4.15.62

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.15.62-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Failed (2 retries) periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.15-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-main-ci-4.15-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.15-micro Succeeded periodic-ci-openshift-release-main-nightly-4.15-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.15-micro Succeeded (3 retries) periodic-ci-openshift-release-main-ci-4.15-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.15-fips-payload-scan
- gcp-ovn-rt-upgrade-4.15-minor Succeeded (2 retries) periodic-ci-openshift-release-main-ci-4.15-upgrade-from-stable-4.14-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.15 Succeeded periodic-ci-openshift-hypershift-release-4.15-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-dualstack Succeeded periodic-ci-openshift-release-main-nightly-4.15-e2e-metal-ipi-ovn-dualstack
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.15-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-bm Succeeded periodic-ci-openshift-release-main-nightly-4.15-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.14.19, 4.14.20, 4.14.21, 4.14.22, 4.14.23, 4.14.24, 4.14.25, 4.14.26, 4.14.27, 4.14.28, 4.14.29, 4.14.30, 4.14.31, 4.14.32, 4.14.33, 4.14.34, 4.14.35, 4.14.36, 4.14.37, 4.14.38, 4.14.39, 4.14.40, 4.14.41, 4.14.42, 4.14.43, 4.14.45, 4.14.48, 4.14.49, 4.14.50, 4.14.51, 4.14.52, 4.14.54, 4.14.55, 4.14.56, 4.14.57, 4.14.58, 4.14.59, 4.15.10, 4.15.11, 4.15.12, 4.15.13, 4.15.14, 4.15.15, 4.15.16, 4.15.17, 4.15.18, 4.15.19, 4.15.20, 4.15.21, 4.15.22, 4.15.23, 4.15.24, 4.15.25, 4.15.28, 4.15.29, 4.15.30, 4.15.31, 4.15.32, 4.15.33, 4.15.34, 4.15.35, 4.15.36, 4.15.37, 4.15.38, 4.15.39, 4.15.40, 4.15.41, 4.15.42, 4.15.44, 4.15.45, 4.15.46, 4.15.47, 4.15.48, 4.15.49, 4.15.5, 4.15.50, 4.15.51, 4.15.52, 4.15.53, 4.15.54, 4.15.55, 4.15.56, 4.15.57, 4.15.58, 4.15.6, 4.15.7, 4.15.8, 4.15.9

4.15.61 (changes) - S F F F S S F F F F
4.15.60 (changes) - Success
4.15.59 (changes) - Failed
4.15.43 - Failed
4.15.27 (changes) - Failed
4.15.26 (changes) - Failed
4.15.3 (changes) - Failed
4.15.2 (changes) - Success
4.15.0 (changes) - Failed
4.14.62 (changes) - Success Failed
4.14.61 (changes) - Failed
4.14.60 (changes) - Success
4.14.53 (changes) - Failed
4.14.46 (changes) - Success
4.14.44 (changes) - Failed
4.14.18 (changes) - Failed
4.14.17 (changes) - Success
4.14.16 (changes) - Failed
4.14.0-0.nightly-2026-03-11-183953 (changes) - F F S

Upgrades to:

4.16.58 (changes) - Success

Loading changelog, this may take a while ...

Changes from 4.15.43

Created: 2026-03-12 12:14:53 +0000 UTC

Image Digest: sha256:0301752d0cbc1d62336f5c467be4b63947e882750760243f513da5c6c003289e

Components

Kubernetes 1.28.15
Red Hat Enterprise Linux CoreOS upgraded from 415.92.202501080724-0 to 415.92.202603101737-0 (diff)

