Back to index

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.13.30-x86_64

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
  • upgrade-minor Failed release-openshift-origin-installer-e2e-aws-upgrade
• Informing jobs
  • aws-sdn-serial Succeeded (2 retries) periodic-ci-openshift-release-master-nightly-4.13-e2e-aws-sdn-serial
  • aws-sdn-upgrade-4.13-micro Succeeded periodic-ci-openshift-release-master-nightly-4.13-e2e-aws-sdn-upgrade
  • azure-ovn-upgrade-4.13-micro Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.13-e2e-azure-ovn-upgrade
  • gcp-ovn-rt-upgrade-4.13-minor Succeeded periodic-ci-openshift-release-master-ci-4.13-upgrade-from-stable-4.12-e2e-gcp-ovn-rt-upgrade
  • metal-ipi-ovn-ipv6 Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.13-e2e-metal-ipi-ovn-ipv6
  • metal-ipi-sdn-bm Succeeded (2 retries) periodic-ci-openshift-release-master-nightly-4.13-e2e-metal-ipi-sdn-bm

Upgrades from:

• 4.13.29 (changes) - F S S S F
• 4.13.28 (changes) - Failed
• 4.13.27 (changes) - Failed
• 4.13.25 (changes) - Success
• 4.13.19 - Failed
• 4.13.8 (changes) - Success
• 4.13.2 (changes) - Failed
• 4.13.1 (changes) - Success
• 4.13.0 (changes) - Success
• 4.12.47 (changes) - S F F
• 4.12.46 (changes) - Success
• 4.12.45 (changes) - Success
• 4.12.38 (changes) - Success
• 4.12.29 (changes) - Failed
• 4.12.25 (changes) - Failed
• 4.12.18 (changes) - Success
• 4.12.17 (changes) - Success
• 4.12.16 (changes) - Success

Upgrades to:

• 4.14.33 (changes) - Success
• 4.14.23 (changes) - Success
• 4.14.20 (changes) - Success
• 4.14.19 (changes) - Failed
• 4.14.18 (changes) - Success
• 4.14.16 (changes) - Success
• 4.14.12 (changes) - Success
• 4.14.11 (changes) - Success
• 4.14.10 (changes) - Success
• 4.13.45 (changes) - Success
• 4.13.35 (changes) - Success
• 4.13.33 (changes) - Failed
• 4.13.32 (changes) - Failed
• 4.13.31 (changes) - S F F S S S

---

Loading changelog, this may take a while ...

Changes from 4.13.19

Created: 2024-01-18 14:10:21 +0000 UTC

Image Digest: sha256:661be5aec551ee1b774a7176ced6f755d5ec0a5e8b957db234a89ebc8dd3c0f5

Release 4.13.30 was created from registry.ci.openshift.org/ocp/release:4.13.0-0.nightly-2024-01-17-220523

Components

• Kubernetes upgraded from 1.26.9 to 1.26.12
• Red Hat Enterprise Linux CoreOS upgraded from 413.92.202310210500-0 to 413.92.202401170927-0 (diff)

