Back to index

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.11.56-x86_64

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
  • upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade

Upgrades from:

• 4.11.55 (changes) - F S S S S
• 4.11.54 (changes) - Success
• 4.11.53 (changes) - Failed
• 4.11.49 (changes) - Success
• 4.11.43 - Success
• 4.11.31 (changes) - Success
• 4.11.2 (changes) - Success
• 4.11.1 (changes) - Failed
• 4.11.0 (changes) - Success
• 4.10.67 (changes) - S S S
• 4.10.66 (changes) - Failed
• 4.10.65 (changes) - Failed
• 4.10.63 (changes) - Success
• 4.10.58 (changes) - Success
• 4.10.32 (changes) - Success
• 4.10.18 (changes) - Success
• 4.10.17 (changes) - Failed
• 4.10.16 (changes) - Success

Upgrades to:

• 4.12.80 (changes) - Success
• 4.12.75 (changes) - Success
• 4.12.58 (changes) - Failed
• 4.12.53 (changes) - Success
• 4.12.52 (changes) - Success
• 4.12.51 (changes) - Success
• 4.12.50 (changes) - Failed
• 4.12.49 (changes) - Success
• 4.12.48 (changes) - Success
• 4.12.47 (changes) - S F S
• 4.11.59 (changes) - Success
• 4.11.58 (changes) - Failed
• 4.11.57 (changes) - F F F F F S F S

---

Loading changelog, this may take a while ...

Changes from 4.11.43

Created: 2024-01-04 20:13:34 +0000 UTC

Image Digest: sha256:6fcfee1b6d7e4d2f9c0e05ec2b0ad159809ea93736ac0acdc710df0584510892

Release 4.11.56 was created from registry.ci.openshift.org/ocp/release:4.11.0-0.nightly-2024-01-03-144830

Components

• Kubernetes upgraded from 1.24.14 to 1.24.16
• Red Hat Enterprise Linux CoreOS upgraded from 411.86.202306021408-0 to 411.86.202312160018-0 (diff)

Rebuilt images without code change

• agent-installer-api-server git bc51be82 sha256:c95df595dbbac0756c0f022647c1a6677b436df95276344831d17c7c5f38221a
• agent-installer-node-agent git e74ffbf5 sha256:7ec81463b7f9b0cc8d20af4f1b8118b601cdf25ba28dabb2661d568efbfd793e
• alibaba-cloud-controller-manager git 0daf34f1 sha256:06c04f8625d82cf9e21d0d7c300438aed73ec78d675086a861383a86f74c8400
• alibaba-machine-controllers git 41451089 sha256:18860b11365c235a069cb235dd507aa991875ee79bd5e7c671738ca40581568b
• aws-machine-controllers git a796a77f sha256:8f851202132e27b6f0ddfa92e067ba7bf17cde7980efa5ad955378b065d73a35
• cloud-network-config-controller git fd849e37 sha256:1e2511b92b7d6ff4575047478c73cce77621f415614d0dbb27fbe8036babfa54
• cluster-authentication-operator git e2bcbaaf sha256:ae2bd96954fed864d4ef6cf9f2219c83b1d87a8e4c96da38e36c32a0e5ca1690
• cluster-autoscaler git bf6c1c32 sha256:6e4b7a7ef6ee04379b6060b6019783b83f1c2fb9c8387261beee77e76a9d0522
• cluster-cloud-controller-manager-operator git 2dbffc67 sha256:c4b7520a4b3aa7a41e515d297891afbbc3891328d84ac4cb8248aec091eca0f9
• cluster-update-keys git 289032fb sha256:fbd4485eed46dc17e99b2aaac0f7042650666929a5a296a4542713ea7d8a457e
• configmap-reloader git b7c03bb0 sha256:5488efd925d423a57eb760401d8482f40674c5710f8bf194bc8194436c7fb050
• csi-driver-nfs git f144bb43 sha256:021990353b648275d676aaf887d1d13e2f94b61a166f58745101666e5c67d3ec
• driver-toolkit git 28589b0a sha256:ad7d0ab3816ddfc9a6fa8c68d682b423eb68cd50327a09e8d9300a92d491b59f
• egress-router-cni git fccaf1d9 sha256:4437a31bbb2569ec4df7c997b05452ee692f3f5fd4280cd6b8c5f56d0ef1186c
• hypershift git da0a576c sha256:abc83440557a32e3ed4ade1f87ab4d0eb0e255e19561a938ff51d8d43ec3b856
• ironic-machine-os-downloader git 876128b5 sha256:57f7335881c948d4992c07df315561bd88890fa6f479f2f60d0d6bcb7c18f840
• ironic-static-ip-manager git 8c8af7be sha256:d9def264baa01dfeb2f67c33a8f4e4218292f9c3ae09ebbce280aa2f9ad826de
• keepalived-ipfailover git f1330f6f sha256:6cbf732e71e10b85d2483fa9a89fb95dd4461675a0612c3d0603532071ae5894
• kube-storage-version-migrator git 596745ce sha256:2bd985847edc70aa9fef61f55f490a0795f3ad90650cae4315f31c8517c6a631
• libvirt-machine-controllers git b6e14eab sha256:db7d2a930e2fa100df92d4b69c2b461d896d2fca3b724e285b400c3ce9ae907c
• machine-os-content sha256:e73b196d313407ec49c8fe1aee79a60797a2f5f956954c95c953aa2f205e1436
• machine-os-images git b1580a29 sha256:877d09da709a9f9405cbc9303530b16380ced389d5b802d53fb234bee0744f87
• multus-route-override-cni git 523b7904 sha256:41feb2856c73a9ce8cc4050af78a5edce196b295166d59288160cfc110c3699b
• must-gather git 44f6adac sha256:18cd61e05aeff623d2886cd923069c1790f31b986013cf87bbf8e9dae259f497
• network-interface-bond-cni git b76a6770 sha256:b74c74d4e2f2f489e4fc42e9f4ccf295c69b494c77d39885046287ff8b006cca
• network-tools git 4e87286c sha256:0161510f22136a4f373fa25ea492f5cd2c10701d0539dff08360cbffd5a999e9
• nutanix-machine-controllers git a94eb77c sha256:7f22b15b4edd28eeff97ecd3240b7a9494c0a7a6e5f94f0c7b9ceda54b87b643
• oauth-apiserver git c9c2dd15 sha256:4de568bc0f9c66edc216dea5a8e6216537e0611c3600510e6616d061be1225a4
• oauth-proxy git aad1b28f sha256:afee631f1a5c5f5d77e7f707602fb82ecfe3da8e7f0bc62f4468a3d18e041cff
• oauth-server git 8d80088e sha256:e4c316d879fc13c0ca5beb0c9916c15d5a44bd7624a9f3bdb428eb1c39ae7ef9
• openshift-apiserver git 35df5a02 sha256:7a98c999f07153f94b5dbd0afb4780b08b8ba5c84a929a85cb93605d11525797
• openstack-machine-api-provider git 0446d771 sha256:722c18796643b3f05ccf8e8f4d7753ff7506ba055f4794e307ea97b0905f4929
• ovirt-csi-driver git cd3370fb sha256:d31f7a5ca16dfe67ca06ecde0f5d741d720c986364ef376ac8662324e58305c4
• ovirt-machine-controllers git 5a93d94c sha256:5f8653c819c5543672f4106be0bb28def6aad7d15d2743fe74eeb1c54ed90f69
• prom-label-proxy git af12fbc4 sha256:ff384e38d9ca65ec1a2c15bd3a9e80e85acc6e0d5722c8bc2f8054ca5b80331c
• service-ca-operator git 0899d112 sha256:0b73fe6f209564bfe26f8ef62a4ee24e7c0975b40f0943a45debe15dc9063245
• vsphere-cloud-controller-manager git 91f7b1fa sha256:378681749b52cd3f8b9931b059b45af7a9101106c5315c0e4cae507cb614a1d8

