F F
4.14.0-0.ci-2025-02-20-090051 (changes) - Success Success
4.14.0-0.ci-2025-02-20-020934 (changes) - F S S
4.14.0-0.ci-2025-02-19-182557 (changes) - Success Success
4.14.0-0.ci-2025-02-19-112910 (changes) - F S S
4.14.0-0.ci-2025-02-18-182850 (changes) - F S S
4.14.0-0.ci-2025-02-18-065920 (changes) - F S F F S
4.14.0-0.ci-2025-02-17-221349 (changes) - F S F S
4.14.0-0.ci-2025-02-17-144954 (changes) - S F S
4.14.0-0.ci-2025-02-16-011723 (changes) - Success Success
4.14.0-0.ci-2025-02-15-171302 (changes) - F F S S
4.14.0-0.ci-2025-02-15-075327 (changes) - Success Success
4.14.0-0.ci-2025-02-15-005517 (changes) - S F S
4.14.0-0.ci-2025-02-14-172929 (changes) - S F S
4.14.0-0.ci-2025-02-14-112929 (changes) - Success Success
4.14.0-0.ci-2025-02-14-052929 (changes) - Success Success
4.14.0-0.ci-2025-02-13-181658 (changes) - F F F S F S
4.14.0-0.ci-2025-02-13-064318 (changes) - F S F F F F
4.14.0-0.ci-2025-02-12-201158 (changes) - Success Success
4.14.0-0.ci-2025-02-12-135708 (changes) - Success Success
4.14.0-0.ci-2025-02-11-174302 (changes) - F S S
4.14.0-0.ci-2025-02-11-015609 (changes) - S F F S

Loading changelog, this may take a while ...

Changes from 4.13.38

Created: 2025-02-06 09:40:17 +0000 UTC

Image Digest: sha256:fb687ffbbe6fcb4b551518c5e910929bbac6baf5b5b1bbbc286fb2da9dbd5490

Components

Kubernetes upgraded from 1.26.14 to 1.26.15
Red Hat Enterprise Linux CoreOS upgraded from 413.92.202403200554-0 to 413.92.202501201944-0 (diff)

