Back to index

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.16.74-x86_64

Qualifiers (status api): None

Tests:

• Blocking jobs
  • upgrade Pending (1 retry) periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade

    • Attempt 1 Failed
    • Attempt 2 Pending
  • upgrade-minor Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
• Informing jobs
  • aws-ovn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.16-e2e-aws-ovn-serial
  • aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-main-ci-4.16-e2e-aws-ovn-upgrade
  • aws-sdn-upgrade-4.16-micro Pending (1 retry) periodic-ci-openshift-release-main-nightly-4.16-e2e-aws-sdn-upgrade

    • Attempt 1 Failed
    • Attempt 2 Pending
  • azure-ovn-upgrade-4.16-micro Failed (1 retry) periodic-ci-openshift-release-main-ci-4.16-e2e-azure-ovn-upgrade

    • Attempt 1 Failed
    • Attempt 2 Failed
  • driver-toolkit Succeeded periodic-ci-openshift-release-main-nightly-4.16-e2e-aws-driver-toolkit
  • fips-scan Succeeded (1 retry) periodic-ci-openshift-release-main-nightly-4.16-fips-payload-scan

    • Attempt 1 Failed
    • Attempt 2 Succeeded
  • gcp-ovn-rt-upgrade-4.16-minor Succeeded (1 retry) periodic-ci-openshift-release-main-ci-4.16-upgrade-from-stable-4.15-e2e-gcp-ovn-rt-upgrade

    • Attempt 1 Failed
    • Attempt 2 Succeeded
  • metal-ipi-ovn-ipv4 Succeeded periodic-ci-openshift-release-main-nightly-4.16-e2e-metal-ipi-ovn-ipv4
  • metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.16-e2e-metal-ipi-ovn-ipv6

Upgrades from:

• 4.16.73 (changes) - S F F F P F F P
• 4.16.72 (changes) - Failed
• 4.16.71 - Failed
• 4.16.51 (changes) - Success
• 4.16.30 (changes) - Failed
• 4.16.16 (changes) - Failed
• 4.16.2 (changes) - Success
• 4.16.1 (changes) - Failed
• 4.16.0 (changes) - Success
• 4.15.70 (changes) - Failed Success
• 4.15.69 (changes) - Failed
• 4.15.68 (changes) - Success
• 4.15.67 (changes) - Failed
• 4.15.66 (changes) - Failed
• 4.15.31 (changes) - Success
• 4.15.20 (changes) - Failed
• 4.15.19 (changes) - Failed
• 4.15.18 (changes) - Failed
• 4.15.0-0.nightly-2026-10-18-234511 (changes) - Failed Success

Loading changelog, this may take a while ...

Changes from 4.16.71

Created: 2026-10-26 05:08:20 +0000 UTC

Image Digest: sha256:58c211bf5fa3664f25940bf74fd4f4456938fa7f2abcefef3fcd7bfcced6b226

Components

• Kubectl 1.29.7
• Kubernetes 1.29.14
• Kubernetes Tests 1.29.0
• Red Hat Enterprise Linux CoreOS upgraded from 416.94.202609140240-0 to 416.94.202610242150-0 (diff)

