4.18.54

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.54-x86_64

Qualifiers (status api):

Tests:

Blocking jobs
- upgrade Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-aws-ovn-serial
- aws-ovn-single-node-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-main-ci-4.18-e2e-aws-upgrade-ovn-single-node
- aws-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-main-ci-4.18-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-main-ci-4.18-e2e-azure-ovn-upgrade
- driver-toolkit Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-aws-driver-toolkit
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.18-fips-payload-scan
- gcp-ovn-rt-upgrade-4.18-minor Succeeded (1 retry) periodic-ci-openshift-release-main-ci-4.18-upgrade-from-stable-4.17-e2e-gcp-ovn-rt-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- hypershift-ovn-conformance-4.18 Succeeded periodic-ci-openshift-hypershift-release-4.18-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-ipv4 Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-metal-ipi-ovn-ipv4
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-metal-ipi-ovn-ipv6
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance-serial

Upgrades from:

Untested upgrades: 4.17.15, 4.17.16, 4.17.17, 4.17.18, 4.17.20, 4.17.21, 4.17.22, 4.17.24, 4.17.25, 4.17.26, 4.17.27, 4.17.28, 4.17.29, 4.17.30, 4.17.31, 4.17.32, 4.17.33, 4.17.34, 4.17.35, 4.17.36, 4.17.37, 4.17.38, 4.17.39, 4.17.40, 4.17.41, 4.17.42, 4.17.43, 4.17.44, 4.17.45, 4.17.46, 4.17.47, 4.17.48, 4.17.49, 4.17.50, 4.17.51, 4.17.52, 4.17.53, 4.18.10, 4.18.11, 4.18.12, 4.18.13, 4.18.14, 4.18.15, 4.18.16, 4.18.17, 4.18.18, 4.18.19, 4.18.20, 4.18.21, 4.18.22, 4.18.23, 4.18.24, 4.18.26, 4.18.27, 4.18.28, 4.18.29, 4.18.30, 4.18.31, 4.18.32, 4.18.33, 4.18.34, 4.18.35, 4.18.36, 4.18.37, 4.18.38, 4.18.4, 4.18.40, 4.18.41, 4.18.43, 4.18.44, 4.18.45, 4.18.46, 4.18.47, 4.18.48, 4.18.49, 4.18.5, 4.18.50, 4.18.6, 4.18.7, 4.18.8, 4.18.9

Upgrades to:

4.19.44 (changes) - Failed
4.19.0-0.nightly-2026-08-21-152141 (changes) - Success
4.19.0-0.ci-2026-08-21-150241 (changes) - Success

Loading changelog, this may take a while ...

Changes from 4.18.42

Created: 2026-08-21 11:09:38 +0000 UTC

Image Digest: sha256:4d4e6147f15c286b33afbd6838ed94683b5f93711a90efe046c58d453318663c

Components

Kubectl 1.31.1
Kubernetes 1.31.14
Kubernetes Tests 1.31.12
Red Hat Enterprise Linux CoreOS upgraded from 418.94.202605101521-0 to 418.94.202608142238-0 (diff)