Rebuilt images without code change

alibaba-cloud-controller-manager git e41e11cc sha256:d6833200429b394441481829858a98b5cb41df0bd090cd4be69e5ffb3cacd127
alibaba-cloud-csi-driver git 6384f904 sha256:ede3f47a83d3446239f889d9c6f8c141bf5900709b81e1dee5f7919141220f8f
alibaba-disk-csi-driver-operator git 7e415973 sha256:cd78eb2d7d81d692f4a00746d89cff2ac561f32e203d1a4c90dbfe55d7cb2605
alibaba-machine-controllers git 4c0f96a6 sha256:1a2cd30c3673d510b2f515cb4a194793fac9b892b82504509b02cf50b3938746
aws-machine-controllers git e1a57b5e sha256:a8f41932bc72e33f64dfabe0289af299857cf84fe95ebdf15250a9165a1b3c87
azure-cloud-controller-manager git bf9bd022 sha256:91de902a83254a9795859b979cdd0b086bb72be98a7ef269de2c2c810c124cd0
azure-cloud-node-manager git bf9bd022 sha256:37141f9113ebbe49e438c9a915a588a7aeb35fa0377891cf5dd49fa654d67270
azure-disk-csi-driver git b6d3fbcb sha256:47897d53987eac00d65937fd8674a5f16de99557fc17fdd6eb7c2939ca89a0e4
azure-disk-csi-driver-operator git 8534d756 sha256:bfa00b83acdbf66b37246a2f5f541601c13e8361bdc554034a7416697d62b076
azure-file-csi-driver-operator git 70e05302 sha256:c5a8dd924df3eb315618dff58cde105b3b77ee0052f25e7a7235ac7028d5e37c
azure-machine-controllers git 62f6e0f3 sha256:f67b15bfb29e223330d58ca58940c5333586639f87082da83d3f609053989680
baremetal-operator git f6db335c sha256:c780ee72bf385b7210368a05e1cdc6ecd550be3f2a3ffb2471929530dea3d545
baremetal-runtimecfg git 1280cf54 sha256:9db42411c2104490bf0c87e2e0d05e216a4b2a7384015920ed337bdcc4b8a65e
cluster-authentication-operator git 1801056c sha256:b22a19c73fa3e5a66b977c923cae0cb8f59958cb545b5acbee52ed59cc331f21
cluster-bootstrap git ee908b6b sha256:124a78ccdc860b76627a1416d28344ae904a0f3a00ba37edd98cba0e139d7dd9
cluster-capi-controllers git 12f767b2 sha256:52f968b6a4f4fbb6fa357af3b9dee0ec0b2e45a370f009e695121abdb4cb559c
cluster-capi-operator git b247793d sha256:87b1811953fac075ca64c5bcec36bb50cdde8762a7adf008f3325823b935d32b
cluster-config-operator git a6d56530 sha256:c37b895c164d86fe46b8bc31feafbc808d92bb5b2de18cc92c05bae5baf11e4a
cluster-kube-cluster-api-operator git 18c076b1 sha256:f2d340967f44b3ab37adaa16fd0eda86da7a8fa2f8e4f9dd7fd5b6f1fd39d304
cluster-kube-controller-manager-operator git dac71136 sha256:c1d4a488fbf2ce568354430ff681c76c740f246091ff77ff2c59875b164461c8
cluster-kube-scheduler-operator git 2e7c269b sha256:d731997e371d7b0d77fb032e76f8b245213dbfd58c37050257a493a8f6a18d1e
cluster-kube-storage-version-migrator-operator git 721de5d6 sha256:2fd6100390f48633bbb579449173b31bfad1ae15a95ffd8c9cc51b4be074d508
cluster-machine-approver git 25fe7b4b sha256:7f5f4a84ea76a226d46c5450b3b2b960333031af73a5484c109c02a830cdfafb
cluster-openshift-apiserver-operator git 9abb220a sha256:e7b04f9a71b05a88d203e82a08f6dcf56ed921b35ed3180c5b2be2dce16a366f
cluster-platform-operators-manager git 312c5f24 sha256:0ab9943cfef74e75f3a3e89063a7dd98e2c25c255a2214663126f51fb7cb07ec
cluster-policy-controller git 3b0d0755 sha256:1a3d3b398f1faf45bcb830bf6513f0d785d4302943bfbf3c23831462750b90ca
configmap-reloader git 9adad592 sha256:b34326a0434b70d6b761d6d3a638675232392b8205646f059e3086306c6cdf38
container-networking-plugins git 614ca3c3 sha256:91b4e60f8bb36c7f73148372b4977db59557a76c4fa1a40a6e77409c517a41b4
csi-driver-manila git c3b7d2f5 sha256:c0c4d39a2a50d3ac02433322100cf2c0a8c5ce77929e1fe6bc13f5007014e4e4
csi-driver-manila-operator git 596a53c8 sha256:d4bd6ee0c79b23969f79908012c40fafb3683b6cf4f6fb16975d75ed503ee8f7
csi-driver-nfs git 2b914c21 sha256:6dfdca514d23143ef405c0a36fca67509c0152a57534027d1c434d9f0aa3dfcf
csi-driver-shared-resource git 01bbb23b sha256:05ac77993399b10a4429ed80853658c03b9d3c255be0ca2dd709c19a7ff8d6c6
