4.14.67

Download the installer for your operating system or run

oc adm release extract --tools registry.ci.openshift.org/ocp/release:4.14.67

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded (1 retry) periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- upgrade-minor Succeeded (1 retry) periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.14-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-main-ci-4.14-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.14-micro Succeeded periodic-ci-openshift-release-main-nightly-4.14-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.14-micro Succeeded periodic-ci-openshift-release-main-ci-4.14-e2e-azure-ovn-upgrade
- driver-toolkit Succeeded periodic-ci-openshift-release-main-nightly-4.14-e2e-aws-driver-toolkit
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.14-fips-payload-scan
- gcp-ovn-rt-upgrade-4.14-minor Succeeded (1 retry) periodic-ci-openshift-release-main-ci-4.14-upgrade-from-stable-4.13-e2e-gcp-ovn-rt-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- hypershift-ovn-conformance Succeeded (1 retry) periodic-ci-openshift-hypershift-release-4.14-periodics-e2e-aws-ovn-conformance
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.14-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Untested upgrades: 4.13.23, 4.13.24, 4.13.26, 4.13.27, 4.13.28, 4.13.29, 4.13.30, 4.13.31, 4.13.32, 4.13.33, 4.13.34, 4.13.36, 4.13.37, 4.13.38, 4.13.39, 4.13.40, 4.13.41, 4.13.42, 4.13.43, 4.13.44, 4.13.46, 4.13.48, 4.13.49, 4.13.50, 4.13.51, 4.13.52, 4.13.53, 4.13.54, 4.13.55, 4.13.56, 4.13.57, 4.13.58, 4.13.59, 4.13.60, 4.13.61, 4.13.62, 4.13.63, 4.13.64, 4.14.10, 4.14.11, 4.14.12, 4.14.13, 4.14.14, 4.14.15, 4.14.16, 4.14.18, 4.14.19, 4.14.20, 4.14.21, 4.14.22, 4.14.23, 4.14.24, 4.14.26, 4.14.27, 4.14.28, 4.14.29, 4.14.3, 4.14.30, 4.14.31, 4.14.32, 4.14.33, 4.14.34, 4.14.35, 4.14.36, 4.14.37, 4.14.38, 4.14.39, 4.14.4, 4.14.40, 4.14.41, 4.14.42, 4.14.43, 4.14.45, 4.14.46, 4.14.48, 4.14.49, 4.14.5, 4.14.50, 4.14.51, 4.14.52, 4.14.53, 4.14.54, 4.14.55, 4.14.56, 4.14.57, 4.14.58, 4.14.59, 4.14.6, 4.14.60, 4.14.61, 4.14.62, 4.14.7, 4.14.8, 4.14.9

Loading changelog, this may take a while ...

Changes from 4.14.44

Created: 2026-06-10 19:35:50 +0000 UTC

Image Digest: sha256:4d3004e29acdc953fd51f92472bc211b607517c36d76648e66266a9ce99d1a38

Components

Kubernetes 1.27.16
Red Hat Enterprise Linux CoreOS upgraded from 414.92.202412202114-0 to 414.92.202606050405-0 (diff)

