4.16.70

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.16.70-x86_64

Qualifiers (status api): None

Tests:

Blocking jobs
- upgrade Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Failed (2 retries) periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.16-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded (1 retry) periodic-ci-openshift-release-main-ci-4.16-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- aws-sdn-upgrade-4.16-micro Succeeded periodic-ci-openshift-release-main-nightly-4.16-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.16-micro Failed (1 retry) periodic-ci-openshift-release-main-ci-4.16-e2e-azure-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Failed
- driver-toolkit Succeeded periodic-ci-openshift-release-main-nightly-4.16-e2e-aws-driver-toolkit
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.16-fips-payload-scan
- gcp-ovn-rt-upgrade-4.16-minor Failed (1 retry) periodic-ci-openshift-release-main-ci-4.16-upgrade-from-stable-4.15-e2e-gcp-ovn-rt-upgrade
  - Attempt 1 Failed
  - Attempt 2 Failed
- hypershift-ovn-conformance-4.16 Succeeded periodic-ci-openshift-hypershift-release-4.16-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-ipv4 Succeeded periodic-ci-openshift-release-main-nightly-4.16-e2e-metal-ipi-ovn-ipv4
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.16-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Untested upgrades: 4.15.21, 4.15.22, 4.15.23, 4.15.24, 4.15.25, 4.15.26, 4.15.27, 4.15.28, 4.15.29, 4.15.30, 4.15.31, 4.15.32, 4.15.33, 4.15.34, 4.15.35, 4.15.36, 4.15.37, 4.15.38, 4.15.39, 4.15.40, 4.15.42, 4.15.43, 4.15.44, 4.15.46, 4.15.47, 4.15.48, 4.15.49, 4.15.50, 4.15.51, 4.15.52, 4.15.53, 4.15.54, 4.15.55, 4.15.56, 4.15.57, 4.15.58, 4.15.59, 4.15.60, 4.15.62, 4.15.63, 4.15.64, 4.15.65, 4.16.10, 4.16.11, 4.16.12, 4.16.13, 4.16.14, 4.16.15, 4.16.16, 4.16.17, 4.16.18, 4.16.19, 4.16.20, 4.16.21, 4.16.22, 4.16.23, 4.16.24, 4.16.25, 4.16.26, 4.16.27, 4.16.28, 4.16.29, 4.16.3, 4.16.30, 4.16.31, 4.16.32, 4.16.33, 4.16.34, 4.16.35, 4.16.36, 4.16.37, 4.16.38, 4.16.39, 4.16.4, 4.16.40, 4.16.42, 4.16.43, 4.16.44, 4.16.45, 4.16.46, 4.16.47, 4.16.48, 4.16.49, 4.16.5, 4.16.50, 4.16.51, 4.16.52, 4.16.53, 4.16.55, 4.16.56, 4.16.57, 4.16.58, 4.16.59, 4.16.6, 4.16.60, 4.16.61, 4.16.62, 4.16.64, 4.16.65, 4.16.66, 4.16.7, 4.16.8, 4.16.9

4.16.69 (changes) - F S F F S F S
4.16.68 (changes) - Failed
4.16.67 (changes) - Failed
4.16.63 (changes) - Failed
4.16.54 - Success
4.16.41 (changes) - Success
4.16.2 (changes) - Success
4.16.1 (changes) - Failed
4.16.0 (changes) - Failed
4.15.68 (changes) - F F F F
4.15.67 (changes) - Failed
4.15.66 (changes) - Success
4.15.61 (changes) - Failed
4.15.45 (changes) - Failed
4.15.41 (changes) - Success
4.15.20 (changes) - Failed
4.15.19 (changes) - Failed
4.15.18 (changes) - Failed
4.15.0-0.nightly-2026-08-30-154959 (changes) - Failed Failed

Loading changelog, this may take a while ...

