4.14.74

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.14.74-x86_64

Qualifiers (status api): None

Tests:

Blocking jobs
- upgrade Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Succeeded (1 retry) periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
Informing jobs
- aws-ovn-serial Succeeded (1 retry) periodic-ci-openshift-release-main-nightly-4.14-e2e-aws-ovn-serial
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-main-ci-4.14-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.14-micro Succeeded periodic-ci-openshift-release-main-nightly-4.14-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.14-micro Succeeded periodic-ci-openshift-release-main-ci-4.14-e2e-azure-ovn-upgrade
- driver-toolkit Succeeded periodic-ci-openshift-release-main-nightly-4.14-e2e-aws-driver-toolkit
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.14-fips-payload-scan
- gcp-ovn-rt-upgrade-4.14-minor Pending (2 retries) periodic-ci-openshift-release-main-ci-4.14-upgrade-from-stable-4.13-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance Failed (1 retry) periodic-ci-openshift-hypershift-release-4.14-periodics-e2e-aws-ovn-conformance
  - Attempt 1 Failed
  - Attempt 2 Failed
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.14-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-ipv4 Succeeded periodic-ci-openshift-release-main-nightly-4.14-e2e-metal-ipi-sdn-ipv4

Upgrades from:

Untested upgrades: 4.13.23, 4.13.25, 4.13.26, 4.13.27, 4.13.28, 4.13.29, 4.13.30, 4.13.31, 4.13.32, 4.13.33, 4.13.34, 4.13.36, 4.13.37, 4.13.38, 4.13.39, 4.13.40, 4.13.41, 4.13.42, 4.13.43, 4.13.44, 4.13.45, 4.13.47, 4.13.48, 4.13.49, 4.13.50, 4.13.51, 4.13.52, 4.13.53, 4.13.54, 4.13.55, 4.13.56, 4.13.57, 4.13.58, 4.13.59, 4.13.60, 4.13.61, 4.13.62, 4.13.63, 4.13.64, 4.13.65, 4.13.66, 4.13.67, 4.13.68, 4.14.10, 4.14.11, 4.14.12, 4.14.13, 4.14.14, 4.14.15, 4.14.16, 4.14.17, 4.14.18, 4.14.19, 4.14.20, 4.14.21, 4.14.22, 4.14.23, 4.14.24, 4.14.25, 4.14.26, 4.14.27, 4.14.28, 4.14.29, 4.14.3, 4.14.30, 4.14.31, 4.14.32, 4.14.33, 4.14.34, 4.14.35, 4.14.36, 4.14.37, 4.14.38, 4.14.39, 4.14.4, 4.14.41, 4.14.42, 4.14.43, 4.14.44, 4.14.45, 4.14.46, 4.14.47, 4.14.48, 4.14.49, 4.14.5, 4.14.50, 4.14.51, 4.14.52, 4.14.53, 4.14.54, 4.14.55, 4.14.56, 4.14.57, 4.14.59, 4.14.6, 4.14.60, 4.14.61, 4.14.62, 4.14.63, 4.14.64, 4.14.65, 4.14.66, 4.14.67, 4.14.68, 4.14.69, 4.14.70, 4.14.8, 4.14.9

Loading changelog, this may take a while ...

Changes from 4.14.58

Created: 2026-09-16 13:40:19 +0000 UTC

Image Digest: sha256:b2feecdc0ab865bd24a3cc74b3ce18af33f73b41a13dea29a794ad08d99e4320

Components

Kubernetes 1.27.16
Red Hat Enterprise Linux CoreOS upgraded from 414.92.202510211419-0 to 414.92.202609111941-0 (diff)