Rebuilt images without code change

• agent-installer-utils git 2b81ca46 sha256:74945a82c145e27ee6a11a9b873329f994251fcf3ae91641a91147428b518380
• alibaba-cloud-controller-manager git bfcd3da8 sha256:b8cf13b1a8c35a4e2fd345b7d4a9ac2559a6329ba451eeaa36195528fd99827c
• alibaba-machine-controllers git 248372a4 sha256:9b7975e21a36101514615e7268cb589f625ae7f39b169c8023a7bbc6d60c6313
• apiserver-network-proxy git ca81b6a3 sha256:acc28bddd4334e67f7ef458e84af07ca83a7cd4d321a7c7d29d0fdd854f238f2
• aws-ebs-csi-driver git 1d29a74a sha256:358a766505aa5394eb81b12ec55b3e415dab94b1feb9873359b267fe2c29a8b3
• aws-kms-encryption-provider git c66065de sha256:45e262f459fa92194969b52df503e8e7904d027e3a230160b13a359057d937e2
• aws-machine-controllers git 169f6ab7 sha256:4f4d5f39e8a3cdcff13a700b80d1399ee66413075988889e2735e961319c04e3
• aws-pod-identity-webhook git 459c5314 sha256:b00e17065de24a13c1301f0ed8bf06006769de9d17de95a42caba24426366146
• azure-cluster-api-controllers git d5d7c1df sha256:bb5f28799b21c83392367b03ad1f23eb212ddd91f2afdd6d9d18c261732c6143
• azure-disk-csi-driver git 6b55f6fb sha256:7814762612903f416f7e7c836073b7157066db641f88a5dd7ab9e0ceeeac86cf
• azure-kms-encryption-provider git de233896 sha256:ca1d8613237852536013f313cb07f8f6c55743fb0b46d0021557cd954f0bfd35
• azure-workload-identity-webhook git 5b8d171e sha256:27e8c042ca11d8dd7bb9b56b4e6b229ffa437e20bc86a5d6b95ee6047155da41
• baremetal-machine-controllers git e8c0c0ed sha256:cde1c82c1c4854609b6b3c5ad54994729e8141a6522d7ff0cf94b60d59011da6
• baremetal-operator git df0d0600 sha256:d52bf1182cfd6aa27de56766092b77fdb8b51661310e0566bcf96a4b16e50611
• baremetal-runtimecfg git db2c4c71 sha256:33cda5e5185ebf8bd5ee9087ec8ccf39e17dbc7739f9752027d9395703a63a08
• cloud-credential-operator git 89ea129d sha256:497378e382cd6b00cb8759f32fb4b4a39a240b1d2b7bf2681a318d50bb27cc08
• cloud-network-config-controller git b3854cc9 sha256:1f62a7519f4c0277ae14980764ca4b58d63f86b1eb821f64ab1e810218926fdd
• cluster-autoscaler git 1f7a1aa9 sha256:fd0b2bc3176c8d8556cb723eb99c287bf2d27175fecf4370593ada32dcab28b3
• cluster-baremetal-operator git c6f66328 sha256:8b2a504a2cf554d1325ac488b3328a16238024cb85a1daa2619b49d287913117
• cluster-bootstrap git 27bfb59f sha256:cf3ada6328d6495fda5102000c1b468dc3bc490c5600c83e10dbee55bfdf8bd6
• cluster-capi-controllers git 5830a10a sha256:dd15e17c17f1833fa2dd6cb025a878d61c267f9f6fef488315819bbc5aa20495
• cluster-capi-operator git be91ee59 sha256:84e044f044a20e451ae2cdd92a7dd01cc67491c18014e5e05601b686f970385a
• cluster-cloud-controller-manager-operator git d721cd62 sha256:d252f4ba060f4727fab31c07eafd5659b48ce047534a341e19a7004485c4f0ef
• cluster-config-api git 0677a887 sha256:dbbb2a40518f5b7a11f30320f33b2c269388f0db4984727e04280c4b20ee947b
• cluster-config-operator git 441d29c9 sha256:28ea4af7f5d23b7d0a98cf4952eb529c7f21725635c3d3539afd750f1be2276b
• cluster-control-plane-machine-set-operator git 14571e8a sha256:553fdc8d5e4b4bacb0b6dda5c1521304121f2bc27ea8996f5448cd165764cc36
• cluster-dns-operator git a4b1cfb4 sha256:72e7d0e5114e31f183882f4929eff52335e09eadfff43d16b36f607c7074ee9d
• cluster-etcd-operator git d9e83020 sha256:1ceef3b142d6ed8be280f24cccc1ec499b9e709ea5d869742ac18f7a60168881
• cluster-image-registry-operator git ed0afa7a sha256:18080e4afe0edcde7b3588cbd655a99a9f0ee2826f7e47ed447b27cc65b03a08
• cluster-kube-apiserver-operator git d0b79035 sha256:4976fd5feeca5053033a6fd4b2f27c2c86f5a36e78d590126a70354bbeca1979
