4.14.73

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.14.73-x86_64

Qualifiers (status api):

Tests:

Blocking jobs
- upgrade Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Succeeded (1 retry) periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.14-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded (2 retries) periodic-ci-openshift-release-main-ci-4.14-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.14-micro Succeeded periodic-ci-openshift-release-main-nightly-4.14-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.14-micro Succeeded (2 retries) periodic-ci-openshift-release-main-ci-4.14-e2e-azure-ovn-upgrade
- driver-toolkit Succeeded periodic-ci-openshift-release-main-nightly-4.14-e2e-aws-driver-toolkit
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.14-fips-payload-scan
- gcp-ovn-rt-upgrade-4.14-minor Succeeded (1 retry) periodic-ci-openshift-release-main-ci-4.14-upgrade-from-stable-4.13-e2e-gcp-ovn-rt-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- hypershift-ovn-conformance Failed (1 retry) periodic-ci-openshift-hypershift-release-4.14-periodics-e2e-aws-ovn-conformance
  - Attempt 1 Failed
  - Attempt 2 Failed
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.14-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-ipv4 Succeeded periodic-ci-openshift-release-main-nightly-4.14-e2e-metal-ipi-sdn-ipv4

Upgrades from:

Untested upgrades: 4.13.23, 4.13.24, 4.13.26, 4.13.27, 4.13.28, 4.13.29, 4.13.30, 4.13.31, 4.13.32, 4.13.33, 4.13.34, 4.13.35, 4.13.36, 4.13.37, 4.13.38, 4.13.40, 4.13.41, 4.13.43, 4.13.44, 4.13.45, 4.13.46, 4.13.47, 4.13.48, 4.13.49, 4.13.50, 4.13.51, 4.13.52, 4.13.53, 4.13.54, 4.13.55, 4.13.56, 4.13.57, 4.13.58, 4.13.59, 4.13.60, 4.13.61, 4.13.62, 4.13.63, 4.13.64, 4.13.65, 4.13.66, 4.13.67, 4.14.10, 4.14.11, 4.14.12, 4.14.13, 4.14.14, 4.14.15, 4.14.16, 4.14.17, 4.14.18, 4.14.19, 4.14.20, 4.14.21, 4.14.22, 4.14.23, 4.14.24, 4.14.25, 4.14.26, 4.14.27, 4.14.28, 4.14.29, 4.14.3, 4.14.30, 4.14.31, 4.14.32, 4.14.33, 4.14.34, 4.14.35, 4.14.37, 4.14.38, 4.14.39, 4.14.4, 4.14.40, 4.14.41, 4.14.42, 4.14.43, 4.14.44, 4.14.45, 4.14.46, 4.14.47, 4.14.48, 4.14.49, 4.14.5, 4.14.50, 4.14.51, 4.14.52, 4.14.53, 4.14.54, 4.14.55, 4.14.56, 4.14.57, 4.14.58, 4.14.59, 4.14.6, 4.14.60, 4.14.61, 4.14.62, 4.14.63, 4.14.65, 4.14.66, 4.14.67, 4.14.68, 4.14.69, 4.14.8, 4.14.9

Loading changelog, this may take a while ...

Changes from 4.14.36

Created: 2026-09-03 07:00:45 +0000 UTC

Image Digest: sha256:7f1b9c23113bc7bdb125576cd84817bcca701055b76452149676770a301c8b32

Components

Kubernetes 1.27.16
Red Hat Enterprise Linux CoreOS upgraded from 414.92.202409041930-0 to 414.92.202609011250-0 (diff)