agent-installer-csr-approver, agent-installer-orchestrator

• NO-ISSUE: Update OWNERS to match master branch (#682) #682
• CVE-2022, OCPBUGS-15068: 21235 github.com/Masterminds/vcs command inj (#681) #681
• Full changelog

alibaba-cloud-csi-driver

• OCPBUGS-21292: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #39
• Full changelog

alibaba-disk-csi-driver-operator

• OCPBUGS-21389: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #67
• OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars #59
• Full changelog

apiserver-network-proxy

• HOSTEDCP-1323: Merge latest code into 4.14 branch #45
• OCPBUGS-10187: Updating ose-apiserver-network-proxy images to be consistent with ART #30
• Full changelog

aws-cloud-controller-manager

• OCPBUGS-20708: Update golang.org/x/net to v0.17.0 #56
• Full changelog

aws-cluster-api-controllers

• OCPBUGS-20791: bump golang.org/x/net to v0.17.0 #484
• Full changelog

aws-ebs-csi-driver

• OCPBUGS-20892: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #242
• OCPBUGS-19069: Volume unmount repeats after successful unmount, preventing pod delete #234
• OCPBUGS-12932: 4.11: Bump golang.org/x/text #227
• Full changelog

aws-ebs-csi-driver-operator

• OCPBUGS-20997: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #283
• OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars #266
• Full changelog

aws-pod-identity-webhook

• NO-ISSUE: snyk: exclude vendor/ #175
• Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

• OCPBUGS-21387: Bump golang.org/x/net to v0.18.0 #96
• Full changelog

azure-cluster-api-controllers

• OCPBUGS-21476: bump golang.org/x/net to v0.17.0 #290
• Full changelog

azure-disk-csi-driver

• OCPBUGS-20662: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #57
• Full changelog

azure-disk-csi-driver-operator

• OCPBUGS-20733: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #104
• OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars #96
• Full changelog

azure-file-csi-driver

• OCPBUGS-20822: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #40
• Full changelog

azure-file-csi-driver-operator

• OCPBUGS-20924: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #79
• OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars #72
• Full changelog

azure-machine-controllers

• OCPBUGS-20725: Bump x/net package to v0.17.0 #85
• OCPBUGS-14012: Add user defined tags to Azure NIC resources #70
• Full changelog

baremetal-installer, installer, installer-artifacts

• OCPBUGS-23478: Specify google cloud CLI to version 256.0.0 #7747
• OCPBUGS-494: [release-4.11] Switch libvirt VM’s to vnc graphic mode #6252
• OCPBUGS-18545: CORS-2445: GCP: Add osImage to the install config #7468
• OCPBUGS-16779: bump RHCOS 4.11 bootimage metadata to 411.86.202308081056-0 #7424
• OCPBUGS-17246: azurestack: do not use gen2 images #7393
• OCPBUGS-16915: [release-4.11] azure: skip LB creation when not needed #7372
• OCPBUGS-16353: ic: azure: validate diskTypes in AzureStack #7341
• OCPBUGS-17002: GCP: add europe-west12 region to the survey as supported region #7377
• OCPBUGS-5708: hold bootkube service until bootstrap has pivoted #6759
• Full changelog

