Back to index
Download the installer for your operating system or run
oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.19.34-x86_64 Team Approvals:
Tests:
Blocking jobsupgrade Succeeded (1 retry) periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgradeupgrade-minor Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade Informing jobs Upgrades from:
Untested upgrades:
4.18.22 ,
4.18.23 ,
4.18.24 ,
4.18.26 ,
4.18.27 ,
4.18.28 ,
4.18.29 ,
4.18.30 ,
4.18.31 ,
4.18.32 ,
4.18.33 ,
4.18.34 ,
4.18.36 ,
4.18.37 ,
4.18.38 ,
4.18.40 ,
4.18.41 ,
4.19.10 ,
4.19.11 ,
4.19.12 ,
4.19.13 ,
4.19.15 ,
4.19.16 ,
4.19.17 ,
4.19.18 ,
4.19.19 ,
4.19.21 ,
4.19.22 ,
4.19.23 ,
4.19.24 ,
4.19.25 ,
4.19.27 ,
4.19.28 ,
4.19.29 ,
4.19.3 ,
4.19.30 ,
4.19.4 ,
4.19.5 ,
4.19.6 ,
4.19.7 ,
4.19.8 ,
4.19.9 Upgrades to:
Loading changelog, this may take a while ...
Changes from 4.19.0
Created: 2026-06-11 09:10:07 +0000 UTC
Image Digest: sha256:12ba901e472743bd79695772e65a451ac80ac29200cc06076471c42ed0956675
Components
Kubectl 1.32.1
Kubernetes upgraded from 1.32.5 to 1.32.13
Kubernetes Tests upgraded from 1.32.5 to 1.32.8
Red Hat Enterprise Linux CoreOS upgraded from 9.6.20250530-0 to 9.6.20260608-0
The CoreOS links above are for the base CoreOS layer used to build
the OpenShift node image and do not contain OpenShift components. This is
normally only useful to devs working closely with the CoreOS team. For info
about the node image, see the Node Image Info
section.
FeatureGate Changes
FeatureGate
Default
Default
DevPreviewNoUpgrade
DevPreviewNoUpgrade
TechPreviewNoUpgrade
TechPreviewNoUpgrade
MachineConfigNodes
Enabled
Enabled
Enabled
Enabled
Enabled
Enabled
PinnedImages
Enabled
Enabled
Enabled
Enabled
Enabled
Enabled
RouteAdvertisements
Enabled
Enabled
Enabled
Enabled
Enabled
Enabled
StreamingCollectionEncodingToJSON
Enabled
Enabled
Enabled
Enabled
Enabled
Enabled
StreamingCollectionEncodingToProtobuf
Enabled
Enabled
Enabled
Enabled
Enabled
Enabled
Removed images
ovirt-csi-driver
ovirt-csi-driver-operator
Rebuilt images without code change
OCPBUGS-73729 : Fix reconciler consistency checks in Update and Exists #165 OCPBUGS-63137 : client: re-use a single file for building the session instead of randomly named files #152 OCPBUGS-63137 : revert: client: re-use a single file for building the session instead of randomly named files #149 OCPBUGS-63137 : client: re-use a single file for building the session instead of randomly named files #147 OCPBUGS-56633 : fix: make machineset annotation controller respect paused condition #130 Full changelog
OCPBUGS-83857 : Allow setting the oauthMetadata when auth type is None #2118 OCPBUGS-74628 : Add priority field to prevent early shutdown #1959 OCPBUGS-65525 : OpenShift cluster got degraded after rotating the kube-apiserver-service-network-signer cert #1964 Revert “[release-4.19] OCPBUGS-65560: Optimistically update Kube Server and Client CA bundles” #1963
