4.13.58

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.13.58-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-sdn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.13-e2e-aws-sdn-serial
- aws-sdn-upgrade-4.13-micro Succeeded periodic-ci-openshift-release-master-nightly-4.13-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.13-micro Succeeded periodic-ci-openshift-release-master-ci-4.13-e2e-azure-ovn-upgrade
- fips-scan Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.13-fips-payload-scan
- gcp-ovn-rt-upgrade-4.13-minor Succeeded periodic-ci-openshift-release-master-ci-4.13-upgrade-from-stable-4.12-e2e-gcp-ovn-rt-upgrade
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.13-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.13-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.12.19, 4.12.20, 4.12.21, 4.12.22, 4.12.23, 4.12.24, 4.12.25, 4.12.26, 4.12.27, 4.12.28, 4.12.29, 4.12.30, 4.12.31, 4.12.32, 4.12.33, 4.12.34, 4.12.35, 4.12.36, 4.12.37, 4.12.38, 4.12.39, 4.12.41, 4.12.42, 4.12.43, 4.12.44, 4.12.45, 4.12.46, 4.12.47, 4.12.48, 4.12.49, 4.12.50, 4.12.51, 4.12.54, 4.12.55, 4.12.56, 4.12.57, 4.12.58, 4.12.59, 4.12.60, 4.12.61, 4.12.62, 4.12.63, 4.12.64, 4.12.65, 4.12.67, 4.12.68, 4.12.69, 4.12.70, 4.12.71, 4.12.72, 4.12.73, 4.13.10, 4.13.12, 4.13.13, 4.13.14, 4.13.15, 4.13.16, 4.13.17, 4.13.18, 4.13.19, 4.13.21, 4.13.22, 4.13.23, 4.13.24, 4.13.25, 4.13.26, 4.13.27, 4.13.28, 4.13.29, 4.13.3, 4.13.30, 4.13.31, 4.13.32, 4.13.33, 4.13.34, 4.13.35, 4.13.36, 4.13.37, 4.13.39, 4.13.4, 4.13.40, 4.13.41, 4.13.42, 4.13.43, 4.13.44, 4.13.45, 4.13.46, 4.13.48, 4.13.5, 4.13.50, 4.13.51, 4.13.52, 4.13.53, 4.13.54, 4.13.6, 4.13.7, 4.13.8, 4.13.9

4.13.57 (changes) - S S S F
4.13.56 (changes) - Success
4.13.55 (changes) - Success
4.13.49 (changes) - Failed
4.13.38 - Success
4.13.11 (changes) - Failed
4.13.2 (changes) - Success
4.13.1 (changes) - Failed
4.13.0 (changes) - Success
4.12.76 (changes) - S S F
4.12.75 (changes) - Success
4.12.74 (changes) - Success
4.12.66 (changes) - Success
4.12.53 (changes) - Success
4.12.40 (changes) - Failed
4.12.18 (changes) - Success
4.12.17 (changes) - Failed
4.12.16 (changes) - Success
4.12.0-0.nightly-2025-05-05-193117 (changes) - F S F F

Upgrades to:

4.14.0-0.nightly-2025-05-09-042454 (changes) - Success
4.14.0-0.nightly-2025-05-08-185048 (changes) - Success
4.14.0-0.ci-2025-05-09-054419 (changes) - F F S F F S
4.14.0-0.ci-2025-05-08-204642 (changes) - S F F S
4.14.0-0.ci-2025-05-08-144642 (changes) - Success Success

Loading changelog, this may take a while ...

Changes from 4.13.38

Created: 2025-05-08 09:42:16 +0000 UTC

Image Digest: sha256:2f46021d7977a7211e043834bda0a0fd728e04cdc7c7b657aa1f51ee7a1fbf34

Components

Kubernetes upgraded from 1.26.14 to 1.26.15
Red Hat Enterprise Linux CoreOS upgraded from 413.92.202403200554-0 to 413.92.202505061702-0 (diff)