Rebuilt images without code change

agent-installer-utils git b3fa10c2 sha256:f0cbab3a17e9bed7e857f8997df0c574f06913f8e3a6383f53586f3516386c80
alibaba-cloud-controller-manager git 8ba0b37a sha256:3f1055ce975282e7cb4cfb6b6a5b36f116123731db35bd8c094cff891195225d
alibaba-cloud-csi-driver git 3dc363d3 sha256:f209611fe3f19aabc938089cecdf4eb159925a2fe6e68a61be07ef1317b89f91
alibaba-disk-csi-driver-operator git 8853e6ef sha256:3e0cf4b9d626560e9d8547ecac231347c63eec7ffe9d16b72d12c3bbf109690a
alibaba-machine-controllers git 27f105d3 sha256:5fc899457ef1ae4dc477f084a68135439c69bf7023d08ac041335dceba9d68e6
apiserver-network-proxy git f56c606a sha256:0f2017bb4bd0f8bebca2f5afecce25b49aba7c92f7d84f4182d18cd27c6ecf4f
aws-cloud-controller-manager git 9a7820e8 sha256:6347a4c79b966dea78da4a4bacf9dc34cfd48a4f1ea4a82e83dc64aaca328349
aws-ebs-csi-driver git 4622deec sha256:50e703556513cf1f92ac7414427fb039dbea8f29d00bfc5e4eebc2c02abb9cc2
aws-pod-identity-webhook git 2c864ca0 sha256:50a872bc66cb3e1f5280d225b832d0613cd99824b6c59718e67cb52bac0aef0d
azure-disk-csi-driver git 6d3558a3 sha256:aa40eb9774a3c58881add505663595662679f7fc51e65cba5500353333b9ab61
azure-disk-csi-driver-operator git 91893576 sha256:bcd254ec2291cfb47e7b568672bccc8defb0eb3ce881c7aa8f2c7a9394d0db3d
azure-machine-controllers git d526284e sha256:904e14e1b8d2b068bf1f5d55b9ca19a72cb03b9512f7b93efe614531322e3dcc
baremetal-runtimecfg git 0ba9e555 sha256:23dd6f3355e8c227c508df506197a40ac5532cb71f43025e25f702a4caae5fd2
cli git 44b3ac26 sha256:69210a804cb257606c382771d6f1732e02492ad9f500b84f1155bdb9ed30c659
cli-artifacts git 44b3ac26 sha256:11cc76bd1cfe0d9602b5a3896f7743be72889f7101b61fde549f368af4ac202a
cloud-network-config-controller git 1bd04641 sha256:f56c18174f7140851c288dfbb829aaf7ea528bcd10755187acaef271eacbbc83
cluster-authentication-operator git 9203d4d5 sha256:e302712e6d7a24df8e6e67538213254dc3f8217b659cefafa0e1ae30f00c1ffe
cluster-autoscaler git d030dbaa sha256:8d84ea47d1824fe31d0ccba56db647ac402a5408def39c1d4042f21339d3281a
cluster-autoscaler-operator git 32854baa sha256:a7dd5fb9600ac91e3e3ec012370238a8cd863bf010951b783dfcb68f2b7eca15
cluster-bootstrap git 93fba13f sha256:3b330a28254074e3c139450f4e8db7cfe9fa1553ecc3bf22ae6db65b345c41cb
cluster-config-operator git 2378670a sha256:e169cc203a8a9213119f8232d5d33c25f28c5738cc4dbe1eedd7d3774c95f79b
cluster-csi-snapshot-controller-operator git d4a11625 sha256:65243dda2769cea7a2f164f6f2aeaab06c9289b82ab12aeb37a68b4dcc4bc673
cluster-ingress-operator git e302d856 sha256:1200d29eb93736f13f54edefabe62ef266e7823bf657d4eabf44b76ac2fddf48
cluster-kube-cluster-api-operator git b287d08b sha256:a0f7ffbccd5ac5f1422ce46f545fbad648cc32de9ae22694aa92f9682a0f3c18
cluster-kube-controller-manager-operator git 4e059638 sha256:c500e9b3196161e0a2244302ed7fe9faecb33ff1ffe595d7bb796dac2049c77c
cluster-machine-approver git 38a758d0 sha256:e5ab60a11c5d8fab878f18caa1f8e620769b08ab8e861809d8b493c9e7439c5e
cluster-platform-operators-manager git 08fb27e7 sha256:358955b5298c9b27813f85d989c409b6642c26af214f6239c43a60673b506296
cluster-policy-controller git 219f6f6f sha256:c24e60ad2589f980630d9096c753b75626de6067d937b231f42d8fcb94763f78
cluster-update-keys git 1a7a6e22 sha256:022542e4753d35dbdc7b2774c48efe289ae8f9e026009f8429c6f2f031d1025c
configmap-reloader git 716a0c33 sha256:4bcb4f1d3d610ed20a322fa2a3d83ac1730fcd16237ee36b3cf1ba7b3cd7b53c
csi-driver-shared-resource git 9232c1ff sha256:988a24cfaf31d2fd2e36173efebada57688cfbf382b4e53a8338fce311a65f63
csi-driver-shared-resource-operator git c273cd52 sha256:addc78e1f24d06bf606fa09a05f2f6259fd845b7fed61699d002012b12be18d7
csi-driver-shared-resource-webhook git 9232c1ff sha256:ef64ee827a9c60d97e5e555f073ab4c6a6252c9950df619d4fdbbd899d45e112
csi-external-attacher git 06e8ce0d sha256:2fd289c68f87f01a6d2b7662dc047e9396d0409db904e13f4b54dbc17703ab8a
csi-external-provisioner git e18ed7f0 sha256:ffa79b858357c594ed6e492a4bfc0ce4bb0d780bf84e3a6b5df0ffc7c99d902f
csi-external-resizer git 59a701a4 sha256:05eb3fef5c048c57b18e845616920d573c015c7d61d5c1eb5aeb18b18445b120
csi-external-snapshotter git a6834536 sha256:5265e38bf177d2b2f34eb0e2ef7d86d62cd4ef3428fdb19d5241c1685225ac2f
csi-livenessprobe git a9bcbde1 sha256:9071e91ff53f1350639e57a0daf946c48b17dd7bdae38d174444b3a8d7c7c698
csi-node-driver-registrar git 9dcaa7f5 sha256:529e28e078960bf181f83bf64312cc96ab30d2e59e90fc98016148d986156cb3
csi-snapshot-controller git a6834536 sha256:10e47977f12732c8a8f90ecdadbd75ceadd8149ff18d713c185e8ba4ff5900e1
csi-snapshot-validation-webhook git a6834536 sha256:b7052c069e4c71901753d19615a61408c2dcf5a929c69e16b005774ad6f295e9
deployer git 44b3ac26 sha256:1e52592341d79b72c57dee3638fe51cae8db3d358adafa13aca7f1e50efca03d