Removed images

ovirt-machine-controllers

Rebuilt images without code change

agent-installer-utils git 33b7d855 sha256:9a9003f132e3a80d1e61e0a14ba70673575486a11fc63047dbc5da54de484220
alibaba-cloud-controller-manager git abf4fa96 sha256:12ce88f9e1a1b71234df78a946854d94398c7801c2a904f5c870a7e738520327
alibaba-disk-csi-driver-operator git 41b367ae sha256:79863edd2c807223160815e6ac9076f5c9f7d9d4e0c9a63e74740e94c1dc1655
alibaba-machine-controllers git f7f5eed8 sha256:1adb6f2554e704eeb14408296b20908df60f6152cca214988d9ca83a43fca85f
apiserver-network-proxy git adccbd5c sha256:b053cc9e6d2d1f6545c325d21e70c262ca93f0e942ce86de8ae204cabf23295a
aws-cloud-controller-manager git fd77d92c sha256:eb52b4fc935108cd8ea6bec272c3b6ff80132d00811f7db7f3be4aefb7bb2999
aws-ebs-csi-driver git 7043c1cc sha256:79ce736babbf630680f1ffcbf525560165dcc1f1be4bfd883974668fd965a156
aws-pod-identity-webhook git 13385034 sha256:a716ced337536b650bccff73de12593dc67ea5e4ad9ad6428744e62439826f1e
azure-cloud-controller-manager git 0d799a26 sha256:3a825d7c879109d52d88d75f57529a91bc73d99609e883e42afcf8f55b0084ed
azure-cloud-node-manager git 0d799a26 sha256:8c6b66b93af840203300ae81f7395d890afcbd6e528efcee7b635f25ac6839e7
azure-cluster-api-controllers git 44832d2d sha256:82998614a560e1ae4d8d7682738d7f162f401e9a4f037bb3ebc921c3107efacf
azure-disk-csi-driver git dcb7e1c7 sha256:d7c6032247db60f4beb4bd30a485cc8b116446e46455793bdc41477aacebdebd
azure-disk-csi-driver-operator git 160cf624 sha256:36358d47459b6b8c7da1d3244f596693d47552fa55565caad9be46082ec21daa
baremetal-runtimecfg git 1fbb2c0c sha256:e79a58d5ed99672be80b1eaaef2c4f9192bd7afb0f89ef3811f19acba2c8154f
cli git 82316376 sha256:8980e86968893c5c3eae78aa5bd419d4d7d5b8403516bd6005ca20efb45a98fd
cli-artifacts git 82316376 sha256:47e72f75cfd1d522fb1c84d5eecffab68ff8ce2a86308f971376411bfb4378d2
cloud-network-config-controller git 6864da06 sha256:f5e0451b4daad962e2354a7eca5d853ef688a47fe59173de7006f5b258113611
cluster-authentication-operator git 7aaa40eb sha256:482717d12d058bd67ecb570ee7f2c262e19ad11c4fb0c5b5c016fa5dced41282
cluster-autoscaler git 89149896 sha256:8dd210d61bfeeecc76d05452e6cbcbb1cbc154e047d2eb3142ce18a827499bb2
cluster-autoscaler-operator git 8425d88b sha256:ee8e8598cd6e765704983850cd0b975fcd07e59f286da667245796839fcb352c
cluster-baremetal-operator git 6e850eed sha256:76838fc043a5184bb7335d31921bd7464a56f1d6f0bfd9a130c532d0338f3f21
cluster-bootstrap git 0849c462 sha256:2a104a3d6d12e5e35322e5e7afbae61e1fb1d8fa3b4691502b5c30c0320ba16f
cluster-capi-controllers git 2053e13c sha256:dcd877c19d6534a3b1aa36d1e9045b5c69ddeb0a1dca96b09eeaf55888133341
cluster-capi-operator git 203435ef sha256:0280df8c73b8f1522489cb8b2ed010b24a10ba087ca1874c1bb2c1125fb617ab
cluster-config-api git 0a58f8c3 sha256:51a0e3271147bb16f2e403981995578cd716c11d6c77ee1f81292ee72db50085
cluster-config-operator git 0b4c69fd sha256:e423653887f10b1c7d2489869b427db96039a656c275e9f497a4738390f162d3
cluster-control-plane-machine-set-operator git e1b692b1 sha256:46056442551301f05e713dcecfe2e116f5c86ca0790b55073f890de84e1f2fd7
cluster-csi-snapshot-controller-operator git 65dbb12b sha256:469736dcd73106794a2fe57efab5c503aedc30a7dcde601ca2a9edbe723ad0c3
cluster-kube-cluster-api-operator git 128d8e08 sha256:5cb22413e46b752abb13160c3490c904eca701535f4cc8f08ed6ffaa3ebd84bd
cluster-kube-controller-manager-operator git ee8cf525 sha256:9b90e50538e0756a1141a8169ca312cc3de32c3cd3a6d014fb5ac10408524ed1
