4.12.81

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.12.81-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-sdn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-aws-sdn-serial
- aws-sdn-upgrade-4.12-minor Succeeded periodic-ci-openshift-release-master-nightly-4.12-upgrade-from-stable-4.11-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.12-micro Succeeded periodic-ci-openshift-release-master-ci-4.12-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.12-fips-payload-scan
- gcp-sdn-upgrade-4.12-micro Succeeded (2 retries) periodic-ci-openshift-release-master-ci-4.12-e2e-gcp-sdn-upgrade
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.11.14, 4.11.16, 4.11.18, 4.11.19, 4.11.20, 4.11.21, 4.11.22, 4.11.23, 4.11.24, 4.11.25, 4.11.26, 4.11.27, 4.11.28, 4.11.29, 4.11.30, 4.11.31, 4.11.32, 4.11.33, 4.11.34, 4.11.35, 4.11.36, 4.11.37, 4.11.38, 4.11.39, 4.11.41, 4.11.42, 4.11.43, 4.11.44, 4.11.46, 4.11.47, 4.11.48, 4.11.49, 4.11.50, 4.11.51, 4.11.52, 4.11.53, 4.11.54, 4.11.55, 4.11.56, 4.12.10, 4.12.11, 4.12.12, 4.12.13, 4.12.14, 4.12.15, 4.12.16, 4.12.17, 4.12.18, 4.12.19, 4.12.20, 4.12.21, 4.12.22, 4.12.23, 4.12.24, 4.12.25, 4.12.26, 4.12.27, 4.12.28, 4.12.29, 4.12.3, 4.12.30, 4.12.31, 4.12.32, 4.12.33, 4.12.34, 4.12.35, 4.12.36, 4.12.37, 4.12.38, 4.12.39, 4.12.4, 4.12.40, 4.12.41, 4.12.42, 4.12.43, 4.12.44, 4.12.45, 4.12.46, 4.12.47, 4.12.48, 4.12.49, 4.12.5, 4.12.50, 4.12.53, 4.12.54, 4.12.55, 4.12.56, 4.12.57, 4.12.58, 4.12.59, 4.12.6, 4.12.60, 4.12.61, 4.12.62, 4.12.63, 4.12.64, 4.12.65, 4.12.66, 4.12.67, 4.12.68, 4.12.7, 4.12.70, 4.12.72, 4.12.73, 4.12.74, 4.12.75, 4.12.76, 4.12.77, 4.12.8, 4.12.9

Upgrades to:

4.13.0-0.nightly-2025-10-12-015144 (changes) - Success
4.13.0-0.nightly-2025-10-11-154651 (changes) - Success
4.13.0-0.nightly-2025-10-10-170211 (changes) - Failed Success
4.13.0-0.ci-2025-10-13-045803 (changes) - S F F F P
4.13.0-0.ci-2025-10-11-105754 (changes) - F F S S
4.13.0-0.ci-2025-10-11-045754 (changes) - S F S
4.13.0-0.ci-2025-10-10-092346 (changes) - S F S

Loading changelog, this may take a while ...

Changes from 4.12.51

Created: 2025-10-09 22:50:09 +0000 UTC

Image Digest: sha256:61b4941f76aeed8f65735643d96a6cd4a823018cb7ca40d6966dd098bc8dc284

Components

Kubernetes 1.25.16
Red Hat Enterprise Linux CoreOS upgraded from 412.86.202402272018-0 to 412.86.202510081644-0 (diff)