Rebuilt images without code change

• agent-installer-api-server git 06189bcd sha256:1c65043bd16da59abe30bbfb07c42d4b68a1e5e39273b8f9e5dcec215981ac3e
• agent-installer-csr-approver git edf25423 sha256:862a0b9777c8b53699575ffa4eeb6d22535b83061a970638c3d30df88cdce87e
• agent-installer-orchestrator git edf25423 sha256:540293b7aa6612dbf27f8e7a559f2ef4b9c25a7c5c566a414068008e87dde45e
• alibaba-cloud-controller-manager git b5200baa sha256:be7c47dd825e187fa17f75b970f26b7cced31a9fd6e8cb08d1eeec69e6dd020b
• alibaba-cloud-csi-driver git 6384f904 sha256:d67ac8e31267e954fcba7434c9ab28b9107ddff015a84d38eb14df6baa00b549
• alibaba-disk-csi-driver-operator git 7e415973 sha256:4858d2294bffee243b278a6c895633c5d8a4d424dced9a695feb2edacd799e46
• alibaba-machine-controllers git 4c0f96a6 sha256:3fdeff3481e63b79a1eb36de7d8f6ffbe6a96ce3d6517f083eda9befa635be41
• aws-ebs-csi-driver git 325cb029 sha256:c329adb7b6457f50a817440073a6e026e0eb3c0b68eb6fe883dc743df81864d6
• aws-ebs-csi-driver-operator git 3cb879a8 sha256:eb9891eecbf78668c5ee1dc0c77c84a66d0c8048c6cbef92ac679a51015e4a65
• azure-file-csi-driver git 33d52ecd sha256:205b70a6b6feadae7c9ace76007c8c35ae0ab936d43fa0f269d94bb91061984a
• azure-file-csi-driver-operator git 70e05302 sha256:dfb624dcf4b8f4ef8485823fed099c179c1c191292c0d5cbc995959fb7510c2e
• baremetal-machine-controllers git e9877cef sha256:f9ae76d34a8c090261366c58a3dd53825b972172789fbca9ce5a87ddf4aed6a8
• cluster-bootstrap git ee908b6b sha256:c3c4bc80d245210a050488fb6a8d3acdd34dcad60f16e6031527e2ef679d3e2a
• cluster-csi-snapshot-controller-operator git 544bc12e sha256:8c1aec3467e2d2b912275a93f4ddd6d7defb628e3b59d52b318d701e218fbea0
• cluster-platform-operators-manager git 312c5f24 sha256:9cc00311b02fe13f421bc77a8146b45735f5023336310d5d9bbcc1ad20db0a16
• cluster-storage-operator git 5cd56c34 sha256:b65479a5b05f22a4aa4c5a0476f123ae3d79740cdd1d1f096b2991d8da2845da
• cluster-update-keys git 5b725937 sha256:4928b0a373fd78a179984260f435935edb0ae49201cd8ecde096086d8e2e31b7
• configmap-reloader git 9adad592 sha256:36444b8813cfbdb7c38b55428f7f4bf9598457fcabb362f75d1a05c236b27c0d
• csi-driver-manila-operator git b1295cd1 sha256:dcbb4cfd23c446588d364e5cfd7f978195a960bb2fff2a09461ec7c6fe23419e
• csi-driver-nfs git 2b914c21 sha256:7fb28a42efd515ba183f08f119ff84ac44790a5fa7438972d16449648238150f
• csi-driver-shared-resource-operator git 1dc475bb sha256:94f94a7f2fd7457d3801e3bb579382bfb65a8db899e88ff149beed50ef847330
• csi-external-attacher git d9290843 sha256:107f9ac21f2ed5252bcf04990cd94f2a5da205de9070b38147f43c58f9f0c320
• csi-external-provisioner git 0bf126b7 sha256:7faf90578e53962ab43e200ff9d338cdb39561da99711fff818fe2e2da0f51bd
• csi-external-resizer git e8036caf sha256:afa02df0d32196a7b5607d5bc4ffad2f0a529dc5a659c3b683a7c1e32c348825
• csi-external-snapshotter git 5ce4b5ca sha256:47046364082cb15fe129b0449957bfada2860f5415a128b1ff53c389918c4f16
• csi-livenessprobe git 3587db51 sha256:c7098628807c70c66a47fdbdb4cdcb9eb09604ad4e36f5fedac90c7c11886ed7
• csi-node-driver-registrar git 9ea90f34 sha256:3a8abfe46dfabb2e454aa59cc7f76ad20125c140d40a6f96182a291c135088cf
• csi-snapshot-controller git 5ce4b5ca sha256:f13f09c74e9b6bf3fa2b4f52b60abb09dcc42ef4c29048aef91d3f919a9fd65c
• csi-snapshot-validation-webhook git 5ce4b5ca sha256:a4d01a962ab2f097103ed713254d6911e77b91ee291524e9ca136ee2a7a1dd1c
• docker-registry git 47a15ac8 sha256:5dbe246f27992f450a60b57a30a4d43ec48a4614b2dd6a0d50a8250b26af5104
• driver-toolkit git d719bdcf sha256:1670b7ed6745cfab81e2f472e9e77834e0fb6dc792b017bccda1217403dc0247
• egress-router-cni git 756e3845 sha256:11db271d1721c30d9f02aa9b0f0f67bf4a43a36eff9a7d75096e7d92dd8b20e3
• gcp-pd-csi-driver git 81e60746 sha256:2735f7bc1ccfd9a6cb33a8daa00d5a1f35ae01cc224682b5cb008903d49df985
• gcp-pd-csi-driver-operator git 08c561b8 sha256:7fd394082f7d2b111dcaa46adc9bb4fccaf501698e6231a7a6f008227498af9b
• ibm-vpc-block-csi-driver-operator git 38c439da sha256:6cfbfadd84d7cbe8be23a74c48904588e8cdd343b0491f95f80894840e365b08
• ibm-vpc-node-label-updater git 7721a9e7 sha256:b72bd6b64f89193b61e7e540e4eb7d4b742a37f0883d280a38546881b3ae39af
• ibmcloud-machine-controllers git bb253a0c sha256:2855f48d7a0d20f47c64671c94a38db793750a99d46bc5ca7026836e5f3f729f
• ironic-agent git 508e6124 sha256:ba051631a9f0e9085f1ab08f859fbe1866506fe119c7e28df58972e8b6c74674
• ironic-machine-os-downloader git ce291779 sha256:7486da69bbcacaf43bea2cb8d681e556084aaccfd388e1ad4383cbba517d142b
• ironic-static-ip-manager git 4536724a sha256:92858e766904207786d4135ffe1e526afba14f4ba923d4427980a43cc41f83eb
• keepalived-ipfailover git 04659348 sha256:542d20c07541b5f24d85cd66a49990a5a261012618077c9006243deb3b6d85ad
• kube-rbac-proxy git ae32bfa0 sha256:70a3e8583c192c04ba1b17830137c55da8b7fa637009703ea232266d0be63325
• kube-storage-version-migrator git bad104d1 sha256:ebbdc6a312a6a1966d052205b57a2c6088be3dadf1a38594ee4ee66be741b2be
• kubevirt-cloud-controller-manager git ee2033ec sha256:99dd640912344912089390495626358eecd2a57d1f246b47a1a6e705b5b0e90d
• kubevirt-csi-driver git efa0b943 sha256:ad987d5168a1886298b1c60574b52459533eb74d44b341b01e4f178163807692
• kuryr-cni git 36754b7b sha256:3c0118acd4ffffbb180ae1c0fec0dd5d65dbc7c5bbf8210a2d312051f92f4e2a
• kuryr-controller git 36754b7b sha256:03db0b8cd2a53c7a72917cb421b546301825a22fb06fc654a8602f74c5525c2c
• libvirt-machine-controllers git d4b7a8ab sha256:22a4010bee5ca4beccbd619232c5aeea52a483c00a5c8dff7f5499a4ed8b905a
• machine-os-content sha256:17597302b1a96c8a5260b19573c3e60d7d0f30ad830aa01b13d2d735c7120ae4
• machine-os-images git b14856ff sha256:84592c8682db996a2d61c8c8a6a24bd16bfc1d39a302430cf9a29db17107ac56
• multus-route-override-cni git ca3bbec5 sha256:d0f90eb9be8834c11a914e8066010f09fc804a968c00baefdcea61c650032476
• must-gather git 288ef2fc sha256:11a8ec9f8736118609855a10ba206bcd40041d4569b7a592c1199170f25e727e
• network-interface-bond-cni git 84bda2af sha256:fd12d7b8182aff1123c72b3b2a97178b33ec9b02afcb24ef30d1f26d4fb297c5
• network-tools git 073feda1 sha256:be4ce126b0e0af7f745b6f0dbb20ef10319ed24d7618b2e8fe4f45321b4fca56
• nutanix-cloud-controller-manager git 4d1c58e2 sha256:0392009983a0f8fb44a895e7a4373921999263942c96e72039bd7fba0ece6300
• oauth-apiserver git 41c2dfea sha256:2e11571b955560afa55d64cdac8a7be0ab327d63eee838d188089ef70b1e8089
• oauth-proxy git 44af5a3a sha256:56d58e5e424076302ad188dc9f7192d2f4b786acafa0ffbb3fafed9dc9d7959f
• openshift-controller-manager git 385057e5 sha256:48a43e356a4a6fe4128a1a7b4c75227320c790751e7f6263fc94d1b96d89aa0e
• openstack-machine-api-provider git 7bce9d67 sha256:0441d77efe2f456ed398dbffada0f2903932014af32585164ec48b72fb4d93ca
• operator-marketplace git 867e7ed8 sha256:1624b7650172be4a481a81e3d5fb3cfaa7e72562108d37691e7ebfb44c055c47
• ovirt-machine-controllers git 22d89b3f sha256:2c652bf8c5c7e48cbda7288fcfed506ea2619a406b1be6396d6df4065b1b3bf9
• prom-label-proxy git b501d5e2 sha256:d52ac89b6ec4b7b2499944299088e3c6d9b09145e6fc11637257f76e35bbdff4
• rhel-coreos sha256:4e3f2314fe77a562c3c26f32bc945a48c27544c25d328aebc312b4b3f913e6eb
• rhel-coreos-extensions sha256:39707b15e29e47f6f571fcc4546d020f993cb57d4a0d47dcc1a09c192fa8c21b
• route-controller-manager git 6667a6cb sha256:a5c10b81879893265412fa720fe1b85ca98ebb28a8f815f26cc8b76e4b533006
• service-ca-operator git 5984aac1 sha256:982bb5a5715dee1131be0dd97b4dff6f890fc2c511df44bb02cda95a2c54a915
• telemeter git 8c9a8a75 sha256:5f0f2ba5d5d6fa50e9d42dc8de7bd1fee06d32b9cf1a1b6571d968245a88c744
• thanos git 9d44429f sha256:f57f2857d2509ab03be767babd2e202cf228f6b07d10ed278fa6a58550a7a0ae
• vsphere-csi-driver git 4d3036a6 sha256:16448bcd3d524708ea00c7028c5ac715c2c4d5e6fa5d95355c3374039a0a2318
• vsphere-csi-driver-operator git a9e5036e sha256:8f3dc530da3c0a65c101d599994f2b5f43940ae6d066b97743927c296df627e6
• vsphere-csi-driver-syncer git 4d3036a6 sha256:ad74f142afac79d36d268691107f3d166c37cf2f754d1cd37a8e4945583fc0e1
• vsphere-problem-detector git 3ad7408f sha256:de5f0eed7c2547c17b7c2d0f835371ee21de43c1822af360d64b73565455b3f8