Rebuilt images without code change

alibaba-cloud-controller-manager git e41e11cc sha256:6b35661834a938fe9accb877934fc523a4782d00e08926577abd4687aa029efb
alibaba-cloud-csi-driver git 6384f904 sha256:16b3ecc755a547774f58334978ed72c6700c898ca06bcd0184d39e830709e707
alibaba-disk-csi-driver-operator git 7e415973 sha256:47ad1365190ac5eafe893d49d8cf55e057ada01198661d27163f08841e4de5e3
alibaba-machine-controllers git 4c0f96a6 sha256:24e838680502b2efd46c17b2210f053860c91ba396786b8d5350a553bb6aae54
aws-machine-controllers git e1a57b5e sha256:bbd58b9e4834f076a5779e103ba4817262517a57abfc942d8184123700906d3c
azure-cloud-controller-manager git bf9bd022 sha256:7d795f9d529424252eabcac30a80bb9d8a02aaae37c0563abf35af0f464f0807
azure-cloud-node-manager git bf9bd022 sha256:fbd74802479830111e35763fea31b88da573084ad4abb427d59d766612c023b9
azure-disk-csi-driver git b6d3fbcb sha256:27cce691de1d1381b562bdb6b766869ad75edacfc05f361646e66796cea06313
azure-disk-csi-driver-operator git 8534d756 sha256:f6e4075c3c79257c2bfc92505478ef6950f2050dce21315024e95a6519065d97
azure-file-csi-driver-operator git 70e05302 sha256:6e35ce11cabf52a803c7cfd6d2f330a8ee2ba6d9459322cc3c3abf6b4811a57c
azure-machine-controllers git 62f6e0f3 sha256:994d3f869f103d294e5eb947700c60da5f9d21bdfb7f2092bcf2ad1bf8617239
baremetal-runtimecfg git 1280cf54 sha256:a443f3127d8b96a22fa7900300129a6c0fa64546347f27028fa253868b417ff6
cluster-authentication-operator git 1801056c sha256:2660d9c9efbdbe443f028c6da32f8a8e40b7b8f89bb87b0a4c40d76cecd5575f
cluster-bootstrap git ee908b6b sha256:72975b5b89a5593059cc8fa7cb28f97e8162cee53714240c11394b985fcfb696
cluster-capi-controllers git 12f767b2 sha256:65702387c6fab6f1b61f98225b933d1f6747880ccb0dc00859ca46da10c76e0a
cluster-capi-operator git b247793d sha256:3a94048764fad9a13196ebe74e609226c419fccb14363b95091ce5ed21be40a2
cluster-config-operator git a6d56530 sha256:0a5f50af966f4e19fdef5e5491796813201f8aea49ebd778531bdbaacab94525
cluster-kube-cluster-api-operator git 18c076b1 sha256:9c351a7613a2a8218034d576f23e586f7bf47d280e8ef138c6bf0c2eef4b1748
cluster-kube-controller-manager-operator git dac71136 sha256:be5dbe5f253ff397f62e33538cba44ebaf65a3ad96fb652c281714ce932e8949
cluster-kube-scheduler-operator git 2e7c269b sha256:4e7c9c7ec5d9968b01b1087fbead7a1fd0b51d9d86ed4d0c6421bcfa0b33c9cc
cluster-kube-storage-version-migrator-operator git 721de5d6 sha256:001a007b7abf6e42ecf097da21c0c27322773255617a6c40335758b1f3e576cd
cluster-machine-approver git 25fe7b4b sha256:495ceadf5a23cc85337a72d816250baffe6426709f00a66761cf05a9336cc6db
cluster-openshift-apiserver-operator git 9abb220a sha256:3adaf4ced0fd01304f880dc13ad46d1855c9cda4ae6a32ebe6c1bc260ed232ab
cluster-platform-operators-manager git 312c5f24 sha256:1a9f4b9cd573737365e13982f28725f8b9fade5f4d1d4d08f77d87d3891fbef9
cluster-policy-controller git 3b0d0755 sha256:653e624f9859753e1f264bdd685359b7c619204c86b4085d063a6f12f5a44f7b
configmap-reloader git 9adad592 sha256:218c5884c34ca73fcfda585b4997cc0fa427b13608d34b14920336c23ae5ba13
container-networking-plugins git 614ca3c3 sha256:7b8d30540a71df4fe3c017ad768ab3a7b05e8db8f68916162f36e2044cfddce3
csi-driver-manila git c3b7d2f5 sha256:1e38f0daecc74a115a854300f36bf3af6cfe0c6a36f431a183449a49e2a0d07e
csi-driver-manila-operator git 596a53c8 sha256:73c37ef100613a46a99b1860a295f86e23b96d8a7e44cde52583a8fd7605585e
csi-driver-nfs git 2b914c21 sha256:47292803c6ec0f9b2ef5ec62d35f479b842ad39b752b63f515f230db69c3b691
csi-driver-shared-resource git 01bbb23b sha256:a30891e1058b5fc9d08f93012f631748b9d2292d8d739203e22365d497afbc65