Removed images

ovirt-csi-driver
ovirt-csi-driver-operator

Rebuilt images without code change

alibaba-cloud-controller-manager git 8ba0b37a sha256:2c3b9c5497ea8839ec54f4fff5d8222abe0f6473dba72a989600e8725cedbaaf
alibaba-cloud-csi-driver git 3dc363d3 sha256:4feaa0791ed03c9244e3192c76601bac0d4dd2d9888ac3d1ab89feb66f0ea733
alibaba-disk-csi-driver-operator git 8853e6ef sha256:607235936d8156aecea07a24d5c8a08a8a2213236e3227ab84e7a8811b987556
alibaba-machine-controllers git 27f105d3 sha256:86ee6ee724690d239d8589653c5432e4d91227d84c799fb9d87192a1ca8012d5
aws-cloud-controller-manager git 9a7820e8 sha256:e60f14df2c87506bf7ccc454b23b2dc25a52d40f56fb7e847cae4030453d0e9c
aws-ebs-csi-driver git 4622deec sha256:3d7ce2013d206fdb34c8a311d9ef8f59afebbc518e96faedcc95c2054bb0b62a
aws-pod-identity-webhook git 2c864ca0 sha256:0047bb397e247e7146f9476f340d52ec932dad9fd44db6d9c256f5fc63dc9791
azure-disk-csi-driver git 6d3558a3 sha256:cc06286a9bf570c6e4a957138227832b732a4bb63a02a6f23a4b75434c0420f6
azure-disk-csi-driver-operator git 91893576 sha256:669c6f8423b96d0f99f9f72a559c9f54e68ff882aacd2b1aab87e4dc3aa664df
azure-machine-controllers git d526284e sha256:df03a4c720935fd8453b17bd7460fe605e362b608abd0b4a56f3c1359a66a5d0
baremetal-runtimecfg git 0ba9e555 sha256:e9d90e5471d4f71ddf777f90dce40d67caeac254dde10108f8a50e4525993089
cli git 44b3ac26 sha256:de7958be50387918209f1bae93ce0016dcd85e6c71dabd6b8642454268745208
cli-artifacts git 44b3ac26 sha256:b0c90468da4753ccdfcb45d964c810db1c535e35f3443aed1da0adbaa3aaf84e
cloud-network-config-controller git 1bd04641 sha256:a661792f53d1cf22cc230adcb749ef41cdcfa2c6f37562f58d7299fb4fa7c0f9
cluster-authentication-operator git 9203d4d5 sha256:12ccd5822581e17be84a08204b20ca18e6e4bedad74704082a2fe732bb467766
cluster-autoscaler-operator git 32854baa sha256:2c4968ea57976644fc641312b3d2541f82864812775dac065d1a56d5a3f39f35
cluster-bootstrap git 93fba13f sha256:3327e27cc1e51d67a4b16ef4939046b6c626d81d37da45ff6e7d365936ec2bf4
cluster-csi-snapshot-controller-operator git d4a11625 sha256:2862726e40eafc14c8ca14a49dd27c7101e4bf9ae358fa0456113e94aa051821
cluster-kube-cluster-api-operator git b287d08b sha256:18ce2dc9a797f0ff866278ac121a1bb0936aa48c72532eafd87624c4670deca9
cluster-kube-controller-manager-operator git 4e059638 sha256:6b1ba0161ba8f8a531531383e98b0f91f1adcb7c90a5492f9cff54b165cf6c61
cluster-platform-operators-manager git 08fb27e7 sha256:8fddf29d134976fe63f57cc504a763d19fcfb483c01171a199bd937332afdb55
cluster-policy-controller git 219f6f6f sha256:1e927ec31139645c568ee0006dcdf9fe30e03e8044c1f8f18f0da20640eb7887
configmap-reloader git 716a0c33 sha256:69613770c410765fd4a5a967a6208ea866157f88287dd3074dc6468b78c42ddf
csi-driver-shared-resource git 9232c1ff sha256:2ca3c506fa344cb9b9d5e1a5b81355911331222149f08254bfc7a95f38fade04
csi-driver-shared-resource-operator git c273cd52 sha256:25f7cf2806fa214bf067c9377022bfbe8391960450b33ae547bdde1ab6269847
csi-driver-shared-resource-webhook git 9232c1ff sha256:32cf2ff55dfab5eaa04b7936ebac9b02519dee78939fd20761340c84cf429a6c
csi-external-attacher git 06e8ce0d sha256:e58680a906ee35b445cb164091d127efb51488bfd43f8b2673231ab8c077e510
csi-external-provisioner git e18ed7f0 sha256:8411d73d6417a82595c16fd93dcfc62efed51f8e0b601329af9f7a12c5098995
csi-external-resizer git 59a701a4 sha256:886e6fe0a7717a833281efd69e809d3c625ae15635cb636261f25937d9d20a2b
csi-external-snapshotter git a6834536 sha256:6e8648bcb26246441440970481778698f4eae1e564177155cd57f04e94b2dc53
csi-livenessprobe git a9bcbde1 sha256:4da51e7d2100392856a6bcd0368e041eb10b5dc6918ffeb5efd09d39ec6f81bc
csi-node-driver-registrar git 9dcaa7f5 sha256:7e490a33fe90a3614a217a97400e1536d8c549c7c59136fd64ea0c3e55bf17b0
csi-snapshot-controller git a6834536 sha256:bcd311435cd8a23d4e82f81c8fa1a1a329c6260ba9c4c1a22997173da08fff07
csi-snapshot-validation-webhook git a6834536 sha256:f0e9728cc72ac617721d48edab0d957ca2f5ad6b7a98eeeb2ff4db2a57afe3e1
deployer git 44b3ac26 sha256:54c627af2fc201ba1db1abf6388a72174c11cd314f152352e3fb7185bc9ceb38
driver-toolkit git cafed17b sha256:ca7bef7243ca819294c2b8882b65eb12da6316d267bd9cb2ad13b401ea12d90c
egress-router-cni git 96f2f54f sha256:45a66ab59f933633a2d4c577907347ca285b0b1ea4b4348df0e92e03b1ea9e1b
etcd git 5ed5044c sha256:82aec37a1e662cdecd0204202f591f3a5b75c9eb3d3d2e41bf6129976f69ae1e
gcp-cloud-controller-manager git 09e96a91 sha256:fdfae598c4f70184b447d1399f2d71398a8421b42ff43699195289e47c0548a2
gcp-pd-csi-driver git 8a626fe5 sha256:ac39061e07de3001827529466c46becdee190a8aac80fefa9b5d249f022adb4a
gcp-pd-csi-driver-operator git 95d55a04 sha256:0952b7f1bca19f28b17fa761ede13fe7a379f644b487d3debb82a8cc5be288e2
k8s-prometheus-adapter git 801a912b sha256:c77f61886d539b3fedf53b9efdd25137c4fcbc505f83fd53eb05d59652b088ee
keepalived-ipfailover git 03e5f407 sha256:78ca0be9caae84f751d6bff467260f0e174fa4f104876457cbb40bce6d4d5525
kube-state-metrics git db0c5499 sha256:db0fc23780bdec29f469c6803216f2ed2032fc8ffb0367295a527598abf9ef56
kuryr-cni git 8926a294 sha256:f084eb84c73f329f01c1ca87188516dd69e9e440446159178e5391e6ec460ee4
kuryr-controller git 8926a294 sha256:af7c35b7161f2ea8e887b4c533db46581cb75be26d645c57dab27876a00c79ce
machine-os-content sha256:189b28b7908811f38287d008cd9f5625dfebcab82d66dd1ade31bca2ed93a5f1
network-interface-bond-cni git 29f61f6b sha256:e88b9bb3ece3bd716c2af359d72ce4e34e1c80776c847f6ad74f19886496415d
network-tools git e79d8173 sha256:335f78e74ffc37565166139daec8ea5f786d8ddf17e5bf6894b4ff4d452ce385
oauth-server git 35f4739f sha256:d29f264a2fdf0725df4bd1398764bc762deab930f6c7ef6ea262322d8a2bb66f
olm-catalogd git a333cb0b sha256:bdfd4cf76ebadb2166ec003ce39b4c03b3f603206f92290ef1df4badd6021f1d
olm-operator-controller git fb6fb278 sha256:5e741a3ef940077b63230e9ca8402016bd66663ec29b005d8a88f3c21e975cc4
olm-rukpak git c9409c62 sha256:22709d74ae63f019a226292b59d652a97f0733e24343d7d09426e36ad2f89176
openshift-state-metrics git dff4b0f4 sha256:8412b3a4b53eff805c7c22dc9a064b3fb33162298338bb941957b2ec77be3181
ovirt-machine-controllers git 5d708631 sha256:fc63d165eb72d4cab56b682f78bd5e58aaf0f07e768c27102b7f5dd346aec797
powervs-block-csi-driver git 988f7109 sha256:e3e2655512a97418563fd68d566c44ad6ddb963f62108af2c5802ae94becea39
prom-label-proxy git af40ed09 sha256:f86cbb3fa306e947fe53a19ee5da5f66480d067acc82130556e0b5bc22de410a
prometheus-config-reloader git a4b845a7 sha256:0c92fc181f8515c1118ae07eb2005d9bb0f9393b029ca617bdbca0a624d32cc7
prometheus-node-exporter git 5ee0a9d9 sha256:3b578173fc3475766d48c6440f7e698c0c2b6aae3e46ae9e94a1b8bb54e82dce
prometheus-operator git a4b845a7 sha256:43adaf92baa74b7bde64a80482cb8f6908bd0b1bd2fdff8b7967937b667b79b5
prometheus-operator-admission-webhook git a4b845a7 sha256:3d2fdf9ba0092f76d1528ddd3765f0a29718f006a656dceca07aa704ab77691d
rhel-coreos sha256:7334f5e3b81d69cc7088d5c3e8472d8ea6cc2dbbb353dabad0846f8ed08769f4
rhel-coreos-extensions sha256:8d38613ea29246a70b4211fa32b8d2a1cb4c94015bebde97cf0c4a8c64927198
service-ca-operator git 3c3f82f7 sha256:f3c37154ef5bb64bcf5644cd0408fb8ae1c1363e750f501fbe4aef11e169a8cc
telemeter git 1f726816 sha256:ca60022e798b5a34d6a7e254521d9a30215dda11f691af6affd3c0a9e9d6f69c
tools git 44b3ac26 sha256:16df4142d22c24c7502d3edec454749268c5e0fcc5812ab6022896858d3f30cd