Rebuilt images without code change

alibaba-cloud-controller-manager git 191c9e34 sha256:882a82c950575baccf7ffbce4b793cee4a4e8da49233129b8ee72f74cf3b4a88
alibaba-cloud-csi-driver git 4d3b1125 sha256:fa48c2e7597c45ed2641e73e21742ce45959caff31bd630fcbb9d6cdf59ae714
alibaba-disk-csi-driver-operator git 99bcda8d sha256:2e4f5c6f9d18b4d5f84f0f4f8ab1cec3cd859c78d0f4070a26014eee5698d5ed
aws-cluster-api-controllers git 16156acc sha256:8b4c959dc37890a7e345894554527d7bec4e48322ccea1e9fc383c9596a397cb
azure-cloud-controller-manager git 2193ccfa sha256:6d221f52fcace5b33bdd9516a4f96a824390e0c308d3d2635906631c133e4850
azure-cloud-node-manager git 2193ccfa sha256:7489f4dbdd48aefb908dfb4638029b78311c1013752de58c970f84b2de5d0319
azure-disk-csi-driver-operator git 988b8cc8 sha256:3c9f824443cd2d2f8e79b0d8be2e475b06c8c545edec6f30f8536a30e9226ff6
azure-file-csi-driver git 15aade4d sha256:51ef0ab77ffe0b5ca9fd2f9acaec73e15eba65c764bbe2bf62b85479faeb6699
azure-file-csi-driver-operator git 060ba825 sha256:80926f5dc62ee2d05bd2b3e8ac7b2d8ac1d2ae516e514b25a6a527292cd657e7
baremetal-runtimecfg git 474ed48e sha256:5b024bc68422d1e434f794005239a4cf98a810ce7737888135d866a00a828c7c
cluster-authentication-operator git 4f7f6b1a sha256:e8dfe2cb9ac8a5c74ca5ae41ef4a3798d338fdcc678a5db1a40715152e5cb471
cluster-bootstrap git 138a1cf2 sha256:ce2ea7ad07d8816346db1158e93d58b2cab739c30ce7362fd3e28e8632c59812
cluster-capi-controllers git 03d89f21 sha256:bdfe43c160f50bf59f33210eb87bb37786fc669aecfac07dc0a43f32e86efe8f
cluster-capi-operator git 60a36d83 sha256:e66f38753259b4db665bd6db6d6e3a7720c05b0eeb717603dfe06f2ac37a5dbb
cluster-cloud-controller-manager-operator git 3b1f0843 sha256:10420ada999d33e5bdb3cc9c6d3dfd87abb44c3cf607b09d18308c0b025616aa
cluster-kube-cluster-api-operator git d50f7322 sha256:e41ee92a05bcc2b7dab727ac2764757eac3772ed0b55ab85cb0ce48575842493
cluster-kube-controller-manager-operator git c3c07beb sha256:faff51819b734cbcb4555d5277976aad78993f61e534458db0633f73dbe7dc11
cluster-kube-scheduler-operator git 48cd96c9 sha256:753e0ebb5a3e7691812932aa38d56ab5a9b729ad6a0a345b90a4118e449c1481
cluster-kube-storage-version-migrator-operator git 1a251f4d sha256:dede2de6320e53d9bbee5c193d54aa3fead13ac071394c838dd5f89dcb7f4928
cluster-machine-approver git 7b08a4de sha256:da1e77e6acd6dcca9c106f02a007000239fd27424d23a64e75e8c6a25557e6bd
cluster-openshift-apiserver-operator git b870fc67 sha256:20fce3df849493cf56c00b7046ce6e852a5256441106730e9683f2ea221099f7
cluster-openshift-controller-manager-operator git ab963d8a sha256:cca4b8a884f5b181d95da714eca0fbb280f870c4381988fcb54d62909f01926e
cluster-platform-operators-manager git c930dc74 sha256:a83482a93693cfc25b2d89e73e9378a5458c68948c5d7ea285bcb13d5dd9f608
cluster-policy-controller git cb8862b0 sha256:f350470c9faba89ee2ee76e1bafc9107f5782faf1c509226efd23ffcf62992b2
cluster-storage-operator git 21ebf328 sha256:0569a23ec13ab10f73419ea7d00ad7205bdd9347cb37b74149030a5f92582604
cluster-update-keys git 2796e173 sha256:e627925058e77974322873f060a50ad02ca78a762a95508e91a7fe5b0cd5fe23
configmap-reloader git e4d9170e sha256:1ca565fc1b279835082b03c4ad8e0d4589ff568c8f1c3198ad713dc587c14dea
csi-driver-nfs git d9099257 sha256:5af7714a77fe89545cc79dad4eaa2161c32303e32378728d0cd8a7380f05706a
csi-driver-shared-resource git d054948f sha256:2fda0ad0f042d8c76bb0a5111a48e51b7686dece9660a967e65d1755bb6ec1f0
csi-driver-shared-resource-operator git cc297702 sha256:449be6edd8bb7f146cf36cafb870a579a509349af284eff5d744954594277121