OCPBUGS-63342 : [release-4.19] Revert “Revert “OCPBUGS-58116: certregenerationcontroller: start configInformers #1945 OCPBUGS-60682 : Optimistically update Kube Server and Client CA bundles #1920 OCPBUGS-60121 : [release-4.19] Set goaway chance to 0.001 #1887 OCPBUGS-60677 : certrotation: ensure that all rotated secrets/configmaps have RefreshOnlyWhenExpired set #1901 OCPBUGS-60495 : certrotationcontroller: extend node-system-admin-signer lifetime #1897 OCPBUGS-59957 : Add missing service ports to apiserver service #1880 Revert “[release-4.19] OCPBUGS-58116: certregenerationcontroller: start configInformers again” #1867
OCPBUGS-58116 : certregenerationcontroller: start configInformers again #1861 Full changelog
NO-ISSUE: Updating ose-cluster-update-keys-container image to be consistent with ART for 4.19 #80
Full changelog
OCPBUGS-80434 : Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.75.1-sec.1 to avoid go version bump and fix CVE-2026-33186 #178 Full changelog
OCPBUGS-80455 : Bump google.golang.org/grpc to v1.79.3 in release-4.19 #110 OCPBUGS-68307 : Update logrus to 1.9.3 #88 OCPBUGS-62116 : UPSTREAM: 2054: Fix Hyperdisk Resize That Requires Iops/Throughput Adjustment #82 OCPBUGS-59749 : 4.19: UPSTREAM: 2116: Remove check on snapshot create support for multi-writer HyperDisk-HA and let such validations occur at the PD control plane layer #80 Full changelog
OCPBUGS-79322 : Add annotation-based fallback for infra VM node ID resolution #85 OCPBUGS-78389 : Updating ose-kubevirt-csi-driver-container image to be consistent with ART for 4.19 #79 ”[release-4.19] OCPBUGS-58239: Implement volume expansion” #64
Full changelog
OCPBUGS-86923 : Updating monitoring-plugin-container image to be consistent with ART for 4.19 #970 OCPBUGS-79452 : immutable bump: fix for CVE-2026-29063 [4.19] #952 OU-1372 : reset queries when namespace changes in dev perspective #950 OU-1370 : prevent namespace and project desync #944 OCPBUGS-83496 : [release-4.19] feat: re enable dev console views #858 OCPBUGS-83300 : [release-4.19] openshift4/ose-monitoring-plugin-rhel9: Axios: Remote Code Execution via Prototype Pollution escalation #889 OCPBUGS-82520 : fix: re encode params when redirecting from graph to query-browser #874 OCPBUGS-77407 : koa bump #867 OCPBUGS-76579 : [release-4.19]CVE-2026-25639 openshift4/ose-monitoring-plugin-rhel9: Axios affected by Denial of Service via proto Key in mergeConfig #789 OCPBUGS-78360 : fix for CVE-2025-69873 #847 OCPBUGS-78397 : Updating monitoring-plugin-container image to be consistent with ART for 4.19 #842 NO-JIRA: simplify dockerfile by removing cachito dependencies [release-4.19] #806
OCPBUGS-76937 : fix: update vulnerable dependencies #773 OU-1233 : monitoring testing on release-4.19 branch - fix #785 OU-1233 : automation task - main into 419 and alerting conditional filtering #772 OCPBUGS-74166 : fix: update qs vulnerable dependency #737 OU-1157 : remove random multiplication #706 OU-1131 : Merge main into release-4.19 #693 OCPBUGS-66388 : Time range and Refresh interval dropdown button lack of unique identifier #671 OU-863 : [release-4.19]: Fix step calculation for metric explorer 4.19 #655 OCPBUGS-63531 : [release-4.19] Improve alignment with console SDK #647 OCPBUGS-63588 : [release-4.19] allow tenancy access to metrics tags #618 OU-1060 : remove troubleshooting panel links from non-admin #629 NO-JIRA: [release-4.19] OCPBUGS-60296: fix legend height to avoid scroll overlap #498
NO-JIRA: improve consistency in tab string #496