baremetal-machine-controllers

• OCPBUGS-21699: Uplift x/net to v0.17.0 #201
• Full changelog

baremetal-operator

• OCPBUGS-21136: Uplift x/net to v0.17.0 #311
• OCPBUGS-17955: Trigger reconcile on Secret change #299
• Full changelog

baremetal-runtimecfg

• OCPBUGS-18815: Move haproxy firewall rule check earlier in loop #273
• OCPBUGS-18096: Don’t render config with incomplete unicast peer list #269
• OCPBUGS-15539: Use machine-config state instead of comparing roles #263
• Full changelog

cli, cli-artifacts, deployer, tools

• ART-8372: el7 version of oc in 4.11 #1609
• OCPBUGS-20292: Truncate existing files when writing from inspect #1564
• OCPBUGS-20309: Use quay redis image instead docker mysql #1568
• OCPBUGS-16059: mcs cert: account for environments that use IP directly #1504
• OCPBUGS-16195: reboot: set ignition version to 3.1 #1510
• OCPBUGS-4812: [release-4.11] New-App Using Git via SSH #1283
• handle the error case of node retrieval while waiting for reboot #1486
• bring some cert rotation helpers back into 4.11 [fix unit-tests] #1479
• Full changelog

cloud-credential-operator

• OCPBUGS-21328: Upgrade golang/x/net for CVE-2023-39325 #625
• NO-ISSUE: snyk: exclude vendor/ #621
• NO-ISSUE: Removing andrew from OWNERS #620
• Full changelog

cluster-autoscaler-operator

• OCPBUGS-20737: Bump x/net package to v0.18.0 #301
• Full changelog

cluster-baremetal-operator

• OCPBUGS-20828: Uplift x/net to v0.17.0 #372
• Full changelog

cluster-bootstrap

• OCPBUGS-14387: Update dependencies and image #92
• Full changelog

cluster-capi-controllers

• OCPBUGS-21509: bump golang.org/x/net to v0.17.0 #187
• Full changelog

cluster-capi-operator

• OCPBUGS-21027: bump golang.org/x/net to v0.17.0 #139
• Full changelog

cluster-config-operator

• : OCPBUGS-21231: bump library-go to include switch to HTTP/1.1 #374
• Full changelog

cluster-csi-snapshot-controller-operator

• OCPBUGS-21425: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #170
• OCPBUGS-19513: Fix readOnlyRootFilesystem for 4.11 #165
• Full changelog

cluster-dns-operator

• OCPBUGS-21511: Bump golang.org/x/net/http2 to v0.17.0 for CVE-2023-39325 in cluster-dns-operator #392
• Full changelog

cluster-etcd-operator

• OCPBUGS-21108: fixing CVE-2023-39325 by updating dependencies #1150
• OCPBUGS-22785: [4.11] Backports of backup/restore fixes #1145
• OCPBUGS-18283: reset snapshot default counts to avoid file already lo… #1103
• Full changelog

cluster-image-registry-operator

• OCPBUGS-20672: mitigate effects of rapid reset #954
• Full changelog

cluster-ingress-operator

• OCPBUGS-20748: Bump golang.org/x/net for CVE-2023-44487 #989
• OCPBUGS-22433: test/e2e: Don’t use openshift/origin-node #993
• OCPBUGS-14456, OCPBUGS-14457: Handle mTLS CRLs, and fix accidental CRL duplication #942
• Full changelog

cluster-kube-apiserver-operator

• : OCPBUGS-20839: bump library-go to include switch to HTTP/1.1 #1575
• Full changelog

cluster-kube-cluster-api-operator

• OCPBUGS-20943: bump golang.org/x/net to v0.17.0 #30
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-21036: Bump deps to address CVE-2023-44487 [4.11] #765
• Full changelog

cluster-kube-scheduler-operator

• OCPBUGS-21220: bump(golang.org/x/net,openshift) to address CVE-2023-44487 #506
• Full changelog

cluster-kube-storage-version-migrator-operator

• : OCPBUGS-21314: bump library-go to include switch to HTTP/1.1 #99
• Full changelog

cluster-machine-approver

• OCPBUGS-25377: Filter non node CSRs in metrics #221
• OCPBUGS-21413: Bump x/net package to v0.18.0 #215
• Full changelog

cluster-monitoring-operator

• OCPBUGS-22845: [release-4.11] add RHACS telemetry metrics #2141
• OCPBUGS-21214: upgrade golang.org/x/net to v0.17.0 #2124
• OCPBUGS-20073: Limit the value of GOMAXPROCS on node-exporter to 4 #2110
• Full changelog

cluster-network-operator

• OCPBUGS-23321: IBMCloud specific: patch out management workload for dataplane component thats needed for bootstrapping #2109
• Full changelog

cluster-node-tuning-operator

• Merge #548
• And 5 elided commits (e.g. from squash or rebase merges)
• Full changelog

cluster-openshift-apiserver-operator

• : OCPBUGS-20679: bump library-go to include switch to HTTP/1.1 #557
• Full changelog

cluster-openshift-controller-manager-operator

• OCPBUGS-20757: bump(k8s,openshift) to address CVE-2023-44487 #312
• Full changelog

cluster-policy-controller

• OCPBUGS-21062: Bump deps to address CVE-2023-44487 [4.11] #142
• Full changelog

cluster-samples-operator

• OCPBUGS-15758: Update Jenkins and Jenkins Agent Base image versions #507
• Full changelog

cluster-storage-operator

• OCPBUGS-21253: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #408
• Full changelog

cluster-version-operator

• OCPBUGS-5011: Backport SecurityContext reconciliation behavior #940
• Full changelog