Changes from 4.16.54

Created: 2026-09-02 18:49:10 +0000 UTC

Image Digest: sha256:077bb2d0f053cfadc673374237b206740ab78f2663d3dbd1b49713c2ced88994

Components

Kubectl 1.29.7
Kubernetes 1.29.14
Kubernetes Tests 1.29.0
Red Hat Enterprise Linux CoreOS upgraded from 416.94.202512030118-0 to 416.94.202609011112-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
StreamingCollectionEncodingToJSON (0 tests)	Enabled	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
StreamingCollectionEncodingToProtobuf (0 tests)	Enabled	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled

Removed images

ovirt-csi-driver
ovirt-csi-driver-operator

Rebuilt images without code change

agent-installer-api-server git 5c16119a sha256:94870fbf44675d8deccdc268397ed87d0b0188b56c530fd3abf8629f53d0328f
agent-installer-csr-approver git 302f47ff sha256:5fa013be1c5fb30430e1d0dfe83f72cd83556fdf68035d253d0e16340946fcab
agent-installer-node-agent git 720b5023 sha256:fc082ba0c720622a376c489c05281f218c65fd3f865d9e0b360c6e524c1061a2
agent-installer-orchestrator git 302f47ff sha256:bd3a21b769c0ce890a656739afb440f45c504f9f12bf594ae20dacb30a8d7e60
alibaba-cloud-controller-manager git 97e8335e sha256:491064fb8a56393a6211357e9d0dbff49b35e336236ffa3798ac70d0faa541ed
alibaba-machine-controllers git 248372a4 sha256:efb85722a2c30335d508d4279ca11aefd380d02ae4001c6c2cc51c8849d295b4
apiserver-network-proxy git ca81b6a3 sha256:dce135a72cb79591bfd13959fadb673583b88f2df363cd232da554fa5031f070
aws-cloud-controller-manager git a53e9def sha256:4876ec5f664e0ab0d22142fad9b9e0207ffa2d6fdec9045c03b350deed63ca16
aws-ebs-csi-driver git 1d29a74a sha256:ba5f8cea0243810e8c235f6de0fb3cd21f0a40a85cc85363083f9530f2f062ca
aws-ebs-csi-driver-operator git ea7977e7 sha256:78302bdde40e00a7072c3c2b17e62232791fd18ba0e99781ca1df329551647f6
aws-kms-encryption-provider git c66065de sha256:9c9382e36a4042b56fbf0191c687cb098615cf3a397247acc04dabbb1241dafc
aws-pod-identity-webhook git 459c5314 sha256:a07586a7dea25905a2e85220101595666da39e0fe79c4d1848741625f14fb1fa
azure-disk-csi-driver git 6b55f6fb sha256:523a688e96985ac45c06c4e0fcdc1fc366e520058cddf94271dc559915793312
azure-disk-csi-driver-operator git ea7977e7 sha256:50f12a96b65b8b4e24b9b188772ee19cbf5a2b190dc7e68469f93d85ffbcffd8
azure-file-csi-driver-operator git ea7977e7 sha256:7f7561fd5d034fbf24e396d0befa35d473ad72bca738bd5ea61c1ed365490150
azure-machine-controllers git 5d4b4f31 sha256:187f048f61dc32068f70e80086f8085912f69a83262db420a0fd20b76767ec67
azure-workload-identity-webhook git 5b8d171e sha256:7eddd364a3caba046ba5e6348a99db3722e9af06cd8d306de20010e2d30cd3ee
cluster-authentication-operator git 0e39ace5 sha256:b073c7f12a1dee270561f8da7f37e82832ce3894205429ee14955ee679f8d731
cluster-autoscaler-operator git 70164fc6 sha256:dc6fb4c9b72c0fb9b37a0c7d6db833c26aa88c7414ef5b1e43243ae754917fa4
cluster-bootstrap git 27bfb59f sha256:a9e7d2d5bbe7da786bf8b880bd403cb8c1e57ce57690dc7c13871246aabf220d
cluster-capi-controllers git 5830a10a sha256:a0a8e6cb81a64e252f3d3457b9523ec31f0f8322c4f593de3f0761c554d87a8a
cluster-cloud-controller-manager-operator git d721cd62 sha256:183bc58d2ddd6520d05fa321e4de3738fefb6879522dc39ebc55479a33b0777f
cluster-config-operator git 441d29c9 sha256:8eea32bbbcfc7eaa94eafb8ec485b2090a8e9dd7f34487329155268e7fc05dec
cluster-control-plane-machine-set-operator git 14571e8a sha256:928535eb636810a23406373dd6853f3720719651b265492827c8b33e523b013c
cluster-csi-snapshot-controller-operator git 439826e1 sha256:1e974877d26a1df28d8c2a049aaebbeafac7be1f761572af9795d54f905283fb
cluster-dns-operator git a4b1cfb4 sha256:96427d9ba809fa73392a536498c8fa684d8cba763e59e7e6cea409587f4e3fa4
cluster-kube-cluster-api-operator git 95ceaa9e sha256:92b98837e6c3645838464ea31e074aa5766c0da851d699c6f71a21a62167bc49