csi-driver-shared-resource-operator git bc169d2d sha256:18320a6d4f0cef58cce16b6226bf04d1fb5530c1f9409a2bb97c9c5b7494b23c
csi-driver-shared-resource-webhook git 01bbb23b sha256:d07a81b31cb3a09c5c3d88d1f58db02239a5d23b9ddab793d0ec19c9c9ddbea1
csi-external-attacher git d9290843 sha256:88a6353014bfefc9e647600c42124a9d7b4bf205169f80663b76242d21b205a3
csi-external-provisioner git 0bf126b7 sha256:5d6a320392d84c9421b75d7cfe353a94ea0f5d98d32a39c8c098b53e493c75e6
csi-external-resizer git e8036caf sha256:0747dd7cee97ad696084eb5a7c0467a95178f328f0f900a6783da880e1bcf807
csi-external-snapshotter git c8a7a097 sha256:adf330aa74bb52453f83ca8a7d81933ce17ba959cc3e1c408da55e81ef7433ed
csi-livenessprobe git 3587db51 sha256:403b21f7a30b67d63ebd23e243c68680bfca4f570e6684309bb46ca5f75619d5
csi-node-driver-registrar git 9ea90f34 sha256:fcddf967ec6438889c448bc694359d72e66a14e58af10b77f50c3a12dcd5735e
csi-snapshot-controller git c8a7a097 sha256:01d660b90f3d93a679f9aa1bdedbd84e450ac25e7acda355410b04382902c0f9
csi-snapshot-validation-webhook git c8a7a097 sha256:59e1d18f030aacd1912c5cf744c02d3bbec718eb479ab990c705db12631066d4
docker-registry git 47a15ac8 sha256:c6d0dcf63c817bf609c0691f8a095ead886b56b77ee6a69ba0bb7c0ccdbf5551
driver-toolkit git d719bdcf sha256:f56ff2c0d758c2d2c60fcc53d93dee45d2eb77759f26bb86bae3043e610fffa2
egress-router-cni git dfe03737 sha256:19b3940761f20eb04015204d4d78ced736d0c23ef41d88e9f0b2420ab22d2ea6
gcp-cloud-controller-manager git 507fea98 sha256:8a30ca9f955bc628f225a8bea3bf5a7ff88aa6a21eee3a20f744fa7a823b1931
gcp-cluster-api-controllers git b8a27725 sha256:5c9001a4d60404203433d883a2b14985db3a08337889e530e70aeaa10a752a28
gcp-machine-controllers git e53a397d sha256:2f9b4fb1f2e0ead680151fb356742f57a2c5a890c486c5a6ead2bc6ab937cca0
gcp-pd-csi-driver git 81e60746 sha256:aee98efcf1da346b28f23d48cb93098883a072c43e14a57606fef940215d744c
gcp-pd-csi-driver-operator git 08c561b8 sha256:5921f9ce24bdb536ae84f7d2acfdf8a3fa4bd1a8735c3b6f64b812a9daa4f3cd
ibm-cloud-controller-manager git b5bcaf9c sha256:ae531c8552b44f2d3064c8c90a8301a74dd9b6ac0108e1a4738fe3e118805a8a
ironic-machine-os-downloader git ce291779 sha256:336eb2176afdb3cb9c795fe9716c7a5eabc39b417581a2cbcb2cce9e5da0c4d5
ironic-static-ip-manager git 4536724a sha256:83df2b35956be66b69818ede3780faad5b723fe639d119d4a1531b15d151f46e
k8s-prometheus-adapter git 0fce7c7c sha256:85c2827a41eb7fa4f2b7bd83a3b8f3eb8384ff2505573d397accd5515f1f4858
keepalived-ipfailover git 1a14e5c9 sha256:96035f056cdd4dda182c018d11dbf47812275c5a48888449f04e4fccb5299e79
kube-proxy git 569ea111 sha256:dc072e2c02851d5d813330c081058379d19afe89e4f8821c69ee185f31f27410
kube-state-metrics git fd791df5 sha256:e21e1e0cc26a0393067edb0ae4e3f16463768f624b18e5638a2c7334f7b505af
kube-storage-version-migrator git bad104d1 sha256:9b5172a776535da77113f96f32f69d8ce351efaa2d97bc5051f5573955696577
kubevirt-cloud-controller-manager git ee2033ec sha256:eac4fda92b99c2e156bc92ebefc984296d378878a2f2ac97ab373331b75e75b2
kuryr-cni git 36754b7b sha256:c91b0eceafe453fd2f2a4d542ac0c983b42000c530b424c816349a7f0186c0d2
kuryr-controller git 36754b7b sha256:a9f3b8ce47719b47416a5605edd771bcf67cad374f9f99609283a2b8219dd1b3
libvirt-machine-controllers git d4b7a8ab sha256:2b04a1caf6717af84d63a222ff9bfce84faeac252de86e26c338f35846b14f86
machine-image-customization-controller git 34a4abe6 sha256:99cc3a98447a87bc5b0a5d0ce5a38e5776f5f80e610bbcca1834aedf049cfe70
machine-os-content sha256:6896844c6f49bbf9ceb11ca22f933ad3489747209e88ba91afa1d7010edf2631
machine-os-images git b14856ff sha256:b8b0eb54b165182fa8274e84dd3179cd10aeb13fd2a79fd13f6c5cef8e57bb66
multus-admission-controller git 9b0656af sha256:288c53451a5246024a3d4b66854236bc5efcf3b072431e0088ae43b0db871166