csi-driver-shared-resource-operator git bc169d2d sha256:9a051f979c35d69d59b5e96bf2d4a31e509345ee4a64b1301324a116bc981a72
csi-driver-shared-resource-webhook git 01bbb23b sha256:0059cc67dd9f302cbab916dea5b0246c4ae6288c22316e135a0b899b7e49d7bd
csi-external-attacher git d9290843 sha256:7c5e3a5b97fbbdd7984a81e8fca0ffd85f8408a7206ff79db9dbbb4e94a32034
csi-external-provisioner git 0bf126b7 sha256:b130bbfc93fca14bbdaa484be203fd3dd15e78d63042e02c6aba9e9ba8817573
csi-external-resizer git e8036caf sha256:b3d93ecc3d6e26f25e4ef56af644f9d0b60a75a524cd8e0e3455a8ff2024a4f2
csi-external-snapshotter git c8a7a097 sha256:14047f83616570d9584879c0444bab2f328c438a857132ec38fd4d5aa2fc522a
csi-livenessprobe git 3587db51 sha256:504db9220e1bf46791e0b7a995543d5e587ed60c486cd708dfaef2d4260a71a7
csi-node-driver-registrar git 9ea90f34 sha256:cb2129b719e6997ee147459edce6ba20c00e2308ab81f9b18f842f540b07cf37
csi-snapshot-controller git c8a7a097 sha256:5ca220ee6f72706d394e8d9cb1c1dc25a8d18fe284c9306a3f703b7b28671824
csi-snapshot-validation-webhook git c8a7a097 sha256:36eefef18accd753b869788b4891d50f87ee33f4dff87a1b7ef9ce4db35e86a8
docker-registry git 47a15ac8 sha256:b15cc982fc79f1afc7346d578821c6c80ae6e1e0b6ee1c2e77340cfff0a2be57
driver-toolkit git d719bdcf sha256:bf3ce5247b64b65685f59cb0c33b1c933cf3a215d44f019ee79bb83be4be64fd
egress-router-cni git dfe03737 sha256:4a1882927aa0730aa113759930b4f529ee268c264f17ff912774f7a1d98ca18d
gcp-cloud-controller-manager git 507fea98 sha256:6c8e361878de34517ebd3f23e84577d683ef1c0d61ecbb257de9291ff4c56691
gcp-cluster-api-controllers git b8a27725 sha256:cf4035279328a71212fc25a49ade7f2f224d4f46a3241b4b4d48ca0527f11aff
gcp-machine-controllers git e53a397d sha256:472872bf3463e1805eaa55d2b4a72cc18566243cc8f86c536ac7f22dd0519cfc
gcp-pd-csi-driver git 81e60746 sha256:0d4983cbb596643ce8140dfb06e738e925786aff000ab33f0b863c93603f9d51
gcp-pd-csi-driver-operator git 08c561b8 sha256:3a5a5080bf1f1198f4f49a3a474cea519ac5332db52ebd91bc795369254ccf7b
ibm-cloud-controller-manager git b5bcaf9c sha256:cdddb704698b35cf7ce3e91ef6b9d2ed2b5f1ac2941f966d79a97225a2579c2d
ironic-machine-os-downloader git ce291779 sha256:095164d2f1c01a6eb6d84bca0dff1f6f7fb8594cff43c2a7552e2cfa5810a4d4
ironic-static-ip-manager git 4536724a sha256:f989cebce6c372b3b5b1760437005c6c65a790d81cd5a5b1037b03aee73884b3
k8s-prometheus-adapter git 0fce7c7c sha256:6b92e5ba76d93a9521a78770eba00751255a944259c03e0ecf27d4f365cf7f08
keepalived-ipfailover git 1a14e5c9 sha256:0113877f25903b83281dd2c1912e0175af7e3b194ccd655604c66db312583338
kube-proxy git 569ea111 sha256:9ebfddb9b8fcef8231c880f5490281ab1af8ac19ef575b70289f0ec70cbbecdb
kube-state-metrics git fd791df5 sha256:ed06f12419f8284861ad401be0405263ee2448b287b8c350312684d09eb73741
kube-storage-version-migrator git bad104d1 sha256:3456eaec2b1691a940a9daeb60d9f58e46b34c95551df276696a816e5d8f61e0
kubevirt-cloud-controller-manager git ee2033ec sha256:ceeb74be0133aa5263654f36c89e82b74fa32629b9448350c69c4ffd3be8ef11
kuryr-cni git 36754b7b sha256:d10aeeef401ea96b2d239cd7c23bdbd29d5f95bb339e79a36346594f97f1a272
kuryr-controller git 36754b7b sha256:a85096156df15207d9ea7a30d277f0148393e1cb1f5fd0f5c01b7e407845c0c4
libvirt-machine-controllers git d4b7a8ab sha256:dcc12f84b87b1c8d195f0a9115ec08919c722ab3f1b7f3e3d1d1786a3058636b
machine-image-customization-controller git 34a4abe6 sha256:f7860bce172a8ed856f08a931a0285530ce760ab1fd2653a5c2647c9c2688989
machine-os-content sha256:24435df4531fafa548b865dccac1ecbdf2bef473941f88a8268297b53c4c1ab1
multus-admission-controller git 9b0656af sha256:498d9e4ce2f46c2344aca5f23912a901d7365d6d9fe99b21b78fcb2078c201d6
multus-networkpolicy git 7176ab75 sha256:7dab5e3d3c90a1c21489dd373362c32e776e3f7b6b9be8078dc6048ec616e99a