console

• OCPBUGS-23064: add support for new features annotations while preservi… #13315
• OCPBUGS-19930: Web console slowness on Project>Project access page #13206
• OCPBUGS-19297: Fix topology crash when a console.topology/data/factory extension tries to resolve a resource with version from the CRDs which doesn’t exists #13158
• OCPBUGS-20217: Fixed Edit Application form for Knative Services #13220
• OCPBUGS-18486: Fix stop PLR option #13131
• OCPBUGS-19409: Backport tab extension to fix LOG-4504 (support LOG-3388 on OCP 4.11) #13171
• OCPBUGS-19359: Remove PipelineResource CRD check because it’s not installed with PO 1.11 anymore #13079
• OCPBUGS-17375: When removing the project owner from the project in GUI, instead of that user, the group (the default group added as project admin through the project template) will be removed. #13071
• OCPBUGS-15562: only copy workload annotations to debug pod #12956
• OCPBUGS-15532: visiting Configurations page returns error Cannot read… #12953
• OCPBUGS-14004: use PipelineRun template from ‘pipelines-as-code-pipelinerun-go’ configMap for Go runtime #12845
• OCPBUGS-14413: Modified git import flow module to handle create button enable-disable issue #12874
• OCPBUGS-13214: the name of the object (imagestream-name) does not match the name on the URL (deployment_name) #12835
• Full changelog

console-operator

• OCPBUGS-18424: Add missing watch permission for helm-chartrepos-viewers #804
• Full changelog

container-networking-plugins

• OCPBUGS-20592: build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 [backport 4.11] #132
• Full changelog

coredns

• OCPBUGS-20359: UPSTREAM: <carry>: openshift: Fix OCPBUGS-20359 #99
• OCPBUGS-21009: UPSTREAM: <carry>: openshift: Address CVE-2023-39325 #104
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OCPBUGS-21216: Upgrade dependencies #243
• OCPBUGS-20576: [release-4.11] CARRY: Add DOWNSTREAM_OWNERS #230
• Full changelog

csi-driver-manila-operator

• OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars #200
• OCPBUGS-18782: Don’t cache OpenStack client #203
• OCPBUGS-8067: Fix SCC admission failure race during initial deployment #188
• Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

• OCPBUGS-23123: Should reference configmaps instead of secrets #155
• OCPBUGS-20690: bump golang.org/x/net to v0.17.0 #149
• Full changelog

csi-driver-shared-resource-operator

• OCPBUGS-20768: bump golang.org/x/net to v0.17.0 #89
• Full changelog

csi-external-attacher

• OCPBUGS-21119: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #63
• Full changelog

csi-external-provisioner

• OCPBUGS-20727: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #75
• Full changelog

csi-external-resizer

• OCPBUGS-20865: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #150
• Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

• OCPBUGS-20971: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #112
• Full changelog

csi-livenessprobe

• OCPBUGS-20625: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #53
• Full changelog

csi-node-driver-registrar

• OCPBUGS-20657: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #55
• Full changelog

docker-builder

• OCPBUGS-23041: Add -p flag to cp command to preserve timestamps #373
• OCPBUGS-20685: [release-4.11] Bump golang.org/x/net #365
• OCPBUGS-15645: Add the git-lfs package #354
• Full changelog

docker-registry

• OCPBUGS-18302: bump docker-distribution #384
• Full changelog

etcd

• OCPBUGS-21173: [4.11] Carrying fixes for CVE-2023-44487 #229
• OCPBUGS-16791: [4.11] Rebase openshift/etcd to 3.5.9 #210
• Full changelog

gcp-cloud-controller-manager

• OCPBUGS-21261: Bump golang.org/x/net to v0.18.0 #45
• Full changelog

gcp-cluster-api-controllers

• OCPBUGS-21358: UPSTREAM: <carry>: bump golang.org/x/net to v0.17.0 #206
• Full changelog

gcp-machine-controllers

• OCPBUGS-20813: Bump x/net package to v0.18.0 #70
• Full changelog

gcp-pd-csi-driver

• OCPBUGS-20704: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #48
• Full changelog

gcp-pd-csi-driver-operator

• OCPBUGS-20788: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #90
• OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars #83
• Full changelog

haproxy-router

• OCPBUGS-21071: Bump golang.org/x/net to v0.17.0 to address CVE-2023-39325 #533
• OCPBUGS-18474: haproxy/template: mitigate CVE-2023-40225 #509
• OCPBUGS-14456, OCPBUGS-14457: Handle mTLS CRLs, and fix accidental CRL duplication #492
• Full changelog

hyperkube, pod

• OCPBUGS-20122: Make kubelet set alpha.kubernetes.io/provided-node-ip unconditionally #1796
• OCPBUGS-23289: UPSTREAM: 121881: Use golang library instead of mklink #1804
• OCPBUGS-20112: UPSTREAM: <carry>: Do not allow nodes to set forbidden openshift labels #1748
• openshift-hack: Fix sporadic 141 errors in build-rpms #1775
• OCPBUGS-21471: [release-4.11] UPSTREAM: <carry>: [CVE-2023-39325] .: bump golang.org/x/net to v0.17.0 #1761
• OCPBUGS-18843: UPSTREAM: <carry>: Force using host go always and use host libriaries #1697
• OCPBUGS-17189: Update to Kubernetes 1.24.16 #1672
• OCPBUGS-8736: UPSTREAM: <drop>: bump apiserver-library-go #1627
• OCPBUGS-15361: Bump to k8s 1.24.15 #1607
• OCPBUGS-14746: [release-4.11] UPSTREAM: 118383: bump cadvisor for upstream patch 3301 #1606
• Full changelog