• cluster-kube-cluster-api-operator git 95ceaa9e sha256:73a9b52cf271a7a68f4cb5e542d42384c6b2cac69704f6c96d7cc1e36f2eaa63
• cluster-kube-controller-manager-operator git b3faac1f sha256:a5100509d2364205bf9c8ee8bee5f5e849c44b5622f30f910bdb2acef7f009d4
• cluster-kube-scheduler-operator git 39dd141c sha256:8ca2265fa924cd984c738c80517d90ef8d76cc1e129f04fa290e00664d29ec0c
• cluster-kube-storage-version-migrator-operator git a26352fc sha256:2645eca3e4dd5671f13792790703b894fb585403d5d689cfe0841920ec0aab89
• cluster-machine-approver git 7685374f sha256:b9426c4e27a55b48c2eda0008bb34218a3fd30917cfd103c64e47503666110eb
• cluster-network-operator git 69b8dae1 sha256:4f1420b72699b8b06619ae59f7cacbaaeb5744d17f570563e0df57fd89eef7cc
• cluster-node-tuning-operator git 26411b22 sha256:f92d4249480c3313dcdf457c7ac9a82968f7421667ac7e930f17bab9d7eaa780
• cluster-olm-operator git 822ed169 sha256:04393b4749ed2e4f19c7b3336e4ae041163f404dd0e58ecfbd8865d0bb605304
• cluster-openshift-apiserver-operator git 2497afd3 sha256:cd4115a660810eb9417aecab0b3536fd49da3b4a844dfaf53ffade3f9eacea97
• cluster-openshift-controller-manager-operator git 2ed3cf99 sha256:49e406785946afd86712c746692eb8a843b10ef3431bfbc99968f553465463b2
• cluster-policy-controller git eaea543f sha256:034317d6611a1458195cbb0ab4d0a41cc77ba9367c714fd93417f6e27b5cbb03
• cluster-samples-operator git f9a02d5c sha256:f6f4351fb9621c366e707c09fdbf723f44fff8ce14559d21e9da87d6b48d85b0
• cluster-update-keys git e8478585 sha256:d56e3b402ad511c20012167fd52f5e5e70d6c4e6eb3a21092435c82a8177ef4c
• cluster-version-operator git be820285 sha256:dd341a130fc2296685590de0eb099c19304d2ab694089f8bc384b5e9fee75505
• configmap-reloader git dc91ddc4 sha256:b8c5f1175739f189558dbb853cf1f1c0f95f42ad44e950ba5c38ba6488f503f2
• container-networking-plugins git b37e7f89 sha256:10f29da04bcb8055df35268b1f4a0a75ee4996b4c831badddfca202b7914fec3
• containernetworking-plugins-microshift git b37e7f89 sha256:268a202c8b523e7fb25d6fa37462d8ca6df0e58e0caba9acb42a9ab2a007849f
• coredns git 6704e156 sha256:975099ce5551b392a34323f08bb2f84f73cefb3a703c37e2363a63689af09542
• csi-driver-manila git 9217d4a5 sha256:f1485aa7b4bd88a0fd9a32a2e0aeb3ed1a6918a01c5b82568877b6e32d6b0c3d
• csi-driver-manila-operator git c25d1ff2 sha256:036873062e02a3ddb381d9ea1b3a388ac59a87259daf9fcc5ebd946f258de63a
• csi-driver-nfs git e1c714d2 sha256:ff760c7e7c5402ede078d32c6e655a1352d6225b331c6714fbb1996172af4b5a
• csi-driver-shared-resource git bc125def sha256:e2cab12f83cf6fbea8608aea2e8fa828089fa123f4c249a3cb3bdc95c9ca3325
• csi-driver-shared-resource-webhook git bc125def sha256:5480b81f84ff1d8786ab3468ba03cfc84bcf9452f052d2826136032b33b11fe6
• csi-external-attacher git 7da80aab sha256:e7c7b51c858025d67af5946b606de0db6501d924a0808fc98b7cc91ccc6da673
• csi-external-provisioner git 9e8af011 sha256:966ddeabf0b572cc0819d3488d7eb22cb08e6b5436876839fc2eab255d16cba4
• csi-livenessprobe git f5e3ff55 sha256:d1ba3685b64d86bb2bad917ae0955b4d018b9d8ba57b7a7268a43974e7413516
• csi-node-driver-registrar git d1a2105b sha256:8bb937696b96b36e452592dcf74fb57ddec38e2f859a143a7a22d5b9abb2ece2
• docker-registry git 072c544c sha256:4cd2d87d4599fa8603c3f056571c8f5961c36f40a8c05d006d1b330622cd1847
• driver-toolkit git 1d5732f0 sha256:9f26932d084601d97653c2c3df87a8a60056a14c71a4663cef2a77c76d6ab7cd
• egress-router-cni git 7089efe6 sha256:8270d2512eb45cf13d00e1960928e150ab17ea32c9fd7f31d874a77feb0730c9