multus-route-override-cni git ca3bbec5 sha256:878aabcf6296fc58098ef215a91fb6c6b59fac92baf6df40f4db6e27bd12cbd3
network-interface-bond-cni git 84bda2af sha256:3e24375d51a95405a332271b56a30269c441ee148b12d02ba559f6c71594a760
network-metrics-daemon git 3ef81a5c sha256:ccaff34c562bafb33a8dea281c1bac0cf95538df011ed80e46da34d5255c5d9b
network-tools git 073feda1 sha256:c02e74a36878bc56a7b415654bfff711c1794ac0a3c3648c5fd2170675ae87da
oauth-proxy git 44af5a3a sha256:57a453ca5454c330f36063eaccf5e56d0587b165ec2b5daa84f5e3fb36d57dcf
oauth-server git eb54be28 sha256:6a10569c2c9a64c149053d93708dad01e9d0c23e1c5e64042addac8edc18baa4
openshift-state-metrics git 9be421f0 sha256:aeefaab0fdaa986a77bbeef108cef1d29156ebc98a4fa927d84918f2e3c4819b
openstack-cinder-csi-driver git c3b7d2f5 sha256:c7f937087f3a7ca3a70cf71e3208846c728b7abadb53672d07a96119acb8725b
openstack-cinder-csi-driver-operator git b50a649b sha256:03a0dd7562d5afe26f6a506074ef78149ebd7f64fff51115f3a774cf140311c4
openstack-cloud-controller-manager git c3b7d2f5 sha256:4833367e7a3a94b76b350799227dcebb0f118250ad417b6f5e339dd0385186e2
ovirt-csi-driver git 54958deb sha256:ac5bc58b8e1940583005cfa6ab04a30872514b5a1a2c8b21cb9070c708d6ab44
ovirt-csi-driver-operator git b293972f sha256:bfe2e48476b2573f00ac656298fa712dcb2393d2871fb0abad1a16f10e72a468
ovirt-machine-controllers git 22d89b3f sha256:a793e754e58d2cfb56eafd41c20d469afaccfd1410950bd183b59ddc7acb0d17
powervs-block-csi-driver-operator git e70c980e sha256:b0d3ac017b538f8eab7a7346b7ac5eb5b53a963e0ff48570e9c2692ef2c19d30
prom-label-proxy git b501d5e2 sha256:84424961239f48399cee6090dc34c961c7362d7ecd51dbbda6eeaed77af69b28
prometheus git 72886096 sha256:901f3803636371dea5dcc990ce5c4fa4ac8a700b96a2aa31ccbc4b527e377493
prometheus-alertmanager git df2f11e2 sha256:dbaf313c82ac182eb2524d61e481aaca79ee9aa23408c0430fbe507b4b2ecc96
prometheus-config-reloader git 30fdccd1 sha256:0471b66596dff273beb47a7ae9ef29c2d319cfd2f568fba91917b9594e7ff6b4
prometheus-node-exporter git 59d699ca sha256:12a05f3c86f9349e25f4341257caee5ce93018cc4e56f881ec083768723a7d46
prometheus-operator git 30fdccd1 sha256:680dca24a86e43ba38e7b84ac1f4d186499e6c0b25d1b60167c8159df184f5ab
prometheus-operator-admission-webhook git 30fdccd1 sha256:24a0a72d8393301dc1222edab256e7a3ec16bc70f6623152c3c04f6a9c59e045
rhel-coreos sha256:9f1fa3b4bd4adf89f961bf5317fec000b8952ab2f214933ad283041d8268583e
rhel-coreos-extensions sha256:a83a1cc58ec694fe7efb07f6aaa13d462d0013c36f5c0c04208c06c2845a07e9
route-controller-manager git 6667a6cb sha256:cd8cad7979a93f0a3d782643f478ba0b37a36b2c2d1de1ed552718d1bb270985
sdn git 569ea111 sha256:5bf4e142c4efb9c3d3811490c2af07717409f31b8536c8378f8c956799ee29ed
service-ca-operator git dba00dc5 sha256:0788ddcf0a9df3bfa702d9728176cac1236c875527f955380c9dc81a3d9026e9
thanos git 70fb57fb sha256:c12c79616e9b9d53ba1241a8cb413af4b9b666d687e2eb03612e24820650d05a
vsphere-cloud-controller-manager git f56d57ba sha256:5cf8c60541ee633619c206ff29e9a31eb72a5972e0fa4676821477ac63c11145
vsphere-cluster-api-controllers git da63f2b9 sha256:b1f999470b563da16441760553ecf03df3afe07a6bfc670e2585960ff1572aa8
vsphere-csi-driver git 4d3036a6 sha256:81a0f01cfd35384bc16e1bd06994bb9724246094cc3aa5adc128ba8321e16577
vsphere-csi-driver-operator git a9e5036e sha256:37f72e8f384fe2f438435a40c25158f5d0aec4b2c33de7505e4f368c109c8ff5
vsphere-csi-driver-syncer git 4d3036a6 sha256:dd83ff4f5a128daa3da369b7d55e5c85962ad139c2e90f38ae1379f45e25d3b8
vsphere-problem-detector git 3ad7408f sha256:996f41eca94f896224a148d4cf22124284fdd4dc913d03185265162767102aa7

