4.11.59

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.11.59-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded periodic-ci-openshift-release-master-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Failed periodic-ci-openshift-release-master-stable-4.y-e2e-aws-ovn-upgrade

Upgrades from:

Untested upgrades: 4.10.21, 4.10.22, 4.10.23, 4.10.24, 4.10.25, 4.10.26, 4.10.27, 4.10.28, 4.10.29, 4.10.30, 4.10.31, 4.10.32, 4.10.33, 4.10.34, 4.10.35, 4.10.36, 4.10.37, 4.10.38, 4.10.39, 4.10.40, 4.10.41, 4.10.42, 4.10.44, 4.10.45, 4.10.47, 4.10.48, 4.10.50, 4.10.51, 4.10.52, 4.10.53, 4.10.54, 4.10.55, 4.10.56, 4.10.57, 4.10.58, 4.10.59, 4.10.60, 4.10.61, 4.10.62, 4.10.63, 4.10.64, 4.11.10, 4.11.11, 4.11.12, 4.11.13, 4.11.14, 4.11.16, 4.11.17, 4.11.18, 4.11.19, 4.11.20, 4.11.21, 4.11.22, 4.11.23, 4.11.24, 4.11.25, 4.11.26, 4.11.27, 4.11.28, 4.11.29, 4.11.3, 4.11.30, 4.11.31, 4.11.32, 4.11.33, 4.11.35, 4.11.36, 4.11.37, 4.11.38, 4.11.39, 4.11.4, 4.11.40, 4.11.41, 4.11.42, 4.11.43, 4.11.44, 4.11.45, 4.11.46, 4.11.47, 4.11.48, 4.11.49, 4.11.50, 4.11.51, 4.11.52, 4.11.53, 4.11.55, 4.11.6, 4.11.7, 4.11.8, 4.11.9

Upgrades to:

4.12.83 (changes) - S S S
4.12.82 (changes) - F F S S S
4.12.81 (changes) - S S S
4.12.80 (changes) - F F S S S
4.12.79 (changes) - S F F
4.12.78 (changes) - S S F
4.12.77 (changes) - S F S
4.12.76 (changes) - S F S
4.12.75 (changes) - S F F
4.12.74 (changes) - F F S F F F S F F F F F
4.12.73 (changes) - F S S F
4.12.72 (changes) - F S F S S F
4.12.71 (changes) - S S F
4.12.61 (changes) - S S S
4.12.60 (changes) - S F S
4.12.59 (changes) - F S S S
4.12.58 (changes) - S F S
4.12.57 (changes) - S F F
4.12.56 (changes) - S S F
4.12.55 (changes) - S F S
4.12.54 (changes) - S F S
4.12.0-0.nightly-2025-12-23-014856 (changes) - F F F F
4.12.0-0.nightly-2025-12-22-153345 (changes) - Success
4.12.0-0.nightly-2025-12-20-013405 (changes) - Success
4.12.0-0.nightly-2025-12-19-032210 (changes) - Failed Success
4.12.0-0.nightly-2025-12-18-192430 (changes) - F F S
4.12.0-0.nightly-2025-12-18-132430 (changes) - Success
4.12.0-0.nightly-2025-12-17-075942 (changes) - Success
4.12.0-0.nightly-2025-12-17-015942 (changes) - Success
4.12.0-0.nightly-2025-12-16-134647 (changes) - Success
4.12.0-0.nightly-2025-12-15-134420 (changes) - Success
4.12.0-0.nightly-2025-12-12-020710 (changes) - Success
4.12.0-0.nightly-2025-12-11-133218 (changes) - F F F S
4.12.0-0.nightly-2025-12-10-014051 (changes) - Success
4.12.0-0.nightly-2025-12-09-132946 (changes) - Failed Success
4.12.0-0.nightly-2025-12-03-133612 (changes) - Success
4.12.0-0.nightly-2025-11-26-143321 (changes) - Success
4.12.0-0.nightly-2025-11-26-083321 (changes) - Failed Success
4.12.0-0.nightly-2025-11-25-230023 (changes) - Success
4.12.0-0.nightly-2025-11-19-224407 (changes) - Success Failed
4.12.0-0.nightly-2025-11-19-092750 (changes) - Failed Success