agent-installer-api-server

MGMT-23439: Bump Go 1.18 to 1.20 and regenerate code #10042
OCPBUGS-78112: [release-4.14] NO-JIRA: hermetic 4.14 #9955
MGMT-23439: Use archived dnf repositories for CentOS Stream 8 #10018
And 4 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-58642: CVE-2024-45339: Bump glog pkg version to 1.2.4 (#1194) #1194
OCPBUGS-53715: Bump jwt to 4.5.2 in release-4.14 (#1093) #1093
Bump golang.org/x/net to v0.33.0 (#1012) #1012
OCPBUGS-15347: Update version go-http-metrics/gin (#933) #933
Full changelog

agent-installer-node-agent

OCPBUGS-58652, OCPBUGS-58657: Bump glog to v1.2.5 in release-4.14 (#1073) #1073
OCPBUGS-53707: Bump golang-jwt/jwt/v4 to 4.5.2 in release-4.14 (#973) #973
OCPBUGS-46955: Bump golang.org/x/net to 0.33.0 (#885) #885
OCPBUGS-16483: Update apimachinery dependency to remove goproxy dep (#709) #709
Full changelog

agent-installer-utils

OCPBUGS-25727: Updating ose-agent-installer-utils-container image to be consistent with ART for 4.14 #34
Full changelog

apiserver-network-proxy

OCPBUGS-38066: Revert “Agent: Respect HTTPS_PROXY env vars for proxied connections” #61
Full changelog

aws-cluster-api-controllers

OCPBUGS-78229: [release-4.14] hermetic 4.14 #593
OCPBUGS-61944: UPSTREAM <carry>: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It #574
OCPBUGS-58667, OCPBUGS-58672: bump github.com/golang/glog to v1.2.5 #563
OCPBUGS-44295: [release-4.14] OSD-25934: Only tag NetworkInterfaces in RunInstances if IAM Allows It #533
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-67748: Updated logrus to v1.9.3 #313
Full changelog

aws-machine-controllers

OCPBUGS-63142: client: re-use a single file for building the session instead of randomly named files #154
OCPBUGS-63142: revert: client: re-use a single file for building the session instead of randomly named files #151
OCPBUGS-63142: client: re-use a single file for building the session instead of randomly named files #142
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-79820, OCPBUGS-79821: Fix CVE-2026-33186 with openshift-sustaining/grpc-go v1.64.1-sec.1 [release-4.14] #192
OCPBUGS-57111: Adds acr-credential-provider spec file and build script #144
Full changelog

azure-cluster-api-controllers

OCPBUGS-78178: [release-4.14] Hermetic 4.14 #366
Full changelog

azure-file-csi-driver

ART-13080: Regenerate go.mod to fix build failures #95
OCPBUGS-41164: bump mount-utils to treat ENODEV error as corrupted mount #79
Full changelog

azure-file-csi-driver-operator

OCPBUGS-67753: Bump github.com/sirupsen/logrus to v1.9.3 #114
Full changelog

azure-workload-identity-webhook

OCPBUGS-53795: github.com/golang-jwt/jwt/v4 v4.5.2 #35
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-79654: Azure UPI ARM template: use storageAccountId #10435
OCPBUGS-76930: terraform/provider/google: Fixing inconsistencies with service account creation #10324
OCPBUGS-62601: update resolv.conf every time on bootstrap node #9985
OCPBUGS-62814: Release 4.14 bump terraform provider azurerm #10001
OCPBUGS-55193: data/manifests/bootkube/cvo-overrides: Default to eus-4.14 #9643
OCPBUGS-54323: Update upi references to api-internal #9609
OCPBUGS-54264: IBMCloud: Move to IBM TF openshift fork #9605
OCPBUGS-54260: vsphere-fix convert if only provided name #9602
OCPBUGS-52996: Bump terraform-provider-google version to v5.37.0 to fix consistent issues during cluster creation #9587
OCPBUGS-53210: PowerVS: remove system pools #9572
OCPBUGS-46606: Power VS: Create region-zone-sysType hierarchy #9331
OCPBUGS-48196: IBMCloud: Ignore failed VPC regions #9350
OCPBUGS-45464: add chrony.conf file when additional NTP sources are configured #9269
OCPBUGS-43505: Stop rendering networks.config CRD #9105
OCPBUGS-42285: Add AWS r8g to arm tested instance types #9050
OCPBUGS-42848: add tested instance type for IBMCloud #9082
OCPBUGS-25508: Update Golang SSH package version update to 0.17.0 #8992
Full changelog

baremetal-machine-controllers

OCPBUGS-78101: [release-4.14] fix vendor/ for hermetic migration #245
OCPBUGS-46643: Bump x/net to 0.33.0 #228
Full changelog

baremetal-operator

OCPBUGS-53337: BMO can expose any secret via BMCEventSubscription CRD #409
Full changelog

cloud-credential-operator

OCPBUGS-60975: ccoctl: aws to use proper issuer url on subsequent runs #911
OCPBUGS-58677: github.com/golang/glog v1.2.5 #895
OCPBUGS-53418: github.com/golang/glog v1.2.4 #845
OCPBUGS-53819: update github.com/golang-jwt/jwt #841
OCPBUGS-51542: Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected #830
OCPBUGS-47069: golang.org/x/net v0.33.0 #810
OCPBUGS-46487: Add AWS region to aws-pod-identity-webhook #801
OCPBUGS-45009: Add retry to ccoctl gcp create functions #791
OCPBUGS-45004: github.com/golang-jwt/jwt/v4 v4.5.1 #785
OCPBUGS-43647: Only attempt timed token credentials on supported platforms. #775
OCPBUGS-43339: Update github.com/sirupsen/logrus v1.9.3 #769
OCPBUGS-41236: List secrets in batches to avoid api timeout #755
Full changelog

cluster-autoscaler

OCPBUGS-45150: [release-4.14] VPA: Update OWNERS file #327
OCPBUGS-40925: update VPA golang.org/x/net for http rapid reset for CVE-2024-8421 #316
Full changelog