agent-installer-api-server

OCPBUGS-53693: Bump jwt to 4.5.2 in release-4.13 (#7512) #7512
OCPBUGS-13611: Update version go-http-metrics/gin (#6919) #6919
MGMT-17595: Bump x/net to v0.24.0 to mitigate CVE-2023-45288 (#6215) #6215
MGMT-17588: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#6202) #6202
MGMT-17541: Replace broken golangci reference (#6196) #6196
NO-ISSUE: replace postgres images as current one disappeared from quay (#6133) #6133
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-53717: Bump jwt to 4.5.2 in release-4.13 (#1094) #1094
Bump golang.org/x/net to 0.33.0 (#1015) #1015
OCPBUGS-13612: Update version go-http-metrics/gin (#935) #935
MGMT-17595: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#835) #835
MGMT-17588: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#829) #829
MGMT-17541: Replace broken golangci reference (#826) #826
Full changelog

agent-installer-node-agent

OCPBUGS-53709: Bump golang-jwt/jwt/v4 to 4.5.2 in release-4.13 (#974) #974
OCPBUGS-46952: Bump golang.org/x/net to 0.33.0 (#886) #886
MGMT-17595: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#706) #706
NO-ISSUE: Quick fix for broken ignition download test in 4.13 release (#700) #700
MGMT-17588: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#702) #702
MGMT-17541: Replace broken golangci reference (#697) #697
Full changelog

apiserver-network-proxy

OCPBUGS-38066: Revert “Agent: Respect HTTPS_PROXY env vars for proxied connections” #61
OCPBUGS-31984: Bump golang.org/x/net to v0.23.0 #52
Full changelog

aws-cloud-controller-manager

OCPBUGS-32073: update for CVE-2023-45288 [release-4.13] #84
Full changelog

aws-cluster-api-controllers

OCPBUGS-32470: UPSTREAM: 4670:Update awsmachine providerID and instanceID immediately after ec2:RunInstances is called #509
Full changelog

aws-ebs-csi-driver

OCPBUGS-33363: [release-4.13] UPSTREAM: 1919: Add reserved-volume-attachments #266
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-33363: Explicitly reserve 1 attachment for the root disk #307
Full changelog

aws-pod-identity-webhook

OCPBUGS-32882: Upgrade go-jose module to 2.6.3 #190
Full changelog

azure-cluster-api-controllers

OCPBUGS-36022: Update go-retryablehttp to v0.7.7 #314
Full changelog

azure-file-csi-driver

OCPBUGS-41678: bump mount-utils to treat ENODEV error as corrupted mount #81
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-55034: IBMCloud: Move to IBM TF openshift fork #9668
OCPBUGS-39217: Add yq v4 to ci image #8922
OCPBUGS-36088: [release-4.13]: bump go-retryablehttp for CVE fix #8659
OCPBUGS-29124: IBMCloud: Handle disk delete errors #7989
OCPBUGS-37168: Add yq-v4 to the upi-installer image for CI #8743
OCPBUGS-35976: [release-4.13] bump github.com/containers/image for CVE fix #8651
OCPBUGS-33732: preserve category name when trying to find tag category #8419
OCPBUGS-33062: openstack: Honour worker server group policy #8323
OCPBUGS-32359: Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility #8284
OCPBUGS-22979: IBMCloud: Add eu-es region #7685
Full changelog

baremetal-machine-controllers

OCPBUGS-46640: Bump x/net 0.33.0 #229
Full changelog

baremetal-operator

OCPBUGS-53334: BMO can expose any secret via BMCEventSubscription CRD 4.13 #411
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-30288: oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators #1700
Full changelog

cloud-credential-operator

OCPBUGS-53419: github.com/golang/glog v1.2.4 #846
OCPBUGS-51546: Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected #831
OCPBUGS-43340: Update github.com/sirupsen/logrus v1.8.3 #770
OCPBUGS-37834: Resolve SNYK errors in security job. #743
OCPBUGS-37421: SNYK ignore go-client misreporting #740
OCPBUGS-36028: IBM/go-sdk-core update to v5.17.4 #722
OCPBUGS-32898: Upgrade go-jose module to 2.6.3 #698
Full changelog

cloud-network-config-controller

OCPBUGS-32180: Avoid nil pointer panic while assigning private IP on Azure #139
Full changelog

cluster-autoscaler

OCPBUGS-45151: [release-4.13] VPA: Update OWNERS file #328
OCPBUGS-40929: update VPA golang.org/x/net for http rapid reset for CVE-2024-8421 #317
OCPBUGS-31702: add check for taint.value == nil #295
Full changelog

cluster-autoscaler-operator

OCPBUGS-31992: Update x/net to v0.25.0 #324
Full changelog

cluster-baremetal-operator

OCPBUGS-31993: bump x/net to 0.23.0 #439
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-35562: update azure and ash tolerations on node manager #353
OCPBUGS-35562: update unit tests [release-4.13] #354
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-48259: Add unreadyNodeGracePeriod for allowing brief node hiccups #342
OCPBUGS-35380: Improved debugging of API listing errors #304
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-32334: create suitable role and roleBinding for csi-snapshot-webhook #206
Full changelog