Removed images

ovirt-csi-driver
ovirt-csi-driver-operator

Rebuilt images without code change

agent-installer-api-server git 73206081 sha256:e217db44d774e3a637591fe3eb277a1d24ffed7008c277b1584f878816977c7b
agent-installer-csr-approver git 81d6bc27 sha256:c3fcdbe18b394c83759927497ce3f038020053ce5d355aef7b26b9942b283683
agent-installer-node-agent git 81c09fb7 sha256:15298d0f751daa7978f15e66b531f2021695a44e41b8fdcaee6140da0d42621c
agent-installer-orchestrator git 81d6bc27 sha256:16fdf23f6466ad0fd01e243ad367142f156e2d15d7c52b5ffd6bbd2da0beedef
agent-installer-utils git 63b87f06 sha256:602142172c4e1e5ab83883ee5a7e80bbd5e5504498f85a0a988977b61b90e0b0
apiserver-network-proxy git 2f62712d sha256:50d4ad24ca60f270cd23b0c2be44127fea97cc93f4d8667e8956bd726b9e0a4f
aws-cloud-controller-manager git c3951906 sha256:5b2dc12edada217e6a28ca51f694e9fcc74c15dd85f396550d1aad0dc996ed5c
aws-cluster-api-controllers git ed55fc2d sha256:63e92a3133e98bd59afb0c24d632b48e62f319a74bdbacb8ed31f444375dae34
aws-ebs-csi-driver-operator git 894ba4a3 sha256:1136759b305f9250b3819b8c2e00acc66b69a15072914c86f1f50c902b77468d
aws-machine-controllers git 7b6bfc74 sha256:35085fe3fd9ad8b55df6fc4fc69115ae578e796b59975a2460919e22a0a87eee
aws-pod-identity-webhook git f54f9a19 sha256:d6910635a7164b1625f0d86c8f6080e02522a10367fe91e894e06ba92eee2646
azure-disk-csi-driver-operator git 894ba4a3 sha256:b13a9ed0ea27bc5ec0578163d90935d70fbf595d3ea6e70a8d271e74a8f1b6ca
azure-file-csi-driver-operator git 894ba4a3 sha256:438ec86cb5dc905ce2c5dc4dd01d5ac8ba2f372deeb78e058bc5e70a533ce3d3
azure-machine-controllers git 2fdaa544 sha256:feb9c21dbf0d86256950ecf44c96c20d2468c8a465575eb79b5ecce61acff473
azure-workload-identity-webhook git f60e4029 sha256:b9efe100322daa54c8f3288231fc0dd99413b9a64821fb93b3b74bd693acc258
baremetal-cluster-api-controllers git 80c3a063 sha256:7b41a58474c2c663a9bb991bbd683317d4f359a6ecffc3ed38b36b6247ed3631
baremetal-machine-controllers git 1ede6c3f sha256:5d4dd7b0aeb43ed749520987191514b6ec0c511f97b3941b2bba2153934e31d4
baremetal-runtimecfg git 35341068 sha256:bf9a49dd07a8ee7521ee9a140802b15a62eda3c74a25aa76f6e86d93f67c2321
cli git 6febe619 sha256:64a70dbef6a7832c2b3e90c782264495c30212f7613d6d23a8327de0f67d679a
cli-artifacts git 6febe619 sha256:a4badcf0a7be7b0b32af47cf40f9984ca3538b06de77c9ff6f43b0885f304fac
cloud-network-config-controller git f892b915 sha256:4a1a24913c9eb78cb71ea3584b6cfb105901aaa5d7b9ccf16470abaf7eaab93d
cluster-authentication-operator git c3be8cbc sha256:6a0b01732781766b222ee9facc8e17b8a4245e7bdfc6b4d0a2bf18526bd9cb51
cluster-autoscaler git 34730793 sha256:86123e0e22f1cd5960f645c3cec1ddcd9281eecbb1a2fe6255389207b37061c7
cluster-autoscaler-operator git 474ad65c sha256:0c0f7b0d2a7ca2347c9c9dcd5f288383f58b5fcebedf2cd47fc99218c0b15a48
cluster-baremetal-operator git 3e6d1ab1 sha256:c8d6d397bc8a1d96bb08058fb40389afe630a7bab7e1b0443b0ec443cdedaa93
cluster-bootstrap git d1e01954 sha256:a15875c1fce15102f786e5f960ea066ec10efc001fcf806f1fe7ea7997a5b6b4
cluster-cloud-controller-manager-operator git 8abb0673 sha256:7e2051a759deb57ad0049b09bd6cb78ce987a739010443c56867b8b000b4870d