csi-driver-shared-resource-webhook git d054948f sha256:9909f0b45314432568c6faf255433dcdb2babfe8eccb7026aa1e5cb83e9b563c
csi-external-attacher git fac7b8fd sha256:b4e839902709fa99c6a4d05a41ff108acbd36d4a59ac0c5cc426355e0a590bae
csi-external-provisioner git 3aa7c527 sha256:402290559e854aa13e09fe75931c4af8341dfb1c83c0a7113eb8bf1d411ac835
csi-external-resizer git 5b066ba4 sha256:4a905535a69f8d272010991f84e8af71c279bd51d726d5b4dbe7bcd8d326a305
csi-external-snapshotter git 6fdb648f sha256:f18b84805a5e87488cdf721157a543d108afb53fb01c70b5d364358e991c9a3b
csi-livenessprobe git e6545e71 sha256:9c8894a1ec078509118e688aca57397c9594d6654dc4b450419e9a2cee230328
csi-node-driver-registrar git c316b896 sha256:4e28fe039adca261366b691cacaa97c2d64510cc6bf38586e3efe1400ffe1959
csi-snapshot-controller git 6fdb648f sha256:49bb789b683b1d0e78ca741abeefe493b2cfcf6e3490eed161b50a966d4c250e
csi-snapshot-validation-webhook git 6fdb648f sha256:42e9fa0a7e425e8e91c47333b538cf91d8200f9186d75094221ffe629d4355c4
driver-toolkit git 6e5c04c0 sha256:553361ea6ca860540b6beeeea3bd87d8e5ebc33ada23d04fb3f6fbf2b34c196e
egress-router-cni git a92e4157 sha256:fb81a74dc0713b2131ea0d8cdca357b0f047483bd90e5fb73fd5bc481d752a4d
gcp-cloud-controller-manager git 8a84952e sha256:06624c50efc7acd6839b720b55abb6037957a10b762901791b987cb654dbb65f
gcp-cluster-api-controllers git e00019fa sha256:ede09978ef3cfb243713c459eea4d6398fae588df225fd664423c6163df28553
gcp-machine-controllers git d6d8c1cc sha256:3da8992977f75a16301345eec4790b35b58e5ba9dd5cc5dc38f765a197fade5f
gcp-pd-csi-driver git 5dcfd675 sha256:e86ad8bd1a9bc82ffa105cf634142a6915e298b60bc749f391e5c0da80f4bac8
gcp-pd-csi-driver-operator git 30e97ba5 sha256:ea1cc752b6034a5f42e9d7c1c78d37c2d4b72e5a567bee4a7178fb080fb75b12
ibm-cloud-controller-manager git 8bd0ea8f sha256:2afaaae5c63b30fcbf2d5eaab813586cd8af4843d9954fb5100de907a61496dd
ibmcloud-cluster-api-controllers git 0fe74f67 sha256:467089022cb401f3dc4c7d75fb8101d4042a69fae6bd740ede8453f27c172bea
ibmcloud-machine-controllers git 31a67dac sha256:85bc96a21bf3717385aea7821aa1f0d0e667f97cf5464b94e56a4b9c70a6b6ae
ironic-machine-os-downloader git c65c1f1c sha256:0acec976ab901a04aa19dfc4d1f8a0b4f2d36d2b9b98a63b3e490068f4d889fa
ironic-static-ip-manager git a8ade8fe sha256:540a6979cb5a1a147af6a66b9c0cb4a3e0e01c5ad83ccd8334ffa4f2cd830dd5
k8s-prometheus-adapter git 36c06694 sha256:e6eeed6d1a7fb4271b32d9d222f1a68a5a4b87660ff7aaa6bed51360d26e8ae5
keepalived-ipfailover git 7e8a0105 sha256:93464869037c7d78c0627d81eb69389a4ce6946c0c38ebfa9fe3109ad8ebfc51
kube-state-metrics git 748f7131 sha256:3813fdac5f736dbdb6ae795d67a5fab047bec134ad0ae67f6939f385a1553353
kubevirt-cloud-controller-manager git a19615cd sha256:c4406edafb6df465d8c35d6b006af0f134c8e54e027c313df96121a56605b50d
kubevirt-csi-driver git f407c8a7 sha256:1cf9da24d902e26c96ed05c88435e87504b795988be79a6c5f9c06a4b9bbbad4
kuryr-cni git 8fd2f8b0 sha256:41ccfbb10165eaacc1e6ce2ddb77823cbb2e95857409d5a1fbd53375059af829
kuryr-controller git 8fd2f8b0 sha256:239d09374b2f4460dc2dedc1f7444cf02857d73abc42835c214c5f4d8fe7e4b5
libvirt-machine-controllers git a2882f7a sha256:83aca7c573a4841b6c61bfe5e6e65586dce90430ea56b9b7ab68de48a00dcd49
machine-image-customization-controller git e456249d sha256:1618304d35aebd551d358eddb2efb05a617aae51aa08ec16cf12b4323b0bbd1a
machine-os-content sha256:7ee719ee0a37b617aefa0ecd8c0a4001b3ad4cb8d8dc5580944772acb737ff6c
multus-networkpolicy git 644461f2 sha256:70b2e3854d7a183fefd249e7e048a357f97be03a1a36b9fcc852ef9a905c8b2b