driver-toolkit git cafed17b sha256:a08254b011a29348676eaf76b4c0c805ee724637e925882115b255c95dee3bcd
egress-router-cni git 96f2f54f sha256:b5ca5c73bca302419dd6df347515a77ef019524d3153e209e1c1beeb63ce6aba
etcd git 5ed5044c sha256:8adb6fd9867f38d20296d17719ae5e024991f845398909b647b77f025b0067da
gcp-cloud-controller-manager git 09e96a91 sha256:4abcdeaccb66807b986ffc9a2754fddfc3c79851b692ad4cf76625a3792fe1f0
gcp-pd-csi-driver git 8a626fe5 sha256:12f6f5bf01988f8d2502e967d7c3541491a8f318fe1759582077d2c14dfccd17
gcp-pd-csi-driver-operator git 95d55a04 sha256:f76b2a3d072d4355424b03fc6b806232ce5be2497e94e1d500f869fbbed017cb
ibm-cloud-controller-manager git f39488c5 sha256:238936c8ef9a3944629e5c70ea232a8630b6be827894da955fd25f5e2b5cd498
ibmcloud-machine-controllers git a63c6aab sha256:ee1975b0170a37266cd34158eb7dfbac7957b45e5312ef4789f0e7f88c22e567
ironic-machine-os-downloader git 7b56c306 sha256:52bc8ff61e4589bfdb31bf73c473ac441ea82d04f4493ca84b9cf9ecdd2865fe
k8s-prometheus-adapter git 801a912b sha256:c62be9cbf75d09d94c3d369139eccf81579fd986cb8bd1ce2093606752269294
keepalived-ipfailover git 03e5f407 sha256:2f4c6fa1f244e157f60bbd2cadf0344c3c5fc9e583a20750ce511fae376290f1
kube-rbac-proxy git b8b82595 sha256:7067e2175796168b80bb4ef67908273f79bed4597d92121807487168ac5b564e
kube-state-metrics git db0c5499 sha256:d31a6fa3c71f59c2d397bc54bdfb44e83616496ec46c9044c650e9a6a9bfb8bd
kubevirt-cloud-controller-manager git 7d96f56d sha256:f97167d8dc8895090a5cde92347d8ebd9a4884835abf0282cd7dc89d7d6130e1
kubevirt-csi-driver git 48fafc4a sha256:41eec6f63e8305c550b7c17e60336ec2eff1d06f09d6d472355cb7d6d8683600
kuryr-cni git 8926a294 sha256:bf21b58767c3afb4cd831611aac11da0f7365f55921872889a68efb430e69637
kuryr-controller git 8926a294 sha256:758e200863ed98886390b1d9f8da72edb4518ae4bb7089850f2da60f9f036ace
machine-os-content sha256:d8b080272e1ddf9a3d231886bd4eb3e6fdf2a65d77d90e033cee837b99284932
multus-networkpolicy git f670647c sha256:3ce3a3356b6ce465f53236a741079bc47f33d7710373e3b6f1f34a44081df35e
multus-route-override-cni git 5965fed6 sha256:67636d48e44a4a8cb4f73ca79ededfbd6ffab94c9903521e92eeab448a27346e
network-interface-bond-cni git 29f61f6b sha256:7c7c91d94c3dc88a7b9fea670205c824aefa95d1f42daf13ba0f9510f880eef9
network-tools git e79d8173 sha256:b0623b748ef3680d0a7ce4ef77628cff43dfd04fe94bba894abf1384fbe06511
nutanix-cloud-controller-manager git 8930f295 sha256:ca217d6e3cea93cfeb1797e5dcf97fcef545753dfa42d976eab7d0424d3c14c3
oauth-proxy git a4a2f270 sha256:6c20da6313756af1cd95067d7dc081ace527231635a4fb7eb12f490a37fefacf
oauth-server git 35f4739f sha256:971d65a9adf970554da77d51f6602737d814c09195449cf5439ab95ce44ae6a5
olm-catalogd git a333cb0b sha256:2212535a2a6954fe1d0ea056023f47945e821b6d842559cb076ce724883d8f4a
olm-operator-controller git fb6fb278 sha256:09e8abdccbdc4c0616dbcaaf377ede37a24ab19ec22807697327acac60f49247
olm-rukpak git c9409c62 sha256:6ee6970f3915a98e9d37c6b28aed4ef4b86171527cab88d633699a9fb1b9effc
openshift-state-metrics git dff4b0f4 sha256:084afbf53ef3cba40409dd2d5c5065faa3a0f6021d3d7c59cbf99b3f2ae351d7
ovirt-csi-driver git f21b470f sha256:b96c8dedd9c1cf47c43a6b7a3d573640fd74144d35bf0930aab1de80b791476f
ovirt-machine-controllers git 5d708631 sha256:bf2cd4efb9ba44e3d227f2fc01895a2a9a4afe331be63ba0de7fe6e002e0d98a
powervs-block-csi-driver git 988f7109 sha256:f055faac4b9f9810404071fd172e3c1cee55192d6435d772300cd958e1703814
powervs-cloud-controller-manager git 19cf1d3f sha256:d1b9770abf5a006aeef6014cfb0d9f6ce86c82c7bf86f813f4b12e6827912c74
prom-label-proxy git af40ed09 sha256:b56bd96584d3e1dbaa13f49db0a5c23abb85204b59bb7ce07608a65f271c966c
prometheus-config-reloader git a4b845a7 sha256:c2564d4dd49f4e078ea21b3f0b6ce3ede686b9835205ea22a34dc6b211e7ddf3
prometheus-node-exporter git 5ee0a9d9 sha256:0b8d5d933725e54227c6bfff3e46eb4d78f36970aeb9584187227192e2ef8d4b
prometheus-operator git a4b845a7 sha256:33fa14cac69ef7c6877d78f649a06f44300b3cc74da8bdc12d1c74e1044ba6d7
prometheus-operator-admission-webhook git a4b845a7 sha256:80a0c3b07265f51da06015f57ecc7cf0f28341472e406edacd92a8611e8ac2ea
rhel-coreos sha256:ce08e1bb4690ea98815d3aec4d8ea91fd152d3d365855f7d719fe6a9d5820c14
rhel-coreos-extensions sha256:8309fcf451b718a091b3a3bc1f7d40db2425a85c7f2ac8bdf1e3ab797028d09a
route-controller-manager git 1a5e72f4 sha256:05e940499b4b9057f883b644133b75e6a2b73cc9fd31cbd1eb6150136c2da8ee
service-ca-operator git 3c3f82f7 sha256:3ab9785f5c0c54a2a3aaf2a72aefc63ba78bb8bc43700007e33fe598e78bcdab
telemeter git 1f726816 sha256:6fb2f513a8dd058987357fb117e2ae27461e33ee8b2941df33c2a8adac760816
tools git 44b3ac26 sha256:9dd31e6954d709c40ea36aad77671601751a16f546d68cb6a6561ab424e4b81a