cluster-config-operator git fe5e9286 sha256:55f4c6ac54470aeff35af7bf12a4fa3fd3df27cf1a85758b59431210d0a65db9
cluster-control-plane-machine-set-operator git d17bf3a1 sha256:9a335e2c41cd0abac79539dd9017e06bc45cf39ce97c6462ab9a198be95f25e3
cluster-csi-snapshot-controller-operator git 6fe70008 sha256:6837476ddc73b6da432dc0e2bfa2faa394b32a7167a567ec2cb60cf437fbfd3d
cluster-dns-operator git 7cafd0c7 sha256:503267914b206cd1d49fcf45ff9e6da0986e3769616d4047815e7d5106cd2492
cluster-etcd-operator git 3af8b9d6 sha256:59b29efa0a7e68312844b8acecf60a697270fbf377e8395377a9f84f4fa5489d
cluster-image-registry-operator git 1e3caa4b sha256:628f4d699c93efb8560c69442fa45a6c0ef53c83fb0143f5ff38e793df30e7c9
cluster-kube-apiserver-operator git e9bc9090 sha256:10b6e5f3683f4d7c7d89e8caaa94927856039ba0d9d33964d7977e6f15619ec0
cluster-kube-controller-manager-operator git 6347fc81 sha256:e591cbc25dfcc84a657375e65b099a58d8d123af82b3efa5e9f74c6275e8227f
cluster-kube-scheduler-operator git 4e99db62 sha256:20efeaba2287b19f108260c41caa1c18eda5ad44939e1150572956b58157454c
cluster-kube-storage-version-migrator-operator git 59ba356f sha256:97193e40ed97059e3306386516e03e939a4b34aada0a75b313a5072bed88d350
cluster-machine-approver git 01d5fbbe sha256:fa3173548811de7b6c214e709840414b39deedd418408d5480456f2e6a6089cd
cluster-openshift-apiserver-operator git 0a6f6eb9 sha256:41d2be4433dea4ad2ec980682dfe7a322c4580807345c54bd29b33ceaf8c5615
cluster-openshift-controller-manager-operator git f1711cf3 sha256:050ce7aa7700d3f5585ad684a53601acb5856e06f5989ca66a76fd2b5d019bd2
cluster-samples-operator git bc725fd4 sha256:3f878298a1ead62b4e99ae86e477ed034d6162988e202dc004f2e3a3a478c5d8
cluster-update-keys git 8caab452 sha256:b180abb22508bf8063c54a71afdb63cc4c698e2be302bfeef38d340a4c39b08e
cluster-version-operator git f72d7e2c sha256:185dce1e958006dc1fc22eb19bad88b8676c297398965860630da4f268e63ab2
configmap-reloader git e2aaf00a sha256:556889133b75530bc592ae3a1d0102f9d6678ac4444f87d040533f5382d6c118
coredns git 8ca7f02b sha256:57ae83251b3d5941385df48c1ac51b374c27870f10874287eefdb3e0a8147309
csi-driver-manila-operator git 894ba4a3 sha256:0530764e61f1ed892681b910140141286e90479c86026f266b91828e5ae124ed
csi-external-resizer git a1423690 sha256:ec4a0f31a97929694fc7393a38d296cbf2134837d8c302bec251f175cca68ebf
csi-livenessprobe git 3a977844 sha256:d5a8b295ab4538fb53071f828e3788cb5729a4a5761f3dc29cd94fcaf59f16bc
csi-node-driver-registrar git ef93f0be sha256:f5913e5b3d185a1000e5c036ef061e64fbdafe3ce6b6c859d1b6959d25d1d4b7
deployer git 6febe619 sha256:b799c4c86e7f5330293ae983b50e063b0b28b2f76eb5ea36c274278f0c013311
docker-builder git 529c9688 sha256:0375470cf1edae7fd7113aca51fb8a613bfce47dc7eb9674af595a0e1d534212
docker-registry git 5c367551 sha256:fc1539cf943205c29a67c9b841353ef3620e344b3c6e7211875e81afc637742a
driver-toolkit git 2e139edc sha256:93ceaf9f5eedaa73a82105d630b0544a8e5d3d7da5e0a3fb7b7b67874ebbb894
etcd git b5a4f8d0 sha256:2ae4a5e44d8841496b83fbf34eaa3f310dba2b5c9d69a7c52f3fdfcb0e270f85