multus-route-override-cni git efd6ffbb sha256:07b479d62fb74731427f8bf80d675152c50a50b7c1cdb6029e9c3eadf91dc442
network-interface-bond-cni git 30386d6b sha256:ac889ae8a2f9dd2c7e89bb876f72a25b0ef4fd3a2eedc2c7a4511dd8c299f99c
network-tools git c76613c7 sha256:3cff2049958850f98863ab48f1a911e53a1384e845d303b7ede55a88eaf734f4
oauth-proxy git 03e5b13b sha256:0bac6707a9e8735814b3d12856f344b5dba29699df9caa60b927775ae2534d12
openshift-state-metrics git 3d5dc18d sha256:0fe41fc01c02052ac094d5e2561298aa3c367bfe4c3ba7e71c09a9ab182b7eea
openstack-cinder-csi-driver-operator git d09e51ae sha256:53c25462eec3331d90c4d2090b14a964428902f719636e700d1fa523a02cbae9
openstack-machine-api-provider git 05657663 sha256:272a036188c6b695fe53e5ecba1ec631c5b48e5a4b63a7eb9e30d303a0c00f23
openstack-machine-controllers git f13e381e sha256:4cbb213cc0d915ae61f76db07804b030bc056d845e0f0400b8555fda173fcf5b
ovirt-csi-driver git 87ab3789 sha256:3776a419e6cb5c594f120dbe0c675d01a83c23c17afd35463decfa4da8c8206a
ovirt-csi-driver-operator git e5e02335 sha256:28a266f4ddbb89350b9dd9989cb1b6e8e9075d1dc7ff00452c92f60f8758a723
ovirt-machine-controllers git 03e8cb50 sha256:2f18de900d00e20c2a90ac47028f766c7f326ac57b8bce7a955b0718a687cd31
powervs-block-csi-driver git b78e8e78 sha256:842e0cd6ab37a6daa1c523727aa20af3d56272953ac1499f720aacd5210b7b2f
powervs-block-csi-driver-operator git 7dadc08a sha256:f811c57fe60a7bd6e7e1eff799532415bc6dd50fd79d996cc57450b31ae8ab55
powervs-cloud-controller-manager git 4fb4334c sha256:37ceda7f92933123c19489ee3c9722c10aae54b9f7bc7134eba0605d1fd790c9
prom-label-proxy git b1907888 sha256:90e488267c85058186d80a95898babb7f81cc5de5963fca3d0c4833db8511b3c
prometheus git 72ceaef4 sha256:338d3d6bad21f06dcac8aa15853c8424ea910aa973ba9f46f50ade4221af5b89
prometheus-alertmanager git 914cad82 sha256:f0732aa0828fa2cae6c9ff9021c883390a12a279b61f8534ac97b8299cef66e4
prometheus-config-reloader git d1e399d5 sha256:dd8e65619dd7e98c5c83b91b29cdad6c06c7dbbe4124dfa05c4cfbe7c90a06dc
prometheus-node-exporter git 99077a3c sha256:30be32bf0df03855fa4d8621ea9f738df68a0d1d0e1aacde35546edf24f7f2a7
prometheus-operator git d1e399d5 sha256:5d268a4c62b1bfea3af4ca0097b747c487b1d74540ac24455803870744dbff4c
prometheus-operator-admission-webhook git d1e399d5 sha256:3e6e73c15c2f70dc5cf4cd29a346801db47a9f88073fab9d53a3e11c8738de1c
rhel-coreos-8 sha256:0a4d33f2af8aa51d0a30600457868833b6c5eb953d597089b9981095077d2bf1
rhel-coreos-8-extensions sha256:722e25820530b39274416c54e285ccb4d3480bc0dfc2903882b0c27ac0b3abc5
route-controller-manager git 0f141ce9 sha256:5f5440fbbc1c23bfbe18520591aa340ed2fb470bbd4e06758d95610a114b7c9d
service-ca-operator git ef1d057d sha256:d53b1c66bd36f0e029cafda9e1f66a68cba9afe4b2a4cf6064ac9611c504a8fe
thanos git 2867a6b5 sha256:004e67ccc4fb4e0a7a27f639721bd6b6add8839b0b8818adebb01b6ebd85266d
vsphere-cloud-controller-manager git e170dce5 sha256:81e8da9fffe6b500d13582830880555f39fc7d339d3c26622e58d409c00c3707
vsphere-cluster-api-controllers git a61d43b7 sha256:0bc84688e8dfba835e819d89c2eb1b20d5805ec1eac20d36b39f21ba08289aa4
vsphere-csi-driver git e4c0e103 sha256:3dbf34e5e5c0c459e84b6e3cfe6c84df523f53f122c78a1b3b47bff837d0704f
vsphere-csi-driver-operator git d7cca470 sha256:3cfd5c036d1b16445759e56a55f45b938b9406a8c13d1f833cfa4dfb86d6d472
vsphere-csi-driver-syncer git e4c0e103 sha256:b4641c2fcd35d55cdedb32f1c791a1f549764cb25d2e050b3553dde2e2096514
vsphere-problem-detector git f25ae2ad sha256:89304f9bda33d91b070e3ef14896e8670d39c1947b2f3aa9eb6e6dd331087f82