multus-networkpolicy git 7176ab75 sha256:ea8a2588116f80ab9c24f42adaff2d3f703dc03c997718f69f5c8fb33e65c6cb
multus-route-override-cni git ca3bbec5 sha256:43a54925dba86640f261734fd45a8df49bc2ae0e9229593a74d26169eceea509
must-gather git 288ef2fc sha256:ca342f7b4f21a755d79003ddb18c86abe691b68ad72ef0e0b4c2ddd73f9689fb
network-interface-bond-cni git 84bda2af sha256:70e9838ba2f95fa1bf01303fe5d5f7ac5f24c628cfd1c88b0bba3825785802f2
network-metrics-daemon git 3ef81a5c sha256:025e84bb9534f07a5acc10f2fa7d543e5ac669f758e532637cbb3a9422f016ef
network-tools git 073feda1 sha256:a1c6316cbcb379502ac14eba49b8ecadc8a2f73c14aac42a8547b9a51f74f3d8
oauth-proxy git 44af5a3a sha256:279eef8781ca47ea58febd4a478191b5a1f00bd8fd1dd13264095b3655cc428a
oauth-server git eb54be28 sha256:2fbf394e69cd9aecf13d7315a67b0a94c4f7d7a44b0c6803a35aafaac481f38f
openshift-state-metrics git 9be421f0 sha256:7b71727cd5d76f13ddc3f45cb4b1939a0e277f60989ee9c6701ece975249d541
openstack-cinder-csi-driver git c3b7d2f5 sha256:f10b90e2ddeaf76bbfb2bcabecbf4084f4dadbded14609a34b77000bd16b7968
openstack-cinder-csi-driver-operator git b50a649b sha256:2acb173245efa98a66131ca241620bf862875b7a97410faeb485ca512554c238
openstack-cloud-controller-manager git c3b7d2f5 sha256:983334d1e4f084c84f78002b729255c8e86311e5baefc708272918e80fb50a73
ovirt-csi-driver git 54958deb sha256:a8afc5a69c77325c969bfab5c3eeb31d583f7506d438c50f0cba32059ee78db5
ovirt-csi-driver-operator git b293972f sha256:5231c82d97f59b20f6177de8941168d8a1560700a6b85cb4c32104a9adb68036
ovirt-machine-controllers git 22d89b3f sha256:8cdc0724d14153f454e01e1d7190629e158ddc1bbf860a8b902e99069136577b
powervs-block-csi-driver-operator git e70c980e sha256:4284fc2890ae27aaa31f19dcd94ca30484ccf9b81069dd33d6e9a3fe24ccf1c0
prom-label-proxy git b501d5e2 sha256:35623ab3b503c72db384a006c425db5e55d7d80b116fcdda39cbe58833ab250f
prometheus git 72886096 sha256:ea9bf39f4e461d6a22468b0626a3cb90f293dc4cd6f1a8b6c3fea02b3b954e8c
prometheus-alertmanager git df2f11e2 sha256:66f6fc0eacb2f58667e64290fc071b96777e5907dab42b51b54f2eba042c2587
prometheus-config-reloader git 30fdccd1 sha256:9aef80683ed1136ed8887da24a83d20cf35be3c862ba3ef749acb8529a77d508
prometheus-node-exporter git 59d699ca sha256:dea80b915c6fdfc9ae8e675a6dc8539605a5927673fbf6fe0bb45f6c6e47b83c
prometheus-operator git 30fdccd1 sha256:ca1c1e1741217dc449f7f42e7e06e78c7136f5496f0eab23a3ee5f6d89f97dba
prometheus-operator-admission-webhook git 30fdccd1 sha256:33a5f876ed63d3e43eafc01afb29abba409921f9dc00d1b809601fc561c95055
rhel-coreos sha256:ad2174094abfb7182f223f9651d9929899a7ed5ceacf3c4eaad5c89eae687f39
rhel-coreos-extensions sha256:0ab7732bc755bc437ee5c6b184eb60836cef1039cbbbbbf8c34eae917ec78148
route-controller-manager git 6667a6cb sha256:8b7cab07dc2d1467f07a804c89e0bff185568cb71b01270c09c306ce5462a578
sdn git 569ea111 sha256:6b49ee0ea51fd97867c7709a93b94217b99712b3e228379fe6c43a7b2338715c
service-ca-operator git dba00dc5 sha256:d7cc8ae5fe854e9a3fb842d6867a8425ee81cde1cf8c069912b13b6977a9afa8
thanos git 70fb57fb sha256:27847e00561b638f67472709b573ce902deb740bdb094d3e6f604da074b80787
vsphere-cloud-controller-manager git f56d57ba sha256:7ddde7bbc57e55da49221e5aafbb34cb82fbe8ac3d470187b90c289e3af5adb4
vsphere-cluster-api-controllers git da63f2b9 sha256:5221b6ea676c1619b7d9abb1dcf348bf9e7e693644f224350ad1d3b167d9630e
vsphere-csi-driver git 4d3036a6 sha256:3a18ba94a662491aec770c2187e2a86accc25cc005a54e69823ec232efe36018
vsphere-csi-driver-operator git a9e5036e sha256:f5d4d4262a4c93368761b35272b4c75666a1ab7b56c1c5da53cb02d7cedebfa8
vsphere-csi-driver-syncer git 4d3036a6 sha256:cf72ef38165c94804e802f81a582bda89d248e6c88f93143e092e36f8c134ace
vsphere-problem-detector git 3ad7408f sha256:a6c9703e6fe08b43503df51294970050310a7a28e855908c773773bd082dc4f5