cluster-baremetal-operator

OCPBUGS-77449: Bump github.com/go-errors/errors to v1.5.1 #564
OCPBUGS-31977: bump x/net to 0.23.0 #438
Full changelog

cluster-capi-controllers

OCPBUGS-77974: [release-4.14] fix vendor for hermetic #265
Full changelog

cluster-capi-operator

NO-JIRA: Allow sustaining engineering to self serve dependency updates #562
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-63170: ccm: disable unused secure-serving port and webhook #425
Full changelog

cluster-config-operator

OCPBUGS-44095: Backport SDN live migration #425
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-48211: Add unreadyNodeGracePeriod for allowing brief node hiccups #340
Full changelog

cluster-dns-operator

OCPBUGS-52500: [release-4.14] Add runbook_url for CoreDNSErrorsHigh #433
Full changelog

cluster-etcd-operator

OCPBUGS-67770: Update logrus to 1.9.3 to address CVE-2025-65637 #1548
OCPBUGS-53507: fix CVE-2025-30204 #1405
Full changelog

cluster-image-registry-operator

OCPBUGS-67771: Bump logrus to 1.9.1 #1290
OCPBUGS-53867: Bump github.com/golang-jwt/jwt #1229
OCPBUGS-53867: Bump github.com/golang-jwt/jwt #1224
OCPBUGS-51598: bump golang.org/x/oauth2 #1213
OCPBUGS-51312: ensure that storage names don’t end in dashes #1185
OCPBUGS-44048: fix proxy config and leader election test flakes #1153
OCPBUGS-44002: Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) #1152
OCPBUGS-42935: azureclient: stop validating credentials when creating the client #1137
OCPBUGS-39100: Avoid Shared Access Key usage for Azure Storage Account when using Managed Identity based auth #1114
Full changelog

cluster-ingress-operator

OCPBUGS-86711: Add configuration override for X-SSL strip #1492
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-67775: CVE-2025-65637 openshift4/ose-cluster-kube-apiserver-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.14.z] #2045
OCPBUGS-50662: Increase waitForFallbackDegradedConditionTimeout #1807
Full changelog

cluster-kube-scheduler-operator

CNTRLPLANE-2843: chore: update OWNERS #626
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-67780: Bump github.com/sirupsen/logrus to v1.9.1 #141
Full changelog

cluster-machine-approver

OCPBUGS-46057: Ensure trailing dots on DNS names do not block serving cert auth #259
OCPBUGS-46057: Client internal DNS checks should ignore trailing dot #255
OCPBUGS-44774: Client internal DNS checks should be case insensitive #246
Full changelog

cluster-monitoring-operator

OCPBUGS-76415: test: remove image registry e2e tests #2811
OCPBUGS-48368: Add new metrics for OpenShift logging telemetry #2556
OCPBUGS-44007: fix(monitoring-plugin): disable emitting nginx version on error pages #2520
OCPBUGS-43916: Add runbook url for TelemeterClientFail… #2510
OCPBUGS-43678: Remove temporary no more needed code #2496
OCPBUGS-42603: Exclude windows nodes from kubelet servicemonitor #2489
OCPBUGS-41916: filter alerts sent to Telemeter #2473
Full changelog

cluster-network-operator

OCPBUGS-84184: fix(hypershift): use net.JoinHostPort for URL construction #2996
OCPBUGS-78105: fix vendor for hermetic 4.14 #2913
OCPBUGS-51170: Use applyconfigurations for updating network.oprerator status #2660
OCPBUGS-48323: Pass transit_switch_subnet options in ovnkube-node pod for single-zone #2617
OCPBUGS-42754: Set mount propagation to HostToContainer for /var/lib/kubelet #2521
OCPBUGS-47320: Pass transit_switch_subnet options in ovnkube-node pod #2607
OCPBUGS-43821: manifests/02-cncc-credentials: Set skipServiceCheck for GCP #2546
OCPBUGS-39086: Fix wait logic for IPsec certificate signing request #2481
OCPBUGS-41508: Tighten the permissions on whereabouts.conf #2493
OCPBUGS-42021: Add proxy env vars to onvkube-node #2505
OCPBUGS-38440: [release-4.14] 4.14 subnet config #2473
Full changelog

cluster-node-tuning-operator

e2e:performance: decode to valid kubeletconfig object (#1276) #1276
Fix context deadlines in ExecCommandOnPod() (#1272) #1272
OCPBUGS-44506: Drop sched_migration_cost_ns setting (#1215) #1215
OCPBUGS-44283: right-hand-side profile_dirs take precedence (#1210) #1210
OCPBUGS-42567: Add cluster-wide proxy env file (#1176) #1176
Full changelog

cluster-olm-operator

OCPBUGS-86344: Update grpc-go to v1.64.1-sec.1 to fix CVE-2026-33186 #209
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-76593: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.14] #658
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-48841: Add new team members to the OWNERS file #380
Full changelog

cluster-samples-operator

OCPBUGS-63518: references to github.com/sclorg/django-ex.git now also refer to the branch #661
OCPBUGS-55655: Adding mutex to func createSamples on handler.go #635
OCPBUGS-54537: add rhdmalone to owners #624
OCPBUGS-49421: add shannon and aroyoredhat as owners #598
Full changelog

cluster-storage-operator

OCPBUGS-87736: remove oVirt code from CSO 4.14 #711
OCPBUGS-67795: Bump logrus to v1.9.3 #655
Full changelog

cluster-update-keys

OCPBUGS-43628: keys: Update Red Hat keys to use SHA256 signatures #66
Full changelog

cluster-version-operator

OCPBUGS-50592: Set openshift.io/required-scc: privileged annotation in version pods #1151
OCPBUGS-45331: deps: bump golang.org/x/net to 0.31.0 #1120
OCPBUGS-44704: Fix desired before sync_worker’s work is initialized #1109
Full changelog