agent-installer-api-server

OCPBUGS-58863, OCPBUGS-58864: Bump glog to v1.2.5 in release-4.12 (#7919) #7919
OCPBUGS-53692: Bump jwt to 4.5.2 in release-4.12 (#7513) #7513
MGMT-17596: Bump x/net to v0.24.0 to mitigate CVE-2023-45288 (#6214) #6214
MGMT-17590: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#6207) #6207
MGMT-17541: Replace broken golangci reference (#6195) #6195
NO-ISSUE: replace postgres images as current one disappeared from quay (#6132) #6132
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-58865: CVE-2024-45339: Bump glog pkg version to 1.2.4 (#1196) #1196
Bump golang.org/x/net to 0.33.0 (#1026) #1026
MGMT-17596: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#836) #836
MGMT-17590: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#828) #828
MGMT-17541: Replace broken golangci reference (#825) #825
Full changelog

agent-installer-node-agent

OCPBUGS-58867, OCPBUGS-58868: Bump glog to v1.2.5 in release-4.12 (#1077) #1077
OCPBUGS-46953: Bump golang.org/x/net to 0.33.0 (#887) #887
MGMT-17596: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#707) #707
MGMT-17590: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#701) #701
MGMT-17541: Replace broken golangci reference (#696) #696
Full changelog

alibaba-machine-controllers

Updating ose-alibaba-machine-controllers images to be consistent with ART #35
Full changelog

apiserver-network-proxy

OCPBUGS-38066: Revert “Agent: Respect HTTPS_PROXY env vars for proxied connections” #61
OCPBUGS-31984: Bump golang.org/x/net to v0.23.0 #52
Full changelog

aws-cloud-controller-manager

OCPBUGS-32079: update for CVE-2023-45288 [release-4.12] #85
Full changelog

aws-ebs-csi-driver

OCPBUGS-33457: UPSTREAM: 1919: Add reserved-volume-attachments #267
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-33457: Explicitly reserve 1 attachment for the root disk #308
Full changelog

aws-machine-controllers

OCPBUGS-24564: Reduce metrics cardinality #97
Full changelog

aws-pod-identity-webhook

OCPBUGS-32880: Upgrade go-jose module to 2.6.3 #191
Full changelog

azure-cluster-api-controllers

OCPBUGS-36021: Update go-retryablehttp to v0.7.7 #315
Full changelog

azure-disk-csi-driver

OCPBUGS-56067: tech debt: rework vendor patches #106
Full changelog

azure-machine-controllers

OCPBUGS-36148: Fix mapi_instance_create_failed metric with accelerated networking #115
OCPBUGS-30809: Don’t create availability set when using spot instances #105
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-62820: Release 4.12 bump terraform provider azurerm #10002
OCPBUGS-55035: IBMCloud: Move to IBM TF openshift fork #9670
OTA-1310: data/manifests/bootkube/cvo-overrides: Default to eus-4.12 #9373
OCPBUGS-36087: [release-4.12]: bump go-retryablehttp for CVE fix #8660
OCPBUGS-39290: Add yq v4 to ci image #8929
OCPBUGS-36179: [release-4.12]: bump github.com/container/images for CVE fix #8663
OCPBUGS-22981: IBMCloud: Add eu-es region #7686
OCPBUGS-30630: baremetal: populate customDeploy in advance #8144
OCPBUGS-32449: Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility #8290
OCPBUGS-30768: update RHCOS 4.12 bootimage metadata to 412.86.202402272018-0 #8140
OCPBUGS-30134: [release-4.12] bump containerd for vulnerability fix #8091
Full changelog

baremetal-machine-controllers

OCPBUGS-46642: Bump x/net to 0.33.0 #230
Full changelog

baremetal-operator

OCPBUGS-53335: CVE-2025-29781 ose-baremetal-operator-container: Bare Metal Operator (BMO) can expose any secret from other namespaces via BMCEventSubscription CRD [openshift-4.12.z] #412
OCPBUGS-30630: Do not update instance_info and deploy_interface for active nodes #338
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-30289: oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators #1701
Full changelog

cloud-credential-operator

OCPBUGS-53420: github.com/golang/glog v1.2.4 #847
OCPBUGS-51538: Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected #832
OCPBUGS-37322: update modules: grpc, protobuf, logrus #764
OCPBUGS-42166: Resolve SNYK errors in security job. #760
OCPBUGS-37422: SNYK ignore go-client misreporting #744
NO-JIRA: Add jstuever to OWNERS #733
OCPBUGS-36027: IBM/go-sdk-core update to v5.17.4 #723
OCPBUGS-32897: Upgrade go-jose module to 2.6.3 #699
Full changelog

cloud-network-config-controller

OCPBUGS-33198: Avoid nil pointer panic while assigning private IP on Azure #141
Full changelog

cluster-autoscaler

OCPBUGS-45152: [release-4.12] VPA: Update OWNERS file #329
OCPBUGS-40928: update VPA golang.org/x/net for http rapid reset for CVE-2024-8421 #318
OCPBUGS-30911: Fix unstructured taint parsing in Cluster API provider #291
Full changelog