agent-installer-api-server

MGMT-23439: Bump Go 1.18 to 1.20 and regenerate code #10042
OCPBUGS-78112: [release-4.14] NO-JIRA: hermetic 4.14 #9955
MGMT-23439: Use archived dnf repositories for CentOS Stream 8 #10018
And 3 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-58642: CVE-2024-45339: Bump glog pkg version to 1.2.4 (#1194) #1194
OCPBUGS-53715: Bump jwt to 4.5.2 in release-4.14 (#1093) #1093
Bump golang.org/x/net to v0.33.0 (#1012) #1012
Full changelog

agent-installer-node-agent

OCPBUGS-58652, OCPBUGS-58657: Bump glog to v1.2.5 in release-4.14 (#1073) #1073
OCPBUGS-53707: Bump golang-jwt/jwt/v4 to 4.5.2 in release-4.14 (#973) #973
OCPBUGS-46955: Bump golang.org/x/net to 0.33.0 (#885) #885
Full changelog

aws-cluster-api-controllers

OCPBUGS-78229: [release-4.14] hermetic 4.14 #593
OCPBUGS-61944: UPSTREAM <carry>: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It #574
OCPBUGS-58667, OCPBUGS-58672: bump github.com/golang/glog to v1.2.5 #563
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-67748: Updated logrus to v1.9.3 #313
Full changelog

aws-machine-controllers

OCPBUGS-63142: client: re-use a single file for building the session instead of randomly named files #154
OCPBUGS-63142: revert: client: re-use a single file for building the session instead of randomly named files #151
OCPBUGS-63142: client: re-use a single file for building the session instead of randomly named files #142
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-57111: Adds acr-credential-provider spec file and build script #144
Full changelog

azure-cluster-api-controllers

OCPBUGS-78178: [release-4.14] Hermetic 4.14 #366
Full changelog

azure-file-csi-driver

ART-13080: Regenerate go.mod to fix build failures #95
Full changelog

azure-file-csi-driver-operator

OCPBUGS-67753: Bump github.com/sirupsen/logrus to v1.9.3 #114
Full changelog

azure-workload-identity-webhook

OCPBUGS-53795: github.com/golang-jwt/jwt/v4 v4.5.2 #35
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-79654: Azure UPI ARM template: use storageAccountId #10435
OCPBUGS-76930: terraform/provider/google: Fixing inconsistencies with service account creation #10324
OCPBUGS-62601: update resolv.conf every time on bootstrap node #9985
OCPBUGS-62814: Release 4.14 bump terraform provider azurerm #10001
OCPBUGS-55193: data/manifests/bootkube/cvo-overrides: Default to eus-4.14 #9643
OCPBUGS-54323: Update upi references to api-internal #9609
OCPBUGS-54264: IBMCloud: Move to IBM TF openshift fork #9605
OCPBUGS-54260: vsphere-fix convert if only provided name #9602
OCPBUGS-52996: Bump terraform-provider-google version to v5.37.0 to fix consistent issues during cluster creation #9587
OCPBUGS-53210: PowerVS: remove system pools #9572
OCPBUGS-46606: Power VS: Create region-zone-sysType hierarchy #9331
OCPBUGS-48196: IBMCloud: Ignore failed VPC regions #9350
Full changelog