cluster-kube-controller-manager-operator git b3faac1f sha256:36cd1c7071ff26b32683ca8aa8c815fc271867faa667bed52330405a9e2bac82
cluster-machine-approver git 7685374f sha256:69d00e5a9037568e19e4880e423b84d90e0af1b0ef87e0b5b42e92b048c4c5a1
cluster-openshift-controller-manager-operator git 2ed3cf99 sha256:ea3861c7da90de9149483db7454c795fafc36530931e66b8cdda000cf8ad9aec
cluster-policy-controller git eaea543f sha256:a678cf5cca22d674605692c4896fcc8d007abb1ee3755463bd36d2b992a74c2f
cluster-samples-operator git f9a02d5c sha256:e7f473671ae08b7b27ca6aecc4d35a44720215935a1d6daf33a0ca543144f6c0
cluster-update-keys git e8478585 sha256:f590be6b1469f5df13c7f20d8ae45987feebc7767598c1d25882cafa1514d29e
cluster-version-operator git be820285 sha256:d837970f6d197256617a272eae9f88cb7364a73bcc23baddee45e422a9405288
configmap-reloader git dc91ddc4 sha256:6e6aeb8e7b47afafe4122b0c2039fc169dbeca605782727228f4807bf0d3a38e
csi-driver-manila-operator git c25d1ff2 sha256:1467e9b1a047d20cd66f74c3109948a9df9c7d865281ef44815787f8aa63d0ab
csi-driver-shared-resource git bc125def sha256:de9f285338280c4ede5f3d931df303483150232de794686d7ded3e5a6fe7b731
csi-driver-shared-resource-operator git 1e1194bc sha256:e9c5329a4230dfed3ca278201daece3760e7887f85697f2ee177bc1c19c9079e
csi-driver-shared-resource-webhook git bc125def sha256:48b176668db6f361f73b98585df837a1f9cff95286320ac6771ec69249386d4b
csi-external-attacher git 7da80aab sha256:766de216287820e3242c025e2dce2655d35f01de74b852340a17e3cb774b258a
csi-external-provisioner git 9e8af011 sha256:1fbfe0badb3b61465e05e0bc3de877afef136a35daf2b0256c261d7dd281990a
csi-external-resizer git 06e08fd2 sha256:c56e137b48adc22c8204529f8f50c1278987a1b32817f3666a826c155a826757
csi-external-snapshotter git ee32ba01 sha256:cba7a04770db8bc95cbd421c7cb83ff9e7363cd81dd3595cfe83a86237a9ee83
csi-livenessprobe git f5e3ff55 sha256:61cd6c86296716162a0beb8c17307475f4d027a2098be96626e0ca57c96da59f
csi-node-driver-registrar git d1a2105b sha256:25e697055f06b9a149495a5ebae67359efc124c96164ef39a705463c0042faf9
csi-snapshot-controller git ee32ba01 sha256:4e240d2bff837102b5b9f6b1fb62b405719f2f80111ed777bf78af949cc00d27
csi-snapshot-validation-webhook git ee32ba01 sha256:e604a92ca902b29f05de425f1c981d07130cd5f2deb673841550ab73ac43ec47
docker-builder git b602ffcb sha256:7a0aebc87fb1b51caf41fa771924dcdf13321ae4a58424f1f165af81b9f731df
docker-registry git 072c544c sha256:85c34b1ed899ec89bb45d704f765eb9079acc17596b976a3aeb6bcb9e359f379
driver-toolkit git 1d5732f0 sha256:f0cc975003ad1c4bf6407863742a7ba595fd64214c2561f3bdb650b484c3669c
egress-router-cni git 7089efe6 sha256:1f64ffb4b7a273f6680861b0db52266d979a234991f1a168f0aa0b9cba781156
etcd git e7911c0d sha256:53fa02620d8a289670d66a75f60b97f9e6dfc960713dfd42b1da32dd0c631380
gcp-cloud-controller-manager git 26b43dfc sha256:32dfd2b8d90a4d4c6f1b744cb4e4801e46f094adca64850635da8e4170574739
gcp-pd-csi-driver-operator git 799327f7 sha256:32bdb92942e4b4b1b78c1b8c8e6ef6a99721219114808e7598e1b8249cffbb27
ibm-cloud-controller-manager git f961f16d sha256:fa8712d6f1fccada2c34ab4f5c089449f6ca8bc8345f7e60e59bcbadf1eb3c6d
ibm-vpc-block-csi-driver-operator git 9ca53768 sha256:7e6c82fcc829112200763e31833d4482459e3c8dc341faa300040ddeb7fe9115
ibmcloud-machine-controllers git d29506e7 sha256:afb6a411686dbfbad5085b1678ae2ac2692de51d590a70fb38bbf75aaca2df24
ironic-machine-os-downloader git 93b8b5fa sha256:2885e24c25439d61c6755941cf674061f9b670ffb8a5f394f920d122fb029ded
ironic-static-ip-manager git f44e8a08 sha256:743e8e80852b9d92e101dcbbadae863dc6bf2f0b0e035b73755d8f118a577c5b
k8s-prometheus-adapter git e4f859be sha256:cce7aac6954ac5db1ec62b4a1f9fe446f30a65d69215c343db10f3dd474f9f20
keepalived-ipfailover git b58673a3 sha256:214d663d79651726a17e391b5270c93ff629d6305f70daafb1893cc84d80383b
kube-proxy git 53fea06b sha256:f458e5c975cb035e877a2123cd14ae1ae533d24f5f46caea358e6c37451468c5