agent-installer-node-agent

• MGMT-13111: Freeze on 404 Not Found (#628) #628
• Full changelog

apiserver-network-proxy

• HOSTEDCP-1323: Merge latest code into 4.14 branch #45
• Full changelog

aws-cloud-controller-manager

• OCPBUGS-20738: Update golang.org/x/net to v0.17.0 #54
• Full changelog

aws-cluster-api-controllers

• OCPBUGS-20836: bump golang.org/x/net to v0.17.0 #482
• Full changelog

aws-machine-controllers

• OCPBUGS-24563: Reduce metrics cardinality #96
• OCPBUGS-21568: Update golang.org/x/net to v0.17.0 #89
• Full changelog

aws-pod-identity-webhook

• OCPBUGS-21331: Upgrade golang/x/net for CVE-2023-39325 #184
• NO-ISSUE: Sync OWNERS with team members #177
• snyk: exclude vendor/ #172
• Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

• OCPBUGS-21419: Bump golang.org/x/net to v0.18.0 #94
• Full changelog

azure-cluster-api-controllers

• OCPBUGS-21503: bump golang.org/x/net to v0.17.0 #288
• Full changelog

azure-disk-csi-driver

• OCPBUGS-23216: Update to v1.26.7 #63
• Full changelog

azure-disk-csi-driver-operator

• OCPBUGS-20766: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #102
• Full changelog

azure-machine-controllers

• OCPBUGS-24563: Reduce metrics cardinality #89
• OCPBUGS-20758: Bump x/net package to v0.18.0 #83
• Full changelog

baremetal-installer, installer, installer-artifacts

• OCPBUGS-25420: destroy: gcp: fix destroying regional disks #7840
• OCPBUGS-23464: Add KMS encryption keys if provided #7746
• OCPBUGS-23141: Specify google cloud CLI to version 447.0.0 #7706
• OCPBUGS-22939: azure: validation: validate defaultMachinePlatform #7679
• OCPBUGS-14551: [vSphere] Upi installation failed due to VMs for master and worker node creation failed #7229
• Full changelog

baremetal-operator

• OCPBUGS-23504: hack for deploying V6-only clusters from dualstack hubs #321
• Full changelog

baremetal-runtimecfg

• OCPBUGS-26929: Add .snyk file to ignore vendor and test files #295
• OCPBUGS-22207: deps: upgrade x/sys #282
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-25418: Add client version in must-gather summary #1635
• OCPBUGS-24461: Overwrite template’s namespace with the explicit one #1617
• AUTH-443: Add OAuth2 Authorization Code Grant Flow for login #1599
• OCPBUGS-22815: regeneratemco: explicitly check for PlatformStatus field #1593
• Full changelog

cloud-credential-operator

• OCPBUGS-25369: Discover AWS dns suffix from partition and region. #640
• OCPBUGS-21367: Upgrade golang/x/net for CVE-2023-39325 #623
• snyk: exclude vendor/ #616
• Full changelog

cloud-network-config-controller

• OCPBUGS-22299: Azure: skip backend pool if attached to an outbound rule #126
• Full changelog