Removed images

ovirt-csi-driver
ovirt-csi-driver-operator

Rebuilt images without code change

agent-installer-csr-approver git 54aa57eb sha256:ab57f5595fc95380cd83cb5b662c71c60898c85596727c6af851427e8ac9aa75
agent-installer-node-agent git 91a72812 sha256:f49b2de2b1b5eca9048d3acff8c1936563488de3480cccfd71932643fc8b4fda
agent-installer-orchestrator git 54aa57eb sha256:7122e1964fd1cc3e18970054765e88b966cb4a0d207e8ab0528846f117a28a17
agent-installer-utils git b3fa10c2 sha256:ca5af5fb4971e6d226e81cdd3a26ddf45a7188939b70cd5e68a319b6084c534d
alibaba-cloud-controller-manager git 8ba0b37a sha256:f74633922b58b9a8c05e3868176725ebd7fdd09907c35db74c97fa50a8c3d652
alibaba-cloud-csi-driver git 3dc363d3 sha256:c91cc38596d89d1de6efc65c2a998dfb2176580792b38ce3b6f4910557aa0eb6
alibaba-disk-csi-driver-operator git 8853e6ef sha256:fc216107a84c4df90a8fa96708187c8c9c7599cace159391fe36ca14ee562882
alibaba-machine-controllers git 27f105d3 sha256:05191daebcf275ab67fa2637e44674929cb543741a1dec74d2f362cdd09cf837
apiserver-network-proxy git f56c606a sha256:67fd5a9b65339f2c5700cd746b0762bf6a4f149779e5782739e1a527295780f9
aws-cloud-controller-manager git 9a7820e8 sha256:74d749c5ffbaebd2d9298fd8b0eb87d6fcee02a490e568c44027c72f4b9f422e
aws-ebs-csi-driver git 4622deec sha256:53125e8bf26e2a74eec5deae6c762025d041809ef9b4d3f020c54189b509afc6
aws-pod-identity-webhook git 2c864ca0 sha256:fa69c4ffc43d216efe30a70ed5d518934f8dcdaa8c592f1d0f7dc8639ace6e9e
azure-disk-csi-driver git 6d3558a3 sha256:f28e36bacf6a18a0539cf43c6c51fc3393f738de174dc8f85a9e270bb340d67f
azure-disk-csi-driver-operator git 91893576 sha256:7a7240d953761d7e7e732a11c33752b1d92d2c4300f0bf8a85e8873f92966bb1
azure-file-csi-driver git 71fa09b1 sha256:493ad6bed282c2ba6360dbe11775a2b8f13b0540e7232e2477638021b34dd8ce
azure-machine-controllers git d526284e sha256:7c90c54b6080544349a06d4bbf7629d2f7513f47e6494fadd95ddef7e54d2ee3
azure-workload-identity-webhook git 2cb82019 sha256:fe53891d6ca489a10325642cc2dc4e31a55cb28ba87a023ac1250c77f6c0fbab
baremetal-operator git 483d0191 sha256:11276d6fcfa99885f4320ba6a364d662aebfd8c5f165b6703c7d547634e77549
baremetal-runtimecfg git 0ba9e555 sha256:28e9084a57b8eaf54ee499447cc35799ba4f06a612bde0ec2c0f5bb2706580c1
cli git 44b3ac26 sha256:139e3b11ff5b538e34d321c2bfbd68d8169ee6e32ccc69f5a39d6963b28e4e59
cli-artifacts git 44b3ac26 sha256:dbb56be3feb74eb1fc6a96fabc9eb548e4dabb804ffaf0c562cc16312aaf8ea9
cloud-credential-operator git b491a819 sha256:1203c6de04161cb92b0681c0b0dc192dd905e70a36fe5356a02b64709b68e735
cloud-network-config-controller git 1bd04641 sha256:3db659b9a7d3b1331d0416efe0ad8aefa1fd772bbdf99a6b651f000bde785fbe
cluster-authentication-operator git 9203d4d5 sha256:bb1b8db6bc58008c9933e396fcb76665f5550fd757c054209998097fc469d810
cluster-autoscaler git d030dbaa sha256:ee9ee68a6521912535c7ef6762bca3a2fcb510bedbdc0f6292f3176b556eb2d6