kube-rbac-proxy git c38f4734 sha256:a81c48f4323f5b0b14d652198ca1b4edd865e60f6e6326ed1c0110015550b333
kube-storage-version-migrator git 6f213320 sha256:8828ac79f0b7677b2b5a5deba5ebe2793911da81c70e9e3c3f0160fa9fa73f4c
multus-admission-controller git a15bf454 sha256:c474f29a3079a616ae8a10f4ae430c7c864e87136fc2136988611721eda27013
multus-networkpolicy git f988f894 sha256:ab5f4a66a85d641908071d24d06995841563ef2a4a9ec9994aea1a3dfe06faa2
multus-route-override-cni git 73594f77 sha256:2927caab24d29c5a098f9320d6e130f5c3d92b275da7cd841e861061f612ad5e
network-interface-bond-cni git e6880659 sha256:3b932cb7a89b60737943261f85a77b3305cdf22d77ddabd5d6f598cd54fbdede
network-metrics-daemon git 1210db38 sha256:6180fd657b5173900ae2a6c8ace61dab4cfa0c62fedcc72e5bbd6bfe88583d2a
network-tools git 234ed43e sha256:9479ba3d1caacc67967c2e22b08d781410ce4d4255c168998f2cb28a2341b3be
nutanix-cloud-controller-manager git 28bf5963 sha256:461742630bbdabafcfdba3680acfc33ff63e674e47db718103c60cb2697619ab
nutanix-machine-controllers git 2f2e121b sha256:aaff855168a8c865e061c4c005854f924872e67597e8d57b589dc9c9cddb18d2
oauth-server git 3739138c sha256:e4b9e0ce4eab1821b07eeb9ba6db92540dc758a7d68d513cb9011b28d8a3fdc9
oc-mirror git b137a53a sha256:c8af6b418d83ea79b7ff7ac875495a38d05730f33f35da9084cc48fa651dc9ce
olm-catalogd git 79975a51 sha256:49082060713aa608343d2898c90a73173b35d56341e3a2e3853b232459f06fa9
olm-operator-controller git 80b8649c sha256:788b6af3628d405c78560a0c07b5f63f9b639fbd95d50b52806c404aa685adb0
olm-rukpak git 282cc84c sha256:fa8d43edde1f0e56cacff8155d2fb53dc9cac37ad2852b1b8f976ce90fb4c5ef
openshift-controller-manager git 90f73f7e sha256:e324b2d02588dbee29f19fcd9a0974054fd9882cbbb8b16fe61fe4ebb35aa8dc
openshift-state-metrics git 59b8a0ff sha256:d1c527466208feb702aa123016f1fe20a1aa2dae799625169797cab9159d3898
openstack-cinder-csi-driver-operator git 85b52097 sha256:63af5ad9d13b01ac32a2b66a7018894edb41427a906aac5a7409e7a02cce97a5
openstack-cluster-api-controllers git 3b972b2b sha256:c42fc17bc0d19e43a93820e737f68fb05b565517f4bca5b2fc05a72deb257833
powervs-block-csi-driver git 26162bad sha256:10382018fbee14b08e2342cb0741efb6cf60d22364b31fe29504780a391b0e6f
powervs-block-csi-driver-operator git 9c5dd8d1 sha256:57e54e5dc77a4659e25fe3c28cf3f097d5838b800387d970f3e402a3e928adc8
powervs-cloud-controller-manager git 20e6dc70 sha256:2f8b716a2e2e19d9b900d0c6eaaad97f50a42d83ac1375fa238d2ec1bfc685ce
powervs-machine-controllers git 2bfcc0f8 sha256:ca4ecf36a802f9ee428f8d9f4f873388341b494efdd98549979d5441a723b7c5
prom-label-proxy git 5e14722e sha256:ab21ca2412f995585e11596ece3c01b18777be542c24f399a9e155f73e2ab48e
prometheus-config-reloader git c7262a43 sha256:6e1116e4d9b94e2f94f2b1a41c1349aac4199433cfa5be1697bacae2aa823b5e
prometheus-node-exporter git 29ba26d1 sha256:280a399fd6fa0fe411d456af0577fa0d34f568e02e944c6b70ee189a98bda73e
prometheus-operator git c7262a43 sha256:3050be625c30b92e089dfda13b9c9a2e869a327c08a4ab4281444709e28dae1b
prometheus-operator-admission-webhook git c7262a43 sha256:67ce0af5e9159ffff2bc54ebc37c889e1b2cc3703309b400f39921f51df26ee0
rhel-coreos sha256:2663693e022cdf1d6bc3a4c75e278e30db65c8daf0686622f4774adce23d1c2a
rhel-coreos-extensions sha256:81b7773f82ec328bc720c8d4b9b2df7033e18cfcf9eabf2d05d84b30e691ceac
sdn git 53fea06b sha256:d23a113b975273fcef819fa812f204568703276d2da6e2c282d329754b9f5940
service-ca-operator git 538c7b98 sha256:3b26ea23eac36897ee2c869edbb67ed7e88a94ae1498d051c3a3feb9534b689b
telemeter git c1ecd105 sha256:b99d5fc9357b2ff2cd88948b918cd85a57cb2821d6ac8be7bcefd22c5ce2c1c8
thanos git 85eee25c sha256:4d3e5b2173f1dba567c82622e7203cb134eccff85f1eb041eb7a1ea06f52dc95
vsphere-csi-driver-operator git 7940ea16 sha256:46a3a19e79df07f344c0ad273564940f99d9b976b254cb40a447346e12a68718