cluster-authentication-operator

• AUTH-443: Add openshift-cli-client OAuth Client #641
• OCPBUGS-22210: increase timeout for probes #638
• Full changelog

cluster-autoscaler

• OCPBUGS-23272: Rebase 4.13 branch onto cluster autoscaler 1.26.4 #268
• Full changelog

cluster-autoscaler-operator

• OCPBUGS-20770: Bump x/net package to v0.18.0 #299
• Full changelog

cluster-baremetal-operator

• OCPBUGS-23504: hack for deploying V6-only clusters from dualstack hubs #391
• OCPBUGS-23444: Update the deprecated field APIServerInternalIP to APIServerInternalIPs #385
• Full changelog

cluster-capi-controllers

• OCPBUGS-21531: bump golang.org/x/net to v0.17.0 #185
• Full changelog

cluster-capi-operator

• OCPBUGS-21082: bump golang.org/x/net to v0.17.0 #137
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-21169: Bump golang.org/x/net to v0.18.0 #296
• Full changelog

cluster-config-operator

• : OCPBUGS-21269: bump library-go to include switch to HTTP/1.1 #372
• Full changelog

cluster-control-plane-machine-set-operator

• OCPBUGS-21364: Bump golang.org/x/net to v0.17.0 #259
• Full changelog

cluster-dns-operator

• OCPBUGS-11449: Set DNS DaemonSet’s maxSurge value to 10% #366
• Full changelog

cluster-etcd-operator

• Revert “[release-4.13] OCPBUGS-23044: remove revision stability check from bootstrap complet…” #1166
• OCPBUGS-22783: relax readiness to local serializable requests #1144
• OCPBUGS-23044: remove revision stability check from bootstrap complet… #1151
• OCPBUGS-21155: fixing CVE-2023-39325 by updating dependencies #1143
• Full changelog

cluster-image-registry-operator

• OCPBUGS-22126: increase storage account key cache expiration #940
• OCPBUGS-20698: mitigate effects of rapid reset #946
• Full changelog

cluster-ingress-operator

• OCPBUGS-20781: Bump golang.org/x/net for CVE-2023-44487 #987
• OCPBUGS-22402: test/e2e: Don’t use openshift/origin-node #991
• Full changelog

cluster-kube-apiserver-operator

• : OCPBUGS-24023: Add workload partitioning annotation #1591
• : OCPBUGS-20880: bump library-go to include switch to HTTP/1.1 #1573
• Full changelog

cluster-kube-cluster-api-operator

• OCPBUGS-20981: bump golang.org/x/net to v0.17.0 #28
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-27066: bump(library-go)=release-4.13 #788
• OCPBUGS-21103: Drop flags removed in k8s 1.26 [4.13] #766
• OCPBUGS-21078: Bump deps to address CVE-2023-44487 [4.13] #758
• Full changelog

cluster-kube-scheduler-operator

• OCPBUGS-21811: Bump deps to address CVE-2023-44487 #502
• Full changelog

cluster-kube-storage-version-migrator-operator

• : OCPBUGS-21355: bump library-go to include switch to HTTP/1.1 #97
• Full changelog

cluster-machine-approver

• OCPBUGS-21447: Bump x/net package to v0.18.0 #213
• OCPBUGS-23368: Filter non node CSRs in metrics #210
• Full changelog

cluster-monitoring-operator

• OCPBUGS-25388: Add RHACM telemetry metric for 4.13 #2203
• OCPBUGS-21457: Set the new –disable-http2 flag for prometheus-adapter to disable HTTP2 #2146
• OCPBUGS-22920: jsonnet: pin commits #2144
• OCPBUGS-22842: [release-4.13] add RHACS telemetry metrics #2139
• OCPBUGS-22308: fix: force HTTP/1.1 connections #2134
• OCPBUGS-21250: upgrade golang.org/x/net to v0.17.0 #2122
• Full changelog

cluster-network-operator

• OCPBUGS-22293: remove all managed fields used by old manager #2094
• OCPBUGS-24570: Disable weak SSH cipher suitesRm weak ciphers 4.13 #2163
• OCPBUGS-21716: Bump golang.org/x/net and github.com/openshift/library-go #2123
• OCPBUGS-22896: run update-codegen after adding maxLogFiles cfg #2162
• OCPBUGS-22971: HyperShift: Use the local konnectivity proxy when checking proxy readiness #2098
• OCPBUGS-22896: Remove oldest ovn acl log files when file limit exceeded #2097
• SDN-4184: Limit OVN-Kubernetes RBAC permissions #2093
• OCPBUGS-20278: Edited multus-admission-controller deployment config to not add autoount a service account token #1885
• Full changelog

cluster-node-tuning-operator

• Disable HTTP/2 for webhook and metrics servers (#846) #846
• Remove obsolete protocols and weak ciphers (#843) #843
• OCPBUGS-18493: e2e: deflake IRQ load-balancing (#782) #782
• Full changelog

cluster-openshift-apiserver-operator

• : OCPBUGS-20707: bump library-go to include switch to HTTP/1.1 #555
• OCPBUGS-22210: increase timeout for probes #553
• Full changelog

cluster-openshift-controller-manager-operator

• OCPBUGS-20796: bump(k8s,openshift) to address CVE-2023-44487 #310
• Full changelog

cluster-policy-controller

• OCPBUGS-21103: Bump deps to address CVE-2023-44487 [4.13] #135
• Full changelog

cluster-samples-operator

• OCPBUGS-22390: Sync library to remove invalid dockerhub references for OKD #521
• Full changelog