ibm-cloud-controller-manager

• OCPBUGS-21096: Bump golang.org/x/net to v0.18.0 #58
• Full changelog

ibm-vpc-block-csi-driver

• OCPBUGS-21194: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #53
• Full changelog

ibm-vpc-block-csi-driver-operator

• OCPBUGS-21283: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #84
• Full changelog

ibm-vpc-node-label-updater

• OCPBUGS-21396: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #30
• Full changelog

ibmcloud-machine-controllers

• OCPBUGS-21376: [release-4.11] Bump golang.org/x/net to v0.18.0 #69
• Full changelog

insights-operator

• adds helm information gather (#891) #891
• OCPBUGS-20715: update dependencies (#856) #856
• Add cherry-pick from 4.12 (#855) #855
• Add workload repo image gathering (#829) #829
• OCPBUGS-15459: gather PDBs only from openshift namespaces (#804) (#806) #804
• OCPBUGS-15446: extend configmap gatherer to get gateway-mode-config (#788) (#791) (#802) #788
• Full changelog

ironic

• OCPBUGS-13585: Add python-flask dependency #381
• OCPBUGS-14654: Include fix to OCPBUGS-13335 in OCP 4.11. #380
• Full changelog

ironic-agent

• OCPBUGS-20486: fix eventlet regression with Python 3.6 #93
• Full changelog

k8s-prometheus-adapter

• OCPBUGS-21652: limit number of simultaneous client requests #87
• Full changelog

kube-proxy, sdn

• OCPBUGS-15084: EgressNetworkPolicy DNS resolution does not fall back to TCP #556
• Full changelog

kube-rbac-proxy

• OCPBUGS-20676: v4.11 CVE 44487 #86
• Full changelog

kube-state-metrics

• OCPBUGS-20746: bump x/net to v0.17.0 #99
• Full changelog

kuryr-cni, kuryr-controller

• OCPBUGS-14931: KuryrPort cleanup: Fix issue of subport not found #733
• Full changelog

machine-api-operator

• OCPBUGS-21490: Bump golang.org/x/net to v0.18.0 #1177
• Full changelog

machine-config-operator

• OCPBUGS-21016: vendor: unpin deps and update library-go, container and kube deps #4019
• OCPBUGS-21995: Prevent NM from unsetting the hostname #3989
• OCPBUGS-18075: Agent-based install process the container machine-config-controller will be oom #3882
• Full changelog

machine-image-customization-controller

• OCPBUGS-21528: Uplift x/net to v0.17.0 #107
• OCPBUGS-19424: Watch networkData Secrets for changes #100
• Full changelog

multus-admission-controller

• OCPBUGS-21309: Update go.mod for CVE-2023-39325 [Release-4.11] #74
• Full changelog

multus-cni

• OCPBUGS-21040: Update go.mod for CVE-2023-39325 [Release-4.11] #197
• Full changelog

multus-networkpolicy

• OCPBUGS-21412: Update go.mod for CVE-2023-39325 Release-4.11 #37
• Full changelog

multus-whereabouts-ipam-cni

• OCPBUGS-5954: Denormalize IP name before checking if pod is alive [Backport 4.11] #182
• Full changelog

network-metrics-daemon

• Update golang.org/x/net to v0.17.0 (#85) #85
• Full changelog

oc-mirror

• OCPBUGS-21422: fix: CVE-2023-39325 and CVE-2023-44487 (#715) #715
• Full changelog

openshift-controller-manager

• OCPBUGS-23175: [release-4.11] fix template namespace processing #277
• Full changelog

openshift-state-metrics

• OCPBUGS-20691: bump x/net to v0.17.0 #105
• Full changelog

openstack-cinder-csi-driver-operator

• OCPBUGS-21553: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #138
• OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars #131
• Full changelog

openstack-machine-controllers

• OCPBUGS-20761: deps: Upgrade golang.org/x/net to v0.17.0 #278
• Full changelog

operator-lifecycle-manager, operator-registry

• OCPBUGS-22131: [release-4.11] Bump golang.org/x/net to v0.17.0 #591
• OCPBUGS-18513, RHIBMCS-169: Copied csv listing backport #560
• OCPBUGS-16075: fix dynamic conversion webhook #536
• Introduce DOWNSTREAM_OWNERS file #542
• OCPBUGS-16126: Catalog Pod Startup Probe Timeout #509
• Allow cpb to be statically compiled / exempt from FIPS compliance #513
• Full changelog

operator-marketplace

• OCPBUGS-20937: [release-4.11] bump golang.org/x/net to 0.17.0 #551
• Full changelog

ovirt-csi-driver-operator

• OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars #122
• Full changelog

ovn-kubernetes

• OCPBUGS-21762: Update bridge flow cache when the host address changes #1938
• OCPBUGS-19911: [release-4.11] Dockerfile: bump OVN to ovn22.12-22.12.1-18.el8fdp #1918
• OCPBUGS-19650: Delete IGMP Groups when deleting stale chassis #1901
• OCPBUGS-12819: Handle k8s watcher restart scenario #1806
• OCPBUGS-16691: ovnkube-master pod failed to reconnect to ovn db due to ssl expire #1779
• OCPBUGS-15731, OCPBUGS-15745: Improve syncNodes to remove stale data #1734
• OCPBUGS-15876: Remove non-existing functions test. #1740
• OCPBUGS-16003: Fix stale SNAT entries for completed pods #1751
• Full changelog

powervs-cloud-controller-manager

• OCPBUGS-24750: UPSTREAM: <carry>: snyk code scan exclude vendor directory #51
• OCPBUGS-21242: CVE-2023-39325 - Update net dependencies - 4.11 #48
• Full changelog