gcp-cloud-controller-manager git 6ea23561 sha256:ffaadd7a28a58fa4af4ac796098f90aa665907525701a59fc3672dd2d4e650c2
gcp-workload-identity-federation-webhook git f0a670c7 sha256:54cf67339cd9b60a0078f0ec8720d67739e8d55ff28a88f0d2af88d433c67d71
hyperkube git 91c24081 sha256:b4edebf6004779c15e7a6409ca83e30ac70a875a9846092b120d94b0a6dfa065
ibm-cloud-controller-manager git a33026b1 sha256:a39e63c2094449c8442f09a1ac9521c42680a65e06835540bdd3861f3f67ae8d
ibm-vpc-block-csi-driver-operator git 1c7bc07e sha256:d6aee021b99257c727fc97ae500ac421be2a00152be2a21acbd7bf805ef43429
ibmcloud-cluster-api-controllers git 4a0c35b0 sha256:93d2690b610bb467c42063274f7ca908ba6bcb81dad4962dda27b6a3aa5b1ed3
ibmcloud-machine-controllers git 6cc2b5e0 sha256:9cdcdeafb93f61b7b501211320d02d38bbe8c2474791e613fb715e1007ee77aa
insights-runtime-exporter git 3d444833 sha256:270d513a9a065716001931119d2e60518f8c4f5d464ce2f7ed7e0d8f8671869b
insights-runtime-extractor git 3d444833 sha256:bdccfca3d4a9e0513b125ff7b741a8cac6f045d6765cc1d4bd12f8f12472d776
ironic git 75856ee3 sha256:d5d68a272a889838a7ec78fab77a4ea529f57974a1f39e1a29340c8cace57103
ironic-machine-os-downloader git 50ca44fd sha256:d3cbde836d3e8c82edeecac3d9577b4cf8053fac1774e917e15810e087ea7428
ironic-static-ip-manager git cfbae04f sha256:9937192f0e3043c3f12f60202815b0b9fd9811af1f01c94aab06b31b1c49de8e
keepalived-ipfailover git 716eb0ef sha256:ea432e960e673fde7ef036d7fba9598a8847ea62ec271e00b7606cb0c95a6fbb
kube-metrics-server git db0d0600 sha256:3bef776523008473dbab670b3bee998e41d7743560925f5d01e4f740af225e95
kube-proxy git 91c24081 sha256:3959ee904e16fd3140f9e72c37a9c5bdf4a30d41eb32013ae85fd3fcb5fbe290
kube-rbac-proxy git 5a14ea9d sha256:4f78697157df28a72179bf35a667e85ce42968e5a25dca1c7e1bb20de9bf8410
kube-state-metrics git 046193a8 sha256:cb5c2f46c32f22f33e9db103c72502fc0da988301b2d263e9676f3dc383e0741
kube-storage-version-migrator git 815b43b7 sha256:15991d3caf539b707381913c4f1ec4031ce1e07e18e32aa46638bde0a1a093d1
libvirt-machine-controllers git 875b03bd sha256:797200f68a477166ed375046fe5e25c5507b9622cab6c523d183939b8d4b0aa2
machine-api-operator git b3a96a46 sha256:f10925a829e91f117cd89b38981030575ac22202902be962ba8165c869e84b71
machine-image-customization-controller git c8569da6 sha256:87c75ef14dc8a409a84f3394c321d41862067974d5bebd0ec6b54ff36101ad42
metallb-frr git 760c6639 sha256:b2941dfb359b7c90d49188e4111593922be4ac3f867709e08a1518a32b4da8a5
multus-admission-controller git 0d7ea6c7 sha256:29acdfedda9231a58130a31ef58d3230a1a164d35db070a57b71b96676ffee44
multus-networkpolicy git 3362bbc4 sha256:cf149d7843c9e01c9fa1447fc1680fd7ee7d5e1b38329534c4377cf47bb92919
multus-route-override-cni git 391c1b03 sha256:d288c5163cde8bab1af7df4f70ac61cb2cbe313625f8b8d9f68024c593e7d10e
multus-whereabouts-ipam-cni git 86191ded sha256:e53c1fc2644b8c68cdbed3f5170e5ad893e65054ba48bf7d7b0394970bdcb40c
network-interface-bond-cni git e2de9255 sha256:8e0c7e8eb9a5ed72148286abf0f7ba0998619f1e2a6643a7b3c1be2b2eb2e2df
network-metrics-daemon git 11e2dec9 sha256:f709d4dc275427a975778429cfb65b50e26b2197a06abefe5c8bfd640b3202ed