agent-installer-utils

OCPBUGS-68046: bump github.com/sirupsen/logrus to v1.9.3 #239
Full changelog

aws-cluster-api-controllers

OCPBUGS-78227: [release-4.16] update go mod dependency for konflux #591
Full changelog

aws-machine-controllers

OCPBUGS-73903: Fix reconciler consistency checks in Update and Exists #168
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-79998, OCPBUGS-85635, OCPBUGS-85636: Bump google.golang.org/grpc to v1.79.3 #182
Full changelog

azure-cluster-api-controllers

OCPBUGS-78176: [release-4.16] update go mod dependency for konflux #364
Full changelog

azure-file-csi-driver

OCPBUGS-89335: Address CVE-2026-33186 #139
Full changelog

azure-kms-encryption-provider

OCPBUGS-79927: Bump google.golang.org/grpc to 1.64.1-sec.1 patch #48
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-74885: Azure UPI ARM template: use storageAccountId #10282
OCPBUGS-76586: terraform/provider/google: Fixing GCP inconsistencies present with the service account creation #10298
OCPBUGS-73879: data/manifests/bootkube/cvo-overrides: Default to eus-4.16 #10226
Full changelog

baremetal-machine-controllers

OCPBUGS-78099: [release-4.16] fix vendor/ for hermetic migration 4.16 #243
Full changelog

baremetal-operator

OCPBUGS-77278: Unblock BMH direct deletion when detached annotation is present #463
Full changelog

baremetal-runtimecfg

OCPBUGS-60113: Re-add ENABLE_NODEIP_DEBUG env var #362
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-91215, OCPBUGS-91552, OCPBUGS-91589: Bump golang.org/x/net to openshift-sustaining/net v0.35.0-sec.2 #2346
OCPBUGS-111894: Fix pre-existing unit test failures #2374
Full changelog