• etcd git e7911c0d sha256:3ff50c1051fd52ee2f5c5fe7d8250157c41c0fcc7dcf7f8a4aa8658402425b61
• gcp-cloud-controller-manager git 26b43dfc sha256:a6ee348699b26231cf4970948ea76902b77b3f4a3b8d773f87763349a3ab193a
• gcp-cluster-api-controllers git 9366599d sha256:100a8ac74845b872557c914bc7c99e7bb4776ea9f0b6d965be724515e7bf3f4e
• gcp-pd-csi-driver-operator git 799327f7 sha256:62ac85f74c1a642a81d4c73cd94d5c340886831bc2bf6ab76bea46fa16eaa7ad
• hyperkube git 41c4e9ba sha256:86d0f2441105c055445d2584fba15789b296a8d879d087d7f44c292025bc6f67
• ibm-vpc-block-csi-driver git eb7b9c09 sha256:3a287626affcee27ca990133a705355f618387a3e5dfacfbcc76a2959cb9bfe7
• ibmcloud-cluster-api-controllers git 509d38bc sha256:3e51296e79843947900656cb8311ed4ef30fddfffbd958dee5ae361779e3a1b9
• ibmcloud-machine-controllers git aabc3a7f sha256:ab3bfaa9d6e6fab491777837999d197ab357bbb0727faeeacb479fe803d5f87f
• ironic git 2cdb8c3b sha256:b6a9f858faf3ed5b149bebc78be36a67020baa77950b95133687886bc261a161
• ironic-agent git eff76836 sha256:ca4d088d179bdb9723d6084af2978c015143435d179c79c10b74882ae0b540d5
• ironic-machine-os-downloader git 93b8b5fa sha256:e6e45d05302e2eddc522a65be98d690849809a602ec511268ae4e8d4f0472695
• ironic-static-ip-manager git f44e8a08 sha256:7b4dab51064eb5a414fb017559b2184b7d78e51506e755d262af16ebef6ad565
• k8s-prometheus-adapter git e4f859be sha256:e62c99c1675935852d6da5106609b5df93a970db2e8bef67761c22045cb27044
• keepalived-ipfailover git b58673a3 sha256:2c60053fc2c2f1c30c02dc6368becb7ac924104a768a4fcb4cbd0399a5c84b93
• kube-proxy git 53fea06b sha256:21fe4dead4ff61bdf1fc51441c17a854fc02a9cff1152b8c0b47740a1cb471be
• kube-rbac-proxy git c38f4734 sha256:76c129626d6d79aa7ab15c90d76de86795cdcc3adca886b507b00037dd579209
• kube-storage-version-migrator git 6f213320 sha256:81abc9fecb457c33efe3a2a6a8f67d28b8800c826c31c89ea30e9c92ab4f7f03
• kubevirt-cloud-controller-manager git f331bdba sha256:3b804960342ab693707c1fa0a76535a3e04caf0adc8b984303a9f39816e40815
• kubevirt-csi-driver git 0a4bf755 sha256:09c727611705f640d282de6602674fe9dee1db5e30943539f5eb4e19da6dc784
• libvirt-machine-controllers git 0e11df99 sha256:509331d063a71392240c2c9109c62b5cccc37de7a56509f05098696b8f29fcc2
• machine-config-operator git 7327bb23 sha256:1ecf5088d83a157b2213588009eaa12a73655690370060898235108a91464a46
• machine-os-images git 4a52a459 sha256:a04b51753aa477770c602e8b3ac6b047724ff3df3c545f5cb705b7004022f7f7
• multus-admission-controller git a15bf454 sha256:3296cc08b9b67e4dc7e3706ec3d3676e5be6e61f7b71f645d2147e498f3c59b9
• multus-cni git 89c3e1cc sha256:d094b34a10cb67528705c52a0c487d706677fb1360b2e2c901ee9f1f7dcb6b40
• multus-cni-microshift git 89c3e1cc sha256:ce845374c0dfb32755d1fe9a7b9e334d675157fdf41b94a3a0aa08521bd376b6
• multus-networkpolicy git f988f894 sha256:761ea7aa04b0cbaa980e5e997214fbaf7209d0a37f087ce1e2a66299ff66688c
• multus-route-override-cni git 73594f77 sha256:6a779bbb8bda1f7caa886fd600ececb09d9902c22d24b6a34670648f4508dbab
• multus-whereabouts-ipam-cni git b8c8fc12 sha256:e31108c2d8b5e758aa67d38ee0b0426eedae82a1817c3cc8b5c5a284689d3ff4
• must-gather git fd6cbc7b sha256:b1eede859731393afca4132ed4bedd8954f05bea14e2bb3ee7db0ddaffac0cfe
• network-interface-bond-cni git e6880659 sha256:96fe079022e9297a50f68535faf9c626dfc54e9ced532a5f0cc8d6ce55c13b0e
• network-metrics-daemon git 1210db38 sha256:9f4af8d172a13b28132b5a23072d31ab7e0ac5fad31db6421fc0040d6b21e365