cluster-machine-approver git 863813ec sha256:28a8a062d5016492209df4333f812f5eda8e1fd15cc22824c28ed37c67097081
cluster-olm-operator git a7ba8987 sha256:68a5c47db5fdab9dce654c75947315d6eb388e87577678681b876b7bbe69a0bc
cluster-platform-operators-manager git 37a0a919 sha256:d2e584de15cd15124658178a25afb8a4072960cb5fd467dea02bc37180f868ec
cluster-policy-controller git cc48f315 sha256:5c79a0c9f6f29c5155f50394c9b9e4460247b127466342b485ef5f8a7c6bb2be
cluster-update-keys git 802233d8 sha256:38f4ea386214e7839b63b7852f90d44df21cfbce833ad7bf159081b623304b05
configmap-reloader git 617398f5 sha256:9e1b12d443b13d806885006589a37fc779da0e230dccaf5739c30fe835ad3dfd
console-operator git 91f5c970 sha256:8b5f7ac130895b975a6638b902cae404607e3e03d182120e36c0cf6b26d926fc
csi-driver-nfs git d032dc10 sha256:168d73d0d328cb77b146759789d707dd0b2f77d9a57013fe5132b2a38fde92ce
csi-driver-shared-resource git 260a085a sha256:0b16bf7b792e531dbef7f7510ab0c4307cf8a8df21b9b5d7878f7567cd310479
csi-driver-shared-resource-operator git 8d017b7f sha256:fe477597a369e7287e35459b4d175ae94c4c4795eb015e169d3fbd4c727d4d18
csi-driver-shared-resource-webhook git 260a085a sha256:67eab8c31922b212951da9255132a1b296dba7427c8f2e493fab51fdec48edcd
csi-external-attacher git f806f266 sha256:5edd0f045ffe0055192ff85e62931e315d0f3c9a317c7df02373c1606f3fc176
csi-external-provisioner git ce5a1a33 sha256:daa1dc1c2d5e6ed537b3142a8220ae0d7acaa52b2e5d796524461756b4bb705c
csi-external-resizer git 3b4236d3 sha256:646bbd4f22d3d860ef7eb3fdc610b57b70ba883104411b6c2a5e59bc4f9883e2
csi-external-snapshotter git 4f2955c7 sha256:317cecd9f11624e4c0bf42c244d6d5f48b86de4fb674a2a735d554caa18d6f09
csi-livenessprobe git 240bb8c0 sha256:5b52d876f7499cb0ea56c88c8758d7d532dcc976fddd4375a4ce9b36d24ce243
csi-node-driver-registrar git 9005584e sha256:56f3b5e0adf69b6db33a86007b281fc732631543d9d588cedb117e23aa0d091a
csi-snapshot-controller git 4f2955c7 sha256:3a7fa79be06f115817d530c14c1c61d83b920e99571b6b41c3b5307ab2142c6c
csi-snapshot-validation-webhook git 4f2955c7 sha256:0c110172ca53b200e405485d9fd154e4cbacf271d69ef090a7d527707ba7ead6
deployer git 82316376 sha256:2cd7aa8c3bc955118ef9f2e1e1e46ab51a0b2e2e5ab0037e91e99e7786a3bc4d
driver-toolkit git 7a448c2e sha256:415e460d47ea62b11dce6dce314195d643011bb373104c684a9ea145f00bd5a1
egress-router-cni git f8ec690b sha256:f8603a7b6bee306e845ff46949cad1375bd1aa636e2bef8c89f914c739a31ea2
etcd git a7005ef1 sha256:b7ca2c0c58c4fa3a323bf0144219b1725c9c36621c54faec81e29fb5b8afc7eb
gcp-cloud-controller-manager git fc50272a sha256:c213a9b858a06dc94216264ca444918bb3f3bb3f19d993f3ae3538c83b5efd1b
gcp-cluster-api-controllers git bad54034 sha256:6f7a6cdf976c045aa7bf13e0e5ba4b8e3680929351dc248c7286ecdc25a7df4e
ibm-cloud-controller-manager git cc0d5415 sha256:da9abd6e9a2986e0ef34a16b3034ac5acbfb2bed1f16579822f19f5ffa09b338
ibmcloud-machine-controllers git 6846b9a7 sha256:e2c351e2c2eea7c53ae59d124c0f92b0931410d21e9cc0c3fe789cc1496a0018
ironic-machine-os-downloader git bcbcd95b sha256:80b4aa5bc6c6a309fe37a1dda59e793b96eb5012b4ced3c5eeec634f52ff8209
k8s-prometheus-adapter git 34e20193 sha256:5630e4025ccc4f2deeb284077e337848367c303d137f81898e49643faed9ebc2
keepalived-ipfailover git 87c23b5a sha256:352431c44d8c312c4e6b64d9dc18edb6fbb289696eb437900bc3059d65450972
kube-metrics-server git bcbf241c sha256:7e89af48be57342908d8935a6d8ef38097f6df74d1e6facbc6f7c2ed80542d40
kube-rbac-proxy git 9308e7f2 sha256:55f622e3cbc2a02f3c035b8ae0ab277dd09118b4dc1357d9e94431f0e6606d69