cluster-dns-operator

OCPBUGS-52501: [release-4.13] Add runbook_url for CoreDNSErrorsHigh #434
OCPBUGS-11449: Enable topology-aware hints iff nodes in >=2 zones #418
OCPBUGS-11449: Ignore max unavailable for status #417
Full changelog

cluster-etcd-operator

OCPBUGS-53509: fix CVE-2025-30204 #1415
OCPBUGS-35077: return errors in wait-for-ceo #1273
OCPBUGS-31988: update golang x net #1255
Full changelog

cluster-image-registry-operator

OCPBUGS-36034: go.*,vendor: bump go-retryablehttp #1070
Full changelog

cluster-ingress-operator

OCPBUGS-43095: Add alert for RFC 7230 violation in Transfer-Encoding headers #1161
OCPBUGS-43095: Add e2e test for duplicate Transfer-Encoding headers #1150
OCPBUGS-36551: Add Regexp Anchor to TestAll #1104
OCPBUGS-35453: [release-4.13] internal service changed fix target port logic #1089
OCPBUGS-35094: TestHostNetworkPortBinding: Delete t.Parallel() #1082
OCPBUGS-34765: Don’t add clientca-configmap finalizer if deleting #1073
OCPBUGS-34409: desiredRouterDeployment: Set HostPort if needed #1062
OCPBUGS-33990: Avoid spurious updates for internalTrafficPolicy [Backport to 4.13] #1055
OCPBUGS-34476: Use centos7 tag for quay.io/centos7/httpd-24-centos7 image #1065
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-50850: Increase waitForFallbackDegradedConditionTimeout #1809
OCPBUGS-34062: [4.13] add a controller that reconciles SCCs’ volumes #1677
OCPBUGS-25922: [release-4.13] dashboard: use recording rules for most metrics #1611
Full changelog

cluster-monitoring-operator

OCPBUGS-33581: label for infra nodes for metric cluster:capacity_cpu_cores:sum #2344
OCPBUGS-28767: fix generation of telemeter token hash #2305
Full changelog

cluster-network-operator

OCPBUGS-43856: manifests/02-cncc-credentials: Set skipServiceCheck for GCP #2547
OCPBUGS-38403: Add missing runbook for OVNKubernetesNorthdInactive #2471
OCPBUGS-37941: update whereabouts crd #2458
Full changelog

cluster-node-tuning-operator

E2E: workload hints: compare existing profile with changes being made to avoid mcp getting stuck (#1069) #1069
OCPBUGS-33030: [release-4.13][manual]Reduce number of reboots in offline tests (#1048) #1048
Scheduler plugin: ignore IRQs (#1027) #1027
irqbalance: set banned cpus list to 0 (#1003) #1003
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-38455: Update opentelemetry to mitigate CVE #365
Full changelog

cluster-samples-operator

OCPBUGS-54812: add rhdmalone to owners #628
OCPBUGS-49663: add shannon and aroyoredhat as owners #599
OCPBUGS-21198: update k8s.io/apiserver version #589
Full changelog

cluster-storage-operator

OCPBUGS-33468: Fix problem-detector proxy setting #473
Full changelog

cluster-update-keys

OCPBUGS-43886: keys: Update Red Hat keys to use SHA256 signatures #67
Full changelog

cluster-version-operator

OCPBUGS-45332: deps: bump golang.org/x/net to 0.31.0 #1121
Full changelog

console

OCPBUGS-54892: Show Observe section without PROMETHEUS and MONITORING flags #14960
OCPBUGS-45292: A value submitted in From view is wrapped with single quotation after switching to Yaml view. #14573
OCPBUGS-44356: Application creation fail when manually entering input scaling value in local setup #14509
OCPBUGS-45197: Edit the secret and add the Chinese in the web-console, garbled characters will be displayed #14552
OCPBUGS-44585: Need to allow blank for Project/namespace when setting SA Subject in ‘Project access tab’ #14497
OCPBUGS-36557: Increase login flow state paramater length/entropy #14483
OCPBUGS-42951: The filepath including leading slash makes error during parsing devfile using Gitlab #14383
OCPBUGS-41594: Redirects to new PipelineRun logs URL from old PipelineRun logs URL #14263
OCPBUGS-35259: fix vCenter cluster being empty #13952
OCPBUGS-32147: Bump graphql-go to v1.3.0 #13922
OCPBUGS-33978: Helm Plugin’s Catalog incorrectly renders a single index entry into multiple tiles #13872
OCPBUGS-34342: Fix PipelineRun Logs tab navigation #13890
OCPBUGS-24395: Extra space is in the translation text(Chinese) of ‘Create rolebinding’ and ‘replicate rolebinding’ #13405
OCPBUGS-33777: restrict Masthead logo to max-height to 60px #13860
OCPBUGS-33749: Add visual connector between VMs and non VMs workloads #13857
OCPBUGS-33382: Routes created by devfiles do not always use HTTPS #13827
OCPBUGS-33650: fix issues with Edit Route form #13851
OCPBUGS-32500: PipelineRuns in Console show wrong status or load indefinitely #13780
OCPBUGS-31077: Pipeline Name gets changed to “new-pipeline” on the Edit Pipeline YAML/Builder #13683
OCPBUGS-31595: Fix operands list endpoint. #13714
Full changelog