agent-installer-api-server

OCPBUGS-13611: Update version go-http-metrics/gin (#6919) #6919
MGMT-17595: Bump x/net to v0.24.0 to mitigate CVE-2023-45288 (#6215) #6215
MGMT-17588: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#6202) #6202
MGMT-17541: Replace broken golangci reference (#6196) #6196
NO-ISSUE: replace postgres images as current one disappeared from quay (#6133) #6133
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-13612: Update version go-http-metrics/gin (#935) #935
MGMT-17595: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#835) #835
MGMT-17588: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#829) #829
MGMT-17541: Replace broken golangci reference (#826) #826
Full changelog

agent-installer-node-agent

MGMT-17595: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#706) #706
NO-ISSUE: Quick fix for broken ignition download test in 4.13 release (#700) #700
MGMT-17588: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#702) #702
MGMT-17541: Replace broken golangci reference (#697) #697
Full changelog

apiserver-network-proxy

OCPBUGS-38066: Revert “Agent: Respect HTTPS_PROXY env vars for proxied connections” #61
OCPBUGS-31984: Bump golang.org/x/net to v0.23.0 #52
Full changelog

aws-cloud-controller-manager

OCPBUGS-32073: update for CVE-2023-45288 [release-4.13] #84
Full changelog

aws-cluster-api-controllers

OCPBUGS-32470: UPSTREAM: 4670:Update awsmachine providerID and instanceID immediately after ec2:RunInstances is called #509
Full changelog

aws-ebs-csi-driver

OCPBUGS-33363: [release-4.13] UPSTREAM: 1919: Add reserved-volume-attachments #266
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-33363: Explicitly reserve 1 attachment for the root disk #307
Full changelog

aws-pod-identity-webhook

OCPBUGS-32882: Upgrade go-jose module to 2.6.3 #190
Full changelog

azure-cluster-api-controllers

OCPBUGS-36022: Update go-retryablehttp to v0.7.7 #314
Full changelog

azure-file-csi-driver

OCPBUGS-41678: bump mount-utils to treat ENODEV error as corrupted mount #81
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-39217: Add yq v4 to ci image #8922
OCPBUGS-36088: [release-4.13]: bump go-retryablehttp for CVE fix #8659
OCPBUGS-29124: IBMCloud: Handle disk delete errors #7989
OCPBUGS-37168: Add yq-v4 to the upi-installer image for CI #8743
OCPBUGS-35976: [release-4.13] bump github.com/containers/image for CVE fix #8651
OCPBUGS-33732: preserve category name when trying to find tag category #8419
OCPBUGS-33062: openstack: Honour worker server group policy #8323
OCPBUGS-32359: Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility #8284
OCPBUGS-22979: IBMCloud: Add eu-es region #7685
Full changelog

baremetal-machine-controllers

OCPBUGS-46640: Bump x/net 0.33.0 #229
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-30288: oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators #1700
Full changelog

cloud-credential-operator

OCPBUGS-43340: Update github.com/sirupsen/logrus v1.8.3 #770
OCPBUGS-37834: Resolve SNYK errors in security job. #743
OCPBUGS-37421: SNYK ignore go-client misreporting #740
OCPBUGS-36028: IBM/go-sdk-core update to v5.17.4 #722
OCPBUGS-32898: Upgrade go-jose module to 2.6.3 #698
Full changelog

cloud-network-config-controller

OCPBUGS-32180: Avoid nil pointer panic while assigning private IP on Azure #139
Full changelog

cluster-autoscaler

OCPBUGS-45151: [release-4.13] VPA: Update OWNERS file #328
OCPBUGS-40929: update VPA golang.org/x/net for http rapid reset for CVE-2024-8421 #317
OCPBUGS-31702: add check for taint.value == nil #295
Full changelog

cluster-autoscaler-operator

OCPBUGS-31992: Update x/net to v0.25.0 #324
Full changelog

cluster-baremetal-operator

OCPBUGS-31993: bump x/net to 0.23.0 #439
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-35562: update azure and ash tolerations on node manager #353
OCPBUGS-35562: update unit tests [release-4.13] #354
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-48259: Add unreadyNodeGracePeriod for allowing brief node hiccups #342
OCPBUGS-35380: Improved debugging of API listing errors #304
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-32334: create suitable role and roleBinding for csi-snapshot-webhook #206
Full changelog

cluster-dns-operator

OCPBUGS-11449: Enable topology-aware hints iff nodes in >=2 zones #418
OCPBUGS-11449: Ignore max unavailable for status #417
Full changelog

cluster-etcd-operator

OCPBUGS-35077: return errors in wait-for-ceo #1273
OCPBUGS-31988: update golang x net #1255
Full changelog