kube-state-metrics git 037b59c2 sha256:b7f9efbe609b6f9ee29e3db9739aa223eba16a4ce0f5df1c9b56f7d1eaa47f29
kubevirt-cloud-controller-manager git dbaf9ea1 sha256:ac15515b4a1bf74e9bc1e3e2aff035440a6794dae423d580522780a96b2e6747
machine-os-content sha256:3e1ff0db60932b7d223300f5a0c9128339d0fc214c1e69fe406cbcb3dbcfe33b
monitoring-plugin git 1217bc1e sha256:2eee5bce3f862af8ced008a98d3f24c826934f2f26d8ce644ecc5b6020363a73
multus-cni git 05497ad1 sha256:35cd813160372fec5daa93935e4182253805f366641d4a2bcede529d8c2a3f1e
multus-networkpolicy git b377b4b5 sha256:2108e48082e6943ee0a316dd80628128eb1b72759afc497bcecc9b3c5d50c1b6
multus-route-override-cni git 1ccafc34 sha256:63b8154092c6d82157be6af4f69b593ba4c938867b5c66e98910a453a88421f3
network-interface-bond-cni git f91decaa sha256:636f202fb2b5cd925daec96b7f474d1f28b8f02191ec7de1b606ef3f9397c510
network-tools git 17536c8d sha256:00e89278fda90023de4fb49f9010928d7ee9ff33c6df3ade753f1c7dbef5cbda
nutanix-cloud-controller-manager git 040d4e01 sha256:fe70ea62c5c6682bf59e6ddf3264e07f8b03f6916423b5e36b857cfe73952978
oauth-server git c055dbb9 sha256:a4dcfa7fd13b2ad90b58dd0a012e4586c93b6b03a19c313ac24c2ffa4622cdbe
olm-catalogd git 035d3835 sha256:2864a640e1ab1d38d3e5d42043ee44d1556f124ae3a97132d315e90b4c4054fb
olm-operator-controller git 303b954f sha256:fa12e2cad7a6ce96e64264b13ccac4013d61994c616106ca1ac54bd9e21f1fc8
olm-rukpak git 5b09cd44 sha256:2b41c871dbba26cb06b8ba8eab8b0fc0e124b0b0a711f81c186ef7668e184ea8
openshift-state-metrics git 1915f645 sha256:a468bb826b5a7d912a1d2ca54a3b9b76d802a485bd786fa65b8dc0da5a6b26e5
openstack-cluster-api-controllers git 232472ea sha256:0c3a42d5514c7ad4937e3c04be16096a75ea4566c170d9fa0b71c018f70cb6fb
openstack-machine-api-provider git 396a09ff sha256:87054032d32ce9ee73789d3bf21c6731e92a7b4e24872b0b6e2e81e13649f017
ovirt-csi-driver git b8d25ad6 sha256:47c3160913676598acc6b318680e1ae544282977134a0b18d4d08c3275317268
powervs-block-csi-driver git 38bee567 sha256:064fb9ca135acd79fdd9ce4e5b6f030e917b10ff2ca225a315a9b769eea66d6a
powervs-cloud-controller-manager git 1d6a7ed9 sha256:43045aaed8d9b2f692be274b2ff21424d8dd91c527d3218e073dcefc76466439
prom-label-proxy git f3f1f5d1 sha256:06b36fc6ae89e5c3569ae23b04642c007e6a931b0aec7d4c64cf1ee9c8605800
prometheus-config-reloader git 902436ac sha256:459083442e5eb8a8c1535f455ba2f780d460c3eddd2cb2ac34c051e146a8f67d
prometheus-node-exporter git aed837c3 sha256:b19ef9b1507caabae8e92f541bc045c9a599dc59e5dfae80027bf90b699777c6
prometheus-operator git 902436ac sha256:7ae0e8b003aa231b23d5618e6a3589ba22874e50499eb0ba37b3c2b8fdab4570
prometheus-operator-admission-webhook git 902436ac sha256:b24a86a8b23ee98bc641e743e8a8ec8620ee933d2a7c0371d0001a45d23f8fef
rhel-coreos sha256:b8c3eabbfd9c27d9bbad3b7786f0d177680717f2ded5d38cc8dc9338b625df5e
rhel-coreos-extensions sha256:6d55d999adaaac3981893b33be9681ec35488c1aefbab2eb052081d3eb220335
route-controller-manager git c5cc7a73 sha256:fcde2417efdb6e75b6d97b9d79a257921eda6939bc792b6d4c829ea37146d808
telemeter git 14489f7d sha256:720c376d93d90873dcb3595d5c8fa03e6bacc1cde4a7b143b8b8055708afc944
thanos git 66161ad4 sha256:0f9138b013d40397c0a0cd693827863fdf235a1b5c6c20fd3522c9744f916829
tools git 82316376 sha256:d155adcf68e7457545df98c330c1b25745e34baae9bbf2f219a1c0ff50248df6
vsphere-cloud-controller-manager git 81ad52ad sha256:855f2aef5d10f3322d60ff25b52f0a42639c487a21772454ffd60e51ed9bd4a3