console-operator

OCPBUGS-18674: Reset console operator’s conditions #894
Full changelog

coredns

OCPBUGS-38431: UPSTREAM: 6354: openshift: key cache on Checking Disabled (CD) bit #129
Full changelog

docker-builder

OCPBUGS-43295: Buildah dependency bump to 1.29.5 #460
OCPBUGS-43191: runc library bump to 1.1.12 #439
OCPBUGS-48836: skipping some unit tests to avoid failures as they are duplicate #434
OCPBUGS-48655: Add new team members to the OWNERS file #431
Replace ‘coreydaley’ with ‘sayan-biswas’ #407
BUILD-854: Add adambkaplan as approver #405
Full changelog

etcd

OCPBUGS-32920: Revert “Merge pull request #262 from Elbehery/rebase-etcd-3.5.13-open… #266
OCPBUGS-31653: Rebase etcd 3.5.13 openshift 4.13 #262
ETCD-537: Revert “bump build root go1.20” #263
Full changelog

haproxy-router

OCPBUGS-43095: add duplicate_te_header_total metric #626
OCPBUGS-34673: Properly handle rewrite-target annotation #608
OCPBUGS-33911: Reject routes with MD5 certs #600
OCPBUGS-33448: Count active services before setting weight to 1 #594
OCPBUGS-33280: Route ‘haproxy.router.openshift.io/timeout’ value is not validated #591
Full changelog

hyperkube, pod

OCPBUGS-41678: mount-utils: treat syscall.ENODEV as corrupted mount #2083
OCPBUGS-37280: UPSTREAM: 126104: Add funcs in pkg/filesystem/util that can actually … #2045
OCPBUGS-28660: UPSTREAM: <carry>: kubelet/cm: use MkdirAll when creating cpuset to ignore file exists error #1875
UPSTREAM: <drop>: Bump golang.org/x/net to v0.23.0 #1938
OCPBUGS-31505: Update to kubernetes 1.26.15 #1930
Address CVE #14
Full changelog

hypershift

OCPBUGS-53901: bump golang-jwt v4 #5948
OCPBUGS-39184: fix: bump github.com/IBM/go-sdk-core/v5 #4627
OCPBUGS-41515: set Konnectivity cipher suites #4284
NO-JIRA: hack: make the e2e script generic #4202
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-53909: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #87
OCPBUGS-36064: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #74
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-36070: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #123
Full changelog

ibm-vpc-node-label-updater

OCPBUGS-53541: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #47
OCPBUGS-36010: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #43
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-36076: UPSTREAM: <carry>: Fix go-retryablehttp CVE - 4.13 #90
Full changelog

ibmcloud-machine-controllers

OCPBUGS-36082: Bump dependency for CVE #56
Full changelog

insights-operator

OCPBUGS-36475: properly encode the URL for the advisor links (#962) (#965) #962
OCPBUGS-33449: anonymization - externalIP can be nil (#931) (#933) (#935) #931
OCPBUGS-31991: bump golang.org/x/net version (#927) #927
Full changelog

ironic

OCPBUGS-48146, OCPBUGS-48595: Bump jinja2 to 3.0.1-6.el9.2 #626
OCPBUGS-43952, OCPBUGS-43960: Bump python-waitress [4.13] #608
OCPBUGS-37764, OCPBUGS-39384: Include fixes for CVE-2024-44082 #585
OCPBUGS-38509: set min version for python3-webob #557
OCPBUGS-33374: bump werkzeug #543
OCPBUGS-34898: bump jinja2 #538
OCPBUGS-37116: Update eventlet version #525
OCPBUGS-32363: [4.13] remove unused prometheus-exporter #488
OCPBUGS-32387: Use unix sockets by default for reverse proxy communication #476
Full changelog

ironic-agent

OCPBUGS-39384: Include fixes for CVE-2024-44082 #164
OCPBUGS-38509: set webob and bump werkzeug #152
Full changelog

kube-rbac-proxy

OCPBUGS-31987: CVE-2023-45288 [4.13] #107
Full changelog

kubevirt-csi-driver

“OCPBUGS-29791: [release-4.13] Address CVE-2024-1725: Restrict access to infrastructure PVCs by requiring matching infraClusterLabels on tenant PVCs” #35
Full changelog

machine-api-operator

OCPBUGS-43856: install/0000_30_machine-api-operator_00_credentials-request: Set skipServiceCheck again for GCP #1304
OCPBUGS-32015: Fix zone tag value reconciliation for vSphere machines #1225
OCPBUGS-31994: Update x/net to v0.25.0 #1245
NO-JIRA: [release-4.13] Fix data race conditions in unit tests #1254
Full changelog