4.12.0-0.nightly-2025-11-04-120828 (changes) - Failed Success
4.12.0-0.nightly-2025-11-03-220931 (changes) - Success
4.12.0-0.nightly-2025-10-28-135752 (changes) - Success
4.12.0-0.nightly-2025-10-28-012353 (changes) - Failed Success
4.12.0-0.nightly-2025-10-24-010100 (changes) - F F F F
4.12.0-0.nightly-2025-10-23-101643 (changes) - Success
4.12.0-0.nightly-2025-10-23-012720 (changes) - F F S
4.12.0-0.nightly-2025-10-22-160252 (changes) - Failed Success
4.12.0-0.nightly-2025-10-21-141355 (changes) - Success
4.12.0-0.nightly-2025-10-17-020440 (changes) - Failed Success
4.12.0-0.nightly-2025-08-18-005958 (changes) - Failed Success
4.12.0-0.ci-2025-12-28-143211 (changes) - S F F F S
4.12.0-0.ci-2025-12-28-081254 (changes) - Success Success
4.12.0-0.ci-2025-12-28-010555 (changes) - Success Success
4.12.0-0.ci-2025-12-27-164735 (changes) - F S F F S
4.12.0-0.ci-2025-12-22-153226 (changes) - S F S
4.12.0-0.ci-2025-12-21-173829 (changes) - Success Success
4.12.0-0.ci-2025-12-21-081352 (changes) - S F F S
4.12.0-0.ci-2025-12-21-010223 (changes) - Success Success
4.12.0-0.ci-2025-12-20-170535 (changes) - S F F S
4.12.0-0.ci-2025-12-20-074316 (changes) - S F S
4.12.0-0.ci-2025-12-20-014316 (changes) - Success Success
4.12.0-0.ci-2025-12-19-151637 (changes) - S F F F S
4.12.0-0.ci-2025-12-19-053351 (changes) - S F F S
4.12.0-0.ci-2025-12-18-232610 (changes) - S F S
4.12.0-0.ci-2025-12-18-132433 (changes) - F F S S
4.12.0-0.ci-2025-12-17-045255 (changes) - S F F S
4.12.0-0.ci-2025-12-16-221817 (changes) - S F S
4.12.0-0.ci-2025-11-26-014706 (changes) - F F S F F S
4.12.0-0.ci-2025-11-25-193149 (changes) - Success Success
4.12.0-0.ci-2025-11-20-104247 (changes) - Success Success
4.12.0-0.ci-2025-11-20-044247 (changes) - Success Success
4.12.0-0.ci-2025-11-19-224247 (changes) - S F S
4.12.0-0.ci-2025-11-19-092747 (changes) - F S S
4.12.0-0.ci-2025-11-18-170507 (changes) - S F S
4.12.0-0.ci-2025-11-18-110507 (changes) - S F S
4.12.0-0.ci-2025-11-17-203652 (changes) - Success Success
4.12.0-0.ci-2025-11-16-095022 (changes) - S F S
4.12.0-0.ci-2025-11-16-035022 (changes) - Success Success
4.12.0-0.ci-2025-11-15-181903 (changes) - S F F F F
4.12.0-0.ci-2025-11-14-184641 (changes) - Success Success
4.12.0-0.ci-2025-11-09-151951 (changes) - S F S
4.12.0-0.ci-2025-11-09-085114 (changes) - S F S
4.12.0-0.ci-2025-11-08-235017 (changes) - S F F S
4.12.0-0.ci-2025-11-08-175017 (changes) - Success Success
4.12.0-0.ci-2025-11-06-130043 (changes) - S F S
4.12.0-0.ci-2025-11-03-220811 (changes) - F S S
4.12.0-0.ci-2025-11-02-180515 (changes) - S F F F F
4.12.0-0.ci-2025-11-02-113902 (changes) - F S S
4.12.0-0.ci-2025-11-02-011549 (changes) - S F F F F
4.12.0-0.ci-2025-10-31-144632 (changes) - S F S
4.12.0-0.ci-2025-10-30-110142 (changes) - F F F S S
4.12.0-0.ci-2025-10-30-013907 (changes) - F F S F S