agent-installer-api-server

OCPBUGS-58633, OCPBUGS-58638: Bump glog to v1.2.5 in release-4.15 (#7905) #7905
OCPBUGS-54402: Bump go-jwt to 4.5.2 to fix CVE-30204 (#7487) #7487
OCPBUGS-46940: OCPBUGS-46185: Bump golang.org/x/net to 0.33.0 (#7199) #7199
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-58643: Bump github.com/golang/glog pkg version to 1.2.4 (#1189) #1189
OCPBUGS-53714: Bump jwt to 4.5.2 in release-4.15 (#1092) #1092
Bump golang.org/x/net to 0.33.0 (#1011) #1011
Full changelog

agent-installer-node-agent

run go mod tidy / vendor #1020
And 3 elided commits (e.g. from squash or rebase merges)
Full changelog

alibaba-cloud-csi-driver

OCPBUGS-67910: Bump github.com/sirupsen/logrus to v1.8.3 #47
Full changelog

aws-cluster-api-controllers

OCPBUGS-61943: UPSTREAM <carry>: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It #573
OCPBUGS-58668, OCPBUGS-58673: bump github.com/golang/glog to v1.2.5 #562
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-67913: Bumped logrus to 1.9.3 #492
Full changelog

aws-machine-controllers

OCPBUGS-63141: client: re-use a single file for building the session instead of randomly named files #153
OCPBUGS-63141: revert: client: re-use a single file for building the session instead of randomly named files #150
OCPBUGS-63141: client: re-use a single file for building the session instead of randomly named files #143
Full changelog

azure-file-csi-driver

ART-13080: Regenerate go.mod to fix build failure #94
Full changelog

azure-file-csi-driver-operator

OCPBUGS-67918: Bump github.com/sirupsen/logrus to v1.9.3 #113
OCPBUGS-60544: add tag matching to Azure File storage class #110
Full changelog

azure-machine-controllers

OCPBUGS-56657: Fix failure when attempting to modify immutable availabilitySet #150
OCPBUGS-53226: dynamically setting the amount of fault domains #134
Full changelog

azure-workload-identity-webhook

OCPBUGS-53794: github.com/golang-jwt/jwt/v4 v4.5.2 #34
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-76929: terraform/provider/google: Fixing GCP inconsistencies present with the service account creation #10316
OCPBUGS-42554: only allow a single network in failure domain topology #9060
OCPBUGS-62849: Release 4.15 bump terraform provider azurerm #10007
OCPBUGS-62410: Make swift containers removal not fatal for UPI. #9978
OCPBUGS-60497: update resolv.conf every time on bootstrap node #9885
OCPBUGS-39416: OpenStack: Install CI dependencies from rpm #9103
OCPBUGS-54353: aws/edge/byovpc: tag edge subnets with shared value #9612
OCPBUGS-54367: IBMCloud: Move to IBM TF openshift fork #9614
OCPBUGS-45961: Update upi references to api-internal #9298
OCPBUGS-50994: Bump terraform-provider-google version to v5.37.0 to fix consistent issues during cluster creation #9509
OCPBUGS-41815: Validate MTU for custom network #9294
OCPBUGS-28706: [azure] update tested x86 instance type on 4.15 #7966
OCPBUGS-47716: [release-4.15] Power VS: Create region-zone-sysType hierarchy #9340
OCPBUGS-44259: IBMCloud: Ignore failed VPC regions #9183
Full changelog