network-tools git 47b13549 sha256:2fad023d494a8a12fc6035ff2d41c1297f0963335a475efcfdc4a2cd166f32df
nutanix-cloud-controller-manager git d9fe8f38 sha256:dcebaf72e12602c73b2915b502915c61fb06bb784169db1cb7c624291b0cddd0
nutanix-machine-controllers git afe324bf sha256:2103fb27903de187221759db7469ae89b125c69699c6d624018f333bf495e264
oauth-apiserver git 1078b191 sha256:b70a559200f13558beeee47c0c82bf9dd26960997e8e05ba312ad86ee922b862
oc-mirror git 22a9fb87 sha256:470395b2f0f2495d8163323989b2403b92626e9ff26af6c2e645286715a2243b
olm-catalogd git 180aa92c sha256:ff34dce00dedfaccb1ee559136d949d1d7ef3cd047433b9df6031d45dbb99e2e
openshift-controller-manager git 8ee74406 sha256:47f100d763a1059054674625598f4c5ecfb8f41978fa893d2e6062fad911d2ba
openshift-state-metrics git 3cca6fee sha256:7ee9dd2755b83e4562555dd569ed72bbaf1c607cef41b9d0e79e36dd331957d6
openstack-cinder-csi-driver-operator git 894ba4a3 sha256:c875b8c653a6198cdff36463e5692c2fbb2e449497a7be62ca9bb35ee474da9b
openstack-cluster-api-controllers git d5e6ff9f sha256:cf9e7f4f154f0c84f6b3b13df8d02099640b26bb3d024e986fa8cfaf0c41ce77
operator-marketplace git 34521c26 sha256:98c0e02a8ed81d1ed5c0ad523f6cd4f1375f67f81164d3f0e6c642b264cfe583
pod git 91c24081 sha256:a700696dd47c2dad85b6e118bff538b884db444097a360708a6f5c096140feeb
powervs-block-csi-driver git e8700dfa sha256:79e551d29ba7fd88e269eff7d9bb5c4c424e379daca3bdcf29ff01bcd198f057
powervs-block-csi-driver-operator git 9c9131b7 sha256:6df979fb58a40ca2dbe0d32994300cbe53e9d74fa10fc4bfd7fb1ac58c0603aa
powervs-machine-controllers git 74e3ece7 sha256:9ae05d1fecc8cbcee08877e8a728a93178489107bca6fc03129bba7dca4c77fe
prom-label-proxy git 35c11369 sha256:4056183f7147cd94b4f2218fe3d1b46f9ee9ba6222edfa9037156b2be9f00210
prometheus-config-reloader git 9bbce0b8 sha256:6c5a2b558c6ea96ee650211d0c12d7be15372e8d65106d29c535afd92ee042fb
prometheus-node-exporter git 92e17ff5 sha256:be858f5ce507ee1dcb0401d2acbfbdbb479c3b1c69f0db9580a525eca74b3dc2
prometheus-operator git 9bbce0b8 sha256:75e2b74819afc59b36264906511f4de8e53416535778f9a5d993a447a068a90b
prometheus-operator-admission-webhook git 9bbce0b8 sha256:714d5720c80b72fc2003a87c64c01feb27c273457a1d6509c20b84127fb56785
rhel-coreos sha256:3c4eee3aff4efccf6619aae674bd0bf2682cf2931f2986dd89c5141d89f84e11
rhel-coreos-extensions sha256:9da848136fa8e94bcd31cf7d9c9407b3b1852194bd07603658f269bc6ecc95b5
service-ca-operator git 30efb529 sha256:bffe83a0a98177f4278e49a7322c3768b13512cf0dddfd5529df0b628d2974c6
telemeter git 999cdb5f sha256:2891c38af6a144e2261e83f04486e24839a353c52d39ddd6d53bd8285a9a4385
tests git 43c51244 sha256:f1f4d7b5e6361a9a6574fef683d3e254d504b002219378971e1f532e6c6b9f8d
tools git 6febe619 sha256:c283f9dc02199706260455c12ecd8f7ac538212b1933c92fa2c4cdb1d399a0b9
vsphere-cloud-controller-manager git b4dbf34a sha256:a6cd0d1dbe61eadcf51611dec3d6c9e0ef680890d27dd25a985583b82214b236
vsphere-csi-driver-operator git e64f4d7f sha256:3c2662f4a2f36c49a1366ddb26c5d80f91c3838329568bad2e6270941d47e293
vsphere-problem-detector git 60e2b91f sha256:547a44697487d62e1a2ea5ed88ddf674d5ffcaf57ee24723ceba06707f9a1f02