console

OCPBUGS-105791: Disable failing OLM and pipelines e2e tests to unblock CI #16956
OCPBUGS-90614: Fix JSON annotation parsing to prevent OperatorHub crash #16659
OCPBUGS-87989: [release-4.14] shell-quote: Arbitrary code execution via command injection due to unescaped line terminators #16597
OCPBUGS-77116: [release-4.14] CVE-2026-26996 Bump minimatch library #16348
Fix for OCPBUGS-81595: CVE-2026-4800 #16568
OCPBUGS-88422: Bump axios to ^0.33.0 Addresses CVE-2026-44486 #16789
OCPBUGS-79434: CVE-2026-29063 Bump immutable #16329
ART-18713: pin fsevents to latest #16473
NO-JIRA: enable multi-architecture yarn builds #16424
OCPBUGS-83297: [release-4.14] openshift4/ose-console: Axios: Remote Code Execution via Prototype Pollution escalation #16311
NO-JIRA: Updating openshift-enterprise-console-container image to be consistent with ART for 4.14 #16168
CONSOLE-5011: migrate to yarn berry #16082
NO-JIRA: Bump builder image to v29 #15991
OCPBUGS-74439: Bump lodash to latest #15971
OCPBUGS-44158: bump dompurify to latest #15593
OCPBUGS-59998: Remove the devconsole backend common internet proxy and replace it with dedicated ones #15464
OCPBUGS-58274: Fix TypeError Cannot read properties of null (reading ‘metadata’) #15228
OCPBUGS-57099: Add all files to vendor regardless of gitignore #15135
OCPBUGS-55942: fix bug where operator appears twice #15033
OCPBUGS-55427: Add missing pipelines plugin name to known plugins #15005
OCPBUGS-39010: fix crash if helm chart metadata is nil #14198
OCPBUGS-53437: Show Observe section without PROMETHEUS and MONITORING flags #14892
OCPBUGS-54404: Update the monitoring topic used by the console team #14910
OCPBUGS-54167: fix run time error when no completed version exists #14899
OCPBUGS-51118: redirect to correct alert #14823
OCPBUGS-49753: ImagePullSecret getting duplicated when editing DeploymentConfig in Form View #14711
OCPBUGS-46603: Unable to remove finally tasks in pipeline builder mode #14642
OCPBUGS-33145: Fix “Auto deploy when new image is available” becomes unchecked when editing a deployment from web console #14370
OCPBUGS-45323: Use vCenterCluster value from CM as primary resource #14574
OCPBUGS-39368: Remove deprecated resources from spec of the Pipeline #14230
OCPBUGS-45283: Add IBM Block Storage CSI driver support for RWX #14569
OCPBUGS-44791: A value submitted in From view is wrapped with single quotation after switching to Yaml view. #14518
OCPBUGS-42962: Need to allow blank for Project/namespace when setting SA Subject in ‘Project access tab’ #14386
OCPBUGS-43000: List of default Camel K event sources disappears when adding a custom event source #14388
OCPBUGS-36558: Increase login flow state paramater length/entropy #14439
OCPBUGS-10337: Updating openshift-enterprise-console images to be consistent with ART #12760
OCPBUGS-42518: The filepath including leading slash makes error during parsing devfile using Gitlab #14342
OCPBUGS-42517: Values entered into the Instantiate Template form are automatically cleared #14341
OCPBUGS-42757: Switch to use annotations as labels from PipelineRuns created through Pipelines as Code is deprecated #14369
OCPBUGS-38883: Fix password set to Secret created through Start Pipeline form #14184
OCPBUGS-37353: Import from Git allow users to import an app with Build option Pipeline also when no Pipeline is available #14108
OCPBUGS-41836: DeploymentConfigs deprecation info alert should not present on the Edit deployment page #14281
OCPBUGS-39389: Edit the secret and add the Chinese in the web-console, garbled characters will be displayed #14231
OCPBUGS-41581: Increased max nodes limit to 200 in topology page #14262
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

console-operator

OCPBUGS-77994: [release-4.14] hermetic 4.14 #1131
OCPBUGS-77994: [release-4.14] NO-JIRA: update go mod dependency for konflux #1117
Full changelog

container-networking-plugins

OCPBUGS-78286: fix vendor for hermetic 4.14 #225
OCPBUGS-56046: Check error returned by ipv6 SettleAddresses #193
OCPBUGS-46121: [4.14] cherry-pick containernetworking/plugins#997 #168
Full changelog

coredns

OCPBUGS-58713: [release-4.14] Bump github.com/golang/glog to v1.2.4 #139
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-79847: Apply code mitigations for CVE-2026-33186 #399
OCPBUGS-67800: fix CVE-2025-65637 #363
OCPBUGS-58887: CARRY: don’t ignore json files #343
OCPBUGS-52413: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.27 into release-4.14 #315
Full changelog

csi-driver-manila-operator

OCPBUGS-67801: Bump logrus #253
Full changelog

csi-driver-nfs

OCPBUGS-84929: Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.64.1-sec.1 to avoid go version bump and fix CVE-2026-33186 #184
Full changelog

docker-builder

OCPBUGS-66112: BuildConfig inline Dockerfile fails with heredoc syntax #492
OCPBUGS-58140: S2I build cpu limits observed by assemble are limited to 1 cpu #476
OCPBUGS-42915, OCPBUGS-43297: Bump buildah to 1.33.12 #447
OCPBUGS-43190: runc library bump to 1.1.12 #438
OCPBUGS-48495: skipping some unit tests to avoid failures as they are duplicate #430
OCPBUGS-48477: Add team members to the OWNERS file #429
BUILD-854: Add adambkaplan as approver #404
Full changelog

docker-registry

OCPBUGS-53651: bump jwt and oauth dependencies #434
Full changelog

gcp-cluster-api-controllers

OCPBUGS-78282: [release-4.14] update go mod dependency for konflux #269
Full changelog

gcp-machine-controllers

OCPBUGS-79841: Bump google.golang.org/grpc to v1.79.3 #168
OCPBUGS-79841: Fix setup-envtest GCS 401 by downloading binaries directly #178
OCPBUGS-56194: Disable shielded VMs for non-UEFI disks #118
Full changelog

haproxy-router

OCPBUGS-86711: Strip X-SSL-* headers for plain HTTP #807
OCPBUGS-74947: Adding escapeHAProxySingleQuotes for sanitize [release-4.14] #782
OCPBUGS-86966: Regenerate expired test certificate for unit tests #781
Full changelog

hyperkube, pod

OCPBUGS-59473: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2364
OCPBUGS-67736, OCPBUGS-67822: CVE-2025-65637 - bump github.com/sirupsen/logrus to v1.9.3 [4.14] #2586
NO-JIRA: fix verify job failure #2584
OCPBUGS-74302: Skip E2e: attach on previously attached volumes should work #2570
OCPBUGS-59473: UPSTREAM: <carry>: disable some legacy cloud provider Azure tests #2579
Full changelog