baremetal-machine-controllers

OCPBUGS-78101: [release-4.14] fix vendor/ for hermetic migration #245
OCPBUGS-46643: Bump x/net to 0.33.0 #228
Full changelog

baremetal-operator

OCPBUGS-53337: BMO can expose any secret via BMCEventSubscription CRD #409
Full changelog

cloud-credential-operator

OCPBUGS-60975: ccoctl: aws to use proper issuer url on subsequent runs #911
OCPBUGS-58677: github.com/golang/glog v1.2.5 #895
OCPBUGS-53418: github.com/golang/glog v1.2.4 #845
OCPBUGS-53819: update github.com/golang-jwt/jwt #841
OCPBUGS-51542: Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected #830
OCPBUGS-47069: golang.org/x/net v0.33.0 #810
Full changelog

cluster-baremetal-operator

OCPBUGS-77449: Bump github.com/go-errors/errors to v1.5.1 #564
Full changelog

cluster-capi-controllers

OCPBUGS-77974: [release-4.14] fix vendor for hermetic #265
Full changelog

cluster-capi-operator

NO-JIRA: Allow sustaining engineering to self serve dependency updates #562
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-63170: ccm: disable unused secure-serving port and webhook #425
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-48211: Add unreadyNodeGracePeriod for allowing brief node hiccups #340
Full changelog

cluster-dns-operator

OCPBUGS-52500: [release-4.14] Add runbook_url for CoreDNSErrorsHigh #433
Full changelog

cluster-etcd-operator

OCPBUGS-67770: Update logrus to 1.9.3 to address CVE-2025-65637 #1548
OCPBUGS-53507: fix CVE-2025-30204 #1405
Full changelog

cluster-image-registry-operator

OCPBUGS-67771: Bump logrus to 1.9.1 #1290
OCPBUGS-53867: Bump github.com/golang-jwt/jwt #1229
OCPBUGS-53867: Bump github.com/golang-jwt/jwt #1224
OCPBUGS-51598: bump golang.org/x/oauth2 #1213
OCPBUGS-51312: ensure that storage names don’t end in dashes #1185
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-67775: CVE-2025-65637 openshift4/ose-cluster-kube-apiserver-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.14.z] #2045
OCPBUGS-50662: Increase waitForFallbackDegradedConditionTimeout #1807
Full changelog

cluster-kube-scheduler-operator

CNTRLPLANE-2843: chore: update OWNERS #626
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-67780: Bump github.com/sirupsen/logrus to v1.9.1 #141
Full changelog

cluster-monitoring-operator

OCPBUGS-76415: test: remove image registry e2e tests #2811
OCPBUGS-48368: Add new metrics for OpenShift logging telemetry #2556
Full changelog

cluster-network-operator

OCPBUGS-84184: fix(hypershift): use net.JoinHostPort for URL construction #2996
OCPBUGS-78105: fix vendor for hermetic 4.14 #2913
OCPBUGS-51170: Use applyconfigurations for updating network.oprerator status #2660
OCPBUGS-48323: Pass transit_switch_subnet options in ovnkube-node pod for single-zone #2617
OCPBUGS-42754: Set mount propagation to HostToContainer for /var/lib/kubelet #2521
Full changelog

cluster-node-tuning-operator

e2e:performance: decode to valid kubeletconfig object (#1276) #1276
Fix context deadlines in ExecCommandOnPod() (#1272) #1272
Full changelog

cluster-olm-operator

OCPBUGS-86344: Update grpc-go to v1.64.1-sec.1 to fix CVE-2026-33186 #209
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-76593: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.14] #658
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-48841: Add new team members to the OWNERS file #380
Full changelog

cluster-samples-operator

OCPBUGS-63518: references to github.com/sclorg/django-ex.git now also refer to the branch #661
OCPBUGS-55655: Adding mutex to func createSamples on handler.go #635
OCPBUGS-54537: add rhdmalone to owners #624
OCPBUGS-49421: add shannon and aroyoredhat as owners #598
Full changelog

cluster-storage-operator

OCPBUGS-67795: Bump logrus to v1.9.3 #655
Full changelog

cluster-version-operator

OCPBUGS-50592: Set openshift.io/required-scc: privileged annotation in version pods #1151
Full changelog