Loading changelog, this may take a while ...

Changes from 4.11.34

Created: 2024-03-21 10:59:14 +0000 UTC

Image Digest: sha256:21cdff7479a52bc09392af6b3bdb6b347b8df8b3c444e5102f7c22325e0330b5

Release 4.11.59 was created from registry.ci.openshift.org/ocp/release:4.11.0-0.nightly-2024-03-18-165432

Components

Kubernetes upgraded from 1.24.11 to 1.24.16
Red Hat Enterprise Linux CoreOS upgraded from 411.86.202303241709-0 to 411.86.202403120448-0 (diff)

Rebuilt images without code change

agent-installer-api-server git bc51be82 sha256:f2308e25affbd9b1c72175f6b836efe77821d6b8dc890092d16bf76ce7185090
agent-installer-node-agent git e74ffbf5 sha256:1314c8ef9902d882e0e1a67cf7de34392138fc437fd0a8670e87864035671201
alibaba-machine-controllers git 41451089 sha256:5551cc68d36b58a43d21a3db6364397d01d4169e6714eab222b096717390af8c
cluster-autoscaler git bf6c1c32 sha256:0abdc003778e0503d78b74c1c39265fa22b788fac24de4d2a6d74f61a62f0898
cluster-cloud-controller-manager-operator git 2dbffc67 sha256:f6c6004958116929c5faef95702f87df31697e3f2b5fafc8a1e99415b816a79f
cluster-update-keys git 289032fb sha256:0d5cb4ff18a90faba163b1ee8b6267df282f8725fcb8c6e81def174435b10182
configmap-reloader git b7c03bb0 sha256:5bff2241a07e5011057d5170ed98d8b1f76c550451e89d28e43b05ee161192d8
csi-driver-nfs git f144bb43 sha256:0a16b999afbd7c1fa3bbd59eee59d62269f5ed845e794f0e0cd4c57bf0ee06af
driver-toolkit git 28589b0a sha256:4e6364af8c347711a3912d959f600f5c3d9b77e61db79b35112f75381c044380
egress-router-cni git fccaf1d9 sha256:41b29873cf6ca321c181696f336c0b56c0c956b40dbf89169dafac3cd38cb8ca
ironic-machine-os-downloader git 876128b5 sha256:7126263a1eff95d6798482f446ce5b2f7088d0a4811064a139f28928ab19332c
keepalived-ipfailover git f1330f6f sha256:109597dc222a104ee48f55e538b60977edc48ea66657ecc531c0667053948d85
kube-storage-version-migrator git 596745ce sha256:61b9184342e18b5b91ea0c6f12555e40fe9312bebbfb38ffbdf33fcb2235fdec
libvirt-machine-controllers git b6e14eab sha256:ce799e4e8800740fe80b6cdd064d51d3cfc441332a1e988d6a221bc0f6229ca9
machine-os-content sha256:d1d158ea9b48added7be4eac037621fdb8019e6e7eb879ef83850baf14cc8cb7
machine-os-images git b1580a29 sha256:9ef6188531481a76382d80b34f358f9b4d9036db2901c2eb62055f0c6afd8a86
multus-route-override-cni git 523b7904 sha256:2b2876fd15c608e633758320725031e28f90b629e6f853cfdcabbec1fddbc289
must-gather git 44f6adac sha256:74e1797541321bf4e2855d7350265b08526f1fbdf73d583c4a61b571daec0892
network-interface-bond-cni git b76a6770 sha256:4c131bd2c270ccc349f7ac7c3c09c5a47b259e5278a6d6b9e3d3688c53cd4600
network-tools git 4e87286c sha256:c81a73965f3cc48997ea035c24077d3e8d349c294636cefdceea039617996064
nutanix-machine-controllers git a94eb77c sha256:247de685a77418d3b24f9db18c97f0ef4a990e91ae04a6ffa801e485f9fc9cad
oauth-apiserver git c9c2dd15 sha256:c3ee9efb5e68c4cd6c5d0e411e86d818e1466d07fdd54df9dc417a385c89ffc0
oauth-proxy git aad1b28f sha256:59015a5d8d5a2ff5eef282f8c16d9256d60613c0b066a2d7a4d38ddad14c3296
oauth-server git 8d80088e sha256:14d8a6fe60c09b07f02698f47e72ed7b075ddb4330796bef18b038a7cf393a2c
openshift-apiserver git 35df5a02 sha256:282426279dbf223338108778c29956f2765c43084cf1029bf5d5bbafd65f1188
ovirt-csi-driver git cd3370fb sha256:69968dc4e37e40fbdada5a6a002f779562cf357accca9e0acac9b391c92b581e
ovirt-machine-controllers git 5a93d94c sha256:ab3a285729fb95a8e4fdc6da620fdb8357df976f9d451f72fef37483c8064106
prom-label-proxy git af12fbc4 sha256:b421171cd55da40c1d20687908631a87840e2cf032bed87844b2267d70943a8c
service-ca-operator git 0899d112 sha256:6d95b102650251b96b154dbe34df06bff5114f46c69c691d7630e6db25101cc3
vsphere-cloud-controller-manager git 91f7b1fa sha256:66b0cc365d812120fa219a2e309e502cdf7b1570e27b1feb1add35b27dcb2c68

agent-installer-csr-approver, agent-installer-orchestrator

NO-ISSUE: Update OWNERS to match master branch (#682) #682
CVE-2022, OCPBUGS-15068: 21235 github.com/Masterminds/vcs command inj (#681) #681
Full changelog

alibaba-cloud-controller-manager

OCPBUGS-21200: Bump golang.org/x/net to v0.19.0 #46
Full changelog

alibaba-cloud-csi-driver

OCPBUGS-21292: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #39
Full changelog

alibaba-disk-csi-driver-operator

OCPBUGS-21389: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #67
OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars #59
Full changelog

apiserver-network-proxy

HOSTEDCP-1323: Merge latest code into 4.14 branch #45
OCPBUGS-10187: Updating ose-apiserver-network-proxy images to be consistent with ART #30
Full changelog

aws-cloud-controller-manager

OCPBUGS-20708: Update golang.org/x/net to v0.17.0 #56
Full changelog

aws-cluster-api-controllers

OCPBUGS-20791: bump golang.org/x/net to v0.17.0 #484
Full changelog

aws-ebs-csi-driver

OCPBUGS-20892: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #242
OCPBUGS-19069: Volume unmount repeats after successful unmount, preventing pod delete #234
OCPBUGS-12932: 4.11: Bump golang.org/x/text #227
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-20997: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #283
OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars #266
Full changelog

aws-machine-controllers

OCPBUGS-21554: Update golang.org/x/net to v0.17.0 #91
Full changelog

aws-pod-identity-webhook

OCPBUGS-21295: Upgrade golang/x/net for CVE-2023-39325 (4.11) #186
NO-ISSUE: snyk: exclude vendor/ #175
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-21387: Bump golang.org/x/net to v0.18.0 #96
Full changelog

azure-cluster-api-controllers

OCPBUGS-21476: bump golang.org/x/net to v0.17.0 #290
Full changelog

azure-disk-csi-driver

OCPBUGS-20662: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #57
Full changelog

azure-disk-csi-driver-operator

OCPBUGS-20733: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #104
OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars #96
Full changelog

azure-file-csi-driver

OCPBUGS-20822: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #40
Full changelog