cluster-autoscaler-operator git 32854baa sha256:718e29eae55175d428ec382c254f39c4982aaa7a0c08cbe7174588543805c34a
cluster-bootstrap git 93fba13f sha256:907b1b3cee0c8b393209a31e876fe7c6952520f930672d9ef518310c7107c64d
cluster-config-operator git 2378670a sha256:8c234b3f82f4f5e9f47df461c627dc5d600ff4343c67b6357645257b557b328e
cluster-control-plane-machine-set-operator git 783d9dd1 sha256:5784f12dfead026a139e42c53b1189113b27a61ad8725d1a03d50c252f0cb277
cluster-csi-snapshot-controller-operator git d4a11625 sha256:4a67cbb582d0689c12ddf804429783f4a6e335a34f38f680e6083e27d955bbf8
cluster-dns-operator git 0164e3c4 sha256:37df6ffcfbc2f08261a7a62bfc6b8ed0ccc6f91d8c69d2f92b3cbacd942198d5
cluster-kube-cluster-api-operator git b287d08b sha256:b54ccfdc4ef20713467b557897e0fc0b90134eee386425699a2aa1674b5977b9
cluster-kube-controller-manager-operator git 4e059638 sha256:ec5ed8f08613a827d6cd185ff3a72eb5c44da54be778b405479cae85165aa860
cluster-machine-approver git 38a758d0 sha256:15112d9bad8330595fc0ae1df3823ce392332739c6fd9dbac6f704985b8e25c3
cluster-node-tuning-operator git 5511c8df sha256:b2b4ca94e5302bfd7f0a71ca8fadf1e46f78508fd2120dc83833ec52341d7494
cluster-openshift-controller-manager-operator git 09d62091 sha256:d6bf27f062dfe4981d595972516527679128e00d453d9e88b6ffd586c9d79d3d
cluster-platform-operators-manager git 08fb27e7 sha256:d279eced09a4df5df702afc037ffbea4c314eba169c10eb16106f1b028ffd0fd
cluster-policy-controller git 219f6f6f sha256:b1655bd5476aa2e81d42d9636ce4a00b27466a798f171de261e3a955298eb6b6
cluster-update-keys git 1a7a6e22 sha256:61950686bd3f956d04e1d5d485593772a4065ae023e52563c37b4499d64188ca
cluster-version-operator git a1bf9301 sha256:c1510440a71e30b548dba007cf8dc44b932377451a96767f4e7a06cfe01e582a
configmap-reloader git 716a0c33 sha256:f9435a98e331835de545f68ebbdb2dec579a881f39fa36c07d88659aa4ac5986
coredns git d10f7ff3 sha256:67bb0289e121e4a120f0442e9257c0130611c46042b8baaa8e93ccc473c50de6
csi-driver-shared-resource git 9232c1ff sha256:279df0f84c3af80c7b551b76e1764707bf642736d77d3f3190b9eec53e623d63
csi-driver-shared-resource-operator git c273cd52 sha256:0d1def23b8490a7d7d86204ffb4f0d66ff37087505835e3cfedfa890d7037743
csi-driver-shared-resource-webhook git 9232c1ff sha256:f5a9faac55ef0c5922a23a6c4affef82150c06288517a3260db07ed601ea4040
csi-external-attacher git 06e8ce0d sha256:f71be043c0ad81ba1d7e932e5fe836ccd940d36fae5db898f9ef975488f577dc
csi-external-provisioner git e18ed7f0 sha256:e6475d25f21cbe204a898da067353b6cbb6adf5fd4264b34e2da9e8cd85b92f4
csi-external-resizer git 59a701a4 sha256:b2a5038c0eef217ef796fc7b1f2c1dfebcc635bcee990ec923787abef31c9c3c
csi-external-snapshotter git a6834536 sha256:5e3dd19ca9154d3f5a3443bb151c8865784ec78a4acd7605b3fe45fb4abf97a8
csi-livenessprobe git a9bcbde1 sha256:4cdeed9aa357ee430abe39d349fde9ca0566a4f9a326315c476944bf1f98fb0d
csi-node-driver-registrar git 9dcaa7f5 sha256:2fd481deb82ba5a93a293bb783925f52d8d3650246873bb28c00d97632cc3596