• network-tools git 234ed43e sha256:b05b2daa6c9ef2f183805da1e4864abfa4c34745695c814117a803d371ff3adb
• nutanix-cloud-controller-manager git 28bf5963 sha256:d20ec58957c658ea5c2700a62115a4f3155c162cf95d9de21e27901338fc3497
• nutanix-machine-controllers git 2f2e121b sha256:9137f66327afa6d9a1c4e9e2fe0aad211cb088288c066af76bb6f0e24ce4a446
• oauth-apiserver git 6f612077 sha256:4b6e9e0bfc2ddbfeab4b59f0892574b4fe255f767b068f034636c8a68f97253f
• olm-operator-controller git 80b8649c sha256:5a05a258ea16c20bc1ebc8f5c2d4d25c8baa11ea68bfe71b9101a04576fdaea4
• olm-rukpak git 282cc84c sha256:ff7f5dc7a254716bb4ce379987d493e8a51c5b304916fd1ac981312fa2627355
• openshift-apiserver git aeebf898 sha256:e28cc1643629ed763480c17bc9e828579078de9190d5dd1f9b1f2dc0ed0b6c64
• openshift-controller-manager git 90f73f7e sha256:c28e3ae2a66b06aacb87dc967f5ddd2f36d38eb0d95f2901d578b34de1d922fa
• openstack-cinder-csi-driver git 9217d4a5 sha256:8a2290edb131fa705ca5b48e88b9f3eabf5f1e3e2e7b43897e6aa7777a132a92
• openstack-cinder-csi-driver-operator git 85b52097 sha256:eb6c1ed4356ef3ae2647220472d4df88a92069e89e1ee4ba026463015b67a9f0
• openstack-cloud-controller-manager git 9217d4a5 sha256:ef8843586e1eba9ccbc41008bba453dc33091f288dbc2bc419ac4174afa9bfd4
• openstack-cluster-api-controllers git 3b972b2b sha256:e2567b4ead3533a2a95b418e25127d27d739475a22c11840a0988257840aff55
• openstack-machine-api-provider git 84d4c656 sha256:da9200162ae8806b1b5015f40dd0790c964b563f85eebeaf5b3a6a576f736d34
• operator-marketplace git 5d0e1379 sha256:e9118c9e191c0fcb4d8b10dee6104e7fbb52ff6efd875f502a296cd49ecf58b0
• pod git 41c4e9ba sha256:ee5096229f0266c4ed338b8fa017592d4acb5df8e697de1809858f6fa652bf9f
• powervs-block-csi-driver git f8017f85 sha256:d017422847fd4f641c68bca38b2792aab4d35ea6ed5bd09bc1b7310b22f4cbe0
• powervs-block-csi-driver-operator git 9c5dd8d1 sha256:acba32c6e0fac3907bda899cbaac369d87726672301196e1264e1babe6c5bd8a
• powervs-cloud-controller-manager git 20e6dc70 sha256:d7606e153e433ff26aff09520205c29831baa30dc5ea7a7ad02a98e49aa972f4
• powervs-machine-controllers git 2bfcc0f8 sha256:b5795a7af0bf19ece720ba4123272585ad42ed4c1bd515c6d1803551f4080a76
• rhel-coreos sha256:7a3d1801767f632f75fc5b0cefc8517f8bd36d59e7a8795b84c3302392554a01
• rhel-coreos-extensions sha256:37844522c06cc37153cccefbee961043a08f919b2af2d8150cc69e6ffefe0705
• route-controller-manager git c1af9e08 sha256:674b39b926a46ff0cf6eed9eb8666cec8772ee76ceec153e862c7a8c74a476ba
• sdn git 53fea06b sha256:748bb5531aabadf2f136333a8ca856946c67ba64b26dec95b6f9d98297f282d7
• service-ca-operator git 538c7b98 sha256:8d2e745cc423a6e9318bd9b40a030d8621f9626473863af60bbc94cdc9870d4d
• telemeter git c1ecd105 sha256:feeed6d5bcddce05779fc75177282c52ce0828798fe95ce8570d75823197a191
• thanos git 85eee25c sha256:920ca8853345c044c8c88daa143c396f5c03504b48d0a33dfea5d0f68c14c925
• vsphere-cloud-controller-manager git 54af90db sha256:5d3a614880b476a6323a7288fc1f304b4a9fcc8bc0f92218484d2db6882a2dd0
• vsphere-cluster-api-controllers git dc5cdf19 sha256:b6b50d1aa7f6153e492e74366b2436140b74da988627259e65faf1b518f95cdd
• vsphere-csi-driver git 5a7e6241 sha256:834210fc7dbcdb7e8bc6e0dc6c764c8c8e1140d17d0e1ef1f3eeda1ff23d1a05
• vsphere-csi-driver-syncer git 5a7e6241 sha256:70b7446c6b8598e5a18337528af4269d21dff7a511a6621cd0ee0afa20d3f91f
• vsphere-problem-detector git cd51b622 sha256:9d2a92ce55ca9a0cabdc61bdeb78b422d3ffcb0d27c8ed8a5a913ae2c0a83627