azure-file-csi-driver-operator

OCPBUGS-20924: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #79
OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars #72
Full changelog

azure-machine-controllers

OCPBUGS-20725: Bump x/net package to v0.17.0 #85
OCPBUGS-14012: Add user defined tags to Azure NIC resources #70
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-23478: Specify google cloud CLI to version 256.0.0 #7747
OCPBUGS-494: [release-4.11] Switch libvirt VM’s to vnc graphic mode #6252
OCPBUGS-18545: CORS-2445: GCP: Add osImage to the install config #7468
OCPBUGS-16779: bump RHCOS 4.11 bootimage metadata to 411.86.202308081056-0 #7424
OCPBUGS-17246: azurestack: do not use gen2 images #7393
OCPBUGS-16915: [release-4.11] azure: skip LB creation when not needed #7372
OCPBUGS-16353: ic: azure: validate diskTypes in AzureStack #7341
OCPBUGS-17002: GCP: add europe-west12 region to the survey as supported region #7377
OCPBUGS-5708: hold bootkube service until bootstrap has pivoted #6759
OCPBUGS-13104: openstack: Add netcat to the Installer image #7163
OCPBUGS-14288: baremetal: Extra time for provisioning interface #7214
OCPBUGS-12750: [Alibaba] update the bandwidth value of EIP #7132
OCPBUGS-11663: AWS - Remove ACLs from s3 ign #7085
OCPBUGS-10594: [release-4.11] aws: bump aws-sdk-go version #7000
Full changelog

baremetal-machine-controllers

OCPBUGS-21699: Uplift x/net to v0.17.0 #201
Full changelog

baremetal-operator

OCPBUGS-21136: Uplift x/net to v0.17.0 #311
OCPBUGS-17955: Trigger reconcile on Secret change #299
OCPBUGS-11612: allow namespace to continue with terminating when deprovisioning at t… #262
Full changelog

baremetal-runtimecfg

OCPBUGS-18815: Move haproxy firewall rule check earlier in loop #273
OCPBUGS-18096: Don’t render config with incomplete unicast peer list #269
OCPBUGS-15539: Use machine-config state instead of comparing roles #263
OCPBUGS-13544: Verify kubelet version in upgrade check #250
OCPBUGS-11297: fix isUpgradeStillRunning() #233
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-26599: release-4.11: use correct namespace with sample templates #1649
ART-8372: el7 version of oc in 4.11 #1609
OCPBUGS-20292: Truncate existing files when writing from inspect #1564
OCPBUGS-20309: Use quay redis image instead docker mysql #1568
OCPBUGS-16059: mcs cert: account for environments that use IP directly #1504
OCPBUGS-16195: reboot: set ignition version to 3.1 #1510
OCPBUGS-4812: [release-4.11] New-App Using Git via SSH #1283
handle the error case of node retrieval while waiting for reboot #1486
bring some cert rotation helpers back into 4.11 [fix unit-tests] #1479
Full changelog

cloud-credential-operator

OCPBUGS-21328: Upgrade golang/x/net for CVE-2023-39325 #625
NO-ISSUE: snyk: exclude vendor/ #621
NO-ISSUE: Removing andrew from OWNERS #620
OCPBUGS-13792: Determine AWS partition based on region for readOnlyAnonUserPolicyTemplate bucket ARN. #540
OCPBUGS-11708: ccoctl: Enable public anon read access to default OIDC S3 bucket #530
Full changelog

cloud-network-config-controller

OCPBUGS-13240: pull project name from subnet uri #109
Full changelog

cluster-authentication-operator

OCPBUGS-27231: increase timeout for probes #648
Full changelog

cluster-autoscaler-operator

OCPBUGS-20737: Bump x/net package to v0.18.0 #301
Full changelog

cluster-baremetal-operator

OCPBUGS-20828: Uplift x/net to v0.17.0 #372
Full changelog

cluster-bootstrap

OCPBUGS-14387: Update dependencies and image #92
Add API team to the OWNERS #95
Full changelog

cluster-capi-controllers

OCPBUGS-21509: bump golang.org/x/net to v0.17.0 #187
Full changelog

cluster-capi-operator

OCPBUGS-21027: bump golang.org/x/net to v0.17.0 #139
Full changelog

cluster-config-operator

: OCPBUGS-21231: bump library-go to include switch to HTTP/1.1 #374
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-21425: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #170
OCPBUGS-19513: Fix readOnlyRootFilesystem for 4.11 #165
Full changelog

cluster-dns-operator

OCPBUGS-21511: Bump golang.org/x/net/http2 to v0.17.0 for CVE-2023-39325 in cluster-dns-operator #392
Full changelog

cluster-etcd-operator

OCPBUGS-21108: fixing CVE-2023-39325 by updating dependencies #1150
OCPBUGS-22785: [4.11] Backports of backup/restore fixes #1145
OCPBUGS-18283: reset snapshot default counts to avoid file already lo… #1103
Full changelog