cluster-image-registry-operator

OCPBUGS-36034: go.*,vendor: bump go-retryablehttp #1070
Full changelog

cluster-ingress-operator

OCPBUGS-43095: Add alert for RFC 7230 violation in Transfer-Encoding headers #1161
OCPBUGS-43095: Add e2e test for duplicate Transfer-Encoding headers #1150
OCPBUGS-36551: Add Regexp Anchor to TestAll #1104
OCPBUGS-35453: [release-4.13] internal service changed fix target port logic #1089
OCPBUGS-35094: TestHostNetworkPortBinding: Delete t.Parallel() #1082
OCPBUGS-34765: Don’t add clientca-configmap finalizer if deleting #1073
OCPBUGS-34409: desiredRouterDeployment: Set HostPort if needed #1062
OCPBUGS-33990: Avoid spurious updates for internalTrafficPolicy [Backport to 4.13] #1055
OCPBUGS-34476: Use centos7 tag for quay.io/centos7/httpd-24-centos7 image #1065
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-34062: [4.13] add a controller that reconciles SCCs’ volumes #1677
OCPBUGS-25922: [release-4.13] dashboard: use recording rules for most metrics #1611
Full changelog

cluster-monitoring-operator

OCPBUGS-33581: label for infra nodes for metric cluster:capacity_cpu_cores:sum #2344
OCPBUGS-28767: fix generation of telemeter token hash #2305
Full changelog

cluster-network-operator

OCPBUGS-43856: manifests/02-cncc-credentials: Set skipServiceCheck for GCP #2547
OCPBUGS-38403: Add missing runbook for OVNKubernetesNorthdInactive #2471
OCPBUGS-37941: update whereabouts crd #2458
Full changelog

cluster-node-tuning-operator

E2E: workload hints: compare existing profile with changes being made to avoid mcp getting stuck (#1069) #1069
OCPBUGS-33030: [release-4.13][manual]Reduce number of reboots in offline tests (#1048) #1048
Scheduler plugin: ignore IRQs (#1027) #1027
irqbalance: set banned cpus list to 0 (#1003) #1003
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-38455: Update opentelemetry to mitigate CVE #365
Full changelog

cluster-samples-operator

OCPBUGS-49663: add shannon and aroyoredhat as owners #599
OCPBUGS-21198: update k8s.io/apiserver version #589
Full changelog

cluster-storage-operator

OCPBUGS-33468: Fix problem-detector proxy setting #473
Full changelog

cluster-update-keys

OCPBUGS-43886: keys: Update Red Hat keys to use SHA256 signatures #67
Full changelog

cluster-version-operator

OCPBUGS-45332: deps: bump golang.org/x/net to 0.31.0 #1121
Full changelog

console

OCPBUGS-45292: A value submitted in From view is wrapped with single quotation after switching to Yaml view. #14573
OCPBUGS-44356: Application creation fail when manually entering input scaling value in local setup #14509
OCPBUGS-45197: Edit the secret and add the Chinese in the web-console, garbled characters will be displayed #14552
OCPBUGS-44585: Need to allow blank for Project/namespace when setting SA Subject in ‘Project access tab’ #14497
OCPBUGS-36557: Increase login flow state paramater length/entropy #14483
OCPBUGS-42951: The filepath including leading slash makes error during parsing devfile using Gitlab #14383
OCPBUGS-41594: Redirects to new PipelineRun logs URL from old PipelineRun logs URL #14263
OCPBUGS-35259: fix vCenter cluster being empty #13952
OCPBUGS-32147: Bump graphql-go to v1.3.0 #13922
OCPBUGS-33978: Helm Plugin’s Catalog incorrectly renders a single index entry into multiple tiles #13872
OCPBUGS-34342: Fix PipelineRun Logs tab navigation #13890
OCPBUGS-24395: Extra space is in the translation text(Chinese) of ‘Create rolebinding’ and ‘replicate rolebinding’ #13405
OCPBUGS-33777: restrict Masthead logo to max-height to 60px #13860
OCPBUGS-33749: Add visual connector between VMs and non VMs workloads #13857
OCPBUGS-33382: Routes created by devfiles do not always use HTTPS #13827
OCPBUGS-33650: fix issues with Edit Route form #13851
OCPBUGS-32500: PipelineRuns in Console show wrong status or load indefinitely #13780
OCPBUGS-31077: Pipeline Name gets changed to “new-pipeline” on the Edit Pipeline YAML/Builder #13683
OCPBUGS-31595: Fix operands list endpoint. #13714
Full changelog