agent-installer-api-server

• OCPBUGS-89848: patching golang.org/x/crypto with sustaining/crypto@v0.33.0-sec.2 #10802
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• OCPBUGS-102901: Bump x/net to v0.35.0-sec.4 #2295
• Full changelog

agent-installer-node-agent

• OCPBUGS-102913: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #1616
• Full changelog

aws-cloud-controller-manager

• OCPBUGS-103119: Bump golang.org/x/net to openshift-sustaining/net v0.35.0-sec.4 for CVE-2026-33814 #177
• OCPBUGS-88174: replace golang.org/x/net with sustaining fork v0.35.0-sec.4 #180
• Full changelog

aws-cluster-api-controllers

• 🌱 OCPBUGS-123712: UPSTREAM: <carry>: Remove upstream .github files unused in OpenShift CI #645
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator

• OCPBUGS-102919, OCPBUGS-102939: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #608
• Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

• OCPBUGS-102933, OCPBUGS-103121: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 #210
• Full changelog

azure-file-csi-driver

• OCPBUGS-102923: Bump golang.org/x/net to v0.35.0-sec.4 #160
• Full changelog

azure-machine-controllers

• OCPBUGS-103039: replace golang.org/x/net with openshift-sustaining/net@v0.35.0-sec.4 #215
• Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

• OCPBUGS-102938: Bump golang.org/x/net to v0.35.0-sec.4 #10973
• OCPBUGS-89841, OCPBUGS-89843, OCPBUGS-89847, OCPBUGS-92760: Replace golang.org/x/crypto with github.com/openshift-sustaining/crypto@v0.33.0-sec.4 #10924
• OCPBUGS-127603: Update gcloud version to one that can be found #10918
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-102912, OCPBUGS-102935, OCPBUGS-103104: Use patched x/net fork v0.35.0-sec.4 #2416
• Full changelog

cluster-authentication-operator

• OCPBUGS-102924: replace golang.org/x/net with openshift-sustaining/net@v0.35.0-sec.4 #990
• Full changelog

cluster-autoscaler-operator

• OCPBUGS-102934: Bump x/net package in release-4.16 #390
• Full changelog

cluster-csi-snapshot-controller-operator

• OCPBUGS-102965: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #291
• Full changelog

cluster-ingress-operator

• OCPBUGS-102952: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 #1573
• Full changelog

cluster-monitoring-operator

• NO-ISSUE: synchronize OWNERS from main branch [release-4.16] #3113
• OCPBUGS-102945: [release-4.16] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #3090
• Full changelog

cluster-storage-operator

• OCPBUGS-102969: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #733
• Full changelog

console-operator

• OCPBUGS-102982: Use github.com/openshift-sustaining/net patch to fix CVE-2026-33814 #1225
• Full changelog

csi-driver-shared-resource-operator

• OCPBUGS-102984: Bump golang.org/x/net to v0.35.0-sec.3 #128
• Full changelog

csi-external-resizer

• OCPBUGS-102985: Bump golang.org/x/net to v0.35.0-sec.4 #215
• Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

