4.15.65

Download the installer for your operating system or run

oc adm release extract --tools registry.ci.openshift.org/ocp/release:4.15.65

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded (1 retry) periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- upgrade-minor Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.15-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-main-ci-4.15-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.15-micro Succeeded periodic-ci-openshift-release-main-nightly-4.15-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.15-micro Failed (3 retries) periodic-ci-openshift-release-main-ci-4.15-e2e-azure-ovn-upgrade
- driver-toolkit Succeeded periodic-ci-openshift-release-main-nightly-4.15-e2e-aws-driver-toolkit
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.15-fips-payload-scan
- gcp-ovn-rt-upgrade-4.15-minor Succeeded (1 retry) periodic-ci-openshift-release-main-ci-4.15-upgrade-from-stable-4.14-e2e-gcp-ovn-rt-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- hypershift-ovn-conformance-4.15 Failed (1 retry) periodic-ci-openshift-hypershift-release-4.15-periodics-e2e-aws-ovn-conformance
  - Attempt 1 Failed
  - Attempt 2 Failed
- metal-ipi-ovn-dualstack Succeeded periodic-ci-openshift-release-main-nightly-4.15-e2e-metal-ipi-ovn-dualstack
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.15-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Untested upgrades: 4.14.19, 4.14.20, 4.14.21, 4.14.22, 4.14.23, 4.14.24, 4.14.25, 4.14.26, 4.14.27, 4.14.28, 4.14.29, 4.14.30, 4.14.31, 4.14.32, 4.14.33, 4.14.34, 4.14.35, 4.14.36, 4.14.37, 4.14.38, 4.14.39, 4.14.40, 4.14.41, 4.14.42, 4.14.43, 4.14.44, 4.14.46, 4.14.48, 4.14.49, 4.14.52, 4.14.53, 4.14.54, 4.14.55, 4.14.56, 4.14.57, 4.14.58, 4.14.59, 4.14.60, 4.14.61, 4.14.62, 4.15.10, 4.15.11, 4.15.12, 4.15.13, 4.15.14, 4.15.15, 4.15.16, 4.15.17, 4.15.18, 4.15.19, 4.15.20, 4.15.21, 4.15.22, 4.15.24, 4.15.25, 4.15.26, 4.15.27, 4.15.28, 4.15.29, 4.15.30, 4.15.31, 4.15.32, 4.15.33, 4.15.34, 4.15.35, 4.15.36, 4.15.37, 4.15.38, 4.15.39, 4.15.40, 4.15.41, 4.15.42, 4.15.43, 4.15.44, 4.15.45, 4.15.48, 4.15.49, 4.15.5, 4.15.50, 4.15.51, 4.15.52, 4.15.53, 4.15.54, 4.15.55, 4.15.56, 4.15.57, 4.15.58, 4.15.59, 4.15.6, 4.15.60, 4.15.61, 4.15.7, 4.15.8, 4.15.9

4.16.64 (changes) - Failed
4.15.64 (changes) - S F F F F S S F S
4.15.63 (changes) - Failed
4.15.62 (changes) - Success
4.15.47 (changes) - Failed
4.15.46 - Success
4.15.23 (changes) - Failed
4.15.3 (changes) - Failed
4.15.2 (changes) - Failed
4.15.0 (changes) - Success
4.14.66 (changes) - Success Success
4.14.65 (changes) - Success
4.14.63 (changes) - Success
4.14.51 (changes) - Failed
4.14.50 (changes) - Success
4.14.45 (changes) - Failed
4.14.18 (changes) - Failed
4.14.17 (changes) - Failed
4.14.16 (changes) - Failed
4.14.0-0.nightly-2026-06-03-180920 (changes) - Failed Success

Upgrades to:

4.16.64 (changes) - F F F F F F F F S F S S F S

Loading changelog, this may take a while ...

Changes from 4.15.46

Created: 2026-06-04 13:21:18 +0000 UTC

Image Digest: sha256:5bc12d09997fd6b86a5d7ab2a5bf482474cb95b624c22a4d05607e3397302cac

Components

Kubernetes 1.28.15
Red Hat Enterprise Linux CoreOS upgraded from 415.92.202502141247-0 to 415.92.202606030318-0 (diff)