aws-ebs-csi-driver

OCPBUGS-82745: Address CVE-2026-35469 #327
OCPBUGS-86167: UPSTREAM: 2367: cleanup: make verify should ignore copyright year #321
OCPBUGS-80206: Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.71.3-sec.1 #313
Full changelog

aws-kms-encryption-provider

OCPBUGS-80184: Bump google.golang.org/grpc to v1.79.3 #43
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-80210, OCPBUGS-80211, OCPBUGS-80350: Bump google.golang.org/grpc to v1.79.3 #190
Full changelog

azure-cluster-api-controllers

OCPBUGS-80212: Bump google.golang.org/grpc to v1.79.3 #390
Full changelog

azure-disk-csi-driver

OCPBUGS-80213: Address CVE-2026-33186 #142
OCPBUGS-78037: add instantAccessDurationMinutes parameter to enable IA snapshots for PremiumV2/UltraSSD disks #130
Full changelog

azure-file-csi-driver

OCPBUGS-80216: Address CVE-2026-33186 #133
Full changelog

azure-kms-encryption-provider

OCPBUGS-80185: Bump google.golang.org/grpc to 1.64.1-sec.1 patch #46
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-95616: azure: Add field in installconfig to disallow shared access key #10670
Full changelog

baremetal-operator

OCPBUGS-98321: Add BMH finalizer on PreprovisioningImage #509
OCPBUGS-59259: Fix HFC error handling in actionPreparing #502
OCPBUGS-87967: Fix preprovisioning network Secret lifecycle during BMH deletion #495
Full changelog

cloud-credential-operator

OCPBUGS-81887: Bump go-jose/go-jose/v4@v4.1.4 #1031
OCPBUGS-80219: Fix CVE-2026-33186 using openshift-sustaining grpc-go fork #1041
Full changelog

cluster-capi-controllers

OCPBUGS-80220: Bump google.golang.org/grpc to v1.79.3 #297
Full changelog

cluster-capi-operator

OCPBUGS-80224: Bump google.golang.org/grpc to v1.79.3 #566
NO-JIRA: Allow sustaining engineering to self serve dependency updates #558
Full changelog

cluster-config-api

OCPBUGS-98486: add new serviceAccountToken fs type #2927
Full changelog

cluster-ingress-operator

OCPBUGS-86715: Add configuration override for X-SSL strip (#1477) #1477
Full changelog

cluster-kube-cluster-api-operator

OCPBUGS-80231: Bump google.golang.org/grpc to v1.79.3 #77
Full changelog

cluster-monitoring-operator

OCPBUGS-104540: Backport e2e stabilization 4.18 #3030
OCPBUGS-100375: [release-4.18] fix: watch cluster wide proxy changes and apply changes accordingly #3024
OCPBUGS-94081: ship collector:node_scrape_collector_success:avg to Telemetry #2992
OCPBUGS-86995: increase lookup interval #2944
Full changelog

cluster-network-operator

OCPBUGS-100191: Bump github.com/containernetworking/cni v0.8.0 -> v1.3.0 #3096
OCPBUGS-85443: Remove duplicated openssl parameter #3006
Full changelog

cluster-node-tuning-operator

OCPBUGS-90575: Requeue PerformanceStatus update when status write fails #1552
OCPBUGS-82752: Bump github.com/moby/spdystream from v0.4.0 to v0.5.1 #1544
Full changelog