cluster-version-operator

• OCPBUGS-20744: [4.13] Bump http-related deps #989
• Full changelog

console

• OCPBUGS-23483: add access to create, edit and delete silences for developer user from developer perspective #13349
• OCPBUGS-25427: Fix plugin proxy handler #13449
• OCPBUGS-25465: fix runtime error on Node details Overview when Machin… #13452
• OCPBUGS-25146: add access review for impersonate #13437
• OCPBUGS-24591: ConsolePlugin metrics must no longer be grouped by the vendor #13424
• OCPBUGS-22241: Save also the location.search and .hash values in localStorage to restore them after login #13271
• OCPBUGS-24240: Subsequent PipelineRuns take initial PipelineRun name into account #13385
• OCPBUGS-23497: Cannot Edit Shipwright Build #13352
• OCPBUGS-11316: Fix description for BuildAdapter SDK extension #12703
• OCPBUGS-22986: Correct logout process #13310
• OCPBUGS-23065: remove expandable toggle for conditional update risk d… #13316
• OCPBUGS-22784: add support for new features annotations while preservi… #13299
• Full changelog

console-operator

• OCPBUGS-24591: ConsolePlugin metrics must no longer be grouped by the vendor #821
• OCPBUGS-22333: Make enabled plugins unique #805
• Full changelog

container-networking-plugins

• OCPBUGS-20594: build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 [backport 4.13] #130
• Full changelog

coredns

• OCPBUGS-21046: UPSTREAM: <carry>: openshift: Address CVE-2023-39325 #102
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OCPBUGS-27091: Add .snyk file #263
• OCPBUGS-21251: Merge upstream 1.26 into release-4.13 #240
• Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

• OCPBUGS-23116: Should reference configmaps instead of secrets #153
• Full changelog

docker-builder

• OCPBUGS-22468: [release-4.13] Bump github.com/sigstore/rekor #374
• OCPBUGS-23021: Add -p flag to cp command to preserve timestamps #371
• OCPBUGS-20709: [release-4.13] Bump golang.org/x/net #363
• Full changelog

etcd

• OCPBUGS-26925: Rebase etcd 3.5.11 openshift 4.13 #239
• OCPBUGS-22697: [4.13] Carrying fixes for CVE-2023-44487 #225
• Full changelog

gcp-cloud-controller-manager

• OCPBUGS-21303: Bump golang.org/x/net to v0.18.0 #43
• Full changelog

gcp-cluster-api-controllers

• OCPBUGS-21398: Bump golang.org/x/net to v0.17.0 #204
• Full changelog

gcp-machine-controllers

• OCPBUGS-24563: Reduce metrics cardinality. #74
• OCPBUGS-20851: Bump x/net package to v0.18.0 #68
• Full changelog

haproxy-router

• OCPBUGS-21117: Bump golang.org/x/net to v0.17.0 to address CVE-2023-39325 #531
• Full changelog

hyperkube, pod

• OCPBUGS-25814: Fix device uncertain errors on reboot - 4.13 #1831
• OCPBUGS-25988: Update to kubernetes 1.26.12 #1839
• OCPBUGS-25767: legacy-cloud-providers: prevent index out-of-range in getNextUnitNumber #1834
• OCPBUGS-23521: UPSTREAM: <carry>: support for both icsp and idms objects #1798
• OCPBUGS-23567: Update to kubernetes 1.26.11 #1809
• OCPBUGS-18829: cm: reorder setting of sched_load_balance for sandbox slice #1696
• OCPBUGS-23287: UPSTREAM: 121881: Use golang library instead of mklink #1802
• Full changelog

hypershift

• HOSTEDCP-1146: cpo: use CPO spec container image if it is a sha256 reference #3296
• OCPBUGS-22971: Add konnectivity-proxy container to CNO #3167
• OCPBUGS-23455: Use the same etcd snapshot for all replicas during etcd restore #3205
• NO-JIRA: Red Hat Trusted App Pipeline purge hypershift-operator-release-413 #3217
• Full changelog

ibm-cloud-controller-manager

• OCPBUGS-24999: Add Snyk file to exclude vendor directory on scan #66
• OCPBUGS-21137: Bump golang.org/x/net to v0.18.0 #56
• Full changelog

ibm-vpc-block-csi-driver

• OCPBUGS-18143: [IBM VPC] failed provisioning volume in proxy cluster #47
• Full changelog

ibmcloud-cluster-api-controllers

• OCPBUGS-21418: UPSTREAM: <carry>: bump golang.org/x/net to v0.18.0 #66
• Full changelog

insights-operator

• OCPBUGS-23962: adds helm information gather (#868) (#883) #868
• OCPBUGS-22958: adds cluster storageclasses gather (#858) (#875) #858
• OCPBUGS-22953: create Prometheus rules programmatically according the… (#860) #860
• OCPBUGS-22914: remove username & password config options (#859) #859
• OCPBUGS-20750: update dependencies (#840) #840
• Full changelog

ironic

• OCPBUGS-23978: Ironic side of external_http_url (METAL-163) is not wired in correctly #430
• OCPBUGS-23506: Uplift eventlet version #427
• OCPBUGS-23356: Upgrade werkzeug dependency #422
• OCPBUGS-19078: Handle Eject DVD 4.13 #416
• OCPBUGS-23072: Use bash process substitution instead of pipe #413
• Full changelog

k8s-prometheus-adapter

• OCPBUGS-21457: upgrade golang.org/x/net to 0.17.0 to address CVE #90
• Full changelog

kube-proxy, sdn

• OCPBUGS-22932: Change the permission of 80-openshift-network.conf to 600 #582
• Full changelog

kube-state-metrics

• OCPBUGS-20778: bump x/net to v0.17.0 #102
• Full changelog

machine-api-operator

• OCPBUGS-24277: Update reference URL #1188
• OCPBUGS-24277: Use docs URL instead of KCS article #1181
• OCPBUGS-21513: Bump golang.org/x/net to v0.18.0 #1175
• Full changelog

