4.16.0-0.ci-2026-09-22-141521

Download the installer for your operating system or run

oc adm release extract --tools quay-proxy.ci.openshift.org/openshift/ci:rc_payload__4.16.0-0.ci-2026-09-22-141521

Qualifiers (status api): None

Tests:

Blocking jobs
- aws-ovn-upgrade-4.16-minor Failed (1 retry) periodic-ci-openshift-release-main-ci-4.16-upgrade-from-stable-4.15-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Failed
- aws-sdn-serial Succeeded periodic-ci-openshift-release-main-ci-4.16-e2e-aws-sdn-serial
- gcp-ovn-upgrade-4.16-micro Succeeded periodic-ci-openshift-release-main-ci-4.16-e2e-gcp-ovn-upgrade
- hypershift-e2e Succeeded periodic-ci-openshift-hypershift-release-4.16-periodics-e2e-aws-ovn

Upgrades from:

Loading changelog, this may take a while ...

Changes from 4.16.0-0.ci-2026-09-18-141521

Created: 2026-09-22 14:17:41 +0000 UTC

Image Digest: sha256:896bba95335ccd41e5a9073977f92ee19f09e6f228469d54369575d4a513e088

Components

Kubectl 1.29.7
Kubernetes 1.29.14
Kubernetes Tests 1.29.0
Red Hat Enterprise Linux CoreOS 416.94.202609171141-0

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator

OCPBUGS-102919, OCPBUGS-102939: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #608
Full changelog

azure-file-csi-driver

OCPBUGS-102923: Bump golang.org/x/net to v0.35.0-sec.4 #160
Full changelog

cluster-ingress-operator

OCPBUGS-102952: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 #1573
Full changelog

console

OCPBUGS-98424: CVE-2026-59869 bump js-yaml #17158
Full changelog

csi-driver-shared-resource-operator

OCPBUGS-102984: Bump golang.org/x/net to v0.35.0-sec.3 #128
Full changelog

csi-external-resizer

OCPBUGS-102985: Bump golang.org/x/net to v0.35.0-sec.4 #215
Full changelog

gcp-machine-controllers

OCPBUGS-103045: Bump golang.org/x/net to v0.35.0-sec.3 #191
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-103085, OCPBUGS-103089: [release-4.16] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #401
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github