cloud-credential-operator

OCPBUGS-81849: Bump go-jose/go-jose/v4@v4.1.4 #1040
OCPBUGS-79941: Bump google.golang.org/grpc to v1.79.3 #1026
Full changelog

cloud-network-config-controller

OCPBUGS-66346: [release-4.16] Fix capacity calculation #195
Full changelog

cluster-autoscaler

OCPBUGS-78702: allow clusterapi provider to skip paused resources #415
Full changelog

cluster-baremetal-operator

OCPBUGS-77447: Bump github.com/go-errors/errors to v1.5.1 #562
Full changelog

cluster-capi-operator

OCPBUGS-79943: Bump google.golang.org/grpc to v1.79.3 #573
NO-JIRA: Allow sustaining engineering to self serve dependency updates #560
Full changelog

cluster-config-api

CNTRLPLANE-1982: Promote streaming list encoding to Default #2600
OCPBUGS-71202: Add HTTPKeepAliveTimeout to IngressController API #2640
Full changelog

cluster-etcd-operator

OCPBUGS-68058: Update logrus to 1.9.3 to address CVE-2025-65637 #1546
Full changelog

cluster-image-registry-operator

OCPBUGS-68059: : Bump github.com/sirupsen/logrus to v1.9.1 #1285
Full changelog

cluster-ingress-operator

OCPBUGS-86713: Add configuration override for X-SSL strip #1487
OCPBUGS-71202: Implement HTTPKeepAliveTimeout tuning option #1337
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-68064: CVE-2025-65637 openshift4/ose-cluster-kube-apiserver-rhel9-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.16.z] #2043
Full changelog

cluster-kube-scheduler-operator

CNTRLPLANE-2843: chore: update OWNERS #624
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-68069: Bump github.com/sirupsen/logrus to v1.9.1 #144
Full changelog

cluster-monitoring-operator

OCPBUGS-77276: AlertingRule: fix duplicate PrometheusRules after MD5->SHA-224 naming change #2831
Full changelog

cluster-network-operator

OCPBUGS-67000: Re-disable metrics server #2855
OCPBUGS-63233: Manual feature backport of cert rotation for whereabouts #3040
OCPBUGS-84182: fix(hypershift): use net.JoinHostPort for URL construction #2981
OCPBUGS-75890: Tweak iptables-alerter to try to avoid crictl bug #2898
: NO-JIRA: Update CNO reviewers/approvers #2768
Full changelog

cluster-node-tuning-operator

OCPBUGS-82675: Bump github.com/moby/spdystream from v0.2.0 to v0.5.1 #1551
OCPBUGS-78766: [4.16] PPC: filter out namespaces dir #1466
Full changelog

cluster-olm-operator

OCPBUGS-86243: Update grpc-go to v1.67.3-sec.1 to fix CVE-2026-33186 #206
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-68072: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.16] #654
Full changelog

cluster-storage-operator

OCPBUGS-87613: remove oVirt code from CSO 4.16 #709
OCPBUGS-78769: Add patch permission to provisioner role #685
Full changelog

console

OCPBUGS-114417: Prevent binary secret data corruption when editing #17101
OCPBUGS-105793: Disable failing OLM and other e2e tests to unblock CI #16958
OCPBUGS-105796: Fix operator-hub e2e test by replacing unavailable Red Hat catalog source with Community #17081
OCPBUGS-87987: [release-4.16] shell-quote: Arbitrary code execution via command injection due to unescaped line terminators #16599
OCPBUGS-81597: CVE-2026-4800 #16566
OCPBUGS-77123: [release-4.16] CVE-2026-26996 Bump minimatch library #16346
OCPBUGS-79439: Bump immutable #16657
OCPBUGS-88027: Fix JSON annotation parsing to prevent OperatorHub crash #16588
OCPBUGS-88377, OCPBUGS-88380, OCPBUGS-88412, OCPBUGS-88419, OCPBUGS-88444: CVE-2026-44495 #16612
OCPBUGS-88554: Stabilize legacy OperatorHub Cypress waits #16608
NO-JIRA: enable multi-architecture yarn builds #16417
OCPBUGS-83299: [release-4.16] openshift4/ose-console-rhel9: Axios: Remote Code Execution via Prototype Pollution escalation #16298
OCPBUGS-78673: Namespace is not persisting when switching to developer view from the topology page of admin page #16161
CONSOLE-5011: migrate to yarn berry #16078
OCPBUGS-76578: Bump axios #16032
NO-JIRA: Bump builder image to v29 #15993
OCPBUGS-74447: Bump lodash to latest #15967
OCPBUGS-69678: Disallowed Pipelines-plugin Pipelines navigation section #15857
Full changelog