baremetal-machine-controllers

OCPBUGS-78100: [release-4.15] fix vendor/ for hermetic migration #244
OCPBUGS-46641: Bump x/net to 0.33.0 #227
Full changelog

baremetal-operator

OCPBUGS-53336: BMO can expose any secret via BMCEventSubscription CRD #408
Full changelog

cloud-credential-operator

OCPBUGS-60974: ccoctl: aws to use proper issuer url on subsequent runs #910
OCPBUGS-58678: github.com/golang/glog v1.2.5 #894
OCPBUGS-53417: github.com/golang/glog v1.2.4 #844
OCPBUGS-53818: update github.com/golang-jwt/jwt #840
OCPBUGS-51540: Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected #833
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-63169: ccm: disable unused secure-serving port and webhook #424
Full changelog

cluster-dns-operator

OCPBUGS-52499: [release-4.15] Add runbook_url for CoreDNSErrorsHigh #432
Full changelog

cluster-etcd-operator

OCPBUGS-67931: Update logrus to 1.9.3 to address CVE-2025-65637 #1547
OCPBUGS-53506: fix CVE-2025-30204 #1404
Full changelog

cluster-image-registry-operator

OCPBUGS-67932: Bump logrus to 1.9.1 #1289
OCPBUGS-53866: bump github.com/golang-jwt/jwt #1220
OCPBUGS-51596: bump golang.org/x/oauth2 #1211
OCPBUGS-51264: ensure that storage names don’t end in dashes #1183
Full changelog

cluster-ingress-operator

OCPBUGS-49392: Block Upgrades in release 4.15 for CA-Signed Certs Using SHA1 #1172
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-67937: CVE-2025-65637 openshift4/ose-cluster-kube-apiserver-rhel9-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.15.z] #2044
OCPBUGS-50661: Increase waitForFallbackDegradedConditionTimeout #1806
Full changelog

cluster-kube-scheduler-operator

CNTRLPLANE-2843: chore: update OWNERS #625
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-67942: Bump github.com/sirupsen/logrus to v1.9.1 #145
Full changelog

cluster-monitoring-operator

OCPBUGS-66047: test: remove image registry e2e tests #2757
OCPBUGS-46570: Add new metrics for OpenShift logging telemetry #2541
Full changelog

cluster-network-operator

OCPBUGS-62980: Update CNO reviewers/approvers #2817
OCPBUGS-56649: Fix live migration with feature migration configured explicitly #2715
OCPBUGS-36688, OCPBUGS-43099: Unexpected Behavior During Cluster Upgrade for the ovn-ipsec-host pods #2658
OCPBUGS-53282: Not update status.migration of the network.config CR to empty #2669
[Release 4.15] OCPBUGS-51208: Use applyconfigurations for updating network.oprerator status #2653
OCPBUGS-47633: Prevent live migration process from flapping between step-2 and step-3 #2609
Full changelog

cluster-node-tuning-operator

e2e:performance: decode to valid kubeletconfig object (#1275) #1275
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-67946: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.15] #655
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-48832: Add new team members to the OWNERS file #379
Full changelog

cluster-samples-operator

OCPBUGS-63517: references to github.com/sclorg/django-ex.git now also refer to the branch #660
OCPBUGS-55475: Adding mutex to func createSamples on handler.go #634
OCPBUGS-54481: add rhdmalone to owners #623
OCPBUGS-49369: add shannon and aroyoredhat as owners #597
Full changelog

cluster-storage-operator

OCPBUGS-67955: bump github.com/sirupsen/logrus to v1.9.3 #654
Full changelog

cluster-version-operator

OCPBUGS-50591: Set openshift.io/required-scc: privileged annotation in version pods #1152
Full changelog