powervs-machine-controllers

• OCPBUGS-24724: snyk code scan exclude vendor directory #62
• OCPBUGS-21883: CVE-2023-39325 - Bump golang.org/x/net to v0.17.0 - 4.11 #56
• Full changelog

prometheus

• OCPBUGS-21199: update golang.org/x/net to v0.17.0 [4.11] #177
• Full changelog

prometheus-alertmanager

• OCPBUGS-21013: Bump golang.org/x/net to v0.17.0 #83
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• OCPBUGS-20823: Bump golang.org/x/net to v0.17.0 #250
• Full changelog

prometheus-node-exporter

• OCPBUGS-21104: upgrade golang.org/x/net to v0.17.0 #137
• Full changelog

telemeter

• OCPBUGS-21298: [release-4.11] fix: Bump golang.org/x/net to v0.17.0 #488
• Full changelog

tests

• OCPBUGS-18424: Add missing watch permission for console users #28235
• OCPBUGS-18129: Ignore timeout and connection refused errors during upgrade tests for 4.11 #28247
• OCPBUGS-15942: remove references to registry.centos.org #28036
• OCPBUGS-15151: Move from registry.centos.org to quay.io #27985
• Full changelog

thanos

• OCPBUGS-21109: Bump golang.org/x/net to v0.17.0 #127
• OCPBUGS-18299: Update exporter-toolkit to 0.7.3 #116
• OCPBUGS-14559: require at least TLS 1.2 instead of 1.3 #113
• Full changelog

vsphere-cluster-api-controllers

• OCPBUGS-21546: bump golang.org/x/net to v0.17.0 #25
• Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

• OCPBUGS-21542: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #93
• Full changelog

vsphere-csi-driver-operator

• OCPBUGS-21402: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #176
• Full changelog

vsphere-problem-detector

• OCPBUGS-21569: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #132
• Full changelog

