Back to index
Download the installer for your operating system or run
oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.12.103-x86_64 Qualifiers (status api ):
Tests:
Blocking jobsupgrade Succeeded (1 retry) periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgradeupgrade-minor Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade Informing jobs Upgrades from:
Untested upgrades:
4.11.14 ,
4.11.15 ,
4.11.16 ,
4.11.17 ,
4.11.18 ,
4.11.19 ,
4.11.20 ,
4.11.21 ,
4.11.22 ,
4.11.23 ,
4.11.24 ,
4.11.25 ,
4.11.26 ,
4.11.27 ,
4.11.28 ,
4.11.29 ,
4.11.32 ,
4.11.33 ,
4.11.34 ,
4.11.36 ,
4.11.37 ,
4.11.38 ,
4.11.39 ,
4.11.40 ,
4.11.41 ,
4.11.42 ,
4.11.43 ,
4.11.44 ,
4.11.45 ,
4.11.46 ,
4.11.47 ,
4.11.48 ,
4.11.49 ,
4.11.50 ,
4.11.51 ,
4.11.52 ,
4.11.53 ,
4.11.54 ,
4.11.55 ,
4.11.56 ,
4.12.10 ,
4.12.12 ,
4.12.13 ,
4.12.14 ,
4.12.15 ,
4.12.16 ,
4.12.17 ,
4.12.18 ,
4.12.19 ,
4.12.20 ,
4.12.21 ,
4.12.23 ,
4.12.24 ,
4.12.25 ,
4.12.26 ,
4.12.27 ,
4.12.28 ,
4.12.29 ,
4.12.3 ,
4.12.30 ,
4.12.31 ,
4.12.32 ,
4.12.33 ,
4.12.34 ,
4.12.35 ,
4.12.36 ,
4.12.37 ,
4.12.38 ,
4.12.39 ,
4.12.4 ,
4.12.40 ,
4.12.41 ,
4.12.42 ,
4.12.43 ,
4.12.44 ,
4.12.45 ,
4.12.46 ,
4.12.47 ,
4.12.48 ,
4.12.49 ,
4.12.5 ,
4.12.50 ,
4.12.51 ,
4.12.52 ,
4.12.53 ,
4.12.54 ,
4.12.55 ,
4.12.56 ,
4.12.57 ,
4.12.58 ,
4.12.59 ,
4.12.6 ,
4.12.60 ,
4.12.61 ,
4.12.62 ,
4.12.63 ,
4.12.64 ,
4.12.65 ,
4.12.66 ,
4.12.67 ,
4.12.68 ,
4.12.69 ,
4.12.7 ,
4.12.70 ,
4.12.71 ,
4.12.73 ,
4.12.74 ,
4.12.75 ,
4.12.76 ,
4.12.77 ,
4.12.78 ,
4.12.79 ,
4.12.8 ,
4.12.80 ,
4.12.81 ,
4.12.82 ,
4.12.83 ,
4.12.84 ,
4.12.85 ,
4.12.86 ,
4.12.87 ,
4.12.88 ,
4.12.89 ,
4.12.9 ,
4.12.90 ,
4.12.91 ,
4.12.92 ,
4.12.93 ,
4.12.94 ,
4.12.95 ,
4.12.96 ,
4.12.97 ,
4.12.98 ,
4.12.99 Upgrades to:
Loading changelog, this may take a while ...
Created: 2026-11-06 10:44:58 +0000 UTC
Image Digest: sha256:8d31fe41fbd8e2065d676840f79ed9287dbdb5630e39c9a7a9b87d7ba874307e
Components
Rebuilt images without code change
cluster-update-keys git 2796e173 sha256:0270d05de706183559c5d371399f65ed805e6e2c9a306d090769d98b1ee62ed3configmap-reloader git e4d9170e sha256:04fc1b1d5a55071ca1f369ba153c2c0066f467d0f1f25af6eb6629507fb21c5cegress-router-cni git a92e4157 sha256:4ef3864e75a8c4f66a3430b396e3ca3dc3ca932599bddb8763983cc8dbf4b34dkeepalived-ipfailover git 7e8a0105 sha256:a99aac4700fef867bb0851eafe02a3a6418dc69e80b497848c4f14499c032eeblibvirt-machine-controllers git a2882f7a sha256:4a913b616243e3ca9d2133afe4b2efa9f23174eeffb22c4867e1447b7626da3bmachine-os-content sha256:dcfa817a551c9bf20b3a86ce979c99890dbcd4571c19bee288929c2a18d183bd
network-tools git c76613c7 sha256:8f5c2e8ab38bcde365431608a9688652a10ab8b274390767887600ef450ffc7fovirt-machine-controllers git 03e8cb50 sha256:aab0ee7caa936b6492cb9c39a225d30937da8f5fde374186f6a8f6977f713bc9rhel-coreos-8 sha256:8d61187507cb6ab4a78b988f861694854c9da2dc5d0728f8449b3973b65047cf
rhel-coreos-8-extensions sha256:23ac38e10a2865d9957bb3fa184c226e477a3d6662df4338642771370cfc74cc
Updating ose-alibaba-machine-controllers images to be consistent with ART #35
Full changelog
NO-JIRA: refactor: Updating go builder in the CI, Dockerfile and go.mod to be consistent with ART 4.12 #2175
OCPBUGS-67424 : CVE-2025-65637 openshift4/ose-cluster-kube-apiserver-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.12.z] #2048 OCPBUGS-50880 : Increase waitForFallbackDegradedConditionTimeout #1811 OCPBUGS-22736 : pkg/operator/configobserver: check that the serving certificate refer… #1571 : OCPBUGS-20855: bump library-go to include switch to HTTP/1.1 #1574
OCPBUGS-19837 : Update staticpod file permissions to conform with CIS benchmarks #1559 OCPBUGS-17139 : make webhook connection failure a warning in log #1533 OCPBUGS-13346 : dont log jwt tokens #1524 Full changelog
NO-JIRA: Reconciling the ART and CI go tool chain versions #173