console-operator

OCPBUGS-18674: Reset console operator’s conditions #894
Full changelog

coredns

OCPBUGS-38431: UPSTREAM: 6354: openshift: key cache on Checking Disabled (CD) bit #129
Full changelog

docker-builder

OCPBUGS-48836: skipping some unit tests to avoid failures as they are duplicate #434
OCPBUGS-48655: Add new team members to the OWNERS file #431
Replace ‘coreydaley’ with ‘sayan-biswas’ #407
BUILD-854: Add adambkaplan as approver #405
Full changelog

etcd

OCPBUGS-32920: Revert “Merge pull request #262 from Elbehery/rebase-etcd-3.5.13-open… #266
OCPBUGS-31653: Rebase etcd 3.5.13 openshift 4.13 #262
ETCD-537: Revert “bump build root go1.20” #263
Full changelog

haproxy-router

OCPBUGS-43095: add duplicate_te_header_total metric #626
OCPBUGS-34673: Properly handle rewrite-target annotation #608
OCPBUGS-33911: Reject routes with MD5 certs #600
OCPBUGS-33448: Count active services before setting weight to 1 #594
OCPBUGS-33280: Route ‘haproxy.router.openshift.io/timeout’ value is not validated #591
Full changelog

hyperkube, pod

OCPBUGS-41678: mount-utils: treat syscall.ENODEV as corrupted mount #2083
OCPBUGS-37280: UPSTREAM: 126104: Add funcs in pkg/filesystem/util that can actually … #2045
OCPBUGS-28660: UPSTREAM: <carry>: kubelet/cm: use MkdirAll when creating cpuset to ignore file exists error #1875
UPSTREAM: <drop>: Bump golang.org/x/net to v0.23.0 #1938
OCPBUGS-31505: Update to kubernetes 1.26.15 #1930
Address CVE #14
Full changelog

hypershift

OCPBUGS-39184: fix: bump github.com/IBM/go-sdk-core/v5 #4627
OCPBUGS-41515: set Konnectivity cipher suites #4284
NO-JIRA: hack: make the e2e script generic #4202
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-36064: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #74
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-36070: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #123
Full changelog

ibm-vpc-node-label-updater

OCPBUGS-36010: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #43
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-36076: UPSTREAM: <carry>: Fix go-retryablehttp CVE - 4.13 #90
Full changelog

ibmcloud-machine-controllers

OCPBUGS-36082: Bump dependency for CVE #56
Full changelog

insights-operator

OCPBUGS-36475: properly encode the URL for the advisor links (#962) (#965) #962
OCPBUGS-33449: anonymization - externalIP can be nil (#931) (#933) (#935) #931
OCPBUGS-31991: bump golang.org/x/net version (#927) #927
Full changelog

ironic

OCPBUGS-48146, OCPBUGS-48595: Bump jinja2 to 3.0.1-6.el9.2 #626
OCPBUGS-43952, OCPBUGS-43960: Bump python-waitress [4.13] #608
OCPBUGS-37764, OCPBUGS-39384: Include fixes for CVE-2024-44082 #585
OCPBUGS-38509: set min version for python3-webob #557
OCPBUGS-33374: bump werkzeug #543
OCPBUGS-34898: bump jinja2 #538
OCPBUGS-37116: Update eventlet version #525
OCPBUGS-32363: [4.13] remove unused prometheus-exporter #488
OCPBUGS-32387: Use unix sockets by default for reverse proxy communication #476
Full changelog

ironic-agent

OCPBUGS-39384: Include fixes for CVE-2024-44082 #164
OCPBUGS-38509: set webob and bump werkzeug #152
Full changelog

kube-rbac-proxy

OCPBUGS-31987: CVE-2023-45288 [4.13] #107
Full changelog

kubevirt-csi-driver

“OCPBUGS-29791: [release-4.13] Address CVE-2024-1725: Restrict access to infrastructure PVCs by requiring matching infraClusterLabels on tenant PVCs” #35
Full changelog

machine-api-operator

OCPBUGS-43856: install/0000_30_machine-api-operator_00_credentials-request: Set skipServiceCheck again for GCP #1304
OCPBUGS-32015: Fix zone tag value reconciliation for vSphere machines #1225
OCPBUGS-31994: Update x/net to v0.25.0 #1245
NO-JIRA: [release-4.13] Fix data race conditions in unit tests #1254
Full changelog