console

ART-18713: pin fsevents to latest #16473
NO-JIRA: enable multi-architecture yarn builds #16424
OCPBUGS-83297: [release-4.14] openshift4/ose-console: Axios: Remote Code Execution via Prototype Pollution escalation #16311
NO-JIRA: Updating openshift-enterprise-console-container image to be consistent with ART for 4.14 #16168
CONSOLE-5011: migrate to yarn berry #16082
NO-JIRA: Bump builder image to v29 #15991
OCPBUGS-74439: Bump lodash to latest #15971
OCPBUGS-44158: bump dompurify to latest #15593
OCPBUGS-59998: Remove the devconsole backend common internet proxy and replace it with dedicated ones #15464
OCPBUGS-58274: Fix TypeError Cannot read properties of null (reading ‘metadata’) #15228
OCPBUGS-57099: Add all files to vendor regardless of gitignore #15135
OCPBUGS-55942: fix bug where operator appears twice #15033
OCPBUGS-55427: Add missing pipelines plugin name to known plugins #15005
OCPBUGS-39010: fix crash if helm chart metadata is nil #14198
OCPBUGS-53437: Show Observe section without PROMETHEUS and MONITORING flags #14892
OCPBUGS-54404: Update the monitoring topic used by the console team #14910
OCPBUGS-54167: fix run time error when no completed version exists #14899
OCPBUGS-51118: redirect to correct alert #14823
OCPBUGS-49753: ImagePullSecret getting duplicated when editing DeploymentConfig in Form View #14711
OCPBUGS-46603: Unable to remove finally tasks in pipeline builder mode #14642
OCPBUGS-33145: Fix “Auto deploy when new image is available” becomes unchecked when editing a deployment from web console #14370
OCPBUGS-45323: Use vCenterCluster value from CM as primary resource #14574
Full changelog

console-operator

OCPBUGS-77994: [release-4.14] hermetic 4.14 #1131
OCPBUGS-77994: [release-4.14] NO-JIRA: update go mod dependency for konflux #1117
Full changelog

container-networking-plugins

OCPBUGS-78286: fix vendor for hermetic 4.14 #225
OCPBUGS-56046: Check error returned by ipv6 SettleAddresses #193
Full changelog

coredns

OCPBUGS-58713: [release-4.14] Bump github.com/golang/glog to v1.2.4 #139
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-67800: fix CVE-2025-65637 #363
OCPBUGS-58887: CARRY: don’t ignore json files #343
OCPBUGS-52413: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.27 into release-4.14 #315
Full changelog

csi-driver-manila-operator

OCPBUGS-67801: Bump logrus #253
Full changelog

csi-driver-nfs

OCPBUGS-84929: Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.64.1-sec.1 to avoid go version bump and fix CVE-2026-33186 #184
Full changelog

docker-builder

OCPBUGS-66112: BuildConfig inline Dockerfile fails with heredoc syntax #492
OCPBUGS-58140: S2I build cpu limits observed by assemble are limited to 1 cpu #476
OCPBUGS-42915, OCPBUGS-43297: Bump buildah to 1.33.12 #447
OCPBUGS-43190: runc library bump to 1.1.12 #438
OCPBUGS-48495: skipping some unit tests to avoid failures as they are duplicate #430
OCPBUGS-48477: Add team members to the OWNERS file #429
Full changelog

docker-registry

OCPBUGS-53651: bump jwt and oauth dependencies #434
Full changelog

gcp-cluster-api-controllers

OCPBUGS-78282: [release-4.14] update go mod dependency for konflux #269
Full changelog

gcp-machine-controllers

OCPBUGS-56194: Disable shielded VMs for non-UEFI disks #118
Full changelog

haproxy-router

OCPBUGS-74947: Adding escapeHAProxySingleQuotes for sanitize [release-4.14] #782
OCPBUGS-86966: Regenerate expired test certificate for unit tests #781
Full changelog

hyperkube, pod

OCPBUGS-59473: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2364
OCPBUGS-67736, OCPBUGS-67822: CVE-2025-65637 - bump github.com/sirupsen/logrus to v1.9.3 [4.14] #2586
NO-JIRA: fix verify job failure #2584
OCPBUGS-74302: Skip E2e: attach on previously attached volumes should work #2570
OCPBUGS-59473: UPSTREAM: <carry>: disable some legacy cloud provider Azure tests #2579
Full changelog