cluster-olm-operator

OCPBUGS-80239: Bump google.golang.org/grpc to v1.79.3 #200
Full changelog

cluster-policy-controller

OCPBUGS-98486: Backport fs type service account token 4.18 #196
Full changelog

cluster-storage-operator

OCPBUGS-87556: remove oVirt code from CSO 4.18 #707
Full changelog

console

OCPBUGS-81520: Console can only show user name instead of full name as the display name #16238
OCPBUGS-86740, OCPBUGS-87085, OCPBUGS-97763: [release-4.18] bump package: protobufjs, fast-uri #16728
OCPBUGS-100069: quickstart page i18n misses (Fix Quick Starts i18n bundle lookup for zh-CN) #16872
OCPBUGS-91944: Prevent binary secret data corruption when editing #16673
OCPBUGS-99487: Disable Knative e2e Cypress tests in CI #16803
OCPBUGS-99648: Disable shipwright e2e tests to unblock CI #16818
OCPBUGS-86453: [release-4.18] shell-quote: Arbitrary code execution via command injection due to unescaped line terminators #16511
Fix for OCPBUGS-81604: CVE-2026-4800 #16563
OCPBUGS-84284: Bump follow-redirects to 1.16.0 to fix CVE-2026-40895 #16675
OCPBUGS-77125: [release-4.18] CVE-2026-26996 Bump minimatch library #16344
OCPBUGS-79447: Bump immutable #16325
Full changelog

console-operator

OCPBUGS-98985: [4.18] Stabilize telemetry config to prevent continuous console pod rollouts #1190
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-85672: CI Build root image tag sync with ART #236
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-80309: Bump google.golang.org/grpc #387
Full changelog

csi-driver-nfs

OCPBUGS-82754: Bump github.com/moby/spdystream@v0.5.1 #194
Full changelog

csi-external-attacher

OCPBUGS-80255: Bump google.golang.org/grpc to v1.79.3 #105
Full changelog

csi-external-provisioner

OCPBUGS-82755: Address CVE-2026-35469 #135
OCPBUGS-80256: Bump google.golang.org/grpc #130
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-80258, OCPBUGS-80261, OCPBUGS-80262: Bump google.golang.org/grpc to v1.79.3 #211
Full changelog

egress-router-cni

OCPBUGS-100191: Bump containernetworking/cni to v1.3.0 github.com/containernetworking/plugins to 1.4.0 #109
Full changelog

gcp-cluster-api-controllers

OCPBUGS-80270: Bump google.golang.org/grpc to v1.79.3 #290
Full changelog

gcp-machine-controllers

OCPBUGS-80293: Bump google.golang.org/grpc to v1.79.3 #165
Full changelog

gcp-pd-csi-driver

OCPBUGS-80274: Bump google.golang.org/grpc to v1.71.3-sec.1 in release-4.18 #112
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-80273: Replace google.golang.org/grpc with fork #187
Full changelog

haproxy-router

OCPBUGS-86726: Prevent SSRF via FQDN-typed EndpointSlices #821
OCPBUGS-86715: Strip X-SSL-* headers for plain HTTP #800
OCPBUGS-80275: Bump google.golang.org/grpc to v1.79.3 #768
Full changelog

hypershift

OCPBUGS-99142: fix(backport): konnectivity agent auth #9096
OCPBUGS-62756: Restart HCP on stale serving certs #8245
OCPBUGS-89356: build(operator): drop hypershift-no-cgo from operator container images #8760
NO-JIRA: remove path filter from control-plane-operator pipelines #8665
OCPBUGS-80278: fix CVE-2026-33186 by replacing grpc-go #8515
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-80280: Bump google.golang.org/grpc to v1.79.3 #143
Full changelog

insights-operator

OCPBUGS-80283: Bump google.golang.org/grpc to v1.79.3 #1283
Full changelog

ironic-agent

OCPBUGS-95066: Replace individual package removal with a single rpm -e loop #286
OCPBUGS-95066: Replace dnf remove with rpm -e to prevent dependency removal #274
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-39554: Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART for 4.18 #45
OCPBUGS-95084: OWNERS: Update component to Cloud Compute / KubeVirt Provider #77
Full changelog