csi-snapshot-controller git a6834536 sha256:17b61a548ddb734fc583eb2452f5f411a85b66386c5f758e7709a7c39bea1eac
csi-snapshot-validation-webhook git a6834536 sha256:3bb25c5709bdb1ecebcd6d272528f777a1ecf5bf2cd3fc43eb74ce37bfe892c1
deployer git 44b3ac26 sha256:ffaa9c85d0b56f07087eb4cea6dc4bcd1c186dcb312a818fa82c5c6be8001a66
docker-registry git ce0483f1 sha256:c35c5a44f3cb56124e33a3ca6261518e2785913dc5aa6e9678e3bae1fe4de11b
driver-toolkit git cafed17b sha256:7ddda0f3d367587d8214806b0fc19e0477c95384c6d7694a9fc12ea25905f44b
egress-router-cni git 96f2f54f sha256:1d0ae685889dace1614912376fc1ae304a51a92671fe2181c6a3b8061d5cbccd
etcd git 5ed5044c sha256:f0f15befb7358db3f02daca82ec5465d9af70d69fe54762738488c15c42b063e
gcp-cloud-controller-manager git 09e96a91 sha256:a69922cbe434d1e6e85be03666498fdfaa5e680cdf99c49f99987164c609b21e
gcp-pd-csi-driver git 8a626fe5 sha256:a52eb874993a3fe7ced182ce60efe35497bfdae202670cf8989fdd4163202439
gcp-pd-csi-driver-operator git 95d55a04 sha256:8fead685cb52af2ee29896735e71e0b85b3f972e5c839807cb8bea0b709feb6a
ibm-cloud-controller-manager git f39488c5 sha256:ce2361516e51f87bc46ed19323b70a5a8872e7f164825b4f622390510def28c1
insights-operator git acc99f55 sha256:002fa41576264e92e3901e9b793dd7e8d6f210c4dfd7d54f9f664da1b403844b
ironic-static-ip-manager git 1b194fd1 sha256:fc84a3233a1523eaa71b8fadb7ee371124d3cc3bc78ba5cc68c6f059c3a54c14
k8s-prometheus-adapter git 801a912b sha256:4ff0ac4ce9a1a81ef0f41bcab801d5f3393eb03ed7ceea5397301a6c5fc35d84
keepalived-ipfailover git 03e5f407 sha256:38dc9734ffb45c56796c78a271b560ef2bebecd4f974f2eaf76c1b73b450c19a
kube-proxy git 1f611c53 sha256:8e0338b77a3753f1ba41a3ff5cadb743cfb7921edffa7ca22b4980c9b754bbae
kube-rbac-proxy git b8b82595 sha256:3ce7999295a0e188277824a004816316e58f0f2f4f76a790c62736357bd26bc9
kube-state-metrics git db0c5499 sha256:c7fec752ba4e9cf0867a846161a1c9f06beaf53b9806db01ada2662ee688c23c
kube-storage-version-migrator git b533e08c sha256:b30298d9e4a22b48521f54f3f5cce256b74ca79641c133fc5b3dc5f8f3355fde
kuryr-cni git 8926a294 sha256:0f5eb58863e2eadfb4a5b3d0107ddd2cd85d1dd25f61bdec3217f25fc395ceba
kuryr-controller git 8926a294 sha256:8a5d7d9491a3699fec5506b11a097e6a38c3af37d707495a20f5aceb5511d82f
machine-config-operator git 00b2e0b1 sha256:b1c82d6ff81553539c09e47cf4a4ff478b921b5d67850e914780f19575ac0cf4
machine-os-content sha256:695334e426647a077ecb8fe06322b650696f426c8b56c297c8d7baaf08ea051b
multus-admission-controller git 75d37a9c sha256:ffae4215ff2254ff4d31c217e6cd935e6f338c2c438184cda67f16d6b5b612f8
multus-networkpolicy git f670647c sha256:33fab17ac92954091b2fc8737aeadcc03f8bc5c1e047d20146c1e78093a5875a
multus-route-override-cni git 5965fed6 sha256:e2f2b9e8e6b11cecf323c4780c373c5d3d809b6941b2a42cc2df7a190f52a39a
multus-whereabouts-ipam-cni git f95487b0 sha256:6cf0e2c66628abead275f13060b740e8090505ed673a6d46844478483d8afa6a