console

NO-JIRA: Bump builder image to v29 #15992
OCPBUGS-74443: Bump lodash to latest #15970
OCPBUGS-69767: Disallowed Pipelines-plugin Pipelines navigation section #15864
OCPBUGS-65822: Remove required flag from ‘console.flag/model’ pipelines-plugin extension #15749
OCPBUGS-65601: /auth/error?error=missing_state&error_type=auth is showing blank page #15727
OCPBUGS-44159: bump dompurify to latest #15592
OCPBUGS-60672: Secret key with binary file changes when edited via Console #15422
OCPBUGS-59997: Remove the devconsole backend common internet proxy and replace it with dedicated ones #15359
OCPBUGS-59564: Add flags in console static plugin for all the components of this epic #15306
OCPBUGS-60029: fix bug where / in console.tab/horizontalNav href brea… #15353
OCPBUGS-57521: Debug pod logs are not accessible when debugging a node via OpenShift Console #15181
OCPBUGS-58223: Fix TypeError Cannot read properties of null (reading ‘metadata’) #15221
OCPBUGS-57097: Add all files to vendor regardless of gitignore #15134
OCPBUGS-45257: Enabling topology e2e tests on CI #14721
OCPBUGS-55733: fix bug where operator appears twice #15021
OCPBUGS-55174: Add missing pipelines plugin name to known plugins #14982
OCPBUGS-54673: Added token to proxy header #14943
OCPBUGS-54252: Update the monitoring topic used by the console team #14904
OCPBUGS-53138: fix run time error when no completed version exists #14879
OCPBUGS-53055: Show Observe section without PROMETHEUS and MONITORING flags #14867
OCPBUGS-52344: fix alert rule link #14828
OCPBUGS-51332: Do not pass CSV name to operand list page when an exen… #14800
OCPBUGS-49849: include external labels so silenced alerts not displayed in notifications #14718
OCPBUGS-48593: ReRun of Resolver based PipelineRuns fails from UI #14689
OCPBUGS-48592: ImagePullSecret getting duplicated when editing DeploymentConfig in Form View #14688
OCPBUGS-48048: Update vendor imports to include all PatternFly components #14662
Full changelog

container-networking-plugins

OCPBUGS-55948: Check error returned by ipv6 SettleAddresses #190
Full changelog

coredns

OCPBUGS-77512: Modify .gitignore to not exclude vendor build folders #169
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-67958: fix CVE-2025-65637 #362
OCPBUGS-58885: CARRY: don’t ignore json files #342
OCPBUGS-43375: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.28 into release-4.15 #297
Full changelog

csi-driver-manila-operator

OCPBUGS-67959: Bump logrus #252
Full changelog

docker-builder

OCPBUGS-65960: BuildConfig inline Dockerfile fails with heredoc syntax #491
OCPBUGS-58141: S2I build cpu limits observed by assemble are limited to 1 cpu #477
OCPBUGS-42917, OCPBUGS-43294: Bump buildah to 1.33.12 #442
OCPBUGS-43188: runc library bump to 1.1.12 #436
OCPBUGS-48298: skipping some unit tests to avoid failures as they are duplicate #428
OCPBUGS-48281: Add team members to the OWNERS file #427
Full changelog

docker-registry

OCPBUGS-53650: bump jwt and oauth dependencies #433
Full changelog

gcp-machine-controllers

OCPBUGS-55410, OCPBUGS-55411: Disable shielded VMs for non-UEFI disks #117
Full changelog

gcp-pd-csi-driver

OCPBUGS-67973: Update logrus to v1.9.3 #93
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-67971: bump github.com/sirupsen/logrus to v1.9.3 #161
Full changelog

haproxy-router

OCPBUGS-49392: Block Upgrades for CA-Signed Certs Using SHA1 #641
Full changelog

hyperkube, pod

OCPBUGS-67902, OCPBUGS-67977: CVE-2025-65637 - bump github.com/sirupsen/logrus to v1.9.3 [4.15] #2583
OCPBUGS-74300: Skip E2e: attach on previously attached volumes should work #2569
OCPBUGS-59147: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2358
OCPBUGS-59147: UPSTREAM: <carry>: disable some legacy cloud provider Azure tests #2359
OCPBUGS-52183: UPSTREAM: <carry>: kubelet/cm: fix bug where kubelet restarts from missing cpuset cgroup #2227
OCPBUGS-53139: UPSTREAM: 129180: prevent unnecessary resolving of iscsi/fc devices to dm #2244
Full changelog