machine-config-operator

OCPBUGS-44206: Panic seen in CI job for MCC pod #4680
OCPBUGS-38372: Revert “MCD-pull: run after network-online.target in Azure” #4527
OCPBUGS-38295: daemon/update: disable systemd unit before overwriting #4522
OCPBUGS-37783: Openshift uncordoned compute-node that was intentionally cordoned #4507
OCPBUGS-37160: MCD-pull: run after network-online.target in Azure #4474
OCPBUGS-36782: daemon: Handle correctly OS Version for 4.1 and 4.2 bootimages #4464
OCPBUGS-32208: Run resolv-prepender entirely async #4314
OCPBUGS-33327: make verify should use MCO’s kube version #4352
Full changelog

multus-cni

OCPBUGS-28020: Fix SAST scan issues for multus-cni-container [4.13] #224
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-37941, OCPBUGS-37944: [release-4.13] Stateful fixes #306
Full changelog

nutanix-cloud-controller-manager

OCPBUGS-12645, OCPBUGS-20879: bump golang.org/x/net to v0.17.0 #36
Full changelog

nutanix-machine-controllers

OCPBUGS-20976: bump golang.org/x/net to v0.17.0 #86
Full changelog

oauth-apiserver

OCPBUGS-31996: bump x/net to 0.24.0 #112
Full changelog

oc-mirror

changes the owners file (#1012) #1012
OCPBUGS-48513: e2e: use same version of crane as in go.mod (#1025) #1025
Bump version to include v5.11.0 of go-git (#823) #823
Full changelog

openshift-apiserver

OCPBUGS-32446: bump(x/net) to v0.23.0 #430
Full changelog

openshift-controller-manager

OCPBUGS-48656: Add new team members to the OWNERS file #362
[release 4.13] OCPBUGS-38407, OCPBUGS-38408: Update opentelemetry dependency #326
OCPBUGS-41952: Add adambkaplan as approver #335
Full changelog

openstack-machine-api-provider

OCPBUGS-34422: Ensure portSecurity is correctly set in the Instance Ports #119
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-46924, OCPBUGS-46931, OCPBUGS-47311: x/net bump to v0.34.0 [release-4.13] #942
OCPBUGS-47507: CRD upgrade existing CR validation fix (#3442) #924
NO-ISSUE: [release-4.13] Backport e2e fixes #876
OCPBUGS-42146: adds paginating lister for evaluating CRs’ upgrade fitness versus new CRDs. #871
OCPBUGS-38254: [CARRY] perform operator apiService certificate validity checks directly #836
OCPBUGS-38608: (fix) Resolver: list CatSrc using client, instead of referring to registry-server cache (#3349) #843
OCPBUGS-32856: bump go-jose to v2.6.3 #780
OCPBUGS-35241: Unblock CI #772
Full changelog

operator-marketplace

OCPBUGS-32074: update golang.org/x/net for CVE-2023-45288 #566
Full changelog

ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9

OCPBUGS-38264: [release-4.13] Bump OVSDBTimeout and make it configurable #2289
OCPBUGS-37119: EgressIP: Reload certificates for the grpc heatlhcheck server #2226
OCPBUGS-35100: [release-4.13] ipv6+all protocols conntrack flush #2200
OCPBUGS-34669, SDN-4186: Introduce a validating webhook for ovnkube-node #2053
OCPBUGS-29865: CVE-2022-41723: net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding #2095
OCPBUGS-33730: Improves service iptables efficiency on start up #2172
OCPBUGS-32988: Bumping OVS #2143
OCPBUGS-33421: [release-4.13] Full implementation of KEP-1669 ProxyTerminatingEndpoints + ETP=local fix #2130
OCPBUGS-33218: [release-4.13] OVN bump to 23.06.1-112 #2153
OCPBUGS-28983, OCPBUGS-30920: Update netpol namespace address sets usage to the old ways #2097
Full changelog

powervs-block-csi-driver

OCPBUGS-36094: Fix CVE-2024-6104 by updating http-retryable to 0.7.7 #91
OCPBUGS-33638: Fix CVE2023-45288 by bumping x/net to v0.24.0 -4.13 #82
Full changelog

powervs-cloud-controller-manager

OCPBUGS-36104: UPSTREAM: <carry>: Fix go-retryablehttp CVE 4.13 #76
Full changelog

powervs-machine-controllers

OCPBUGS-41980: Update go.mod to fix CVE - 4.13 #87
Full changelog

telemeter

OCPBUGS-34829: fix issuer check during JWT authentication 4.13 #540
Full changelog

tests

OCPBUGS-37921: Removes dependency on samples operator images #29007
OCPBUGS-35053: updated timeout to 3 seconds to account for network timing issues #28862
OCPBUGS-36501: test/extended: skip etcd leader change check on hypershift #28922
OCPBUGS-35857: Use centos7 tag instead of latest for cmd images tests #28895
OCPBUGS-33985: Provide SCC access via RBAC #28835
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github