must-gather git b8585ca8 sha256:25fb8570812d57732a1fb3d882bf1b9bdc83060a3ac1a51f5e9d00928597fcf9
network-interface-bond-cni git 29f61f6b sha256:4b50daadb6940b5978e689044382480da9df005bcb5d9b498f70573b90bebdb3
network-metrics-daemon git 84d7ac4e sha256:1571249594c8613a9546807a27a15d6a37098a3f8f44f570757a10931aab510a
network-tools git e79d8173 sha256:f608f560602a218d22d74831f46dce1ee8e21a2904bab668ca41976473a452fb
nutanix-cloud-controller-manager git 8930f295 sha256:dae4dee589e8d73daf107384fecb2cf121b0d8e4cf8b13ffed7a0cb6c63c0097
nutanix-machine-controllers git c0661680 sha256:19e268228d0f24101a791de041bb4af4892b727c7b927ac9e4962b5928da348f
oauth-server git 35f4739f sha256:b50e43f78316b4f4b7b9c8c5aeb7524b360cef3da9968ee419d59b06dce73200
oc-mirror git 056043d1 sha256:f98aefff3d5eb4af27814f779c228ba11714f24b2885165ae3b8d4184da9dd60
olm-catalogd git a333cb0b sha256:8cf8587247c7a11314db36c4533fcb94c194f4b15a347282eacea3d51b41799c
olm-operator-controller git fb6fb278 sha256:c145390324ca715d278a6fc8f20da1b60bebbaa9fea03959aa26552477201408
olm-rukpak git c9409c62 sha256:b55c863d7489e468604931dfd27a26a6cbef68fd05c20593c38f961530095aef
openshift-controller-manager git 1c76570b sha256:476c3c0f4c3ad08b0b963543b33c4c191356bd0464da4c883955228cb9436e37
openshift-state-metrics git dff4b0f4 sha256:d912bb1c3e31bfeefe1324f9c15961a04662b90c1a9d9b2d758f8c81888e0ac0
operator-marketplace git 63ccdc55 sha256:75dc2c8e7e6dca6452924e573c2daa09c91336f233bd45db924bd65e9eeb2491
ovirt-machine-controllers git 5d708631 sha256:e50472754d25fc99ec8abd744922bffeb35d34811a6ed7ce04a9cbe99678513e
powervs-block-csi-driver git 988f7109 sha256:71c24068592414ba041466b235c34057b6f650fe9f054eaf70b2df3124a319d7
powervs-cloud-controller-manager git 19cf1d3f sha256:20563a94a40bd1df7dac019c11659e5945803146a182aaa1e1acfa820d3044db
prom-label-proxy git af40ed09 sha256:11f430311f27c3d3a336859f390c5c54b996906a35e3e76337ca0a4e56ea4eca
prometheus-config-reloader git a4b845a7 sha256:c94c6b7b5c033accec2756a3629960f79ec68392bb3e5b9e1685bc333014a1b7
prometheus-node-exporter git 5ee0a9d9 sha256:5eed68f07d2f82ae8a449aa49101c510c85de32e702b798a7f1c5838adaf9f86
prometheus-operator git a4b845a7 sha256:372e23cb472dffdfd6493264e046b5fae2258aaa520c70726bc982584969d89c
prometheus-operator-admission-webhook git a4b845a7 sha256:98a46aef6f2464b481aab4ccf90aeda32894d2b40b45daa9670a5a9f7bc9838c
rhel-coreos sha256:f1cc81da5a5422a34a3a5ebc1bf3ec70fc5f24ba1ffc9344efc1e6a89f69af94
rhel-coreos-extensions sha256:2ea41bdf24faae34ac468fec42f152e7ad61bbdc045a51d04038747b85c733ca
sdn git 1f611c53 sha256:9c044dc9b8f5a4dc84106c2e5e98722c377bc5c6ab3335f1b79b8563437045e6
service-ca-operator git 3c3f82f7 sha256:12442679d555932f6b019ca927721c3553b22eea5cf90373961fba20091995b5
telemeter git 1f726816 sha256:0b8fbc138f5dccc055c07a467899108d1c4ac6637e2e8e0b4038b7d7f22ecbcf
tools git 44b3ac26 sha256:7cd6f9980ca3e8c63458af6f4a2b18725bfa1bf2921e7870aa8408530be959f9