Removed images

ovirt-machine-controllers

Rebuilt images without code change

agent-installer-utils git 33b7d855 sha256:979949d343b9f169c1196cc43c34d2807132c4c9ef949fae533e0ffaefbecdfb
alibaba-cloud-controller-manager git abf4fa96 sha256:83ea57b709594c197d71c320dd6dd3709a20b5ea62878eb24384d9b0aa31b4af
alibaba-disk-csi-driver-operator git 41b367ae sha256:5b6d809b79b77f6f0c6e899a1b3096211814ec48743d3e29dc006da9ed559990
alibaba-machine-controllers git f7f5eed8 sha256:250f83210361dcadfa24b244490b17f5c2ba8a4e2c0e08cf709c49fbcd2655e5
apiserver-network-proxy git adccbd5c sha256:9f0113e30591f20a32688e017f89d83a6fd266f9be922cbe3ef31c96536d1c8f
aws-cloud-controller-manager git fd77d92c sha256:bd57b4b2861b896b353325dc49fc024f1813cad0660830d33454edd8fcddf169
aws-ebs-csi-driver git 7043c1cc sha256:ad1c97cb134a730e4b7f85d23defa4c1b37aced36c1f1476b4df86434b1ba5c9
aws-pod-identity-webhook git 13385034 sha256:caa3fe19d1fdb6c15ff88df84c626c6d78e24d840137e1889275d8ef3e1fdb92
azure-cloud-controller-manager git 0d799a26 sha256:0ca5da09b11f70667b983795ea6443e169664168386d8ba5e568d6469623bdf5
azure-cloud-node-manager git 0d799a26 sha256:31f23aa367feb1f64860f132502b9791b5f89cc0059478efe66630d267760ba0
azure-disk-csi-driver git dcb7e1c7 sha256:cff18663a6bcb5208c0dcd9821b83781d80ec3670112d330f31fdcc4e7394858
azure-disk-csi-driver-operator git 160cf624 sha256:f8bccfff72a6b9771ed2a7bcd4db414f0bb30ca615556f5389e2ccf4a2ded640
baremetal-runtimecfg git 1fbb2c0c sha256:466d5cb704e96497b94ee2478ac9efe62274b801b9c91ca8cae36437dae00292
cli git 82316376 sha256:00970bd2dcf113b4268995afd900ae6d3d2a6218e3faf9f7c91ffa07064a2b3e
cli-artifacts git 82316376 sha256:3142889169734cc30401c5ca91c61ae2babd2cdccd13da3bc27a94dc23f321fb
cloud-network-config-controller git 6864da06 sha256:37d11c57600f597bfa14565b8431f463c4fdd71ca9f97314011be1999cf4cb65
cluster-authentication-operator git 7aaa40eb sha256:4956897563855904dc1659be00a76d45dd72ef6028c7e7eb57d040f29a5c7951
cluster-autoscaler git 89149896 sha256:137eb5bfc4119c2969214ea8858e6b7887bdd28554e542f5d0c06807d121a4af
cluster-autoscaler-operator git 8425d88b sha256:e86ab7713b82587c8619691bcf7ab9e34c8aa5793a883a2af4e6da2c4c9515e8
cluster-bootstrap git 0849c462 sha256:f5eddb16eff5f5aa1af6ab30d53adaac6a7aac97d28ec15e2c34f4fa48ebf42a
cluster-capi-controllers git 2053e13c sha256:f63dd0ac521a6448929301eacc7c1ba104756f1ae6fb4cbf85828f5ef395a4b8
cluster-config-api git 0a58f8c3 sha256:da9ec8687da66aa4956a443dfb1144b7f620f507d775eac6b290ac5b477244d8
cluster-config-operator git 0b4c69fd sha256:2841128079c1c325e235735258bdae643c21a6fe54bd4ca6c6f7321b1b728f19
cluster-control-plane-machine-set-operator git e1b692b1 sha256:7f96133e8cad80337ccc551bdd4c659d8e99e79a0f03fa85a19e1ba775c7329a
cluster-csi-snapshot-controller-operator git 65dbb12b sha256:988e8d23247c483429c0a7a5a5638dee36b6757cce08d4dcd829f463c11f34c7
cluster-kube-cluster-api-operator git 128d8e08 sha256:52fa1e877d79062c58eb02b9d86e9645ff501b0071d31970293e739a90ddd511
cluster-machine-approver git 863813ec sha256:779b047f5d8ec92dea564a6de1d8ce60a26e8e7a3ec976dc47a2d1f2517cb9e2
cluster-node-tuning-operator git e828bd93 sha256:2d3af3d60aed2db50fbb3a3dc15e6591630c6895ea2fca725432413d55e144ef
cluster-openshift-controller-manager-operator git 1ae0ba75 sha256:036ed785575b7ea37ebf4322941accaf5080a4f878bb87c2c97dd7b1f514355a
cluster-platform-operators-manager git 37a0a919 sha256:a16bf8f681984defed18e60566d59e308cf0d556915c3a461c8887a0f0169726
cluster-policy-controller git cc48f315 sha256:c121f64aec5d9f1202eefc0c0a761692a6b8b37e7765cbcf38319732ff67d2c8
cluster-update-keys git 802233d8 sha256:a133b7d17030050c347def979d40ebcff2221f81ff13e430ce0ed1abf7c2591c
configmap-reloader git 617398f5 sha256:c5220b69440fa490e4be1e96dd730cd5875c18d325b1a61dc62138748385850c
csi-driver-shared-resource git 260a085a sha256:f7f86cdcc00bd5c04c7de860dd08d4914d8b327a3d1ea76d66a955bb1e6f7979
csi-driver-shared-resource-operator git 8d017b7f sha256:bb283d5b3686acacba03cc7fc36ecd64db7df855802ad09d24041e5e5ffb0710
csi-driver-shared-resource-webhook git 260a085a sha256:7bdebe393f48daa302c560d0e8f99a5cc9c2a1e580bbe7bb4a365796067ddc0c
csi-external-attacher git f806f266 sha256:588b5555d2498349c66291d5ec7dcd34129fd109bd667bdaf7fb62d0abf675eb
csi-external-provisioner git ce5a1a33 sha256:3143f8735f46bd43809285849e9d7adcd751774773f61b4f8c4242126b152af0
csi-external-resizer git 3b4236d3 sha256:7f7208178ba7332ebd4fd108ba57dee4b3b68b33df34186564b6c7f95e9f6026
csi-external-snapshotter git 4f2955c7 sha256:c43ee35da85f31d70c228e5e335827a83adebc16f0725c75020f60893844ea16
csi-livenessprobe git 240bb8c0 sha256:148ee055f669e4e5a8c028868a17c7111f35faef1a94d52ca205ef5df0903df2