cluster-image-registry-operator

OCPBUGS-20672: mitigate effects of rapid reset #954
Full changelog

cluster-ingress-operator

OCPBUGS-20748: Bump golang.org/x/net for CVE-2023-44487 #989
OCPBUGS-22433: test/e2e: Don’t use openshift/origin-node #993
OCPBUGS-14456, OCPBUGS-14457: Handle mTLS CRLs, and fix accidental CRL duplication #942
OCPBUGS-3560: Allow PROXY protocol for “Private” strategy #914
OCPBUGS-8000: certificate-publisher: Don’t publish extraneous certificates #894
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-26405: pkg/operator/configobserver: check that the serving certificate refer… #1616
: OCPBUGS-20839: bump library-go to include switch to HTTP/1.1 #1575
Full changelog

cluster-kube-cluster-api-operator

OCPBUGS-20943: bump golang.org/x/net to v0.17.0 #30
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-21036: Bump deps to address CVE-2023-44487 [4.11] #765
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-21220: bump(golang.org/x/net,openshift) to address CVE-2023-44487 #506
Full changelog

cluster-kube-storage-version-migrator-operator

: OCPBUGS-21314: bump library-go to include switch to HTTP/1.1 #99
Full changelog

cluster-machine-approver

OCPBUGS-25377: Filter non node CSRs in metrics #221
OCPBUGS-21413: Bump x/net package to v0.18.0 #215
Full changelog

cluster-monitoring-operator

OCPBUGS-21423: Set the new –disable-http2 flag for prometheus-adapter to disable HTTP2 #2149
OCPBUGS-22845: [release-4.11] add RHACS telemetry metrics #2141
OCPBUGS-21214: upgrade golang.org/x/net to v0.17.0 #2124
OCPBUGS-20073: Limit the value of GOMAXPROCS on node-exporter to 4 #2110
OCPBUGS-11759: add startup probe for prometheus-adapter #1947
OCPBUGS-11465: jsonnet: Add prometheus container in UWM #1938
Full changelog

cluster-network-operator

OCPBUGS-21714: Bump golang.org/x/net and github.com/openshift/library-go #2125
OCPBUGS-23321: IBMCloud specific: patch out management workload for dataplane component thats needed for bootstrapping #2109
OCPBUGS-13661: AUTH: update cluster-reader to include k8s.ovn.org #1811
OCPBUGS-11763: HyperShift: Add POD_NAME env to ovnkube-node #1780
OCPBUGS-12277: remove TLS_RSA_WITH_AES_128_CBC_SHA256 cipher #1789
Full changelog

cluster-node-tuning-operator

Merge #548
And 10 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-27231: increase timeout for probes #565
: OCPBUGS-20679: bump library-go to include switch to HTTP/1.1 #557
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-20757: bump(k8s,openshift) to address CVE-2023-44487 #312
Full changelog

cluster-policy-controller

OCPBUGS-21062: Bump deps to address CVE-2023-44487 [4.11] #142
Full changelog

cluster-samples-operator

OCPBUGS-15758: Update Jenkins and Jenkins Agent Base image versions #507
Full changelog

cluster-storage-operator

OCPBUGS-21253: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #408
Full changelog

cluster-version-operator

OCPBUGS-5011: Backport SecurityContext reconciliation behavior #940
OCPBUGS-13043: pkg/cvo: reset payload load status #935
Full changelog

console

OCPBUGS-23064: add support for new features annotations while preservi… #13315
OCPBUGS-19930: Web console slowness on Project>Project access page #13206
OCPBUGS-19297: Fix topology crash when a console.topology/data/factory extension tries to resolve a resource with version from the CRDs which doesn’t exists #13158
OCPBUGS-20217: Fixed Edit Application form for Knative Services #13220
OCPBUGS-18486: Fix stop PLR option #13131
OCPBUGS-19409: Backport tab extension to fix LOG-4504 (support LOG-3388 on OCP 4.11) #13171
OCPBUGS-19359: Remove PipelineResource CRD check because it’s not installed with PO 1.11 anymore #13079
OCPBUGS-17375: When removing the project owner from the project in GUI, instead of that user, the group (the default group added as project admin through the project template) will be removed. #13071
OCPBUGS-15562: only copy workload annotations to debug pod #12956
OCPBUGS-15532: visiting Configurations page returns error Cannot read… #12953
OCPBUGS-14004: use PipelineRun template from ‘pipelines-as-code-pipelinerun-go’ configMap for Go runtime #12845
OCPBUGS-14413: Modified git import flow module to handle create button enable-disable issue #12874
OCPBUGS-13214: the name of the object (imagestream-name) does not match the name on the URL (deployment_name) #12835
OCPBUGS-12284: Fix to use and set correct secretReference for build-config triggers #12762
OCPBUGS-13864: delete associated pipeline, triggertemplate and eventlistener when deleting app #12837
OCPBUGS-13730: Show type of sample on the samples view #12826
OCPBUGS-13746: PipelineRun templates must be fetched from OpenShift namespace #12827
OCPBUGS-12279: Do not show builder ImageStreams without sampleRepo as samples #12759
OCPBUGS-12959: update the default pipelineRun template name #12790
OCPBUGS-12231: Get the Event type value from the latest PLR of the Repository #12749
OCPBUGS-10708: delete application should delete all part-of resources #12772
OCPBUGS-13012: Show Tag label and tag name if tag is detected in repository PipelineRun list and details page #12793
OCPBUGS-10613: add subject kind dropdown in the project access form #12663
OCPBUGS-11580: In DeploymentConfig both the Form view and Yaml view are not in sync #12714
OCPBUGS-6984: Add Git Repository (PAC) showed empty permission content and non-working help link until a git url is entered #12523
OCPBUGS-7949: Webhook Secret (1 of 2) is not removed when Knative Service is deleted #12602
OCPBUGS-6954: Fix to show correct help texts for each git repo status error code #12518
OCPBUGS-7764: Fix crash when pinnedResources is null #12581
OCPBUGS-2916: Storage -> PVC -> upload data, does not support source reference #12221
OCPBUGS-6687: Hide silent switch for alerting rule if no associated alerts are present in devconsole #12479
OCPBUGS-2844: [OKD/nanokube] Fix NPE when project or build status is not defined #12207
OCPBUGS-12243: disable operator-install-single-namespace.spec.ts to solve CI issues #12751
Full changelog