hypershift

[release 4.14] Fix OCPBUGS-99086: CVE-2026-16242 konnectivity agent auth #9131
CNTRLPLANE-3979: Update release-4.14 Konflux pipelines to use shared pipelineRef #9196
OCPBUGS-84184: fix(cno): use brackets only for IPv6 in server URL #8370
OCPBUGS-61176: Add missing service network DNS entries to KAS cert #6742
OCPBUGS-57321: Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs #6231 #6252
OCPBUGS-55936: [release-4.14] Add konnectivity-proxy sidecar to openshift-oauth… #6129
CNTRLPLANE-921: Konflux build pipeline service account migration #6080
CNTRLPLANE-921: Konflux build pipeline service account migration #6085
OCPBUGS-51802: Fix golang crypto dependency go.mod replacement #5996
OCPBUGS-53899: bump golang-jwt v4 #5909
OCPBUGS-53433: Prevent IgnitionServer from flooding the API server with patch requests #5878
OCPBUGS-51731, OCPBUGS-51802: Bump dependencies to OCP fork in backports #5899
Red Hat Konflux update control-plane-operator-4-14 #5953
ART-11792: update go mod dependency for konflux #5921
OCPBUGS-53314: Fix IsIPv4 function identifying also addresses instead of CIDRs #5867
OCPBUGS-45559: Add Network Policies for Konnectivity server and Ignition server proxy #5816
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.6 #5730
NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.6 #5725
chore(deps): update dependency mkdocs-mermaid2-plugin to v0.6.0 #5687
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.5 #5681
NO-JIRA: chore(deps): update dependency mkdocs-material to v9 #5688
OCPBUGS-50700: add region to AWS creds passed to operators managed by CPO #5668
NO-JIRA: Red Hat Konflux update control-plane-operator-4-14 #5339
OCPBUGS-47630: Separate CPO containerfiles #5619
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.4 #5538
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.1 #5537
OCPBUGS-49405: add ValidIDPConfiguration condition to report IDP config issues #5520
NO-JIRA: chore: update konflux references & bump up go version to 1.20 #5517
NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.50 (release-4.14) #5444
NO-JIRA: Update dependency mkdocs-material to v8.5.11 (release-4.14) #5430
NO-JIRA: [release-4.14] Bump golang.org/x/crypto and golang.org/x/net #5372
NO-JIRA: Update dependency mkdocs-glightbox to v0.4.0 (release-4.14) #5331
NO-JIRA: Update dependency mkdocs to v1.6.1 (release-4.14) #5330
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.49 (release-4.14) - abandoned #5308
OCPBUGS-44279: Configure OAuth https proxy to dial cloud endpoints directly #5067
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.45 (release-4.14) #5162
NO-JIRA: chore(deps): update konflux references (release-4.14) #5145
NO-JIRA: chore(deps): update konflux references (release-4.14) #5121
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1731518200 (release-4.14) #5105
NO-JIRA: Update Konflux references (release-4.14) #5100
chore(deps): update konflux references (release-4.14) #5076
NO-JIRA: chore(deps): update konflux references (release-4.14) #5055
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.44 (release-4.14) #5056
NO-JIRA: Update Konflux references to fedcfe0 (release-4.14) #5043
chore(deps): update konflux references (release-4.14) #5026
chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.43 (release-4.14) #5021
chore(deps): update konflux references to f53fe54 (release-4.14) #5020
NO-JIRA: Update Konflux references (release-4.14) #5011
OCPBUGS-41701: cmd: report server version, supported OCP #4718
NO-JIRA: chore(deps): update konflux references (release-4.14) #4975
OCPBUGS-43688: Use guest DNS resolution in Konnectivity HTTPS proxy by default #4964
chore(deps): update konflux references (release-4.14) #4953
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.42 (release-4.14) #4948
OCPBUGS-43368: Let payload generation pick the release for the NodePool #4913
NO-JIRA: chore(deps): update konflux references (release-4.14) #4934
NO-JIRA: chore(deps): update konflux references to 66f551f (release-4.14) #4924
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.41 (release-4.14) #4917
NO-JIRA: chore(deps): update konflux references to 674e70f (release-4.14) #4910
NO-JIRA: chore(deps): update konflux references (release-4.14) #4898
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.40 (release-4.14) #4879
NO-JIRA: chore(deps): update konflux references to 37b9187 (release-4.14 #4851
OCPBUGS-42533: enable audit log for oauth-openshift #4822
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.13 (release-4.14) #4794
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.39 (release-4.14) #4828
NO-JIRA: chore(deps): update konflux references (release-4.14) #4813
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.38 (release-4.14) #4805
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9 (release-4.14) #4788
chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.4-1227.1726694542 (release-4.14) #4758
chore(deps): update squidfunk/mkdocs-material docker tag to v8.5.11 (release-4.14) #4784
OCPBUGS-41374: CPO oauth idp converter: resolve names before dialing #4763
NO-JIRA: chore(deps): update konflux references to 5ac9b24 (release-4.14) #4783
chore(deps): update konflux references to 2c3426a (release-4.14) #4773
NO-JIRA: chore(deps): update konflux references (release-4.14) #4757
OCPBUGS-42221: Make guest cluster components use the correct KAS port #4753
OCPBUGS-38060: Add HTTP konnectivity proxy to OAuth server #4498
OCPBUGS-38066: [release-4.14] Use HTTP proxy for ingress controller #4724
NO-JIRA: Security fixes for openshift-ci-security job #4752
OCPBUGS-42184: copy image-registry AdditionalTrustedCA configmap into HC openshift-config #4747
OCPBUGS-41506: fix: bump google.golang.org/protobuf #4687
HOSTEDCP-1957: bump go-jose version #4698
OCPBUGS-39378: Set KCM node monitor grace period #4659
chore(deps): update konflux references (release-4.14) #4683
OCPBUGS-39183: fix: bump github.com/IBM/go-sdk-core/v5 #4626
NO-JIRA: Add PodDisruptionBudget for router deployment #4692
NO-JIRA: Revert “Merge pull request #4661 from jparrill/bp-4.14/OCPBUGS-24308” #4667
Full changelog

ibm-cloud-controller-manager

OCPBUGS-23861: Bump otelgrpc to v0.49.0 #73
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-79836: Bump google.golang.org/grpc to v1.79.3 #156
OCPBUGS-77212: [release-4.14] standardize build paths #126
OCPBUGS-58738: bump github.com/golang/glog to v1.2.4 #109
OCPBUGS-56065: tech debt: rework vendor patches #93
OCPBUGS-53907: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #86
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-67825, OCPBUGS-67826: bump github.com/sirupsen/logrus to v1.9.3 #166
OCPBUGS-59791: [IBM VPC] set offlineExpansion to false in e2e test manifest #151
Full changelog

ibm-vpc-node-label-updater

OCPBUGS-56065: tech debt: rework vendor patches #50
OCPBUGS-53539: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #46
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-67290: [release-4.14] Fix incomplete vendor/ #136
OCPBUGS-51816: CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork #123
OCPBUGS-36077: UPSTREAM: <carry>: Fix go-retryablehttp CVE - 4.14 #88
Full changelog

ibmcloud-machine-controllers

NO-JIRA: fix unit tests broken by deprecated kubebuilder-tools bucket #111
OCPBUGS-36083: Bump dependency for CVE #57
Full changelog

insights-operator

Ignore previous status when disabling alerts (#1059) #1059
OCPBUGS-45044: insightsoperator.operator.openshift.io resource is create-only (#1058) #1058
Add haproxy metric (#999) #999
Full changelog