csi-node-driver-registrar git 9005584e sha256:6d7dcb5e8f7927e4d15d0b2a50328f4b4f2d03685f953707bcf52f2d41249602
csi-snapshot-controller git 4f2955c7 sha256:cd5ec7d102407a3e1c70bae975b1e0546906880270e67e7e630ab1d116196640
csi-snapshot-validation-webhook git 4f2955c7 sha256:f5d3318450f668427d94d54825fc51a1813d439f08c8d60d2a8f743b26fc266b
deployer git 82316376 sha256:4c4ff3c457dd1f4b3bb232436cc4f77d2e778a7a7d87d18f74b91b0e7f6e94a0
driver-toolkit git 7a448c2e sha256:509cd0524603e1fd2bb51a10f182905b75cc8dde90cff340bacb7d8b983950ae
egress-router-cni git f8ec690b sha256:843c33cd64bad8771a539a7f9938c98ec147c5bfead95f95b0dc9046dbbad01c
etcd git a7005ef1 sha256:ec33cdff730727c0a998c9690cd39ea01dc14ded6df0e5607550e0d7ebd70289
gcp-cloud-controller-manager git fc50272a sha256:9e81a80d6cc46bd7162062696869f445c41f82c4528d9d350af48b5efe7a0871
ibm-cloud-controller-manager git cc0d5415 sha256:bf1c5f39c2291dab68b622e6770020b9818eef16e310f2eba6f8dce20dc893d8
ibmcloud-machine-controllers git 6846b9a7 sha256:63c39845101efcdb2960e4fcd7734c89a7545faf0200de4bb81290b60f4046b0
insights-operator git 975bba98 sha256:c0376482a8e183618335d6d7427d208dd50f9759d6351387c78ab0a66a751fd2
ironic-machine-os-downloader git bcbcd95b sha256:7c730951c7b3d3f695e2bfca165face69c25be121c8798a7a854d3aedf7060df
ironic-static-ip-manager git 989bcb4f sha256:a1aed982fc8e4b9775804cad966deb78dff510fa00c418aa6f0f77893280539b
k8s-prometheus-adapter git 34e20193 sha256:fa86d2d936e1e8f4b8b8a5ff8076d68b34fee5becdf566539cac97095918790e
keepalived-ipfailover git 87c23b5a sha256:ab7d2555c18b7cbb8e175aef98fceeb44dcd4504ee5f8ef45f83cca53c46ee3e
kube-metrics-server git bcbf241c sha256:7fdaf710978a097165da38d049baa4486a76047e9da2c4cfe9bf254f44bac06d
kube-rbac-proxy git 9308e7f2 sha256:80e7b97d5c01701dea620d3d25bf88c2136e7f1ef7e6fe38ece00180108c89ec
kube-state-metrics git 037b59c2 sha256:56d1b0687b9dce6fb31149e12c4397742dfffc6ac2554fc37236c04214eebeed
kubevirt-cloud-controller-manager git dbaf9ea1 sha256:d9d4b77d225c56377ffda95a58bacfa299825b28981b0cd51a99218a8473fdd7
machine-os-content sha256:6aeffbd6fc962e75ebd894af16aa61c0ab23a8effd68115d6fd7c663ed214638
multus-networkpolicy git b377b4b5 sha256:a4cdc6ab475d950db0a5b2560574cc2073996daa4f661059b9e4852457e0aa9a
multus-route-override-cni git 1ccafc34 sha256:f1e03505b0693358d749a2e36996dcf45ef3a56151d810c0fff84d3fd584bd37
network-interface-bond-cni git f91decaa sha256:3b5619c7ec5b2341aa3bce0012b5fc381b6c2d98d871696d9525a61638fb9a10
network-tools git 17536c8d sha256:924585e1d2cdfa58ea121a48ba646f385a3e9acbb3eac734f0b581673d22f86a
nutanix-cloud-controller-manager git 040d4e01 sha256:9083ee931b61eb3eddf88d67967543f15547f365cf2e51ee946a5018994ccf2d
oauth-server git c055dbb9 sha256:46ce9ad7779783a6b98d8fdefd461075c4553c639b213d9ce4d7c04a0ddba8a9
olm-catalogd git 035d3835 sha256:a03c6f0565f088a753d137e3d4ef1dedb20e874183b839e9b001120c870afa99
olm-operator-controller git 303b954f sha256:ab7aea99b8634c78d70f58c961320a6ea3d5baaae9aecbc63245bcbc3d41cc8d
olm-rukpak git 5b09cd44 sha256:7e2f0d97faed1fe3663c9b921d77e672f80f51d7a1e5d67932dc497fe27ecbf3
openshift-state-metrics git 1915f645 sha256:80313b07046f85174e67531f0b70e0bebcf881be50f3f0e31b9d5040902e8430
openstack-cluster-api-controllers git 232472ea sha256:0ceed1f7f04a8057f428b727ef28ea7f86e91d0e8c7bebb6da1bfb2d676d72a2
ovirt-csi-driver git b8d25ad6 sha256:afd6c6c08a272d92c688e40cb58ed4fea3badb15ccada8a7bef84c823fc08a01
powervs-block-csi-driver git 38bee567 sha256:4a1a7f848b67edbe862a8950e3089152052b1332adef522b148d6c39a0a2916d
powervs-cloud-controller-manager git 1d6a7ed9 sha256:af59352a13c3746ee59f4a8fd5d0be94fff8f6828ee637c5c9c229ebb311b246
prom-label-proxy git f3f1f5d1 sha256:0d03707d241629d0437276b7d7c3e2441ccfb277e33166837e81388257bb029c
prometheus-config-reloader git 902436ac sha256:4fd547444020fd1577b05b1ea761fade10e4bd23bc1be5c58fffc178041cc9bd
prometheus-node-exporter git aed837c3 sha256:d4d351304b77780141a8b83fcb4874880958ead56cec88ef500f139e4251256a
prometheus-operator git 902436ac sha256:85c048492c736b762d3866de536a27ba44b0ba116e73486607b214780f34433f
prometheus-operator-admission-webhook git 902436ac sha256:22db0677dd4393e25a56e3ac996280d59115f5e476b7865b8ea1dc5429e9489a
rhel-coreos sha256:4a842f074a95ccbb643ec16e406b260625c6ddc69f0f6be8cd510690e7c84579
rhel-coreos-extensions sha256:9f23da6dc4291dc0a6e77b3cc575132ec167697261c291e7b202c5712c3e5f33
route-controller-manager git c5cc7a73 sha256:6072b8760e62e3b46ff26f0ebb9900738a964f99fd19c6a3f8241edb7d27d401
telemeter git 14489f7d sha256:23422073ce1835108b279bfc637e6075f8fe10457e17f818b4119c15c1d6e529
thanos git 66161ad4 sha256:d9736c50be290ed9ce0636d866b248773382cbeae589e2103ef294024877bf16
tools git 82316376 sha256:cbc84fbdf203f1617239c8177ce8a0fd2a7c41b6e9efa54d9ae48c6c6a45474d