• OCPBUGS-102978, OCPBUGS-102990: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 #230
• Full changelog

docker-builder

• OCPBUGS-89824, OCPBUGS-90269, OCPBUGS-92346, OCPBUGS-92576, OCPBUGS-92768: Bump golang.org/x/crypto to fix CVE-2025-22869,CVE-2025-47913,CVE-2026-46597,CVE-2026-39829,CVE-2026-39832 #553
• Full changelog

gcp-machine-controllers

• OCPBUGS-103045: Bump golang.org/x/net to v0.35.0-sec.3 #191
• Full changelog

gcp-pd-csi-driver

• OCPBUGS-103000: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #143
• Full changelog

haproxy-router

• OCPBUGS-103005: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 to address CVE-2026-33814 #844
• Full changelog

hypershift

• OCPBUGS-33097: [release-4.16] fix(api): remove deprecated OVNSbDb service type #9820
• OCPBUGS-120748: update Containerfile.cli base images to floating tags [release-4.16] #9560
• Full changelog

ibm-cloud-controller-manager

• OCPBUGS-120701: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 #116
• Full changelog

ibm-vpc-block-csi-driver-operator

• OCPBUGS-102992: Use patched x/net fork v0.35.0-sec.4 #187
• Full changelog

kube-metrics-server

• NO-ISSUE: synchronize OWNERS from main branch [release-4.16] #85
• Full changelog

kube-state-metrics

• NO-ISSUE: synchronize OWNERS from main branch [release-4.16] #192
• Full changelog

machine-api-operator

• OCPBUGS-103044: replace golang.org/x/net with openshift-sustaining/net@v0.35.0-sec.4 #1547
• Full changelog

machine-image-customization-controller

• OCPBUGS-103007: Use patched x/net fork v0.35.0-sec.4 #191
• Full changelog

monitoring-plugin

• OU-1589: [release-4.16] sanitize linkified URLs in alert annotations #1377
• OCPBUGS-118240: [release-4.16] Bump fast-uri to 3.1.7 to fix CVE-2026-84292 #1337
• OCPBUGS-127152: Replace react-linkify with linkify-react to fix CVE-2026-59887 #1356
• NO-JIRA: [release-4.16] Sanitize alert runbook URLs #1292
• Full changelog

oauth-proxy

• OCPBUGS-112100: bugfix: rewrite open redirect strings to ‘/’ #386
• Full changelog

oauth-server

• OCPBUGS-87068: bugfix: default to english when Accept-Language header contains more than 1000 underscores #274
• Full changelog

oc-mirror

• OCPBUGS-129584: v1 accept catalog root entries and relative symlink targets #1581
• Full changelog

olm-catalogd

• OCPBUGS-103064: [release-4.16] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #149
• Full changelog

openshift-state-metrics

• NO-ISSUE: synchronize OWNERS from main branch #144
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• OCPBUGS-103065, OCPBUGS-103070, OCPBUGS-103078: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 #1367
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-128828: node: fix serviceUpdateNotNeeded nil pointer comparison #3497
• Full changelog

prom-label-proxy

• NO-ISSUE: synchronize OWNERS from main branch [release-4.16] #404
• Full changelog

prometheus

• OCPBUGS-93677: fix for CVE-2026-42151 #395
• NO-ISSUE: synchronize OWNERS from main branch #387
• Full changelog

prometheus-alertmanager

• OCPBUGS-98169: bump github.com/hashicorp/memberlist to a forked version to fix CVE-2026-14362 #203
• NO-JIRA: synchronize OWNERS with main #188
• OCPBUGS-103072: Use github.com/openshift-sustaining/net patch to fix CVE-2026-33814 #174
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• NO-ISSUE: synchronize OWNERS from main branch #420
• OCPBUGS-103085, OCPBUGS-103089: [release-4.16] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #401
• Full changelog

prometheus-node-exporter

• OCPBUGS-103088: Use patched x/net fork v0.35.0-sec.4 #194
• NO-ISSUE: synchronize OWNERS from main branch [release-4.16] #203
• Full changelog

tests

• OCPBUGS-130858: stage the creation of test pods to minimize etcd impact #31742
• Full changelog

vsphere-csi-driver-operator

• OCPBUGS-103111: Bump golang.org/x/net to v0.35.0-sec.3 #358
• Full changelog

Source code for this page located on github