4.18.0-0.ci-2026-10-28-143557

Download the installer for your operating system or run

oc adm release extract --tools quay-proxy.ci.openshift.org/openshift/ci:rc_payload__4.18.0-0.ci-2026-10-28-143557

Qualifiers (status api): None

Tests:

Upgrades from:

Upgrades to:

Changes from 4.18.0-0.ci-2026-10-27-023557

Created: 2026-10-28 14:37:18 +0000 UTC

Image Digest: sha256:ffe9e3058936537a013c5dddaaf8ecc1ebc366188fa8017a7f6adeed61589090

Kubectl 1.31.1
Kubernetes 1.31.14
Kubernetes Tests 1.31.12
Red Hat Enterprise Linux CoreOS upgraded from 418.94.202610242013-0 to 418.94.202610271724-0 (diff)

rhel-coreos sha256:0cabd4994da241113ac3f78c01b94e7758a43340858a0d089d4acad383ed9209
rhel-coreos-extensions sha256:064c9c970eda116a2bcf1d01655667cee1e65760e6fc0c0f4ea985676041643a

OCPBUGS-127158: [release:4.18] linkify-it: Denial of Service via crafted mailto: links #17381
Full changelog

OCPBUGS-103493, OCPBUGS-103494: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #422
Full changelog

OCPBUGS-103450: Replace golang.org/x/net with github.com/openshift-sustaining/net v0.35.0-sec.4 #26
Full changelog

OCPBUGS-103470: bump golang.org/x/net to v0.35.0-sec.3 to fix CVE-2026-33814 #134
Full changelog

OCPBUGS-103490: Replace golang.org/x/net with openshift-sustaining/net v0.35.0-sec.4 for CVE-2026-33814 #281
Full changelog

OCPBUGS-103524: Replace golang.org/x/net with sustaining fork for CVE-2026-33814 in 4.18 #135
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github