cluster-autoscaler-operator

OCPBUGS-32005: Update x/net to v0.25.0 #325
Full changelog

cluster-baremetal-operator

OCPBUGS-32006: bump x/net to 0.23.0 #440
Full changelog

cluster-config-operator

OCPBUGS-16243: retire LatencySensitive featureset #336
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-48325: Add unreadyNodeGracePeriod for allowing brief node hiccups #344
OCPBUGS-35421: Improved debugging of API listing errors #306
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-32429: create suitable role and roleBinding for csi-snapshot-webhook #207
Full changelog

cluster-dns-operator

OCPBUGS-52502: [release-4.12] Add runbook_url for CoreDNSErrorsHigh #435
Full changelog

cluster-etcd-operator

OCPBUGS-53508: fix CVE-2025-30204 #1416
OCPBUGS-35501: return errors in wait-for-ceo #1277
OCPBUGS-32001: update golang x net #1256
OCPBUGS-30914: Replace nodelister with master nodelister everywhere #1224
OCPBUGS-30938: fix panic in health check timeouts #1228
Full changelog

cluster-image-registry-operator

OCPBUGS-53868: Bump github.com/golang-jwt/jwt #1236
OCPBUGS-51594: bump golang.org/x/oauth2 #1223
OCPBUGS-36033: go.*,vendor: bump go-retryablehttp #1071
Full changelog

cluster-ingress-operator

OCPBUGS-43703: Add e2e test for duplicate Transfer-Encoding headers #1158
OCPBUGS-43703: Add alert for RFC 7230 violation in Transfer-Encoding headers #1162
OCPBUGS-35454: internal service changed fix target port logic #1092
OCPBUGS-35304: TestHostNetworkPortBinding: Delete t.Parallel() #1083
OCPBUGS-35027: Don’t add clientca-configmap finalizer if deleting #1080
OCPBUGS-34888: desiredRouterDeployment: Set HostPort if needed #1076
OCPBUGS-34757: Avoid spurious updates for internalTrafficPolicy #1070
OCPBUGS-34110: Avoid spurious updates for scope in IngressClass #1056
OCPBUGS-34548: Use centos7 tag for quay.io/centos7/httpd-24-centos7 image #1068
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-50880: Increase waitForFallbackDegradedConditionTimeout #1811
Full changelog

cluster-monitoring-operator

OCPBUGS-35558: label for infra nodes for metric cluster:capacity_cpu_cores:sum #2383
OCPBUGS-28766: fix generation of telemeter token hash #2306
Full changelog

cluster-network-operator

OCPBUGS-43872: manifests/02-cncc-credentials: Set skipServiceCheck for GCP #2548
OCPBUGS-38905: Add missing runbook for OVNKubernetesNorthdInactive #2479
OCPBUGS-37942: [release-4.12] update whereabouts crd #2461
Full changelog

cluster-node-tuning-operator

irqbalance: set banned cpus list to 0 (#1006) #1006
Refactor IRQ load balancing enable/disable test (#1038) #1038
Scheduler plugin: ignore IRQs (#1034) #1034
Full changelog

cluster-samples-operator

OCPBUGS-54913: add rhdmalone to owners #629
OCPBUGS-49664: add shannon and aroyoredhat as owners #600
OCPBUGS-21179: update k8s.io/apiserver version #590
Full changelog

cluster-version-operator

OCPBUGS-45333: deps: bump golang.org/x/net to 0.31.0 #1122
Full changelog

console

OCPBUGS-57101: Add all files to vendor regardless of gitignore #15137
OCPBUGS-55210: Show Observe section without PROMETHEUS and MONITORING flags #14986
Dockerfile yarn line update #14838
OCPBUGS-45291: Application creation fail when manually entering input scaling value in local setup #14572
OCPBUGS-45235: Edit the secret and add the Chinese in the web-console, garbled characters will be displayed #14561
OCPBUGS-36561: Increase login flow state paramater length/entropy #14539
OCPBUGS-43639: Copy response code from proxied plugin requests #14423
OCPBUGS-33519: Observe > Metrics targets, Alert user if they do not have access to information on this page (e.g. 403). #14334
OCPBUGS-41600: Fix plugin proxy handler #14266
OCPBUGS-41854: Redirects to new PipelineRun logs URL from old PipelineRun logs URL #14283
OCPBUGS-34564: Routes created by devfiles do not always use HTTPS #13907
OCPBUGS-34933: Helm Plugin’s Catalog incorrectly renders a single index entry into multiple tiles #13930
OCPBUGS-32146: Bump graphql-go to v1.3.0 #13923
OCPBUGS-34845: Fix PipelineRun Logs tab navigation #13920
OCPBUGS-33778: fix issues with Edit Route form #13859
OCPBUGS-27479: Bump helm pkg #13528
Full changelog

console-operator

OCPBUGS-33386: Reset console operator’s conditions #898
OCPBUGS-20988: Disable HTTP/2 for webhook #876
OCPBUGS-30990: [release-4.12] Bump library-go and golang.org/x/net #867
Full changelog