OCPBUGS-67429 : Bump github.com/sirupsen/logrus to v1.8.3 #143 : OCPBUGS-21336: bump library-go to include switch to HTTP/1.1 #98
Full changelog
irqbalance: set banned cpus list to 0 (#1006) #1006
Refactor IRQ load balancing enable/disable test (#1038) #1038
Scheduler plugin: ignore IRQs (#1034) #1034
Disable HTTP/2 for webhook and metrics servers (#849) #849
Remove obsolete protocols and weak ciphers (#847) #847
OCPBUGS-21837 : nto: pao avoid timeout when there are too many CSV (#838) #838 Tighten the rules for modifying Tuned Profiles (#790) #790
OCPBUGS-19459 : check for object being nil (#821) #821 OCPBUGS-18868 : [release-4.14] e2e: add expected max latancy to hwlatdetec test & rename constant (#788) (#808) (#809) #788 Release leader election on manager exit (#789) #789
Fix a race in e2e test rollback.go code (#742) #742
pao: e2e: Make script executable (#734) #734
pao e2e: Split gcp-pao lane (#728) #728
Do not rollback settings on TuneD exit (#711) #711
OCPBUGS-15800 : e2e: latency testing: increase the expected threshold and fix gomega truncating output (#710) #710 Revert “Remove optimization to allow full resync (#569)” (#688) #569
update owners 20230109 (#549) #549
Add PerformanceProfiles to ‘oc adm must-gather’ (#667) #667
OCPBUGS-14472 : Fix updating numa core siblings map in GetCpuSiblings function (#675) #675 Remove trailing spaces from test names (#572) #572
Remove optimization to allow full resync (#569) #569
e2e:latency: count LATENCY_TEST_DELAY in timeout (#539) #539
e2e: add missing test id (#630) #630
Remove subPaths, they are broken (#627) #627
Remove the preStop hook for openshift-tuned (#621) #621
Full changelog
OCPBUGS-129171 , OU-1589 : Sanitize URLs in alert annotations #17434 OCPBUGS-133426 : Stabilize legacy OperatorHub Cypress waits #17428 OCPBUGS-129171 : Sanitize alert runbook URLs #17192 OCPBUGS-77114 : [release-4.12] CVE-2026-26996 Bump minimatch library #16489 OCPBUGS-92663 : CVE-2026-46597 openshift4/ose-console: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs [openshift-4.12.z] #16983 OCPBUGS-100520 : Bump postcss to 8.5.26 to fix CVE-2026-45623 #17110 OCPBUGS-90615 : Fix JSON annotation parsing to prevent OperatorHub crash #16660 Fix for OCPBUGS-92077: CVE-2026-44990 #16723
OCPBUGS-98415 : CVE-2026-59869 #16756 OCPBUGS-87984 : [release-4.12] shell-quote: Arbitrary code execution via command injection due to unescaped line terminators #16594 OCPBUGS-120132 : Fix JSON annotation parsing to prevent OperatorHub crash #17135 Fix for OCPBUGS-81593: CVE-2026-4800 #16570
OCPBUGS-88398 , OCPBUGS-88416 : Bump Axios to fix CVE-2026-44486. Requires a Patch of axios 0.33.0 types to be compatible with old version of TS #16793 OCPBUGS-79430 : CVE-2026-29063 Bump immutable #16331 ART-18753 : pin fsevents to latest #16482 NO-JIRA: enable multi-architecture yarn builds #16422
NO-JIRA: Updating openshift-enterprise-console-container image to be consistent with ART for 4.12 #12539
CONSOLE-5011 : migrate to yarn berry #16084 NO-JIRA: Bump builder image to v29 #15988
OCPBUGS-74435 : Bump lodash to latest #15973 OCPBUGS-44155 : bump dompurify to latest #15595 OCPBUGS-57101 : Add all files to vendor regardless of gitignore #15137 OCPBUGS-55210 : Show Observe section without PROMETHEUS and MONITORING flags #14986 Dockerfile yarn line update #14838
OCPBUGS-45291 : Application creation fail when manually entering input scaling value in local setup #14572 OCPBUGS-45235 : Edit the secret and add the Chinese in the web-console, garbled characters will be displayed #14561 OCPBUGS-36561 : Increase login flow state paramater length/entropy #14539 OCPBUGS-43639 : Copy response code from proxied plugin requests #14423 OCPBUGS-33519 : Observe > Metrics targets, Alert user if they do not have access to information on this page (e.g. 403). #14334 OCPBUGS-41600 : Fix plugin proxy handler #14266 OCPBUGS-41854 : Redirects to new