ironic

OCPBUGS-97806: bump openstack-ironic pin for CVE-2026-54423 fix(release-4.14) #879
OCPBUGS-69788: Bump eventlet version to 0.33.1-7 #765
OCPBUGS-48147, OCPBUGS-48594: Bump jinja2 to 3.0.1-6.el9.2 #625
OCPBUGS-43954, OCPBUGS-43962: Bump python-waitress [4.14] #607
OCPBUGS-39019: Bump ironic-lib to fix utf8 decoding issue #571
OCPBUGS-32266: redfish-virtualmedia fails on XFusion nodes #548
OCPBUGS-37762, OCPBUGS-39382: Include fixes for CVE-2024-44082 #584
OCPBUGS-38508: set min version for python3-webob #555
Full changelog

ironic-agent

OCPBUGS-96901: Replace individual package removal with a single rpm -e loop #278
OCPBUGS-69779: Bump eventlet version to 0.33.1-7 #234
OCPBUGS-39019: Bump ironic-lib to fix utf8 decoding issue #158
OCPBUGS-39382: Include fixes for CVE-2024-44082 #163
OCPBUGS-33375: set webob and bump werkzeug #151
Full changelog

ironic-machine-os-downloader

OCPBUGS-87171: CI image build root tag and go version in go.mod sync with ART 4.14 config #120
Full changelog

ironic-static-ip-manager

OCPBUGS-49890: Fix subnet validation #50
Full changelog

kube-proxy, sdn

OCPBUGS-54991: Handle openshift-host-network namespace as special when it modifies #655
OCPBUGS-46536: Bump openvswitch #647
[Release 4.14] OCPBUGS-43484: NP-1092: backport SDN live migration #631
Full changelog

kube-rbac-proxy

OCPBUGS-31971: bump golang.org/x/net [4.14] #108
Full changelog

kube-storage-version-migrator

NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-14). #229
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-95080: OWNERS: Update component to Cloud Compute / KubeVirt Provider #81
Full changelog

kubevirt-csi-driver

OCPBUGS-83659: Bump google.golang.org/grpc to v1.79.3 #104
Full changelog

libvirt-machine-controllers

OCPBUGS-77198: Fix incomplete vendor #304
Full changelog

machine-api-operator

OCPBUGS-67840: bumped logrus to v1.9.3 #1459
OCPBUGS-53296: add image/read permissions #1350
OCPBUGS-48245: VSphere: Handle cloned instance with lost taskID #1322
OCPBUGS-47659: Ensure deletion annotation takes priority and oldestPolicy can distinguish longer ages #1318
OCPBUGS-43821: install/0000_30_machine-api-operator_00_credentials-request: Set skipServiceCheck again for GCP #1303
Full changelog

machine-config-operator

OCPBUGS-57341: Do not enable on-prem-resolv-prepender.path for UPI #5114
OCPBUGS-43743: Soften haproxy timeout for kubeapi probe #4664
OCPBUGS-54228: Update ObservedGeneration in KubeletConfig #4950
OCPBUGS-50631: Add clarification to invalid maxUnavailable alert #4848
OCPBUGS-48801: Wait for all subcontrollers #4808
OCPBUGS-46057: Remove trailing periods from AWS provided hostnames #4747
OCPBUGS-45271: Post upgrading from 4.14 to 4.15.36, the observedGeneration count increased tremendously #4725
OCPBUGS-42111: Do not use ‘restart’ for ‘oneshot’ service #4622
MCO-1278: Backport Telemetry to 4.14 #4672
OCPBUGS-43981: Panic seen in CI job for MCC pod #4671
OCPBUGS-43980: MCPs report wrong number of nodes when we move nodes from one custom MCP to another custom MCP #4673
OCPBUGS-37552: On-Prem resolv prepender to watch for NM changes #4500
OCPBUGS-35322: Decrease logs of haproxy #4405
Full changelog

machine-image-customization-controller

OCPBUGS-67827: bumped logrus to v1.9.3 #159
Full changelog

machine-os-images

OCPBUGS-87880: Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs #104
OCPBUGS-54171: Change rhcos release browser url #59
Full changelog

monitoring-plugin

OCPBUGS-74442: [release-4.14] fix: upgrade lodash to remove vulnerable code #906
OCPBUGS-78495: fix for CVE-2025-69873 #851
OCPBUGS-44392: fix cross-spawn vulnerable dependency #278
NO-JIRA: [release-4.14] OU-179: Fix the root cause of externalLabels not present on alerts #244
OCPBUGS-44137: upgrade dompurify dependency #243
OCPBUGS-43243: upgrade dynamic plugin sdk to remove vulnerable dependencies 4.14 #219
Full changelog

multus-admission-controller

OCPBUGS-58763: Bump github.com/golang/glog to v1.2.4 #105
OCPBUGS-42048: Update owners #91
Full changelog

multus-cni

OCPBUGS-85381: Sanitize bracketed hostnames in kubeconfig server URLs #295
Bump Go to 1.21 and fix CI build root image #293
OCPBUGS-85253: Fix server url in kubeconfig #287
OCPBUGS-48160: [backport 4.14] Adds a wait to account for the possiblity of a not ready unix socket #262
OCPBUGS-35578: Update owners file #243
Full changelog

multus-networkpolicy

Update owners (#62) #62
Full changelog

multus-route-override-cni

OCPBUGS-42049: [release-4.15]Update owners #60
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-55620: Fixes leftover podref issue #367
OCPBUGS-42047: Update owners #311
Full changelog

must-gather

OCPBUGS-42971: Collect etcd object count #457
OCPBUGS-48084: Update owners #475
OCPBUGS-48058: Support gathering IPsec data #472
OCPBUGS-43058: [Backport 4.14] Multus is now a Pod and will be captured by normal #451
Full changelog

network-metrics-daemon

OCPBUGS-58778: Bump github.com/golang/glog to v1.2.4 (#115) #115
OCPBUGS-60394: Replace e2e test image (#128) #128
swtich golint install method (#127) #127
Full changelog

nutanix-cloud-controller-manager

OCPBUGS-23873: fix for CVE-2023-47108 #43
OCPBUGS-17304, OCPBUGS-20899: bump golang.org/x/net to v0.17.0 #39
Full changelog

nutanix-machine-controllers

OCPBUGS-47265: fixing CVE-2024-45338 #116
OCPBUGS-51852: Fixing CVE-2025-22868 #108
OCPBUGS-17305: bump golang.org/x/net to 0.17.0 #85
Full changelog

oauth-apiserver

OCPBUGS-74926: bump kubernetes-apiserver to pick up loopback cert expiration update #174
NO-JIRA: (chore): update OWNERS #176
Full changelog