console-operator

OCPBUGS-18424: Add missing watch permission for helm-chartrepos-viewers #804
OCPBUGS-11343: Distinguish between route conditions and remove the old ones #745
OCPBUGS-11969: Changing field on any of routes in the openshift-console namespace wont trigger sync loop #753
Full changelog

container-networking-plugins

OCPBUGS-20592: build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 [backport 4.11] #132
Full changelog

coredns

OCPBUGS-20359: UPSTREAM: <carry>: openshift: Fix OCPBUGS-20359 #99
OCPBUGS-21009: UPSTREAM: <carry>: openshift: Address CVE-2023-39325 #104
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-21216: Upgrade dependencies #243
OCPBUGS-20576: [release-4.11] CARRY: Add DOWNSTREAM_OWNERS #230
Full changelog

csi-driver-manila-operator

OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars #200
OCPBUGS-18782: Don’t cache OpenStack client #203
OCPBUGS-8067: Fix SCC admission failure race during initial deployment #188
Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

OCPBUGS-28954: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #170
OCPBUGS-23123: Should reference configmaps instead of secrets #155
OCPBUGS-20690: bump golang.org/x/net to v0.17.0 #149
Full changelog

csi-driver-shared-resource-operator

OCPBUGS-28960: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #106
OCPBUGS-20768: bump golang.org/x/net to v0.17.0 #89
Full changelog

csi-external-attacher

OCPBUGS-21119: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #63
Full changelog

csi-external-provisioner

OCPBUGS-20727: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #75
Full changelog

csi-external-resizer

OCPBUGS-20865: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #150
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-20971: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #112
Full changelog

csi-livenessprobe

OCPBUGS-20625: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #53
OCPBUGS-13820: Bump gRPC from 1.38.0 to 1.49.0 #42
Full changelog

csi-node-driver-registrar

OCPBUGS-20657: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #55
Full changelog

docker-builder

OCPBUGS-23041: Add -p flag to cp command to preserve timestamps #373
OCPBUGS-20685: [release-4.11] Bump golang.org/x/net #365
OCPBUGS-15645: Add the git-lfs package #354
OCPBUGS-11401: manage-dockerfile: use the original form of HEALTHCHECK #339
Full changelog

docker-registry

OCPBUGS-18302: bump docker-distribution #384
OCPBUGS-11366: bump docker-distribution #367
Full changelog

etcd

OCPBUGS-27105: Rebase etcd 3.5.11 openshift 4.11 #241
OCPBUGS-21173: [4.11] Carrying fixes for CVE-2023-44487 #229
OCPBUGS-16791: [4.11] Rebase openshift/etcd to 3.5.9 #210
Full changelog

gcp-cloud-controller-manager

OCPBUGS-21261: Bump golang.org/x/net to v0.18.0 #45
Full changelog

gcp-cluster-api-controllers

OCPBUGS-21358: UPSTREAM: <carry>: bump golang.org/x/net to v0.17.0 #206
Full changelog

gcp-machine-controllers

OCPBUGS-20813: Bump x/net package to v0.18.0 #70
Full changelog

gcp-pd-csi-driver

OCPBUGS-20704: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #48
OCPBUGS-11000: UPSTREAM: 988: Simplify node backoff logic #34
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-20788: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #90
OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars #83
Full changelog

haproxy-router

OCPBUGS-21071: Bump golang.org/x/net to v0.17.0 to address CVE-2023-39325 #533
OCPBUGS-18474: haproxy/template: mitigate CVE-2023-40225 #509
OCPBUGS-14456, OCPBUGS-14457: Handle mTLS CRLs, and fix accidental CRL duplication #492
Full changelog

hyperkube, pod

OCPBUGS-20122: Make kubelet set alpha.kubernetes.io/provided-node-ip unconditionally #1796
OCPBUGS-23289: UPSTREAM: 121881: Use golang library instead of mklink #1804
OCPBUGS-20112: UPSTREAM: <carry>: Do not allow nodes to set forbidden openshift labels #1748
openshift-hack: Fix sporadic 141 errors in build-rpms #1775
OCPBUGS-21471: [release-4.11] UPSTREAM: <carry>: [CVE-2023-39325] .: bump golang.org/x/net to v0.17.0 #1761
OCPBUGS-18843: UPSTREAM: <carry>: Force using host go always and use host libriaries #1697
OCPBUGS-17189: Update to Kubernetes 1.24.16 #1672
OCPBUGS-8736: UPSTREAM: <drop>: bump apiserver-library-go #1627
OCPBUGS-15361: Bump to k8s 1.24.15 #1607
OCPBUGS-14746: [release-4.11] UPSTREAM: 118383: bump cadvisor for upstream patch 3301 #1606
OCPBUGS-13166: Bump to k8s 1.24.14 #1588
OCPBUGS-11314: UPSTREAM: <carry>: Force using the go tooling from the system #1536
OCPBUGS-11314: Bump to k8s 1.24.12 #1529
Full changelog