PipelineRun logs URL from old PipelineRun logs URL #14283 OCPBUGS-34564 : Routes created by devfiles do not always use HTTPS #13907 OCPBUGS-34933 : Helm Plugin’s Catalog incorrectly renders a single index entry into multiple tiles #13930 OCPBUGS-32146 : Bump graphql-go to v1.3.0 #13923 OCPBUGS-34845 : Fix PipelineRun Logs tab navigation #13920 OCPBUGS-33778 : fix issues with Edit Route form #13859 OCPBUGS-27479 : Bump helm pkg #13528 OCPBUGS-29746 : Add Pipeline metrics tab using plugin #13621 OCPBUGS-29348 : Added Proxy to non k8s endpoints #13600 OCPBUGS-22431 : Check if filtered object contains name property #13285 OCPBUGS-25213 : add access review for impersonate #13440 OCPBUGS-18116 : Bump helm version #13104 OCPBUGS-24236 : Remove tech preview badge from Pipeline repository pages #13384 OCPBUGS-23413 : Correct logout process #13342 OCPBUGS-24364 : Subsequent PipelineRuns take initial PipelineRun name into account #13401 OCPBUGS-13357 : add multipath device type to LocalVolumeSet #12805 OCPBUGS-23346 : update the KnativeServing API version to v1beta1 for global-config extension #13334 OCPBUGS-23154 : remove expandable toggle for conditional update risk d… #13322 OCPBUGS-22964 : add support for new features annotations while preservi… #13305 OCPBUGS-19382 : Could not import multiple resources via JSON (while YAML supports this) #13168 OCPBUGS-20071 : Fix that “Delete application” doesn’t work in topology when Pipelines operator is not installed #13212 OCPBUGS-21727 : fetch TaskRuns without selector and reduces the get TaskRuns requests #13251 OCPBUGS-21731 : show all the legends for Pipeline metrics in PipelineRun TaskRun Duration chart #13252 OCPBUGS-13580 : Regression: OpenShift Console no-longer filters SecretList when displaying ServiceAccount #12747 OCPBUGS-19907 : Fixed Edit Application form for Knative Services #13205 OCPBUGS-19045 : Web console slowness on Project>Project access page #13155 OCPBUGS-18273 : Fix topology crash when a console.topology/data/factory extension tries to resolve a resource with version from the CRDs which doesn’t exists #13113 OCPBUGS-18563 : OLM Pages work when copied CSVs are disabled #13055 OCPBUGS-17530 : fix bug where binary secret values are corrupted on edit and add test coverage #13087 OCPBUGS-18366 : Fix DeploymentConfig list performance issues by lazy loading their ReplicationControllers #13122 OCPBUGS-16660 : Manual cherry-pick of #12978 #13039 OCPBUGS-17192 : “Duplicate RoleBinding” leads to “Unsupported value” error #13063 OCPBUGS-16846 : Fix stop PLR option #13051 OCPBUGS-2182 : re-enable operator-install-single-namespace.spec.ts test #13013 OCPBUGS-16732 : When removing the project owner from the project in GUI, instead of that user, the group (the default group added as project admin through the project template) will be removed. #13047 OCPBUGS-16046 , OCPBUGS-16047 , OCPBUGS-16048 : Helm Chart installation form hangs on create if JSON-schema is using 2019-09 or 2020-20 standard revisions #12997 OCPBUGS-15898 : account for single object in status.conditions instead… #12982 OCPBUGS-16139 : The upgrade Helm Release tab in OpenShift GUI Developer console is not refreshing with updated values. #13004 OCPBUGS-15710 : Create helm release page doesn’t show a YAML editor when schema isn’t available (httpd-imagestreams chart) #12962 OCPBUGS-15849 : Add Pipeline metrics unsupported empty page #12977 OCPBUGS-9405 : [OSD] There is no error message shown on node label edi… #12965 OCPBUGS-15798 : Remove access review check for PipelineResource from Pipeline section #12969 OCPBUGS-13643 : Fix OLM k8sResourcePrefix descriptor dropdown behavior #12813 OCPBUGS-15569 : use service port name instead targetPort in the Pipeline Event listener route #12958 OCPBUGS-15535 : Delete annotation ‘tekton.dev/v1beta1TaskRuns’ when rerun the PLR #12955 OCPBUGS-15404 : Importing