agent-installer-api-server

MGMT-23439: Bump Go 1.18 to 1.20 and regenerate code #10042
OCPBUGS-78112: [release-4.14] NO-JIRA: hermetic 4.14 #9955
MGMT-23439: Use archived dnf repositories for CentOS Stream 8 #10018
Full changelog

aws-cluster-api-controllers

OCPBUGS-78229: [release-4.14] hermetic 4.14 #593
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-102508: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 #316
OCPBUGS-67748: Updated logrus to v1.9.3 #313
Full changelog

aws-machine-controllers

OCPBUGS-63142: client: re-use a single file for building the session instead of randomly named files #154
OCPBUGS-63142: revert: client: re-use a single file for building the session instead of randomly named files #151
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-79820, OCPBUGS-79821: Fix CVE-2026-33186 with openshift-sustaining/grpc-go v1.64.1-sec.1 [release-4.14] #192
Full changelog

azure-cluster-api-controllers

OCPBUGS-78178: [release-4.14] Hermetic 4.14 #366
Full changelog

azure-file-csi-driver-operator

OCPBUGS-67753: Bump github.com/sirupsen/logrus to v1.9.3 #114
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-79654: Azure UPI ARM template: use storageAccountId #10435
OCPBUGS-76930: terraform/provider/google: Fixing inconsistencies with service account creation #10324
OCPBUGS-62601: update resolv.conf every time on bootstrap node #9985
Full changelog

baremetal-machine-controllers

OCPBUGS-78101: [release-4.14] fix vendor/ for hermetic migration #245
Full changelog

cluster-baremetal-operator

OCPBUGS-77449: Bump github.com/go-errors/errors to v1.5.1 #564
Full changelog

cluster-capi-controllers

OCPBUGS-77974: [release-4.14] fix vendor for hermetic #265
Full changelog

cluster-capi-operator

NO-JIRA: Allow sustaining engineering to self serve dependency updates #562
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-63170: ccm: disable unused secure-serving port and webhook #425
Full changelog

cluster-etcd-operator

OCPBUGS-67770: Update logrus to 1.9.3 to address CVE-2025-65637 #1548
Full changelog

cluster-image-registry-operator

OCPBUGS-67771: Bump logrus to 1.9.1 #1290
Full changelog

cluster-ingress-operator

OCPBUGS-86711: Add configuration override for X-SSL strip #1492
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-67775: CVE-2025-65637 openshift4/ose-cluster-kube-apiserver-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.14.z] #2045
Full changelog

cluster-kube-scheduler-operator

CNTRLPLANE-2843: chore: update OWNERS #626
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-67780: Bump github.com/sirupsen/logrus to v1.9.1 #141
Full changelog

cluster-monitoring-operator

OCPBUGS-76415: test: remove image registry e2e tests #2811
Full changelog

cluster-network-operator

OCPBUGS-84184: fix(hypershift): use net.JoinHostPort for URL construction #2996
OCPBUGS-78105: fix vendor for hermetic 4.14 #2913
Full changelog