agent-installer-api-server

OCPBUGS-58633, OCPBUGS-58638: Bump glog to v1.2.5 in release-4.15 (#7905) #7905
OCPBUGS-54402: Bump go-jwt to 4.5.2 to fix CVE-30204 (#7487) #7487
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-58643: Bump github.com/golang/glog pkg version to 1.2.4 (#1189) #1189
OCPBUGS-53714: Bump jwt to 4.5.2 in release-4.15 (#1092) #1092
Full changelog

agent-installer-node-agent

run go mod tidy / vendor #1020
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

alibaba-cloud-csi-driver

OCPBUGS-67910: Bump github.com/sirupsen/logrus to v1.8.3 #47
Full changelog

aws-cluster-api-controllers

OCPBUGS-78228: [release-4.15] hermetic 4.15 #592
OCPBUGS-61943: UPSTREAM <carry>: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It #573
OCPBUGS-58668, OCPBUGS-58673: bump github.com/golang/glog to v1.2.5 #562
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-67913: Bumped logrus to 1.9.3 #492
Full changelog

aws-machine-controllers

OCPBUGS-63141: client: re-use a single file for building the session instead of randomly named files #153
OCPBUGS-63141: revert: client: re-use a single file for building the session instead of randomly named files #150
OCPBUGS-63141: client: re-use a single file for building the session instead of randomly named files #143
Full changelog

azure-cluster-api-controllers

OCPBUGS-78177: [release-4.15] update go mod dependency for konflux #365
Full changelog

azure-file-csi-driver

ART-13080: Regenerate go.mod to fix build failure #94
Full changelog

azure-file-csi-driver-operator

OCPBUGS-67918: Bump github.com/sirupsen/logrus to v1.9.3 #113
OCPBUGS-60544: add tag matching to Azure File storage class #110
Full changelog

azure-machine-controllers

OCPBUGS-56657: Fix failure when attempting to modify immutable availabilitySet #150
OCPBUGS-53226: dynamically setting the amount of fault domains #134
Full changelog