container-networking-plugins

ART-13080: Fix Hermeto build issues #198
Full changelog

coredns

OCPBUGS-59711: Bump github.com/golang/glog to v1.2.4 #151
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-58889: CARRY: don’t ignore json files #345
Full changelog

csi-driver-manila-operator

OCPBUGS-30295: Fix selector for manila-csi-driver-controller-metrics service #228
Full changelog

docker-builder

OCPBUGS-43296: Bump buildah to 1.26.9 #449
OCPBUGS-43187: runc library bump to 1.1.12 #440
OCPBUGS-49345: skipping some unit tests to avoid failures as they are duplicate #437
OCPBUGS-48738: Add new team members to the OWNERS file #433
Replace ‘coreydaley’ with ‘sayan-biswas’ #408
BUILD-854: Add adambkaplan as approver #406
Full changelog

docker-registry

OCPBUGS-53652: bump jwt and oauth dependencies #442
Full changelog

etcd

OCPBUGS-28736: Rebase etcd 3.5.12 openshift 4.12 #246
Full changelog

haproxy-router

OCPBUGS-43703: add duplicate_te_header_total metric #632
OCPBUGS-35875: Properly handle rewrite-target annotation #610
OCPBUGS-33432: Route ‘haproxy.router.openshift.io/timeout’ value is not validated #593
OCPBUGS-34212: Reject routes with MD5 certs #601
OCPBUGS-33517: Count active services before setting weight to 1 #581
Full changelog

hyperkube, pod

OCPBUGS-37282: UPSTREAM: 126104: Add funcs in pkg/filesystem/util that can actually … #2046
OCPBUGS-30454: CVE 2024-24786 #1974
UPSTREAM: <drop>: Bump golang.org/x/net to v0.23.0 #1940
Address CVE #13
OCPBUGS-15527: Prevent partially filled HPA behaviors from crashing kube-controller-manager #1887
Full changelog

hypershift

OCPBUGS-41516: set Konnectivity cipher suites #4283
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-58873: bump github.com/golang/glog to v1.2.4 #111
OCPBUGS-56067: tech debt: rework vendor patches #95
OCPBUGS-53908: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #88
OCPBUGS-36063: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #75
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-60058: [IBM VPC] set offlineExpansion to false in e2e test manifest #153
OCPBUGS-36069: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #124
Full changelog

ibm-vpc-node-label-updater

OCPBUGS-56067: tech debt: rework vendor patches #52
OCPBUGS-53540: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #48
Full changelog

insights-operator

OCPBUGS-32004: bump golang.org/x/net version (#932) #932
Full changelog

ironic

OCPBUGS-48145, OCPBUGS-48596: Bump jinja to 3.0.1-6.el9.2 #627
OCPBUGS-43949, OCPBUGS-43957: Bump python-waitress [4.12] #609
OCPBUGS-37766, OCPBUGS-39385: Include fixes for CVE-2024-44082 #586
OCPBUGS-38513: set min version for python3-webob #558
OCPBUGS-33373: bump werkzeug #547
OCPBUGS-34897: bump jinja2 #541
OCPBUGS-32362: [4.12] remove unused prometheus-exporter #489
OCPBUGS-32386: Use unix sockets by default for reverse proxy communication #477
Full changelog

ironic-agent

OCPBUGS-39385: Include fixes for CVE-2024-44082 #165
OCPBUGS-38513: set webob and bump werkzeug #153
Full changelog

kube-proxy, sdn

OCPBUGS-56130: Handle openshift-host-network namespace as special when it modifies #657
Full changelog

kube-rbac-proxy

OCPBUGS-32000: CVE-2023-45288 [4.12] #106
Full changelog

kube-storage-version-migrator

NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-11). #231
Full changelog

machine-api-operator

OCPBUGS-43872: install/0000_30_machine-api-operator_00_credentials-request: Set skipServiceCheck again for GCP #1305
OCPBUGS-32007: Update x/net to v0.25.0 #1257
Full changelog

machine-config-operator

OCPBUGS-58874: [release-4.12] Bump golang/glog to fix CVE-2024-45339 #5174
OCPBUGS-44325: Panic seen in CI job for MCC pod #4689
OCPBUGS-38382: [release-4.12] daemon/update: disable systemd unit before overwriting #4530
OCPBUGS-33665: Run resolv-prepender entirely async #4364
OCPBUGS-30829: Add existing kubeletconfig/ctrcfg mc-name-suffix annotation #4257
OCPBUGS-30823: Introduce kubelet-dependencies.target and firstboot-osupdate.target #4268
OCPBUGS-30329: set nodeStatusReportFrequency #4246
OCPBUGS-19659: After dual-stack conversion reconcile IPFamilies #3936
Full changelog