cluster-olm-operator

OCPBUGS-86344: Update grpc-go to v1.64.1-sec.1 to fix CVE-2026-33186 #209
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-76593: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.14] #658
Full changelog

cluster-samples-operator

OCPBUGS-63518: references to github.com/sclorg/django-ex.git now also refer to the branch #661
Full changelog

cluster-storage-operator

OCPBUGS-87736: remove oVirt code from CSO 4.14 #711
OCPBUGS-67795: Bump logrus to v1.9.3 #655
Full changelog

console

OCPBUGS-100511: Bump postcss to fix CVE-2026-45623 #17109
OCPBUGS-105791: Disable failing OLM and pipelines e2e tests to unblock CI #16956
OCPBUGS-90614: Fix JSON annotation parsing to prevent OperatorHub crash #16659
OCPBUGS-87989: [release-4.14] shell-quote: Arbitrary code execution via command injection due to unescaped line terminators #16597
OCPBUGS-77116: [release-4.14] CVE-2026-26996 Bump minimatch library #16348
Fix for OCPBUGS-81595: CVE-2026-4800 #16568
OCPBUGS-88422: Bump axios to ^0.33.0 Addresses CVE-2026-44486 #16789
OCPBUGS-79434: CVE-2026-29063 Bump immutable #16329
ART-18713: pin fsevents to latest #16473
NO-JIRA: enable multi-architecture yarn builds #16424
OCPBUGS-83297: [release-4.14] openshift4/ose-console: Axios: Remote Code Execution via Prototype Pollution escalation #16311
NO-JIRA: Updating openshift-enterprise-console-container image to be consistent with ART for 4.14 #16168
CONSOLE-5011: migrate to yarn berry #16082
NO-JIRA: Bump builder image to v29 #15991
OCPBUGS-74439: Bump lodash to latest #15971
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

console-operator

OCPBUGS-77994: [release-4.14] hermetic 4.14 #1131
OCPBUGS-77994: [release-4.14] NO-JIRA: update go mod dependency for konflux #1117
Full changelog

container-networking-plugins

OCPBUGS-78286: fix vendor for hermetic 4.14 #225
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-79847: Apply code mitigations for CVE-2026-33186 #399
OCPBUGS-67800: fix CVE-2025-65637 #363
Full changelog

csi-driver-manila-operator

OCPBUGS-67801: Bump logrus #253
Full changelog

csi-driver-nfs

OCPBUGS-84929: Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.64.1-sec.1 to avoid go version bump and fix CVE-2026-33186 #184
Full changelog

docker-builder

OCPBUGS-66112: BuildConfig inline Dockerfile fails with heredoc syntax #492
Full changelog

gcp-cluster-api-controllers

OCPBUGS-78282: [release-4.14] update go mod dependency for konflux #269
Full changelog

gcp-machine-controllers

OCPBUGS-79841: Bump google.golang.org/grpc to v1.79.3 #168
OCPBUGS-79841: Fix setup-envtest GCS 401 by downloading binaries directly #178
Full changelog

haproxy-router

OCPBUGS-86711: Strip X-SSL-* headers for plain HTTP #807
OCPBUGS-74947: Adding escapeHAProxySingleQuotes for sanitize [release-4.14] #782
OCPBUGS-86966: Regenerate expired test certificate for unit tests #781
Full changelog

hyperkube, pod

OCPBUGS-59473: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2364
OCPBUGS-67736, OCPBUGS-67822: CVE-2025-65637 - bump github.com/sirupsen/logrus to v1.9.3 [4.14] #2586
NO-JIRA: fix verify job failure #2584
OCPBUGS-74302: Skip E2e: attach on previously attached volumes should work #2570
OCPBUGS-59473: UPSTREAM: <carry>: disable some legacy cloud provider Azure tests #2579
Full changelog