kubevirt-csi-driver

OCPBUGS-80191: Bump google.golang.org/grpc to v1.79.3 #101
Full changelog

machine-config-operator

OCPBUGS-105477: Replace wildcard permissions with explicit verbs and resources in MCC ClusterRole #6391
OCPBUGS-94116: move cleanUpDuplicatedMC to avoid double reboot on first updated #6249
OCPBUGS-91747: Verify extension packages are installed #6216
OCPBUGS-98445: Remove sensitive ControllerConfig logging #6294
OCPBUGS-97588: Bootstrap MCS logging entire ignition #6268
OCPBUGS-86845: Apply password only if changes exist #6113
OCPBUGS-86695: use –delete-if-present for karg removal #6102
OCPBUGS-86844: Fix ssh and password rollbacks #6096
OCPBUGS-86692: Fix re-cordon detection #6101
OCPBUGS-86300: Add terminationMessagePolicy to build pod containers #6074
OCPBUGS-86021: Fix units rollback if update failure #6052
Full changelog

machine-os-images

OCPBUGS-87876: Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs #100
Full changelog

monitoring-plugin

OCPBUGS-74461: CVE-2025-13465 openshift4/ose-monitoring-plugin-rhel9: prototype pollution in _.unset and _.omit functions [openshift-4.18] #1141
OCPBUGS-79448: immutable bump: fix for CVE-2026-29063 #922
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-85249: Fix server url in kubeconfig #298
NO-ISSUE: [release-4.18] Bump Go to 1.22 and fix CI build root image #291
Full changelog

must-gather

OCPBUGS-86019: Collect object size with the object count #547
Full changelog

networking-console-plugin

OCPBUGS-99991: Updating networking-console-plugin-container image to be consistent with ART for 4.18 #454
OCPBUGS-41880: Fix namespace retention between NetworkPolicies tabs when MultiNetworkPolicies are disabled #433
OCPBUGS-41880: Retain namespace selection between network policies tabs #424
OCPBUGS-87000: Update Dockerfile.art to 4.22 build image #426
OCPBUGS-83382: Fix CVE 2026 34043 serialize javascript 4.18 #413
[release-4:18] OCPBUGS-85067: Migration from yarn to npm #412
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

oauth-server

OCPBUGS-81803: Bump github.com/go-jose/go-jose/v3 from v3.0.3 to v3.0.5 #238
Full changelog

olm-operator-controller

OCPBUGS-100434: increase catalog HTTP client timeout from 10s to 5m #787
OCPBUGS-87830: [release-4.18] operator-controller: clean up orphaned temp dirs in catalog cache #751
OCPBUGS-80304: Update grpc-go to v1.71.3-sec.1 to fix CVE-2026-33186 #735
Full changelog

openshift-apiserver

OCPBUGS-82769: Address CVE-2026-35469 #657
Full changelog

openstack-machine-api-provider

OCPBUGS-93867: Revendor CAPO #174
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-80311, OCPBUGS-80312, OCPBUGS-80313: Fix CVE-2026-33186 with openshift-sustaining/grpc-go v1.71.3-sec.1 [release-4.18] #1314
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-82773: Bump github.com/moby/spdystream to v0.5.1 #3321
OCPBUGS-98957: Branch Sync release-4.19 to release-4.18 [07-09-2026] #3290
OCPBUGS-86230: Branch Sync release-4.19 to release-4.18 [05-19-2026] #3197
OCPBUGS-74399, OCPBUGS-85434: Branch Sync release-4.19 to release-4.18 [05-12-2026] #3184
Full changelog

powervs-cloud-controller-manager

OCPBUGS-80319: Replace google.golang.org/grpc with openshift-sustaining fork v1.71.3-sec.1 to v1.79.3 to fix CVE-2026-33186 #99
Full changelog

prometheus

OCPBUGS-88628: remote: validate snappy decoded length before allocation in read endpoint #346
OCPBUGS-80320: Bump google.golang.org/grpc to v1.79.3 #308
Full changelog

prometheus-alertmanager

OCPBUGS-100355: Set testdata CA expiry to 20 years from issue date (#4112) #148
Full changelog

route-controller-manager

OCPBUGS-80199: Bump google.golang.org/grpc to v1.79.3 #85
Full changelog

thanos

OCPBUGS-80335: Bump google.golang.org/grpc to v1.79.3 #184
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-80340: Bump google.golang.org/grpc to v1.79.3 #104
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-80343: Bump google.golang.org/grpc to v1.79.3 #176
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github