: NO-JIRA: update the i18n #495
OCPBUGS-60129 : feat: add alerting rules tab to dev console #488 OU-943 : remove broken useEffect #484 OU-943 : Manual Cherry Pick #474 OU-594 : Manual cherry pick incidents tab 4 19 #479 OU-863 : [release-4.19] Manual cherry pick add disconnect option #482 OU-939 : Fix virt persepective new silence link #478 OU-928 : reset showgraph state when unmounting button #462 OU-744 : [release-4.19]: fix: set correct pf color for gradient background on legacy dashboards legend #457 OU-880 : [release-4.19] Manual cherry pick ou 880 #458 OU-842 : [release-4.19] fix: override notistack dependency to avoid conflict #455 Full changelog
NO-JIRA: (chore): update OWNERS file #169
OCPBUGS-61760 : bump kubernetes-apiserver to pick up loopback certificate expiration update #152 OCPBUGS-63051 : (bugfix): useroauthaccesstokens: cast delete validation object to correct type for admission #150 Full changelog
OCPBUGS-85512 : Branch Sync release-4.20 to release-4.19 [05-12-2026] #3186 OCPBUGS-74397 , OCPBUGS-85355 : Branch Sync release-4.20 to release-4.19 [05-10-2026] #3181 OCPBUGS-81478 : node: fix serviceUpdateNotNeeded nil pointer comparison #3100 OCPBUGS-82032 : Branch Sync release-4.20 to release-4.19 [04-04-2026] #3116 OCPBUGS-81526 : Branch Sync release-4.20 to release-4.19 [03-03-2026] #3034 OCPBUGS-77442 : Clear stale conntrack UDP entries for nodePorts #3015 OCPBUGS-77082 , OCPBUGS-77096 : [release-4.19] combined backport PR for 2 escalations #2986 OCPBUGS-74269 : release-4.19 fix(localnet, ipamless): Prevent LSP deletion on sync #2942 OCPBUGS-70345 : Branch Sync release-4.20 to release-4.19 [12-31-2025] #2915 OCPBUGS-66139 : Branch Sync release-4.20 to release-4.19 [12-03-2025] #2890 CORENET-6055 , OCPBUGS-65658 , OCPBUGS-65909 , OCPBUGS-65956 : Branch Sync release-4.20 to release-4.19 [11-26-2025] #2872 OCPBUGS-64854 : Fix stale EIP assignments during failover and controller restart #2848 OCPBUGS-64645 : kubevirt: fix bad release of IPs of live migratable pods #2842 OCPBUGS-63660 : Skip Pending pods in EgressIP status updates #2834 OCPBUGS-63234 : [release-4.19] DownStream Merge Sync from 4.20 [10-16-2025] #2810 OCPBUGS-62670 : Fix EgressIP stale GARP post reboot + pod restart #2774 OCPBUGS-62800 : [release-4.19] DownStream Merge Sync from 4.20 [10-07-2025] #2786 OCPBUGS-61454 : [4.19] allow default network -> localnet on the same node for any localnet subnet #2753 OCPBUGS-48709 , OCPBUGS-60797 , OCPBUGS-60979 : DownStream Merge Sync from 4.20 [08-22-2025] #2733 OCPBUGS-48709 : DownStream Merge Sync from 4.20 [08-06-2025] #2704 OCPBUGS-48709 : DownStream Merge Sync from 4.20 [07-28-2025] #2688 OCPBUGS-48709 , OCPBUGS-59530 : DownStream Merge Sync from 4.20 [07-17-2025] #2675 OCPBUGS-48709 : DownStream Merge Sync from 4.20 [07-09-2025] #2660 OCPBUGS-59106 : DownStream Merge Sync from 4.20 [06-18-2025] #2642 OCPBUGS-57061 , OCPBUGS-57062 : DownStream Merge Sync from 4.20 [05-30-2025] #2596 Full changelog
Node Image Info Loading node image info, this may take a while ...
Unable to show node image info: too many concurrent oc adm release info --rpmdb/--rpmdb-diff operations (limit 16)
Source code for this page located on github