machine-config-operator

• OCPBUGS-27096: Azure Run ovs-configuration.service before dnsmasq.service #4115
• OCPBUGS-19658: After dual-stack conversion reconcile IPFamilies #3935
• OCPBUGS-23468: support icsp and idms objects #4027
• OCPBUGS-23536: Introduce kubelet-dependencies.target and firstboot-osupdate.target #4043
• OCPBUGS-21052: Update library-go and kube deps to latest version #4011
• OCPBUGS-22205: Consider ingress VIPs when selecting node IP #3991
• OCPBUGS-18031: on-prem: run resolv-prepender on NM reapply event #3880
• OCPBUGS-22412: bootstrap_test: always set APIVersion and Kind for DNS #4002
• Full changelog

machine-image-customization-controller

• OCPBUGS-27089: configurable ironic agent vlan creation #117
• Full changelog

multus-admission-controller

• OCPBUGS-21353: Update go.mod for CVE-2023-39325 [Release-4.13] #72
• Full changelog

multus-cni

• OCPBUGS-21076: Update go.mod for CVE-2023-39325 [Release-4.13] #195
• Full changelog

multus-networkpolicy

• OCPBUGS-21438: Update go.mod for CVE-2023-39325 (#35) #35
• Full changelog

multus-whereabouts-ipam-cni

• OCPBUGS-21512: update golang.org/x/net to v0.17.0 #208
• Full changelog

network-metrics-daemon

• Added METRIC_TEST_IMAGE var (#90) #90
• Update the k8s dependencies to 1.26.10 (#83) #83
• Full changelog

nutanix-machine-controllers

• OCPBUGS-24563: Reduce metrics cardinality #59
• OCPBUGS-25459: Fix CI by running tests natively by default #60
• Full changelog

oauth-server

• AUTH-443: update osin to latest version #139
• Full changelog

oc-mirror

• OCPBUGS-19429: Fix cross EUS channel upgrade path calculation (#775) #775
• OCPBUGS-21460: Fix CVE-2023-44487 and CVE-2023-39325 (#714) #714
• Full changelog

olm-rukpak

• OCPBUGS-23403: [release-4.13] Address http2 vulnerability #58
• Full changelog

openshift-apiserver

• : OCPBUGS-21449: Enable HTTP/2 CVE mitigation #398
• Full changelog

openshift-state-metrics

• OCPBUGS-20723: bump x/net to v0.17.0 #108
• Full changelog

openstack-cinder-csi-driver-operator

• OCPBUGS-21565: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #136
• Full changelog

operator-lifecycle-manager, operator-registry

• OCPBUGS-8653: bump golang-migrate to v4.16.1 (#1107) #649
• OCPBUGS-20815: [release-4.13] fix apiserver vulnerability #616
• Full changelog

ovirt-csi-driver

• OCPBUGS-23155: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #130
• Full changelog

ovirt-csi-driver-operator

• OCPBUGS-23241: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #127
• Full changelog

ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9

• OCPBUGS-23258: Update leaderelection config to allow retries #1992
• OCPBUGS-26242: Fix Egress IP Deletion Handler to Prevent OVN Policy Leaks #2011
• OCPBUGS-25923: Forward ICMP packets to OVN loadbalancer #2004
• OCPBUGS-25224: [release-4.13] fixes MTU configuration on gateway router #1988
• OCPBUGS-14799: Updating endpoints when using allocateLBNP=0, lgw mode fails #1940
• OCPBUGS-25095: Fragment oversized reply packets in LGW mode #1983
• OCPBUGS-24391: Limit OVN-Kubernetes RBAC permissions #1950
• OCPBUGS-23014: Netpol retryFramework cleanup #1957
• OCPBUGS-24263: Bump OVN to 23.06.1-39.el9fdp #1966
• Full changelog

powervs-block-csi-driver

• OCPBUGS-24728: synk: ignore vendor dir #61
• Full changelog

powervs-block-csi-driver-operator

• OCPBUGS-25716: snyk: ignore vendor dir #61
• Full changelog

powervs-cloud-controller-manager

• OCPBUGS-24731: UPSTREAM: <carry>: snyk code scan exclude vendor directory #53
• Full changelog

powervs-machine-controllers

• OCPBUGS-24741: snyk code scan exclude vendor directory #64
• Full changelog

prometheus

• OCPBUGS-21240: update golang.org/x/net to v0.17.0 [4.13] #174
• Full changelog

prometheus-alertmanager

• OCPBUGS-21043: Bump golang.org/x/net to v0.17.0 #81
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• OCPBUGS-20861: Bump golang.org/x/net to v0.17.0 #248
• Full changelog

prometheus-node-exporter

• OCPBUGS-21143: upgrade golang.org/x/net to v0.17.0 #135
• Full changelog

tests

• AUTH-443: Add oauth-server redirect URI validation e2e tests #28396
• Full changelog