---

View changelog in Markdown or change previous release: 4.11.554.11.544.11.534.11.524.11.514.11.504.11.494.11.484.11.474.11.464.11.454.11.444.11.434.11.424.11.414.11.404.11.394.11.384.11.374.11.364.11.354.11.344.11.334.11.324.11.314.11.304.11.294.11.284.11.274.11.264.11.254.11.244.11.234.11.224.11.214.11.204.11.194.11.184.11.174.11.164.11.154.11.144.11.134.11.124.11.114.11.104.11.94.11.84.11.74.11.64.11.54.11.44.11.34.11.24.11.14.11.04.11.0-rc.74.11.0-rc.64.11.0-rc.54.11.0-rc.44.11.0-rc.34.11.0-rc.24.11.0-rc.14.11.0-rc.04.11.0-fc.34.11.0-fc.24.11.0-fc.0───4.21.0-0.nightly-2025-11-06-1844344.21.0-0.nightly-2025-11-06-1308374.21.0-0.nightly-2025-11-06-0714574.21.0-0.nightly-2025-11-05-2345084.21.0-0.nightly-2025-11-05-0512174.21.0-0.nightly-2025-11-04-2104264.21.0-0.nightly-2025-11-04-1401194.21.0-0.nightly-2025-11-03-1917044.21.0-0.nightly-2025-10-30-1258044.21.0-0.nightly-2025-10-30-0605494.21.0-0.nightly-2025-10-28-1237304.21.0-0.nightly-2025-10-28-0837304.21.0-0.nightly-2025-10-28-0437304.21.0-0.nightly-2025-10-28-0001244.21.0-0.nightly-2025-10-27-0852014.21.0-0.nightly-2025-10-26-1453584.21.0-0.nightly-2025-10-25-1836214.21.0-0.nightly-2025-09-27-232055───4.21.0-0.ci-2025-11-06-2156244.21.0-0.ci-2025-11-06-1417294.21.0-0.ci-2025-11-06-0722164.21.0-0.ci-2025-11-06-0122164.21.0-0.ci-2025-11-05-1905544.21.0-0.ci-2025-11-05-1305544.21.0-0.ci-2025-11-05-0705544.21.0-0.ci-2025-11-05-0105544.21.0-0.ci-2025-11-04-1724274.21.0-0.ci-2025-11-04-1124274.21.0-0.ci-2025-11-04-052427───4.20.0-0.nightly-2025-11-06-1757304.20.0-0.nightly-2025-11-06-0912164.20.0-0.nightly-2025-11-06-0330584.20.0-0.nightly-2025-11-05-1925044.20.0-0.nightly-2025-11-05-0221314.20.0-0.nightly-2025-11-04-0424194.20.0-0.nightly-2025-11-03-1940214.20.0-0.nightly-2025-10-30-1149554.20.0-0.nightly-2025-10-30-0308384.20.0-0.nightly-2025-10-29-2014124.20.0-0.nightly-2025-10-29-1409014.20.0-0.nightly-2025-10-29-0516314.20.0-0.nightly-2025-10-28-2037114.20.0-0.nightly-2025-10-28-1527054.20.0-0.nightly-2025-10-28-1127054.20.0-0.nightly-2025-10-28-0727054.20.0-0.nightly-2025-10-28-0327054.20.0-0.nightly-2025-10-27-2327054.20.0-0.nightly-2025-10-27-1214494.20.0-0.nightly-2025-10-27-0502114.20.0-0.nightly-2025-10-26-1908314.20.0-0.nightly-2025-10-26-1153264.20.0-0.nightly-2025-10-26-0540334.20.0-0.nightly-2025-10-26-0020584.20.0-0.nightly-2025-10-25-1537494.20.0-0.nightly-2025-10-25-0702284.20.0-0.nightly-2025-10-25-0031424.20.0-0.nightly-2025-10-24-1809344.20.0-0.nightly-2025-10-24-1040584.20.0-0.nightly-2025-10-24-0338344.20.0-0.nightly-2025-05-26-181128───4.20.0-0.ci-2025-11-07-0020004.20.0-0.ci-2025-11-06-1607374.20.0-0.ci-2025-11-06-1007374.20.0-0.ci-2025-11-06-0210224.20.0-0.ci-2025-11-05-1808214.20.0-0.ci-2025-11-05-1004274.20.0-0.ci-2025-11-05-0222144.20.0-0.ci-2025-11-04-1422144.20.0-0.ci-2025-11-04-0822144.20.0-0.ci-2025-11-04-0222144.20.0-0.ci-2025-11-03-202214───4.19.0-0.nightly-2025-11-07-0028054.19.0-0.nightly-2025-11-06-1903264.19.0-0.nightly-2025-11-06-1051024.19.0-0.nightly-2025-11-05-0123424.19.0-0.nightly-2025-11-04-2038034.19.0-0.nightly-2025-11-04-1154524.19.0-0.nightly-2025-11-03-2000294.19.0-0.nightly-2025-10-30-1214404.19.0-0.nightly-2025-10-30-0708274.19.0-0.nightly-2025-10-29-2142504.19.0-0.nightly-2025-10-29-141440───4.19.0-0.ci-2025-11-06-2217184.19.0-0.ci-2025-11-06-1617184.19.0-0.ci-2025-11-06-0957424.19.0-0.ci-2025-11-06-0357424.19.0-0.ci-2025-11-05-1921194.19.0-0.ci-2025-11-05-1201474.19.0-0.ci-2025-11-05-0601474.19.0-0.ci-2025-11-05-0001474.19.0-0.ci-2025-11-04-1801474.19.0-0.ci-2025-11-04-050415───4.18.0-0.nightly-2025-11-06-2151034.18.0-0.nightly-2025-11-06-1751034.18.0-0.nightly-2025-11-06-1101464.18.0-0.nightly-2025-11-06-0349584.18.0-0.nightly-2025-11-05-2213204.18.0-0.nightly-2025-11-05-1422254.18.0-0.nightly-2025-11-05-1022254.18.0-0.nightly-2025-11-05-0622254.18.0-0.nightly-2025-11-05-0222254.18.0-0.nightly-2025-11-04-1825364.18.0-0.nightly-2025-11-04-1044204.18.0-0.nightly-2025-11-04-0306364.18.0-0.nightly-2025-10-30-0637174.18.0-0.nightly-2025-10-29-1824554.18.0-0.nightly-2025-10-29-1249414.18.0-0.nightly-2025-10-29-0313304.18.0-0.nightly-2025-10-28-1712424.18.0-0.nightly-2025-10-28-1312424.18.0-0.nightly-2025-10-28-0255474.18.0-0.nightly-2025-10-27-2116274.18.0-0.nightly-2025-10-27-1216294.18.0-0.nightly-2025-10-27-0523264.18.0-0.nightly-2025-10-27-0123264.18.0-0.nightly-2025-10-26-0220254.18.0-0.nightly-2025-10-25-2033174.18.0-0.nightly-2025-10-25-1501454.18.0-0.nightly-2025-10-25-1101454.18.0-0.nightly-2025-10-25-0305114.18.0-0.nightly-2025-10-24-2111004.18.0-0.nightly-2025-10-24-1711004.18.0-0.nightly-2025-10-24-1102084.18.0-0.nightly-2025-10-24-070208───4.18.0-0.ci-2025-11-06-2025104.18.0-0.ci-2025-11-06-1425104.18.0-0.ci-2025-11-06-0700004