hypershift

OCPBUGS-11608: properly reconcile with user specified changes for in proxy configuration #2396
install: add flag to wait for HyperShift operator rollout #2370
OCPBUGS-10823 ensure well known public domains do not get proxied on image imports #2352
Full changelog

ibm-cloud-controller-manager

OCPBUGS-21096: Bump golang.org/x/net to v0.18.0 #58
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-21194: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #53
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-21283: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #84
Full changelog

ibm-vpc-node-label-updater

OCPBUGS-21396: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #30
Full changelog

ibmcloud-machine-controllers

OCPBUGS-21376: [release-4.11] Bump golang.org/x/net to v0.18.0 #69
Full changelog

insights-operator

adds helm information gather (#891) #891
OCPBUGS-20715: update dependencies (#856) #856
Add cherry-pick from 4.12 (#855) #855
Add workload repo image gathering (#829) #829
OCPBUGS-15459: gather PDBs only from openshift namespaces (#804) (#806) #804
OCPBUGS-15446: extend configmap gatherer to get gateway-mode-config (#788) (#791) (#802) #788
OCPBUGS-7872: Collect info about monitoring pods pv (#773) #773
OCPBUGS-11818: update the cluster transfer interval to 12h (#765) (#766) #765
Full changelog

ironic

OCPBUGS-13585: Add python-flask dependency #381
OCPBUGS-14654: Include fix to OCPBUGS-13335 in OCP 4.11. #380
OCPBUGS-13645: Bump python-sushy #369
OCPBUGS-7565: Adding dep on python3-werkzeug >= 2.0.3-4 #356
Full changelog

ironic-agent

OCPBUGS-20486: fix eventlet regression with Python 3.6 #93
OCPBUGS-11438: Adding dep on python3-werkzeug >= 2.0.3-4 #74
Full changelog

ironic-static-ip-manager

OCPBUGS-14564: Flush addresses on provisioning interface with global scope only #38
Full changelog

k8s-prometheus-adapter

OCPBUGS-21423: upgrade golang.org/x/net to 0.17.0 to address CVE #92
OCPBUGS-21652: limit number of simultaneous client requests #87
Full changelog

kube-proxy, sdn

OCPBUGS-15084: EgressNetworkPolicy DNS resolution does not fall back to TCP #556
OCPBUGS-14305: fix possible concurrent map read/write #552
OCPBUGS-13917: save and delete the old egress network policy #544
OCPBUGS-13902: CVE-2018-17419 ose-node-container: dns: Denial of Service (DoS) [openshift-4] #543
Full changelog

kube-rbac-proxy

OCPBUGS-20676: v4.11 CVE 44487 #86
Full changelog

kube-state-metrics

OCPBUGS-20746: bump x/net to v0.17.0 #99
Full changelog

kuryr-cni, kuryr-controller

OCPBUGS-14931: KuryrPort cleanup: Fix issue of subport not found #733
Bug OCPBUGS-13428: Fix ValueError when Pod has no IP address #727
OCPBUGS-12840: Fix VIF revert on KuryrPort status update error #725
Full changelog

machine-api-operator

OCPBUGS-25304: Update Reference URL #1198
OCPBUGS-21490: Bump golang.org/x/net to v0.18.0 #1177
OCPBUGS-10719: [release-4.11] - manual cp #1057 - machines stuck in provisioned or provisioning #1141
OCPBUGS-11326: Fix empty component version #1133
OCPBUGS-10901: Block machine deletion if extra disks are attached #1131
Full changelog

machine-config-operator

OCPBUGS-21016: vendor: unpin deps and update library-go, container and kube deps #4019
OCPBUGS-21995: Prevent NM from unsetting the hostname #3989
OCPBUGS-18075: Agent-based install process the container machine-config-controller will be oom #3882
OCPBUGS-11556: Prevent possible split-brain scenario with keepalived unicast #3667
OCPBUGS-11283: Wrap podman commands in a while loop #3657
Full changelog

machine-image-customization-controller

OCPBUGS-21528: Uplift x/net to v0.17.0 #107
OCPBUGS-19424: Watch networkData Secrets for changes #100
Full changelog

multus-admission-controller

OCPBUGS-21309: Update go.mod for CVE-2023-39325 [Release-4.11] #74
Updating ose-multus-admission-controller images to be consistent with ART #63
OCPBUGS-9784: Client golang [backport 4.11] #60
Full changelog

multus-cni

OCPBUGS-21040: Update go.mod for CVE-2023-39325 [Release-4.11] #197
Updating multus-cni images to be consistent with ART #155
Full changelog