azure-workload-identity-webhook

OCPBUGS-53794: github.com/golang-jwt/jwt/v4 v4.5.2 #34
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-79036: Azure UPI ARM template: use storageAccountId #10418
OCPBUGS-76929: terraform/provider/google: Fixing GCP inconsistencies present with the service account creation #10316
OCPBUGS-42554: only allow a single network in failure domain topology #9060
OCPBUGS-62849: Release 4.15 bump terraform provider azurerm #10007
OCPBUGS-62410: Make swift containers removal not fatal for UPI. #9978
OCPBUGS-60497: update resolv.conf every time on bootstrap node #9885
OCPBUGS-39416: OpenStack: Install CI dependencies from rpm #9103
OCPBUGS-54353: aws/edge/byovpc: tag edge subnets with shared value #9612
OCPBUGS-54367: IBMCloud: Move to IBM TF openshift fork #9614
OCPBUGS-45961: Update upi references to api-internal #9298
OCPBUGS-50994: Bump terraform-provider-google version to v5.37.0 to fix consistent issues during cluster creation #9509
Full changelog

baremetal-machine-controllers

OCPBUGS-78100: [release-4.15] fix vendor/ for hermetic migration #244
Full changelog

baremetal-operator

OCPBUGS-53336: BMO can expose any secret via BMCEventSubscription CRD #408
Full changelog

cloud-credential-operator

OCPBUGS-60974: ccoctl: aws to use proper issuer url on subsequent runs #910
OCPBUGS-58678: github.com/golang/glog v1.2.5 #894
OCPBUGS-53417: github.com/golang/glog v1.2.4 #844
OCPBUGS-53818: update github.com/golang-jwt/jwt #840
OCPBUGS-51540: Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected #833
Full changelog

cluster-baremetal-operator

OCPBUGS-77448: Bump github.com/go-errors/errors to v1.5.1 #563
Full changelog

cluster-capi-operator

NO-JIRA: Allow sustaining engineering to self serve dependency updates #561
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-63169: ccm: disable unused secure-serving port and webhook #424
Full changelog

cluster-dns-operator

OCPBUGS-52499: [release-4.15] Add runbook_url for CoreDNSErrorsHigh #432
Full changelog

cluster-etcd-operator

OCPBUGS-67931: Update logrus to 1.9.3 to address CVE-2025-65637 #1547
OCPBUGS-53506: fix CVE-2025-30204 #1404
Full changelog

cluster-image-registry-operator

OCPBUGS-67932: Bump logrus to 1.9.1 #1289
OCPBUGS-53866: bump github.com/golang-jwt/jwt #1220
OCPBUGS-51596: bump golang.org/x/oauth2 #1211
OCPBUGS-51264: ensure that storage names don’t end in dashes #1183
Full changelog

cluster-ingress-operator

OCPBUGS-49392: Block Upgrades in release 4.15 for CA-Signed Certs Using SHA1 #1172
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-67937: CVE-2025-65637 openshift4/ose-cluster-kube-apiserver-rhel9-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.15.z] #2044
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-67987: CVE-2025-65637 openshift4/ose-kube-proxy-rhel9: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.15.z] #910
Full changelog

cluster-kube-scheduler-operator

CNTRLPLANE-2843: chore: update OWNERS #625
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-67942: Bump github.com/sirupsen/logrus to v1.9.1 #145
Full changelog

cluster-monitoring-operator

OCPBUGS-66047: test: remove image registry e2e tests #2757
Full changelog

cluster-network-operator

OCPBUGS-84183: fix(hypershift): use net.JoinHostPort for URL construction #2995
OCPBUGS-62980: Update CNO reviewers/approvers #2817
OCPBUGS-56649: Fix live migration with feature migration configured explicitly #2715
OCPBUGS-36688, OCPBUGS-43099: Unexpected Behavior During Cluster Upgrade for the ovn-ipsec-host pods #2658
OCPBUGS-53282: Not update status.migration of the network.config CR to empty #2669
[Release 4.15] OCPBUGS-51208: Use applyconfigurations for updating network.oprerator status #2653
Full changelog

cluster-olm-operator

OCPBUGS-86345: Update grpc-go to v1.64.1-sec.1 to fix CVE-2026-33186 #208
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-67946: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.15] #655
Full changelog

cluster-samples-operator

OCPBUGS-63517: references to github.com/sclorg/django-ex.git now also refer to the branch #660
OCPBUGS-55475: Adding mutex to func createSamples on handler.go #634
OCPBUGS-54481: add rhdmalone to owners #623
Full changelog

cluster-storage-operator

OCPBUGS-67955: bump github.com/sirupsen/logrus to v1.9.3 #654
Full changelog

cluster-version-operator

OCPBUGS-50591: Set openshift.io/required-scc: privileged annotation in version pods #1152
Full changelog