vsphere-cloud-controller-manager

• OCPBUGS-21506: Bump golang.org/x/net to v0.18.0 #55
• Full changelog

vsphere-cluster-api-controllers

• OCPBUGS-21556: bump golang.org/x/net to v0.17.0 #23
• Full changelog

---

View changelog in Markdown or change previous release: 4.13.294.13.284.13.274.13.264.13.254.13.244.13.234.13.224.13.214.13.194.13.184.13.174.13.164.13.154.13.144.13.134.13.124.13.114.13.104.13.94.13.84.13.74.13.64.13.54.13.44.13.34.13.24.13.14.13.04.13.0-rc.84.13.0-rc.74.13.0-rc.64.13.0-rc.54.13.0-rc.44.13.0-rc.34.13.0-rc.24.13.0-rc.04.12.704.12.694.12.684.12.674.12.664.12.654.12.644.12.634.12.624.12.614.12.604.12.594.12.584.12.574.12.564.12.554.12.544.12.534.12.524.12.514.12.504.12.494.12.484.12.474.12.464.12.454.12.444.12.434.12.424.12.414.12.404.12.394.12.384.12.374.12.364.12.354.12.344.12.334.12.324.12.314.12.304.12.294.12.284.12.274.12.264.12.254.12.244.12.234.12.224.12.214.12.204.12.194.12.184.12.174.12.164.12.154.12.144.12.134.12.124.12.114.12.104.12.94.12.84.12.74.12.64.12.54.12.44.12.34.12.24.12.14.12.04.12.0-rc.84.12.0-rc.74.12.0-rc.64.12.0-rc.54.12.0-rc.44.12.0-rc.34.12.0-rc.24.12.0-rc.14.12.0-rc.04.11.594.11.584.11.574.11.564.11.554.11.544.11.534.11.524.11.514.11.504.11.494.11.484.11.474.11.464.11.454.11.444.11.434.11.424.11.414.11.404.11.394.11.384.11.374.11.364.11.354.11.344.11.334.11.324.11.314.11.304.11.294.11.284.11.274.11.264.11.254.11.244.11.234.11.224.11.214.11.204.11.194.11.184.11.174.11.164.11.154.11.144.11.134.11.124.11.114.11.104.11.94.11.84.11.74.11.64.11.54.11.44.11.34.11.24.11.14.11.04.11.0-rc.74.11.0-rc.64.11.0-rc.54.11.0-rc.44.11.0-rc.34.11.0-rc.24.11.0-rc.14.11.0-rc.04.11.0-fc.34.11.0-fc.24.11.0-fc.0───4.19.0-0.nightly-2024-12-04-1843504.19.0-0.nightly-2024-12-04-1031394.19.0-0.nightly-2024-12-04-0312294.19.0-0.nightly-2024-12-03-1950444.19.0-0.nightly-2024-12-03-1155564.19.0-0.nightly-2024-12-03-0437014.19.0-0.nightly-2024-12-02-2101064.19.0-0.nightly-2024-12-02-0457054.19.0-0.nightly-2024-12-01-2148574.19.0-0.nightly-2024-12-01-1442294.19.0-0.nightly-2024-11-30-0016334.19.0-0.nightly-2024-11-26-1103084.19.0-0.nightly-2024-11-23-021157───4.19.0-0.ci-2024-12-05-0601494.19.0-0.ci-2024-12-05-0001484.19.0-0.ci-2024-12-04-1801484.19.0-0.ci-2024-12-04-1201464.19.0-0.ci-2024-12-04-0601464.19.0-0.ci-2024-12-04-0001464.19.0-0.ci-2024-12-03-1801464.19.0-0.ci-2024-12-03-1201464.19.0-0.ci-2024-12-03-0601464.19.0-0.ci-2024-12-03-0001364.19.0-0.ci-2024-12-02-1801364.19.0-0.ci-2024-12-02-120136───4.18.0-0.nightly-2024-12-04-2039104.18.0-0.nightly-2024-12-04-1130144.18.0-0.nightly-2024-12-04-0103114.18.0-0.nightly-2024-12-03-1746394.18.0-0.nightly-2024-12-03-1143554.18.0-0.nightly-2024-12-03-0450064.18.0-0.nightly-2024-12-02-2111054.18.0-0.nightly-2024-12-02-1238324.18.0-0.nightly-2024-12-02-0343544.18.0-0.nightly-2024-11-30-1417164.18.0-0.nightly-2024-11-29-2037484.18.0-0.nightly-2024-11-27-1624074.18.0-0.nightly-2024-11-27-0859274.18.0-0.nightly-2024-11-27-0127164.18.0-0.nightly-2024-11-26-0756484.18.0-0.nightly-2024-11-22-2310494.18.0-0.nightly-2024-11-21-131835───4.18.0-0.ci-2024-12-05-0215064.18.0-0.ci-2024-12-04-2015064.18.0-0.ci-2024-12-04-1415064.18.0-0.ci-2024-12-04-0815064.18.0-0.ci-2024-12-04-0215064.18.0-0.ci-2024-12-03-2015064.18.0-0.ci-2024-12-03-1415064.18.0-0.ci-2024-12-03-0815064.18.0-0.ci-2024-12-03-0215064.18.0-0.ci-2024-12-02-2015064.18.0-0.ci-2024-12-02-141506───4.17.0-0.nightly-2024-12-04-1922574.17.0-0.nightly-2024-12-04-0523554.17.0-0.nightly-2024-12-03-1833574.17.0-0.nightly-2024-12-03-1406504.17.0-0.nightly-2024-12-03-0825234.17.0-0.nightly-2024-12-02-2235324.17.0-0.nightly-2024-12-02-1750164.17.0-0.nightly-2024-12-02-1035244.17.0-0.nightly-2024-12-02-0251264.17.0-0.nightly-2024-12-01-1349274.17.0-0.nightly-2024-11-30-1420344.17.0-0.nightly-2024-11-29-1224044.17.0-0.nightly-2024-11-28-2011024.17.0-0.nightly-2024-11-28-1323414.17.0-0.nightly-2024-11-28-0736314.17.0-0.nightly-2024-11-28-0026464.17.0-0.nightly-2024-11-27-1802324.17.0-0.nightly-2024-11-27-0920154.17.0-0.nightly-2024-11-27-0329454.17.0-0.nightly-2024-11-26-1919584.17.0-0.nightly-2024-11-26-1144564.17.0-0.nightly-2024-11-25-2054014.17.0-0.nightly-2024-11-25-1420204.17.0-0.nightly-2024-11-24-0154114.17.0-0.nightly