multus-networkpolicy

OCPBUGS-21412: Update go.mod for CVE-2023-39325 Release-4.11 #37
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-5954: Denormalize IP name before checking if pod is alive [Backport 4.11] #182
OCPBUGS-13241: Added trailing 0 to ipv6 ranges that end in “:” [Backport 4.11] #132
OCPBUGS-11067: respect requested allocation range when exluding ranges [backport 4.11] #124
Full changelog

network-metrics-daemon

Update golang.org/x/net to v0.17.0 (#85) #85
Full changelog

oc-mirror

OCPBUGS-21422: fix: CVE-2023-39325 and CVE-2023-44487 (#715) #715
changes the OWNERS file (#647) #647
Full changelog

openshift-controller-manager

OCPBUGS-23175: [release-4.11] fix template namespace processing #277
Full changelog

openshift-state-metrics

OCPBUGS-20691: bump x/net to v0.17.0 #105
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-21553: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #138
OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars #131
Full changelog

openstack-machine-api-provider

OCPBUGS-10954: machineset_controller: Stop caching clouds credentials #67
Full changelog

openstack-machine-controllers

OCPBUGS-20761: deps: Upgrade golang.org/x/net to v0.17.0 #278
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-24618: Update to latest k8s v0.24.x API server and enable HTTP/2 DoS mitigations #662
OCPBUGS-22131: [release-4.11] Bump golang.org/x/net to v0.17.0 #591
OCPBUGS-18513, RHIBMCS-169: Copied csv listing backport #560
OCPBUGS-16075: fix dynamic conversion webhook #536
Introduce DOWNSTREAM_OWNERS file #542
OCPBUGS-16126: Catalog Pod Startup Probe Timeout #509
Allow cpb to be statically compiled / exempt from FIPS compliance #513
OCPBUGS-12263: cherry-pick pull request refactor FBC caching (#1051) f… #482
Full changelog

operator-marketplace

OCPBUGS-20937: [release-4.11] bump golang.org/x/net to 0.17.0 #551
Full changelog

ovirt-csi-driver-operator

OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars #122
Full changelog

ovn-kubernetes

OCPBUGS-21762: Update bridge flow cache when the host address changes #1938
OCPBUGS-19911: [release-4.11] Dockerfile: bump OVN to ovn22.12-22.12.1-18.el8fdp #1918
OCPBUGS-19650: Delete IGMP Groups when deleting stale chassis #1901
OCPBUGS-12819: Handle k8s watcher restart scenario #1806
OCPBUGS-16691: ovnkube-master pod failed to reconnect to ovn db due to ssl expire #1779
OCPBUGS-15731, OCPBUGS-15745: Improve syncNodes to remove stale data #1734
OCPBUGS-15876: Remove non-existing functions test. #1740
OCPBUGS-16003: Fix stale SNAT entries for completed pods #1751
OCPBUGS-12791: : Delete equivalent ACLs when searching by predicate. #1666
OCPBUGS-11110: [release-4.11] Batch potentially big transaction on egress firewall ACLs migration #1629
OCPBUGS-10734: Bump OVN to 22.12 and turn off neighbour response in router options. #1599
OCPBUGS-10688: Fix leak in service controller cache #1598
OCPBUGS-11035: [release-4.11] Handle Completed pods deletion #1616
Full changelog

powervs-cloud-controller-manager

OCPBUGS-24750: UPSTREAM: <carry>: snyk code scan exclude vendor directory #51
OCPBUGS-21242: CVE-2023-39325 - Update net dependencies - 4.11 #48
Full changelog

powervs-machine-controllers

OCPBUGS-24724: snyk code scan exclude vendor directory #62
OCPBUGS-21883: CVE-2023-39325 - Bump golang.org/x/net to v0.17.0 - 4.11 #56
Full changelog

prometheus

OCPBUGS-21199: update golang.org/x/net to v0.17.0 [4.11] #177
Full changelog

prometheus-alertmanager

OCPBUGS-21013: Bump golang.org/x/net to v0.17.0 #83
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-20823: Bump golang.org/x/net to v0.17.0 #250
Full changelog

prometheus-node-exporter

OCPBUGS-21104: upgrade golang.org/x/net to v0.17.0 #137
Full changelog

telemeter

OCPBUGS-21298: [release-4.11] fix: Bump golang.org/x/net to v0.17.0 #488
Full changelog

tests

OCPBUGS-18424: Add missing watch permission for console users #28235
OCPBUGS-18129: Ignore timeout and connection refused errors during upgrade tests for 4.11 #28247
OCPBUGS-15942: remove references to registry.centos.org #28036
OCPBUGS-15151: Move from registry.centos.org to quay.io #27985
CCO-367: Allow CCO to be Upgradeable=False when credentialsMode=Manual #27961
OCPBUGS-12962: Add (optional) dual-stack tests to the CNI certification test suite #27904
Full changelog

thanos

OCPBUGS-21109: Bump golang.org/x/net to v0.17.0 #127
OCPBUGS-18299: Update exporter-toolkit to 0.7.3 #116
OCPBUGS-14559: require at least TLS 1.2 instead of 1.3 #113
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-21546: bump golang.org/x/net to v0.17.0 #25
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-21542: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #93
Full changelog

vsphere-csi-driver-operator

OCPBUGS-21402: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #176
Full changelog

vsphere-problem-detector

OCPBUGS-21569: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #132
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github