hypershift

OCPBUGS-84184: fix(cno): use brackets only for IPv6 in server URL #8370
OCPBUGS-61176: Add missing service network DNS entries to KAS cert #6742
OCPBUGS-57321: Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs #6231 #6252
OCPBUGS-55936: [release-4.14] Add konnectivity-proxy sidecar to openshift-oauth… #6129
CNTRLPLANE-921: Konflux build pipeline service account migration #6080
CNTRLPLANE-921: Konflux build pipeline service account migration #6085
OCPBUGS-51802: Fix golang crypto dependency go.mod replacement #5996
OCPBUGS-53899: bump golang-jwt v4 #5909
OCPBUGS-53433: Prevent IgnitionServer from flooding the API server with patch requests #5878
OCPBUGS-51731, OCPBUGS-51802: Bump dependencies to OCP fork in backports #5899
Red Hat Konflux update control-plane-operator-4-14 #5953
ART-11792: update go mod dependency for konflux #5921
OCPBUGS-53314: Fix IsIPv4 function identifying also addresses instead of CIDRs #5867
OCPBUGS-45559: Add Network Policies for Konnectivity server and Ignition server proxy #5816
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.6 #5730
NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.6 #5725
chore(deps): update dependency mkdocs-mermaid2-plugin to v0.6.0 #5687
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.5 #5681
NO-JIRA: chore(deps): update dependency mkdocs-material to v9 #5688
OCPBUGS-50700: add region to AWS creds passed to operators managed by CPO #5668
NO-JIRA: Red Hat Konflux update control-plane-operator-4-14 #5339
OCPBUGS-47630: Separate CPO containerfiles #5619
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.4 #5538
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.1 #5537
OCPBUGS-49405: add ValidIDPConfiguration condition to report IDP config issues #5520
NO-JIRA: chore: update konflux references & bump up go version to 1.20 #5517
NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.50 (release-4.14) #5444
NO-JIRA: Update dependency mkdocs-material to v8.5.11 (release-4.14) #5430
NO-JIRA: [release-4.14] Bump golang.org/x/crypto and golang.org/x/net #5372
NO-JIRA: Update dependency mkdocs-glightbox to v0.4.0 (release-4.14) #5331
NO-JIRA: Update dependency mkdocs to v1.6.1 (release-4.14) #5330
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-77212: [release-4.14] standardize build paths #126
OCPBUGS-58738: bump github.com/golang/glog to v1.2.4 #109
OCPBUGS-56065: tech debt: rework vendor patches #93
OCPBUGS-53907: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #86
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-67825, OCPBUGS-67826: bump github.com/sirupsen/logrus to v1.9.3 #166
OCPBUGS-59791: [IBM VPC] set offlineExpansion to false in e2e test manifest #151
Full changelog

ibm-vpc-node-label-updater

OCPBUGS-56065: tech debt: rework vendor patches #50
OCPBUGS-53539: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #46
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-67290: [release-4.14] Fix incomplete vendor/ #136
OCPBUGS-51816: CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork #123
Full changelog

insights-operator

Ignore previous status when disabling alerts (#1059) #1059
Full changelog

ironic

OCPBUGS-69788: Bump eventlet version to 0.33.1-7 #765
OCPBUGS-48147, OCPBUGS-48594: Bump jinja2 to 3.0.1-6.el9.2 #625
Full changelog

ironic-agent

OCPBUGS-69779: Bump eventlet version to 0.33.1-7 #234
Full changelog

ironic-static-ip-manager

OCPBUGS-49890: Fix subnet validation #50
Full changelog

kube-proxy, sdn

OCPBUGS-54991: Handle openshift-host-network namespace as special when it modifies #655
OCPBUGS-46536: Bump openvswitch #647
Full changelog

kube-storage-version-migrator

NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-14). #229
Full changelog

libvirt-machine-controllers

OCPBUGS-77198: Fix incomplete vendor #304
Full changelog

machine-api-operator

OCPBUGS-67840: bumped logrus to v1.9.3 #1459
OCPBUGS-53296: add image/read permissions #1350
OCPBUGS-48245: VSphere: Handle cloned instance with lost taskID #1322
OCPBUGS-47659: Ensure deletion annotation takes priority and oldestPolicy can distinguish longer ages #1318
Full changelog

machine-config-operator

OCPBUGS-57341: Do not enable on-prem-resolv-prepender.path for UPI #5114
OCPBUGS-43743: Soften haproxy timeout for kubeapi probe #4664
OCPBUGS-54228: Update ObservedGeneration in KubeletConfig #4950
OCPBUGS-50631: Add clarification to invalid maxUnavailable alert #4848
OCPBUGS-48801: Wait for all subcontrollers #4808
Full changelog

machine-image-customization-controller

OCPBUGS-67827: bumped logrus to v1.9.3 #159
Full changelog

machine-os-images

OCPBUGS-54171: Change rhcos release browser url #59
Full changelog

monitoring-plugin

OCPBUGS-74442: [release-4.14] fix: upgrade lodash to remove vulnerable code #906
OCPBUGS-78495: fix for CVE-2025-69873 #851
Full changelog

multus-admission-controller

OCPBUGS-58763: Bump github.com/golang/glog to v1.2.4 #105
Full changelog

multus-cni

OCPBUGS-85381: Sanitize bracketed hostnames in kubeconfig server URLs #295
Bump Go to 1.21 and fix CI build root image #293
OCPBUGS-85253: Fix server url in kubeconfig #287
OCPBUGS-48160: [backport 4.14] Adds a wait to account for the possiblity of a not ready unix socket #262
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-55620: Fixes leftover podref issue #367
Full changelog