-2024-11-23-1924384.17.0-0.nightly-2024-11-23-1153134.17.0-0.nightly-2024-11-23-0446444.17.0-0.nightly-2024-11-22-2215204.17.0-0.nightly-2024-11-22-1300354.17.0-0.nightly-2024-11-22-045157───4.17.0-0.ci-2024-12-05-0243174.17.0-0.ci-2024-12-04-2006194.17.0-0.ci-2024-12-04-0904064.17.0-0.ci-2024-12-04-0221544.17.0-0.ci-2024-12-03-2021544.17.0-0.ci-2024-12-03-1421544.17.0-0.ci-2024-12-03-0821544.17.0-0.ci-2024-12-03-0221544.17.0-0.ci-2024-12-02-1724124.17.0-0.ci-2024-12-02-112412───4.16.0-0.nightly-2024-12-05-0622194.16.0-0.nightly-2024-12-04-1926204.16.0-0.nightly-2024-12-04-0242044.16.0-0.nightly-2024-12-03-1450284.16.0-0.nightly-2024-12-03-0144314.16.0-0.nightly-2024-12-02-1835364.16.0-0.nightly-2024-12-02-1114164.16.0-0.nightly-2024-12-02-0258204.16.0-0.nightly-2024-11-29-1940114.16.0-0.nightly-2024-11-29-1441544.16.0-0.nightly-2024-11-28-2134254.16.0-0.nightly-2024-11-28-1153354.16.0-0.nightly-2024-11-27-1651504.16.0-0.nightly-2024-11-27-1205574.16.0-0.nightly-2024-11-26-2129134.16.0-0.nightly-2024-11-26-0409344.16.0-0.nightly-2024-11-25-2305244.16.0-0.nightly-2024-11-23-1456194.16.0-0.nightly-2024-11-23-0425104.16.0-0.nightly-2024-11-22-0727584.16.0-0.nightly-2024-11-21-163428───4.16.0-0.ci-2024-12-05-0553244.16.0-0.ci-2024-12-04-2239234.16.0-0.ci-2024-12-04-1639234.16.0-0.ci-2024-12-04-1039234.16.0-0.ci-2024-12-04-0408054.16.0-0.ci-2024-12-03-1611144.16.0-0.ci-2024-12-03-1011144.16.0-0.ci-2024-12-02-2303004.16.0-0.ci-2024-12-02-095938───4.15.0-0.nightly-2024-12-05-0404544.15.0-0.nightly-2024-12-04-1640054.15.0-0.nightly-2024-12-04-0605224.15.0-0.nightly-2024-12-03-2219154.15.0-0.nightly-2024-12-03-1330174.15.0-0.nightly-2024-12-03-0314144.15.0-0.nightly-2024-12-02-201926───4.15.0-0.ci-2024-12-05-0227144.15.0-0.ci-2024-12-04-2027144.15.0-0.ci-2024-12-04-1343474.15.0-0.ci-2024-12-04-0653254.15.0-0.ci-2024-12-03-2021014.15.0-0.ci-2024-12-03-1227314.15.0-0.ci-2024-12-03-0547014.15.0-0.ci-2024-12-02-1434034.15.0-0.ci-2024-12-02-083356───4.14.0-0.nightly-2024-12-05-0239284.14.0-0.nightly-2024-12-04-1653194.14.0-0.nightly-2024-12-04-0422074.14.0-0.nightly-2024-12-03-2145544.14.0-0.nightly-2024-12-03-1327534.14.0-0.nightly-2024-12-02-205011───4.14.0-0.ci-2024-12-04-2220284.14.0-0.ci-2024-12-04-1524424.14.0-0.ci-2024-12-04-0924424.14.0-0.ci-2024-12-03-2158004.14.0-0.ci-2024-12-03-1334144.14.0-0.ci-2024-12-03-0704394.14.0-0.ci-2024-12-02-173123───4.13.0-0.nightly-2024-11-30-0419004.13.0-0.nightly-2024-11-23-1013054.13.0-0.nightly-2024-11-20-0919214.13.0-0.nightly-2024-11-19-0924194.13.0-0.nightly-2024-11-18-041323───4.13.0-0.ci-2024-12-05-0547324.13.0-0.ci-2024-12-04-2009524.13.0-0.ci-2024-12-03-0730394.13.0-0.ci-2024-12-02-1947584.13.0-0.ci-2024-12-02-0659564.13.0-0.ci-2024-11-30-0404204.13.0-0.ci-2024-11-28-1135494.13.0-0.ci-2024-11-27-2323474.13.0-0.ci-2024-11-27-1108454.13.0-0.ci-2024-11-26-222320───4.12.0-0.nightly-2024-12-04-0119504.12.0-0.nightly-2024-12-02-1832084.12.0-0.nightly-2024-12-02-0443584.12.0-0.nightly-2024-11-28-0022544.12.0-0.nightly-2024-11-27-1038174.12.0-0.nightly-2024-11-27-0039294.12.0-0.nightly-2024-11-25-1001394.12.0-0.nightly-2024-11-20-1247564.12.0-0.nightly-2024-11-18-021414───4.12.0-0.ci-2024-12-03-0259324.12.0-0.ci-2024-12-02-1735344.12.0-0.ci-2024-12-02-0430344.12.0-0.ci-2024-11-28-1234364.12.0-0.ci-2024-11-28-0232474.12.0-0.ci-2024-11-27-2032474.12.0-0.ci-2024-11-27-1432474.12.0-0.ci-2024-11-27-0039214.12.0-0.ci-2024-11-26-155836───4.11.0-0.nightly-2024-07-06-0140574.11.0-0.nightly-2024-07-01-0855474.11.0-0.nightly-2024-04-20-1326214.11.0-0.nightly-2024-04-15-1237064.11.0-0.nightly-2024-04-15-0346274.11.0-0.nightly-2024-03-18-1654324.11.0-0.nightly-2024-03-12-2229304.11.0-0.nightly-2024-02-01-0446274.11.0-0.nightly-2024-01-19-1107024.11.0-0.nightly-2024-01-15-0229494.11.0-0.nightly-2024-01-10-203533───4.11.0-0.ci-2024-11-14-2201374.11.0-0.ci-2024-11-14-1432224.11.0-0.ci-2024-09-18-0735584.11.0-0.ci-2024-09-17-2036254.11.0-0.ci-2024-07-30-2032534.11.0-0.ci-2024-07-23-1708064.11.0-0.ci-2024-07-01-0910384.11.0-0.ci-2024-06-07-1944004.11.0-0.ci-2024-06-05-1627184.11.0-0.ci-2024-06-01-042714───4.18.0-ec.44.18.0-ec.34.18.0-ec.24.18.0-ec.14.18.0-ec.04.17.0-ec.1

Source code for this page located on github