a kn Service shows a non-working Open URL decorator also when the Add Route checkbox was unselected #12935 OCPBUGS-15057 : only copy workload annotations to debug pod #12903 OCPBUGS-15099 : visiting Configurations page returns error Cannot read… #12906 OCPBUGS-15482 : Remove PipelineResource CRD check because it’s not installed with PO 1.11 anymore #12948 OCPBUGS-14190 : When Creating Sample Devfile from the Samples Page, Topology Icon is not set #12859 OCPBUGS-11989 : Modified git import flow module to handle create button enable-disable issue #12775 OCPBUGS-6848 : Service name search ability while creating the Route from console #12505 OCPBUGS-7619 : Search page: LazyActionMenus are shown below Add/Remove from navigation button #12575 OCPBUGS-7924 : Developer - Topology : ‘Filter by resource’ drop-down i18n misses #12598 OCPBUGS-13803 : add support for minimal status of tekton #12831 OCPBUGS-13750 : use PipelineRun template from ‘pipelines-as-code-pipelinerun-go’ configMap for Go runtime #12829 OCPBUGS-12839 : Show type of sample on the samples view #12783 OCPBUGS-12992 : Pipeline doesn’t render correctly when displayed but looks fine in edit mode #12791 OCPBUGS-9336 : use buildconfig form also for create #12770 OCPBUGS-11601 : Move operator install status to it’s own … #12715 OCPBUGS-12232 : Fix for broken Create key/value secrets e2e tests #12750 OCPBUGS-11844 : delete associated pipeline, triggertemplate and eventlistener when deleting app #12727 OCPBUGS-11972 : update the default pipelineRun template name #12687 OCPBUGS-6888 : Show Git icon and repo link as per the Git provider #12511 OCPBUGS-12476 : Pipelines repository list and creation form doesn’t show Tech Preview status #12763 OCPBUGS-1753 : Fix OLM descriptor components deletes operand e2e test failing #12573 OCPBUGS-12477 : Users don’t know what type of resource is being created by Import from Git or Deploy Image flows #12765 OCPBUGS-11998 : Do not show builder ImageStreams without sampleRepo as samples #12740 OCPBUGS-5009 : Helm Charts and Samples are not disabled in topology actions if actions are disabled in customization #12382 OCPBUGS-7953 : fix devfile error #12605 OCPBUGS-6672 : In DeploymentConfig both the Form view and Yaml view are not in sync #12475 OCPBUGS-8016 : PipelineRun templates must be fetched from OpenShift namespace #12614 And 2 elided commits (e.g. from squash or rebase merges)
Full changelog
OCPBUGS-84927 : Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.64.1-sec.1 to avoid go version bump and fix CVE-2026-33186 #186 Full changelog
OCPBUGS-102197 : Replace golang.org/x/net with github.com/openshift-sustaining/net v0.35.0-sec.3 to mitigate CVE-2026-33814 #1373 And 14 elided commits (e.g. from squash or rebase merges)
Full changelog
-sOCPBUGS-59700:Bump github.com/golang/glog to v1.2.4 (#125) #125
Replace e2e test image (#134) #134
swtich golint install method (#133) #133
Correct 4.16 owners file (#131) #131
Added METRIC_TEST_IMAGE var (#92) #92
Update the k8s dependencies to 1.25.15 (#84) #84
Revert “Remove e2e tests that consistently fail in 4.12 (#74)” (#77) #74
Remove e2e tests that consistently fail in 4.12 (#74) #74
Full changelog
And 11 elided commits (e.g. from squash or rebase merges)
Full changelog
: OCPBUGS-27593,OCPBUGS-27678: Update go-git to v5.11.0 #76
OCPBUGS-23449 : [release-4.12] Address http2 Vulnerability #64 OCPBUGS-21343 : [release-4.12] Bump golang.org/x/net to v0.17.0 #41 UPSTREAM: <carry>: add downstream owners #43
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog
NO-ISSUE: synchronize OWNERS from main branch #155
OCPBUGS-102220 : CVE-2026-33814 openshift4/ose-openshift-state-metrics-rhel8: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [openshift-4.12.z] #138 OCPBUGS-20706 : bump x/net to v0.17.0 #106 Full changelog
Source code for this page located on github