oc-mirror

changes the owners file (#1013) #1013
OCPBUGS-48513: e2e: use same version of crane as in go.mod (#1023) #1023
Full changelog

openshift-apiserver

OCPBUGS-82649: Address CVE-2026-35469 #659
OCPBUGS-74924: bump kubernetes-apiserver to pick up loopback cert expiration update #602
OCPBUGS-76483: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.14] #612
OCPBUGS-56613: Fix image reference in TestImageStreamImportQuayIO #518
OCPBUGS-50477: Pass expected type to deploymentconfig/scale object validation. #497
Full changelog

openshift-controller-manager

OCPBUGS-57940: Set node-pullsecrets volume to read-only to protect image pull credentials #398
OCPBUGS-56951: Empty proxy variables are causing issues during the build #386
OCPBUGS-48480: Add team members to the OWNERS file #360
NO-JIRA: cleanup root and app OWNERS #349
OCPBUGS-32869: replaces deprecated square/go-jose wtih go-jose/go-jose #342
OCPBUGS-41951: Add adambkaplan as approver #334
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-67853: Bump logrus #189
Full changelog

openstack-machine-api-provider

OCPBUGS-78172: hermetic 4.14 #165
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-87896, OCPBUGS-87899: Fix CVE-2026-33186 with openshift-sustaining/grpc-go v1.64.1-sec.1 [release-4.14] #1326
OCPBUGS-86253: Drop github.com/distribution/distribution dep #1304
OCPBUGS-61469: [release-4.14] Add NetworkPolicy as a supported kind #1052
OCPBUGS-61390: [4.14] e2e stability fixes #1085
OCPBUGS-46927, OCPBUGS-46934, OCPBUGS-47314: x/net bump to v0.34.0 [release-4.14] #941
OCPBUGS-46595: CRD upgrade existing CR validation fix (#3442) #921
OCPBUGS-45080: SSA for Services and ClusterRoleBindings #905
OCPBUGS-42828: add optional schema migrations; default to olm.bundle.object instead of olm.csv.metadata #878
OCPBUGS-41872: Fix e2e flake: upgrade CRD with deprecated version #865
OCPBUGS-42150: (fix) registry pods do not come up again after node failure (#3366) #872
OCPBUGS-42017: adds paginating lister for evaluating CRs’ upgrade fitness versus new CRDs. #869
Full changelog

operator-marketplace

OCPBUGS-62222: Remove Expect func so that the test case can use the retry logic #673
OCPBUGS-49427: Upgrade golang.org/x/net [release-4.14] #589
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-97816: External gateway: Remove routes for external gateway pods in terminating or not ready state #3286
CORENET-6055, OCPBUGS-78982: [release-4.14] Dockerfile: Unpin OVN and consume the latest from FDP #3073
OCPBUGS-59872: Dockerfile: Remove ovs version pinning #2695
OCPBUGS-57102: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.14 #2590
OCPBUGS-56420: Update to FDP25.A.1 24.03.5-40. #2574
OCPBUGS-48522: Let OVN-northd bind remote ports #2418
OCPBUGS-54732: Dockerfile.base: bump OVS version to 3.3 #2511
OCPBUGS-50584: Bump OVN to 23.09.6-12 to consume fix for FDP-905 #2455
OCPBUGS-45096: pin libreswan to 4.6-3.el9_0.3 #2368
OCPBUGS-44784: Bump ovs to 3.1.0-137 #2360
OCPBUGS-44793: Delete EgressIP LRP stale nexthops when node is not found #2361
OCPBUGS-42944: Fix egress gateway pod cleanup for remote zone pods. #2356
OCPBUGS-44379: Revert “Pin libreswan to the known working version 4.5” #2344
OCPBUGS-42952: pin libreswan to the known working version 4.5 #2323
OCPBUGS-42986: Add subnet overlap check for transit switch subnet #2317
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-67860: Fix CVE-2025-65637 by bumping logrus to v1.9.1 #100
Full changelog

powervs-cloud-controller-manager

OCPBUGS-36105: UPSTREAM: <carry>: Fix go-retryablehttp CVE 4.14 #75
Full changelog

powervs-machine-controllers

OCPBUGS-78039: hermetic 4.14 #136
OCPBUGS-54754: Fix for CVE-2024-51744 in github.com/golang-jwt/jwt/v4 in release-4.14 #116
OCPBUGS-41978: Update go.mod to fix CVE - 4.14 #86
Full changelog

prometheus

OCPBUGS-88588: remote: validate snappy decoded length before allocation in read endpoint #353
OCPBUGS-86878: Fix the inconsistent vendor directory #336
OCPBUGS-86878: Bump google.golang.org/grpc #323
OCPBUGS-43670: fix(discovery): Handle cache.DeletedFinalStateUnknown … #239
Full changelog

prometheus-alertmanager

OCPBUGS-100361: Set testdata CA expiry to 20 years from issue date (#4112) #147
OCPBUGS-77837: Include go-verify-deps expected files in gitignore #121
Full changelog

route-controller-manager

OCPBUGS-86883: [release-4.14] bump google.golang.org/grpc to v1.64.1-sec.1 #94
Full changelog

tests

OCPBUGS-74302: Skip E2e: attach on previously attached volumes should work #30727
OCPBUGS-63674: Fix regex parser #30391
OCPBUGS-61233: images/tests: Remove rteval #30208
OCPBUGS-55747: [build] Ensure Git Clone Does Not Run Privileged #29758
OCPBUGS-54770: Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com #29665
OCPBUGS-52583: Use payload pullspec for image info test #29591
OCPBUGS-51363: Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token #29567
OCPBUGS-51044: Add/remove team members to the OWNERS file for Builds #29554
OCPBUGS-44107: Adjust createDNSPod() to support hypershift dual-stack test #29256
OCPBUGS-39137: Bump timeout for the pod-network-service endpoints check #29062
OCPBUGS-38365: add Proxy config #28998
Full changelog

thanos

OCPBUGS-67876: CVE-2025-65637 Update sirupsen/logrus to 1.9.3 #167
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-78031: hermetic migration 4.14 #109
OCPBUGS-23889: Bump otelgrpc to v0.49.0 #70
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-78023: hermetic migration 4.14 #88
OCPBUGS-61655: Fix unit tests #74
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-79856: Bump Bump google.golang.org/grpc #179
OCPBUGS-67880: CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.8.3 #160
OCPBUGS-51045: Prevent node cache update during attach & detach #139
Full changelog

vsphere-csi-driver-operator

OCPBUGS-67879, OCPBUGS-67885: CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.9.3 #325
Full changelog

vsphere-problem-detector

OCPBUGS-67891: bump github.com/sirupsen/logrus to v1.9.3 #202
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github