.18.0-0.ci-2025-11-06-0100004.18.0-0.ci-2025-11-05-1722254.18.0-0.ci-2025-11-05-0923114.18.0-0.ci-2025-11-05-0120544.18.0-0.ci-2025-11-04-1920544.18.0-0.ci-2025-11-04-1202374.18.0-0.ci-2025-11-04-045329───4.17.0-0.nightly-2025-11-06-0048454.17.0-0.nightly-2025-11-05-1722174.17.0-0.nightly-2025-11-05-1002404.17.0-0.nightly-2025-11-05-0602404.17.0-0.nightly-2025-11-04-2249304.17.0-0.nightly-2025-11-03-1822494.17.0-0.nightly-2025-10-30-0618534.17.0-0.nightly-2025-10-30-0218534.17.0-0.nightly-2025-10-29-2122174.17.0-0.nightly-2025-10-29-0209244.17.0-0.nightly-2025-10-28-1721334.17.0-0.nightly-2025-10-28-0343124.17.0-0.nightly-2025-10-27-2137584.17.0-0.nightly-2025-10-27-1355494.17.0-0.nightly-2025-10-27-0843194.17.0-0.nightly-2025-10-27-0246524.17.0-0.nightly-2025-10-26-2036084.17.0-0.nightly-2025-10-26-0920234.17.0-0.nightly-2025-10-26-0520234.17.0-0.nightly-2025-10-26-0109084.17.0-0.nightly-2025-10-25-1754574.17.0-0.nightly-2025-10-25-1354574.17.0-0.nightly-2025-10-25-0734564.17.0-0.nightly-2025-10-24-1901524.17.0-0.nightly-2025-10-24-1146344.17.0-0.nightly-2025-10-24-0639164.17.0-0.nightly-2025-10-24-023916───4.17.0-0.ci-2025-11-06-2212164.17.0-0.ci-2025-11-06-1612164.17.0-0.ci-2025-11-06-1012164.17.0-0.ci-2025-11-06-0412164.17.0-0.ci-2025-11-05-2112164.17.0-0.ci-2025-11-05-1512164.17.0-0.ci-2025-11-05-0748124.17.0-0.ci-2025-11-05-0148124.17.0-0.ci-2025-11-04-1754194.17.0-0.ci-2025-11-04-115419───4.16.0-0.nightly-2025-11-06-1556234.16.0-0.nightly-2025-11-06-0346184.16.0-0.nightly-2025-11-05-1522264.16.0-0.nightly-2025-11-05-0310214.16.0-0.nightly-2025-11-04-1735054.16.0-0.nightly-2025-11-04-0624194.16.0-0.nightly-2025-11-03-2223254.16.0-0.nightly-2025-10-30-0250254.16.0-0.nightly-2025-10-29-1902564.16.0-0.nightly-2025-10-29-1100144.16.0-0.nightly-2025-10-29-0342314.16.0-0.nightly-2025-10-28-2155514.16.0-0.nightly-2025-10-28-1633384.16.0-0.nightly-2025-10-28-0503144.16.0-0.nightly-2025-10-27-0337284.16.0-0.nightly-2025-10-26-1419004.16.0-0.nightly-2025-10-25-135048───4.16.0-0.ci-2025-11-07-0101534.16.0-0.ci-2025-11-06-1738004.16.0-0.ci-2025-11-06-1024424.16.0-0.ci-2025-11-06-0342274.16.0-0.ci-2025-11-05-2142174.16.0-0.ci-2025-11-05-1454484.16.0-0.ci-2025-11-05-0812394.16.0-0.ci-2025-11-05-0048044.16.0-0.ci-2025-11-04-1728034.16.0-0.ci-2025-11-03-0513384.16.0-0.ci-2025-11-02-222103───4.15.0-0.nightly-2025-11-06-0845164.15.0-0.nightly-2025-11-05-0152354.15.0-0.nightly-2025-11-04-1605154.15.0-0.nightly-2025-11-04-0021574.15.0-0.nightly-2025-10-29-143926───4.15.0-0.ci-2025-11-06-2259524.15.0-0.ci-2025-11-06-1256484.15.0-0.ci-2025-11-06-0604564.15.0-0.ci-2025-11-05-2258314.15.0-0.ci-2025-11-05-1547094.15.0-0.ci-2025-11-05-0924314.15.0-0.ci-2025-11-05-0324314.15.0-0.ci-2025-11-04-1353554.15.0-0.ci-2025-11-04-051532───4.14.0-0.nightly-2025-11-07-0141094.14.0-0.nightly-2025-11-06-1212174.14.0-0.nightly-2025-11-06-0149524.14.0-0.nightly-2025-11-05-1249134.14.0-0.nightly-2025-11-04-2335314.14.0-0.nightly-2025-11-04-1718044.14.0-0.nightly-2025-11-04-0025544.14.0-0.nightly-2025-10-30-0303294.14.0-0.nightly-2025-10-29-1458554.14.0-0.nightly-2025-10-29-045232───4.14.0-0.ci-2025-11-06-1902244.14.0-0.ci-2025-11-06-1156154.14.0-0.ci-2025-11-04-1352504.14.0-0.ci-2025-11-04-0031504.14.0-0.ci-2025-11-02-220625───4.13.0-0.nightly-2025-11-06-0404474.13.0-0.nightly-2025-11-05-1329044.13.0-0.nightly-2025-11-04-1951104.13.0-0.nightly-2025-11-04-1351104.13.0-0.nightly-2025-11-04-0132544.13.0-0.nightly-2025-10-30-073055───4.13.0-0.ci-2025-11-06-1723344.13.0-0.ci-2025-11-05-2233444.13.0-0.ci-2025-11-05-1633444.13.0-0.ci-2025-11-05-1033444.13.0-0.ci-2025-11-05-0433444.13.0-0.ci-2025-11-04-2233444.13.0-0.ci-2025-11-04-1633444.13.0-0.ci-2025-10-17-0726454.13.0-0.ci-2025-10-16-2027544.13.0-0.ci-2025-10-16-1013424.13.0-0.ci-2025-10-15-223503───4.12.0-0.nightly-2025-11-04-1208284.12.0-0.nightly-2025-11-03-2209314.12.0-0.nightly-2025-10-28-1357524.12.0-0.nightly-2025-10-28-0123534.12.0-0.nightly-2025-10-24-0101004.12.0-0.nightly-2025-10-23-1016434.12.0-0.nightly-2025-10-23-0127204.12.0-0.nightly-2025-10-22-1602524.12.0-0.nightly-2025-10-21-1413554.12.0-0.nightly-2025-10-17-020440───4.12.0-0.ci-2025-11-06-1300434.12.0-0.ci-2025-11-03-2208114.12.0-0.ci-2025-11-02-1805154.12.0-0.ci-2025-11-02-1139024.12.0-0.ci-2025-11-02-0115494.12.0-0.ci-2025-10-31-1446324.12.0-0.ci-2025-10-30-110142───4.11.0-0.nightly-2025-08-30-0110584.11.0-0.nightly-2025-08-27-2007484.11.0-0.nightly-2025-08-26-2039164.11.0-0.nightly-2025-08-21-0105404.11.0-0.nightly-2025-08-14-204255───4.11.0-0.ci-2025-09-22-2122234.11.0-0.ci-2025-09-22-1522234.11.0-0.ci-2025-09-12-1707384.11.0-0.ci-2025-09-05-0328514.11.0-0.ci-2025-09-04-212851───4.21.0-ec.24.21.0-ec.14.21.0-ec.0

Source code for this page located on github