console

NO-JIRA: enable multi-architecture yarn builds #16425
OCPBUGS-83298: [release-4.15] openshift4/ose-console: Axios: Remote Code Execution via Prototype Pollution escalation #16302
OCPBUGS-76575: Bump axios #16033
CONSOLE-5011: migrate to yarn berry #16081
NO-JIRA: Bump builder image to v29 #15992
OCPBUGS-74443: Bump lodash to latest #15970
OCPBUGS-69767: Disallowed Pipelines-plugin Pipelines navigation section #15864
OCPBUGS-65822: Remove required flag from ‘console.flag/model’ pipelines-plugin extension #15749
OCPBUGS-65601: /auth/error?error=missing_state&error_type=auth is showing blank page #15727
OCPBUGS-44159: bump dompurify to latest #15592
OCPBUGS-60672: Secret key with binary file changes when edited via Console #15422
OCPBUGS-59997: Remove the devconsole backend common internet proxy and replace it with dedicated ones #15359
OCPBUGS-59564: Add flags in console static plugin for all the components of this epic #15306
OCPBUGS-60029: fix bug where / in console.tab/horizontalNav href brea… #15353
OCPBUGS-57521: Debug pod logs are not accessible when debugging a node via OpenShift Console #15181
OCPBUGS-58223: Fix TypeError Cannot read properties of null (reading ‘metadata’) #15221
OCPBUGS-57097: Add all files to vendor regardless of gitignore #15134
OCPBUGS-45257: Enabling topology e2e tests on CI #14721
OCPBUGS-55733: fix bug where operator appears twice #15021
OCPBUGS-55174: Add missing pipelines plugin name to known plugins #14982
OCPBUGS-54673: Added token to proxy header #14943
OCPBUGS-54252: Update the monitoring topic used by the console team #14904
OCPBUGS-53138: fix run time error when no completed version exists #14879
OCPBUGS-53055: Show Observe section without PROMETHEUS and MONITORING flags #14867
OCPBUGS-52344: fix alert rule link #14828
OCPBUGS-51332: Do not pass CSV name to operand list page when an exen… #14800
OCPBUGS-49849: include external labels so silenced alerts not displayed in notifications #14718
Full changelog

console-operator

OCPBUGS-77993: [release-4.15] hermetic 4.15 #1130
OCPBUGS-77993: [release-4.15] NO-JIRA: update go mod dependency for konflux #1116
Full changelog

container-networking-plugins

OCPBUGS-55948: Check error returned by ipv6 SettleAddresses #190
Full changelog

coredns

OCPBUGS-77512: Modify .gitignore to not exclude vendor build folders #169
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-67958: fix CVE-2025-65637 #362
OCPBUGS-58885: CARRY: don’t ignore json files #342
OCPBUGS-43375: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.28 into release-4.15 #297
Full changelog

csi-driver-manila-operator

OCPBUGS-67959: Bump logrus #252
Full changelog

csi-driver-nfs

OCPBUGS-84930: Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.64.1-sec.1 to avoid go version bump and fix CVE-2026-33186 #183
Full changelog

docker-builder

OCPBUGS-65960: BuildConfig inline Dockerfile fails with heredoc syntax #491
OCPBUGS-58141: S2I build cpu limits observed by assemble are limited to 1 cpu #477
OCPBUGS-42917, OCPBUGS-43294: Bump buildah to 1.33.12 #442
Full changelog

docker-registry

OCPBUGS-53650: bump jwt and oauth dependencies #433
Full changelog

gcp-cluster-api-controllers

OCPBUGS-78281: [release-4.15] update go mod dependency for konflux #268
Full changelog

gcp-machine-controllers

OCPBUGS-55410, OCPBUGS-55411: Disable shielded VMs for non-UEFI disks #117
Full changelog

gcp-pd-csi-driver

OCPBUGS-67973: Update logrus to v1.9.3 #93
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-67971: bump github.com/sirupsen/logrus to v1.9.3 #161
Full changelog

haproxy-router

OCPBUGS-74950: Adding escapeHAProxySingleQuotes for sanitize [release-4.15] #17
OCPBUGS-49392: Block Upgrades for CA-Signed Certs Using SHA1 #641
Full changelog

hyperkube, pod

OCPBUGS-67902, OCPBUGS-67977: CVE-2025-65637 - bump github.com/sirupsen/logrus to v1.9.3 [4.15] #2583
OCPBUGS-74300: Skip E2e: attach on previously attached volumes should work #2569
OCPBUGS-59147: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2358
OCPBUGS-59147: UPSTREAM: <carry>: disable some legacy cloud provider Azure tests #2359
OCPBUGS-52183: UPSTREAM: <carry>: kubelet/cm: fix bug where kubelet restarts from missing cpuset cgroup #2227
OCPBUGS-53139: UPSTREAM: 129180: prevent unnecessary resolving of iscsi/fc devices to dm #2244
Full changelog