console-operator

OCPBUGS-77992: update go mod dependency for konflux #1115
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-85669: CI Build root image tag sync with ART #234
Full changelog

coredns

OCPBUGS-77463: Modify .gitignore to not exclude vendor build folders #168
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-79978: Bump google.golang.org/grpc #389
OCPBUGS-68080: fix CVE-2025-65637 #361
Full changelog

csi-driver-nfs

OCPBUGS-84931: Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.67.3-sec.1 to avoid go version bump and fix CVE-2026-33186 #182
Full changelog

gcp-cluster-api-controllers

OCPBUGS-78280: [release-4.16] update go mod dependency for konflux #267
Full changelog

gcp-machine-controllers

OCPBUGS-79970: Bump google.golang.org/grpc to v1.79.3 #167
OCPBUGS-79970: [release-4.16] Fix setup-envtest GCS 401 by downloading binaries directly #176
Full changelog

gcp-pd-csi-driver

OCPBUGS-68087: Update logrus to 1.9.3 #92
Full changelog

haproxy-router

OCPBUGS-86713: Strip X-SSL-* headers for plain HTTP #805
OCPBUGS-79960: Bump google.golang.org/grpc to v1.79.3 #769
Full changelog

hyperkube, pod

OCPBUGS-68041, OCPBUGS-68091: CVE-2025-65637 - bump github.com/sirupsen/logrus to v1.9.3 [4.16] #2582
OCPBUGS-74299: Skip E2e: attach on previously attached volumes should work #2568
Full changelog

hypershift

OCPBUGS-99075: fix(backport): konnectivity agent auth #9097
OCPBUGS-84182: fix(cno): use brackets only for IPv6 in server URL #8348
OCPBUGS-76534: feat(updates): enable CVO metrics access with RHOBS monitoring flag #7704
OCPBUGS-74375, OCPBUGS-74376: Support proxy authentication when user/pass is included in URL #7578
OCPBUGS-73118: Fix Konflux EC voilation, update deprecated base … #7459
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-79964: Bump google.golang.org/grpc to v1.79.3 #145
OCPBUGS-77210: [release-4.16] standardize build paths #124
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-67288: [release-4.16] Fix incomplete vendor/ #138
Full changelog

insights-operator

OCPBUGS-68370: Add filtering to add other possible pod status to QEMU gatherer #1200
OCPBUGS-67009: QEMU logs are not gathered if there are pending status virt-launcher pods #1197
Full changelog

ironic

OCPBUGS-104459: bump openstack-ironic pin for CVE-2026-54423 fix(release-4.16) #877
OCPBUGS-76457: Bump pyasn1 to 0.5.1-4 #828
OCPBUGS-69789: Bump eventlet version to 0.33.1-7 #763
Full changelog

ironic-agent

OCPBUGS-95070: Replace individual package removal with a single rpm -e loop #288
OCPBUGS-95070: Replace dnf remove with rpm -e to prevent dependency removal #276
OCPBUGS-61165: netutils: Use ethtool ioctl to get permanent mac address #215
OCPBUGS-69781: Bump eventlet version to 0.33.1-7 #232
Full changelog

kube-metrics-server

OCPBUGS-79929: Bump google.golang.org/grpc to v1.79.3 #66
Full changelog

kube-state-metrics

OCPBUGS-74875: Deduplicate CRS stores #133
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-95082: OWNERS: Update component to Cloud Compute / KubeVirt Provider #82
Full changelog

kubevirt-csi-driver

OCPBUGS-79930: Bump google.golang.org/grpc to v1.79.3 #108
Full changelog

libvirt-machine-controllers

OCPBUGS-77196: Fix incomplete vendor/ #302
Full changelog

machine-api-operator

OCPBUGS-98439: Use resource group when generating default Azure image #1516
OCPBUGS-76849: bumped logrus to v1.9.3 #1463
Full changelog

machine-config-operator

OCPBUGS-98960: Remove sensitive ControllerConfig logging #6315
OCPBUGS-98253: Bootstrap MCS logging entire ignition #6290
OCPBUGS-62171: Fix - NetworkManager restart or crash renders br-ex unusable #5354
OCPBUGS-60113: Enable debug logging for nodeip-configuration #5218
OCPBUGS-77253: Machine-config controller should not log about non-existent pull-secret changes #5694
OCPBUGS-77184: machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] #5685
Full changelog