machine-os-images

OCPBUGS-54173: Change rhcos release browser url #61
Full changelog

multus-admission-controller

OCPBUGS-60292: Bump github.com/golang/glog to v1.2.4 #107
OCPBUGS-60850: Update owners #109
Full changelog

multus-cni

OCPBUGS-28520: Fix SAST scan issues for multus-cni-container [4.12] #225
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-37942, OCPBUGS-38019: [release-4.12] Stateful fixes #310
Full changelog

must-gather

OCPBUGS-48086: Update owners #477
Full changelog

network-metrics-daemon

-sOCPBUGS-59700:Bump github.com/golang/glog to v1.2.4 (#125) #125
Replace e2e test image (#134) #134
swtich golint install method (#133) #133
Correct 4.16 owners file (#131) #131
Full changelog

nutanix-machine-controllers

OCPBUGS-51849: Fixing CVE-2025-22868 #121
OCPBUGS-47263: fixing CVE-2024-45338 #114
OCPBUGS-20956: bump golang.org/x/net to v0.17.0 #88
Full changelog

oauth-apiserver

OCPBUGS-32010: bump x/net to 0.24.0 #113
Full changelog

oauth-server

OCPBUGS-27478: bump osin deps #144
Full changelog

oc-mirror

changes the owners file (#1011) #1011
OCPBUGS-48513: e2e: use same version of crane as in go.mod (#1027) #1027
Bump version to include v5.11.0 of go-git (#825) #825
Full changelog

openshift-apiserver

OCPBUGS-32447: ose-openshift-apiserver-container: golang: net/http, x… #481
Full changelog

openshift-controller-manager

OCPBUGS-58296: Inconsistencies in dependencies are fixed #410
OCPBUGS-58157: Set node-pullsecrets volume to read-only to protect image pull credentials #403
OCPBUGS-57171: Empty proxy variables are causing issues during the build #389
OCPBUGS-49644: Add new team members to the OWNERS file #364
OCPBUGS-41953: Add adambkaplan as approver #336
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-61471: [release-4.12] Add NetworkPolicy as a supported kind #1054
OCPBUGS-61392: [4.12] e2e stability fixes #1087
OCPBUGS-46925, OCPBUGS-46932, OCPBUGS-47312: x/net bump to v0.34.0 [release-4.12] #943
NO-ISSUE: [release-4.12] Backport e2e fixes #880
OCPBUGS-38610: (fix) Resolver: list CatSrc using client, instead of referring to registry-server cache (#3349) #875
OCPBUGS-42161: adds paginating lister for evaluating CRs’ upgrade fitness versus new CRDs #873
OCPBUGS-41881: [CARRY] perform operator apiService certificate validity checks directly #866
OCPBUGS-32854: bump go-jose to v2.6.3 #782
OCPBUGS-35242: Unblock CI #773
Full changelog

operator-marketplace

OCPBUGS-49426: Upgrade golang.org/x/net [release-4.12] #591
NO-ISSUE: Updating marketplace-operator images to be consistent with ART [4.12] #510
OCPBUGS-32081: update golang.org/x/net for CVE-2023-45288 #567
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-59935: Dockerfile: Remove ovs version pinning #2698
NO-JIRA: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.12 #2092
OCPBUGS-55951: Bump ovn and ovs to latest 23.06 and 3.1 respectively #2554
OCPBUGS-50502: EgressIP: Reload certificates for the grpc heatlhcheck server #2457
OCPBUGS-35876: [release-4.12] ipv6+all protocols conntrack flush #2214
OCPBUGS-29864: CVE-2022-41723: avoid quadratic complexity in HPACK decoding #2204
OCPBUGS-34273, OCPBUGS-34414: Improves service iptables efficiency on start up + ICMP error messages to pass through #2184
OCPBUGS-32990: Bump OVS #2144
OCPBUGS-33422: [release-4.12] Full implementation of KEP-1669 ProxyTerminatingEndpoints + ETP=local fix #2135
OCPBUGS-25889: [release-4.12] OVN bump to 23.06.1-112 #2154
Full changelog

powervs-machine-controllers

OCPBUGS-54012: Fix for CVE-2025-30204 & CVE-2024-51744 in github.com/golang-jwt/jwt/v4 in release-4.12 #123
Full changelog

telemeter

OCPBUGS-34827: fix issuer check during JWT authentication 4.12 #541
Full changelog

tests

OCPBUGS-56120: [build] Ensure Git Clone Does Not Run Privileged #29788
OCPBUGS-37799: Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token #29621
OCPBUGS-54772: Component Readiness: [Networking / ovn-kubernetes] [EgressFirewall] test regressed #29662
OCPBUGS-54147: Add/remove team members to the OWNERS file for Builds #29622
OCPBUGS-52585: Use payload pullspec for image info test #29593
OCPBUGS-41585: Removes dependency on samples operator images #29080
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github