hypershift

OCPBUGS-84183: fix(cno): use brackets only for IPv6 in server URL #8308
OCPBUGS-74670, OCPBUGS-74671: Support proxy authentication when user/pass is included in URL #7606
CNTRLPLANE-1266: Drop extinct mce-2.5 pipeline #6655
CNTRLPLANE-1232: Move CPO pipeline to hermetic builds #6601
OCPBUGS-58506: [release-4.15] Add missing service network DNS entries to KAS cert #6394
OCPBUGS-57553: Add proxy variables for the MCD Pod #6293
OCPBUGS-57121: Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs #6231
OCPBUGS-46467: Consistently look up and dial cloud API hostnames #5300
OCPBUGS-52590: Honor proxy vars in the util insecure http client #5791
CNTRLPLANE-920: Konflux build pipeline service account migration #6086
CNTRLPLANE-920: Konflux build pipeline service account migration #6081
OCPBUGS-55266: [release-4.15] Add konnectivity-proxy sidecar to openshift-oauth-apiserver #6070
OCPBUGS-51800: Fix golang crypto dependency go.mod replacement #5995
OCPBUGS-53898: bump golang-jwt v4 and v5 #5908
Red Hat Konflux update control-plane-operator-4-15 #5955
ART-11792: update go mod dependency for konflux #5923
OCPBUGS-51729, OCPBUGS-51800: Bump dependencies to OCP fork in backports #5902
OCPBUGS-50867: Prevent IgnitionServer from flooding the API server with patch requests #5633
OCPBUGS-52992: [release-4.15] OCPBUGS-52506: refactor aws identity health check into new controller #5815
OCPBUGS-52896: Make managed-trust-bundle optional #5813
OCPBUGS-50699: add region to AWS creds passed to operators managed by CPO #5669
NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.6 #5729
OCPBUGS-51253: OCPBUGS-50692: Fix IsIPv4 function identifying also addresses instead of CIDRs #5701
OCPBUGS-52172: [release-4.15] Add HostedCluster additional trustbundles to konnectivity-https-proxy #5722
NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.5 #5683
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-79893: Bump google.golang.org/grpc to v1.79.3 #148
OCPBUGS-77211: [release-4.15] standardize build paths #125
OCPBUGS-58739: bump github.com/golang/glog to version v1.2.4 #107
OCPBUGS-56064: tech debt: rework vendor patches #92
OCPBUGS-53906: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #85
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-67980, OCPBUGS-67981: bump github.com/sirupsen/logrus to v1.9.3 #165
OCPBUGS-59775: [IBM VPC] set offlineExpansion to false in e2e test manifest #150
Full changelog

ibm-vpc-node-label-updater

OCPBUGS-56064: tech debt: rework vendor patches #49
OCPBUGS-53538: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #45
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-67289: [release-4.15] Fix incomplete vendor/ #137
OCPBUGS-51814: CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork #122
Full changelog

ironic

OCPBUGS-69784: Bump eventlet version to 0.33.1-7 #764
Full changelog

ironic-agent

OCPBUGS-69782: Bump eventlet version to 0.33.1-7 #233
Full changelog

kube-proxy, sdn

OCPBUGS-54868: Handle openshift-host-network namespace as special when it modifies #654
Full changelog

kube-storage-version-migrator

NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-15). #228
Full changelog

kubevirt-csi-driver

fix for OCPBUGS-58587: CVE-2024-45339 openshift4/kubevirt-csi-driver #69
Full changelog

libvirt-machine-controllers

OCPBUGS-77197: Fix incomplete vendor #303
OCPBUGS-26506: Updating ose-libvirt-machine-controllers-container image to be consistent with ART for 4.15 #282
Full changelog

machine-api-operator

OCPBUGS-67989: bumped logrus to v1.9.3 #1460
OCPBUGS-59861: Updates GCP CredentialsRequest #1397
OCPBUGS-55410, OCPBUGS-55411: Updates GCP credentials request #1356
OCPBUGS-53251: add image/read permissions #1349
OCPBUGS-52481: Drop oVirt support #1340
Full changelog

machine-config-operator

OCPBUGS-77636: Machine-config controller should not log about non-existent pull-secret changes #5573
OCPBUGS-60214: [release-4.15] OCPBUGS-53248: Enforce VIPs to be collocated at the same host #4988
OCPBUGS-59737: Remove MachineConfigNode CRD from manifests #5188
OCPBUGS-48284: Do not run resolv-prepender from NM dispatcher #4783
OCPBUGS-57340: Do not enable on-prem-resolv-prepender.path for UPI #5115
OCPBUGS-36688: Add ipsec connect wait service #4937
OCPBUGS-54206: Update format verbs for alert logs #4943
OCPBUGS-54176: Update ObservedGeneration in KubeletConfig #4944
OCPBUGS-43742: Soften haproxy timeout for kubeapi probe #4663
Full changelog

machine-image-customization-controller

OCPBUGS-67983: [4.15] uplift logrus #154
Full changelog

machine-os-images

OCPBUGS-54170: Change rhcos release browser url #58
Full changelog

monitoring-plugin

OCPBUGS-74446: [release-4.15] fix: upgrade lodash to remove vulnerable code #907
OCPBUGS-78493: fix for CVE-2025-69873 #850
Full changelog

multus-admission-controller

OCPBUGS-58769: Update the github.com/golang/glog module to v1.2.4 #104
Full changelog

multus-cni

OCPBUGS-85252: Fix server url in kubeconfig #301
no-issue: [release-4.15] Bump Go to 1.20 and fix CI build root image #294
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-55619: Fixes leftover podref issue #366
Full changelog

must-gather

OCPBUGS-36371: Run ppc node collection in parallel #430
OCPBUGS-42970: Collect etcd object count #456
Full changelog

network-metrics-daemon

OCPBUGS-58779: Bump github.com/golang/glog to v1.2.4 (#114) #114
OCPBUGS-60374: Replace e2e test image (#126) #126
swtich golint install method (#124) #124
Full changelog

nutanix-machine-controllers

OCPBUGS-47264: fixing CVE-2024-45338 #117
OCPBUGS-51850: CVE-2025-22868 #109
Full changelog