must-gather

OCPBUGS-42971: Collect etcd object count #457
OCPBUGS-48084: Update owners #475
OCPBUGS-48058: Support gathering IPsec data #472
Full changelog

network-metrics-daemon

OCPBUGS-58778: Bump github.com/golang/glog to v1.2.4 (#115) #115
OCPBUGS-60394: Replace e2e test image (#128) #128
swtich golint install method (#127) #127
Full changelog

nutanix-machine-controllers

OCPBUGS-47265: fixing CVE-2024-45338 #116
OCPBUGS-51852: Fixing CVE-2025-22868 #108
Full changelog

oauth-apiserver

OCPBUGS-74926: bump kubernetes-apiserver to pick up loopback cert expiration update #174
NO-JIRA: (chore): update OWNERS #176
Full changelog

oc-mirror

changes the owners file (#1013) #1013
OCPBUGS-48513: e2e: use same version of crane as in go.mod (#1023) #1023
Full changelog

openshift-apiserver

OCPBUGS-74924: bump kubernetes-apiserver to pick up loopback cert expiration update #602
OCPBUGS-76483: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.14] #612
OCPBUGS-56613: Fix image reference in TestImageStreamImportQuayIO #518
OCPBUGS-50477: Pass expected type to deploymentconfig/scale object validation. #497
Full changelog

openshift-controller-manager

OCPBUGS-57940: Set node-pullsecrets volume to read-only to protect image pull credentials #398
OCPBUGS-56951: Empty proxy variables are causing issues during the build #386
OCPBUGS-48480: Add team members to the OWNERS file #360
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-67853: Bump logrus #189
Full changelog

openstack-machine-api-provider

OCPBUGS-78172: hermetic 4.14 #165
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-86253: Drop github.com/distribution/distribution dep #1304
OCPBUGS-61469: [release-4.14] Add NetworkPolicy as a supported kind #1052
OCPBUGS-61390: [4.14] e2e stability fixes #1085
OCPBUGS-46927, OCPBUGS-46934, OCPBUGS-47314: x/net bump to v0.34.0 [release-4.14] #941
Full changelog

operator-marketplace

OCPBUGS-62222: Remove Expect func so that the test case can use the retry logic #673
OCPBUGS-49427: Upgrade golang.org/x/net [release-4.14] #589
Full changelog

ovirt-csi-driver-operator

OCPBUGS-67893: Bump github.com/sirupsen/logrus to v1.8.3 #146
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

CORENET-6055, OCPBUGS-78982: [release-4.14] Dockerfile: Unpin OVN and consume the latest from FDP #3073
OCPBUGS-59872: Dockerfile: Remove ovs version pinning #2695
OCPBUGS-57102: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.14 #2590
OCPBUGS-56420: Update to FDP25.A.1 24.03.5-40. #2574
OCPBUGS-48522: Let OVN-northd bind remote ports #2418
OCPBUGS-54732: Dockerfile.base: bump OVS version to 3.3 #2511
OCPBUGS-50584: Bump OVN to 23.09.6-12 to consume fix for FDP-905 #2455
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-67860: Fix CVE-2025-65637 by bumping logrus to v1.9.1 #100
Full changelog

powervs-machine-controllers

OCPBUGS-78039: hermetic 4.14 #136
OCPBUGS-54754: Fix for CVE-2024-51744 in github.com/golang-jwt/jwt/v4 in release-4.14 #116
Full changelog

prometheus

OCPBUGS-43670: fix(discovery): Handle cache.DeletedFinalStateUnknown … #239
Full changelog

prometheus-alertmanager

OCPBUGS-77837: Include go-verify-deps expected files in gitignore #121
Full changelog

tests

OCPBUGS-74302: Skip E2e: attach on previously attached volumes should work #30727
OCPBUGS-63674: Fix regex parser #30391
OCPBUGS-61233: images/tests: Remove rteval #30208
OCPBUGS-55747: [build] Ensure Git Clone Does Not Run Privileged #29758
OCPBUGS-54770: Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com #29665
OCPBUGS-52583: Use payload pullspec for image info test #29591
OCPBUGS-51363: Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token #29567
OCPBUGS-51044: Add/remove team members to the OWNERS file for Builds #29554
Full changelog

thanos

OCPBUGS-67876: CVE-2025-65637 Update sirupsen/logrus to 1.9.3 #167
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-78031: hermetic migration 4.14 #109
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-78023: hermetic migration 4.14 #88
OCPBUGS-61655: Fix unit tests #74
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-67880: CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.8.3 #160
OCPBUGS-51045: Prevent node cache update during attach & detach #139
Full changelog

vsphere-csi-driver-operator

OCPBUGS-67879, OCPBUGS-67885: CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.9.3 #325
Full changelog

vsphere-problem-detector

OCPBUGS-67891: bump github.com/sirupsen/logrus to v1.9.3 #202
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Unable to show node image info: too many concurrent oc adm release info --rpmdb/--rpmdb-diff operations (limit 16)

View changelog in Markdown or change previous release:

Source code for this page located on github