machine-config-operator

OCPBUGS-44206: Panic seen in CI job for MCC pod #4680
OCPBUGS-38372: Revert “MCD-pull: run after network-online.target in Azure” #4527
OCPBUGS-38295: daemon/update: disable systemd unit before overwriting #4522
OCPBUGS-37783: Openshift uncordoned compute-node that was intentionally cordoned #4507
OCPBUGS-37160: MCD-pull: run after network-online.target in Azure #4474
OCPBUGS-36782: daemon: Handle correctly OS Version for 4.1 and 4.2 bootimages #4464
OCPBUGS-32208: Run resolv-prepender entirely async #4314
OCPBUGS-33327: make verify should use MCO’s kube version #4352
Full changelog

machine-os-images

OCPBUGS-54172: Change rhcos release browser url #60
Full changelog

multus-cni

OCPBUGS-28020: Fix SAST scan issues for multus-cni-container [4.13] #224
Full changelog

nutanix-machine-controllers

OCPBUGS-20976: bump golang.org/x/net to v0.17.0 #86
Full changelog

oauth-apiserver

OCPBUGS-31996: bump x/net to 0.24.0 #112
Full changelog

oc-mirror

changes the owners file (#1012) #1012
OCPBUGS-48513: e2e: use same version of crane as in go.mod (#1025) #1025
Bump version to include v5.11.0 of go-git (#823) #823
Full changelog

openshift-apiserver

OCPBUGS-32446: bump(x/net) to v0.23.0 #430
Full changelog

openshift-controller-manager

OCPBUGS-48656: Add new team members to the OWNERS file #362
[release 4.13] OCPBUGS-38407, OCPBUGS-38408: Update opentelemetry dependency #326
OCPBUGS-41952: Add adambkaplan as approver #335
Full changelog

openstack-machine-api-provider

OCPBUGS-34422: Ensure portSecurity is correctly set in the Instance Ports #119
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-46924, OCPBUGS-46931, OCPBUGS-47311: x/net bump to v0.34.0 [release-4.13] #942
OCPBUGS-47507: CRD upgrade existing CR validation fix (#3442) #924
NO-ISSUE: [release-4.13] Backport e2e fixes #876
OCPBUGS-42146: adds paginating lister for evaluating CRs’ upgrade fitness versus new CRDs. #871
OCPBUGS-38254: [CARRY] perform operator apiService certificate validity checks directly #836
OCPBUGS-38608: (fix) Resolver: list CatSrc using client, instead of referring to registry-server cache (#3349) #843
OCPBUGS-32856: bump go-jose to v2.6.3 #780
OCPBUGS-35241: Unblock CI #772
Full changelog

operator-marketplace

OCPBUGS-49430: Upgrade golang.org/x/net [release-4.13] #590
OCPBUGS-32074: update golang.org/x/net for CVE-2023-45288 #566
Full changelog

ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9

OCPBUGS-38264: [release-4.13] Bump OVSDBTimeout and make it configurable #2289
OCPBUGS-37119: EgressIP: Reload certificates for the grpc heatlhcheck server #2226
OCPBUGS-35100: [release-4.13] ipv6+all protocols conntrack flush #2200
OCPBUGS-34669, SDN-4186: Introduce a validating webhook for ovnkube-node #2053
OCPBUGS-29865: CVE-2022-41723: net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding #2095
OCPBUGS-33730: Improves service iptables efficiency on start up #2172
OCPBUGS-32988: Bumping OVS #2143
OCPBUGS-33421: [release-4.13] Full implementation of KEP-1669 ProxyTerminatingEndpoints + ETP=local fix #2130
OCPBUGS-33218: [release-4.13] OVN bump to 23.06.1-112 #2153
OCPBUGS-28983, OCPBUGS-30920: Update netpol namespace address sets usage to the old ways #2097
Full changelog

powervs-block-csi-driver

OCPBUGS-36094: Fix CVE-2024-6104 by updating http-retryable to 0.7.7 #91
OCPBUGS-33638: Fix CVE2023-45288 by bumping x/net to v0.24.0 -4.13 #82
Full changelog

powervs-cloud-controller-manager

OCPBUGS-36104: UPSTREAM: <carry>: Fix go-retryablehttp CVE 4.13 #76
Full changelog

powervs-machine-controllers

OCPBUGS-41980: Update go.mod to fix CVE - 4.13 #87
Full changelog

telemeter

OCPBUGS-34829: fix issuer check during JWT authentication 4.13 #540
Full changelog

tests

OCPBUGS-54771: Component Readiness: [Networking / ovn-kubernetes] [EgressFirewall] test regressed #29661
OCPBUGS-53285: Add/remove team members to the OWNERS file for Builds #29608
OCPBUGS-53297: Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token #29610
OCPBUGS-52584: Use payload pullspec for image info test #29592
OCPBUGS-37921: Removes dependency on samples operator images #29007
OCPBUGS-35053: updated timeout to 3 seconds to account for network timing issues #28862
OCPBUGS-36501: test/extended: skip etcd leader change check on hypershift #28922
OCPBUGS-35857: Use centos7 tag instead of latest for cmd images tests #28895
OCPBUGS-33985: Provide SCC access via RBAC #28835
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github