oauth-apiserver

OCPBUGS-74925: bump kubernetes-apiserver to pick up loopback cert expiration update #173
NO-JIRA: (chore): update OWNERS #175
Full changelog

oauth-proxy

OCPBUGS-61447: Update x/crypto to v0.31.0 #336
Full changelog

oc-mirror

OCPBUGS-77858: fix vendor for hermetic 4.15 #1361
Full changelog

openshift-apiserver

OCPBUGS-67998: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.15] #611
OCPBUGS-74923: bump kubernetes-apiserver to pick up loopback cert expiration update #600
OCPBUGS-58822: Fix image reference in TestImageStreamImportQuayIO #517
Full changelog

openshift-controller-manager

OCPBUGS-57761: Set node-pullsecrets volume to read-only to protect image pull credentials #396
OCPBUGS-56474: Empty proxy variables are causing issues during the build #383
OCPBUGS-54344: Unable to look up the service account secrets for build #370
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-68000: CVE-2025-65637 openshift4/ose-openstack-cinder-csi-driver-rhel8-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.15.z] #192
Full changelog

openstack-machine-api-provider

OCPBUGS-78171: hermetic 4.15 #164
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-82056: Drop github.com/distribution/distribution dep #1303
OCPBUGS-61466: [release-4.15] Add NetworkPolicy as a supported kind #1051
OCPBUGS-61389: [4.15] e2e stability fixes #1084
OCPBUGS-57430: reduce cache expiry frequency [release-4.19] #1023
OCPBUGS-56463: fix(olm): improve error logging for missing olm.managed label (#3558) #1010
OCPBUGS-48662: Fix concurrent namespace resolution #948
Full changelog

operator-marketplace

OCPBUGS-68005: CVE-2025-65637 fixed in logrus v1.9.3+ #733
OCPBUGS-62221: Remove Expect func so that the test case can use the retry logic #672
OCPBUGS-62119: Update memoryTarget on catalog source pods #666
Full changelog

ovirt-csi-driver-operator

OCPBUGS-68032: Bump github.com/sirupsen/logrus to v1.8.3 #144
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

CORENET-6055, OCPBUGS-76403: [release-4.15] Dockerfile: Unpin OVN and consume the latest from FDP #2974
OCPBUGS-56660, OCPBUGS-58162: Unpin OVS patch versions #2649 #2649
OCPBUGS-56419: Update to FDP25.A.1 24.03.5-40. #2573
OCPBUGS-50583: Bump OVN to 23.09.6-12 to consume fix for FDP-905 #2454
OCPBUGS-53384: [release-4.15] Dockerfile.base: bump OVS version to 3.3 #2492
OCPBUGS-43605: Add SDN node subnet gateway IP to host-network address_set #2419
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-68006: Fix CVE-2025-65637 by bumping logrus to v1.9.1 #99
Full changelog

powervs-machine-controllers

OCPBUGS-61702: Use OS_GIT_VERSION in Makefile when found (for Konflux builds) #128
OCPBUGS-54753: Fix for CVE-2024-51744 in github.com/golang-jwt/jwt/v4 in release-4.15 #115
Full changelog

prometheus

OCPBUGS-56740: BACKPORT: fix promtool analyze block shows metric name with 0 cardinality #256
Full changelog

prometheus-alertmanager

OCPBUGS-77058: Include go-verify-deps expected files in gitignore #117
Full changelog

service-ca-operator

OCPBUGS-68019: update logrus to v1.9.1 #321
Full changelog

tests

OCPBUGS-74300: Skip E2e: attach on previously attached volumes should work #30725
OCPBUGS-66329: Replace RunHostCmd with Exec function to censor bearer token being exposed #30528
OCPBUGS-57335: Fix regex parser for censoring private key #29913
OCPBUGS-61229: images/tests: Remove rteval #30207
OCPBUGS-57136: aws/edge: prevent test using unschedulable nodes #29897
OCPBUGS-55477: support provider type external #29739
NO-JIRA: Sync OWNERS from main branch #29856
OCPBUGS-55695: [build] Ensure Git Clone Does Not Run Privileged #29752
OCPBUGS-54769: Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com #29664
OCPBUGS-52582: Use payload pullspec for image info test #29590
OCPBUGS-41614: Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token #29502
OCPBUGS-49647: Fixing build s2i ruby test data inline with latest ruby version(>=3.0) #29503
OCPBUGS-48749: Add/remove team members to the OWNERS file for Builds #29551
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-78030: hermetic migration 4.15 #108
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-78021: hermetic migration 4.15 #87
OCPBUGS-61654: Fix unit tests #73
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-68022: CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.8.3 #159
Full changelog

vsphere-csi-driver-operator

OCPBUGS-68020, OCPBUGS-68024: CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.9.3 #323
Full changelog

vsphere-problem-detector

OCPBUGS-68031: bump github.com/sirupsen/logrus to v1.9.3 #201
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Unable to show node image info: too many concurrent oc adm release info --rpmdb/--rpmdb-diff operations (limit 16)

View changelog in Markdown or change previous release:

Source code for this page located on github