machine-image-customization-controller

OCPBUGS-68093: [4.16] uplift logrus #153
Full changelog

machine-os-images

OCPBUGS-87878: Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs #102
Full changelog

monitoring-plugin

Fix for OCPBUGS-113514: CVE-2026-18446 #1184
Fix for OCPBUGS-94001: CVE-2026-13676 #1049
Fix for OCPBUGS-90069 OCPBUGS-90073: CVE-2026-12151 CVE-2026-9697 #1007
OCPBUGS-79441: immutable bump #898
OU-1260: [release-4.16] feat: use npm instead of yarn #813
OCPBUGS-76807: fix for CVE-2025-69873 #849
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-85251: Fix server url in kubeconfig #300
NO-ISSUE: [release-4.16] Bump Go to 1.21 and fix CI build root image #292
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-70215: Prevent accidental IP deallocation in statefulsets #396
Full changelog

must-gather

OCPBUGS-86218: Collect object size with the object count #550
OCPBUGS-66106: Separate resources with comma to fix malformed inspect #515
Full changelog

oauth-apiserver

OCPBUGS-74112: UPSTREAM: <carry>: bump kubernetes-apiserver to pick up loopback cert expiration update #166
NO-JIRA: (chore): update OWNERS file #172
Full changelog

openshift-apiserver

OCPBUGS-82682: Address CVE-2026-35469 #649
OCPBUGS-68104: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.16] #610
OCPBUGS-74113: UPSTREAM: <carry>: bump kubernetes-apiserver to pick up loopback cert expiration update #595
Full changelog

openstack-machine-api-provider

OCPBUGS-78170: hermetic 4.16 #163
OCPBUGS-76794: Fix make test #155
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-79980, OCPBUGS-79981, OCPBUGS-87898: Fix CVE-2026-33186 with openshift-sustaining/grpc-go v1.67.3-sec.1 [release-4.16] #1318
OCPBUGS-82057: Drop github.com/distribution/distribution dep #1302
OCPBUGS-77959: Remove the collect-profiles info from the microshift kustomization file #1251
OCPBUGS-77169: Remove the collect-profiles job #1235
Full changelog

operator-marketplace

OCPBUGS-68108, OCPBUGS-68109: CVE-2025-65637 fixed in logrus v1.9.3+ #722
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-83497: External gateway: Remove routes for external gateway pods in terminating or not ready state #3140
OCPBUGS-78033: Add pperiyasamy to OWNERS for release-4.16 #3047
OCPBUGS-77685: Clear stale conntrack UDP entries for nodePorts #3038
OCPBUGS-77187: Fix conntrack reconciliation to use service port instead of endpoint port #2998
CORENET-6055, OCPBUGS-76277: [release-4.16] Dockerfile: Unpin OVN and consume the latest from FDP #2972
OCPBUGS-71219: [release-4.16] CVE-2025-65637 Bump github.com/sirupsen/logrus to v1.9.1 through indirect dependency conversion (go-controller module) #2906
OCPBUGS-72541: NetPol & MultiNetPol: Process update only when spec fields and/or related annotation are updated #2933
OCPBUGS-68349: Add ricky-rav to OWNERS for release-4.16 #2899
OCPBUGS-66155: Skip Pending pods in EgressIP status updates #2880
Full changelog

prometheus

OCPBUGS-88616: remote: validate snappy decoded length before allocation in read endpoint #349
OCPBUGS-79985: Bump google.golang.org/grpc #321
Full changelog

prometheus-alertmanager

OCPBUGS-100357: Set testdata CA expiry to 20 years from issue date (#4112) #146
OCPBUGS-76536: Include go-verify-deps expected files in gitignore #116
Full changelog

route-controller-manager

OCPBUGS-79934: Bump google.golang.org/grpc to v1.79.3 #87
Full changelog

tests

OCPBUGS-105460: Use tagged version for openshift/kubernetes dependency #31541
OCPBUGS-74299: Update to latest openshift/kubernetes #30825
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-78028: hermetic migration 4.16 #107
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-78020: hermetic migration 4.16 #86
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-86874: Bump google.golang.org/grpc #182
OCPBUGS-68119: CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.8.3 #158
Full changelog

vsphere-problem-detector

OCPBUGS-86445: fix concurrent map writes #219
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github