hypershift

[release 4.14] Fix OCPBUGS-99086: CVE-2026-16242 konnectivity agent auth #9131
CNTRLPLANE-3979: Update release-4.14 Konflux pipelines to use shared pipelineRef #9196
OCPBUGS-84184: fix(cno): use brackets only for IPv6 in server URL #8370
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-79836: Bump google.golang.org/grpc to v1.79.3 #156
OCPBUGS-77212: [release-4.14] standardize build paths #126
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-67825, OCPBUGS-67826: bump github.com/sirupsen/logrus to v1.9.3 #166
Full changelog

ibm-vpc-node-label-updater

OCPBUGS-102599: Bump golang.org/x/net to v0.35.0-sec.4 #63
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-102592: Replace golang.org/x/net with openshift-sustaining/net #168
OCPBUGS-115546: Fetch envtest assets from the controller-tools releases #179
OCPBUGS-67290: [release-4.14] Fix incomplete vendor/ #136
Full changelog

ibmcloud-machine-controllers

OCPBUGS-102612: replace golang.org/x/net with openshift-sustaining/net v0.35.0-sec.4 #108
NO-JIRA: fix unit tests broken by deprecated kubebuilder-tools bucket #111
Full changelog

ironic

OCPBUGS-97806: bump openstack-ironic pin for CVE-2026-54423 fix(release-4.14) #879
OCPBUGS-69788: Bump eventlet version to 0.33.1-7 #765
Full changelog

ironic-agent

OCPBUGS-96901: Replace individual package removal with a single rpm -e loop #278
OCPBUGS-69779: Bump eventlet version to 0.33.1-7 #234
Full changelog

ironic-machine-os-downloader

OCPBUGS-87171: CI image build root tag and go version in go.mod sync with ART 4.14 config #120
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-95080: OWNERS: Update component to Cloud Compute / KubeVirt Provider #81
Full changelog

kubevirt-csi-driver

OCPBUGS-83659: Bump google.golang.org/grpc to v1.79.3 #104
Full changelog

machine-os-images

OCPBUGS-87880: Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs #104
Full changelog

monitoring-plugin

OCPBUGS-74442: [release-4.14] fix: upgrade lodash to remove vulnerable code #906
OCPBUGS-78495: fix for CVE-2025-69873 #851
Full changelog

multus-cni

OCPBUGS-85381: Sanitize bracketed hostnames in kubeconfig server URLs #295
Bump Go to 1.21 and fix CI build root image #293
OCPBUGS-85253: Fix server url in kubeconfig #287
Full changelog

oauth-apiserver

OCPBUGS-74926: bump kubernetes-apiserver to pick up loopback cert expiration update #174
NO-JIRA: (chore): update OWNERS #176
Full changelog

openshift-apiserver

OCPBUGS-82649: Address CVE-2026-35469 #659
OCPBUGS-74924: bump kubernetes-apiserver to pick up loopback cert expiration update #602
OCPBUGS-76483: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.14] #612
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-67853: Bump logrus #189
Full changelog

openstack-machine-api-provider

OCPBUGS-78172: hermetic 4.14 #165
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-87896, OCPBUGS-87899: Fix CVE-2026-33186 with openshift-sustaining/grpc-go v1.64.1-sec.1 [release-4.14] #1326
OCPBUGS-86253: Drop github.com/distribution/distribution dep #1304
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-97816: External gateway: Remove routes for external gateway pods in terminating or not ready state #3286
CORENET-6055, OCPBUGS-78982: [release-4.14] Dockerfile: Unpin OVN and consume the latest from FDP #3073
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-67860: Fix CVE-2025-65637 by bumping logrus to v1.9.1 #100
Full changelog

powervs-machine-controllers

OCPBUGS-78039: hermetic 4.14 #136
Full changelog

prometheus

OCPBUGS-88588: remote: validate snappy decoded length before allocation in read endpoint #353
OCPBUGS-86878: Fix the inconsistent vendor directory #336
OCPBUGS-86878: Bump google.golang.org/grpc #323
Full changelog