hypershift

OCPBUGS-74670, OCPBUGS-74671: Support proxy authentication when user/pass is included in URL #7606
CNTRLPLANE-1266: Drop extinct mce-2.5 pipeline #6655
CNTRLPLANE-1232: Move CPO pipeline to hermetic builds #6601
OCPBUGS-58506: [release-4.15] Add missing service network DNS entries to KAS cert #6394
OCPBUGS-57553: Add proxy variables for the MCD Pod #6293
OCPBUGS-57121: Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs #6231
OCPBUGS-46467: Consistently look up and dial cloud API hostnames #5300
OCPBUGS-52590: Honor proxy vars in the util insecure http client #5791
CNTRLPLANE-920: Konflux build pipeline service account migration #6086
CNTRLPLANE-920: Konflux build pipeline service account migration #6081
OCPBUGS-55266: [release-4.15] Add konnectivity-proxy sidecar to openshift-oauth-apiserver #6070
OCPBUGS-51800: Fix golang crypto dependency go.mod replacement #5995
OCPBUGS-53898: bump golang-jwt v4 and v5 #5908
Red Hat Konflux update control-plane-operator-4-15 #5955
ART-11792: update go mod dependency for konflux #5923
OCPBUGS-51729, OCPBUGS-51800: Bump dependencies to OCP fork in backports #5902
OCPBUGS-50867: Prevent IgnitionServer from flooding the API server with patch requests #5633
OCPBUGS-52992: [release-4.15] OCPBUGS-52506: refactor aws identity health check into new controller #5815
OCPBUGS-52896: Make managed-trust-bundle optional #5813
OCPBUGS-50699: add region to AWS creds passed to operators managed by CPO #5669
NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.6 #5729
OCPBUGS-51253: OCPBUGS-50692: Fix IsIPv4 function identifying also addresses instead of CIDRs #5701
OCPBUGS-52172: [release-4.15] Add HostedCluster additional trustbundles to konnectivity-https-proxy #5722
NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.5 #5683
chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1739420147 #5624
NO-JIRA: chore(deps): update dependency mkdocs-material to v9 #5642
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1738816775 #5576
NO-JIRA: chore(deps): update konflux references #5588
NO-JIRA: Red Hat Konflux update control-plane-operator-4-15 #5338
NO-JIRA: chore(deps): update dependency mkdocs-mermaid2-plugin to v0.6.0 #5589
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.3 #5586
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.2 #5577
OCPBUGS-49668: fix overwriting PKI operator HCP conditions #5512
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1737480393 #5486
NO-JIRA: chore(deps): update konflux references (release-4.15) #5480
NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.50 (release-4.15) #5434
NO-JIRA: Update dependency mkdocs-material to v8.5.11 (release-4.15) #5429
NO-JIRA: chore(deps): update konflux references (release-4.15) #5425
NO-JIRA: chore(deps): update konflux references (release-4.15) #5386
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1736729788 (release-4.15) - abandoned #5380
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1736404155 (release-4.15) #5379
NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.49 (release-4.15) #5385
NO-JIRA: [release-4.15] Bump golang.org/x/crypto and golang.org/x/net #5371
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1734626445 (release-4.15) - abandoned #5344
NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9-minimal docker tag to v9.5-1734497536 (release-4.15) #5343
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-77211: [release-4.15] standardize build paths #125
OCPBUGS-58739: bump github.com/golang/glog to version v1.2.4 #107
OCPBUGS-56064: tech debt: rework vendor patches #92
OCPBUGS-53906: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #85
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-67980, OCPBUGS-67981: bump github.com/sirupsen/logrus to v1.9.3 #165
OCPBUGS-59775: [IBM VPC] set offlineExpansion to false in e2e test manifest #150
Full changelog

ibm-vpc-node-label-updater

OCPBUGS-56064: tech debt: rework vendor patches #49
OCPBUGS-53538: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #45
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-67289: [release-4.15] Fix incomplete vendor/ #137
OCPBUGS-51814: CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork #122
Full changelog

insights-operator

Ignore previous status when disabling alerts (#1060) #1060
Full changelog

ironic

OCPBUGS-69784: Bump eventlet version to 0.33.1-7 #764
OCPBUGS-48148, OCPBUGS-48597: Bump jinja2 to 3.0.1-6.el9.2 #624
Full changelog

ironic-agent

OCPBUGS-69782: Bump eventlet version to 0.33.1-7 #233
Full changelog

ironic-static-ip-manager

OCPBUGS-49836: Fix subnet validation #49
Full changelog

kube-proxy, sdn

OCPBUGS-54868: Handle openshift-host-network namespace as special when it modifies #654
Full changelog

kube-storage-version-migrator

NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-15). #228
Full changelog

kubevirt-csi-driver

fix for OCPBUGS-58587: CVE-2024-45339 openshift4/kubevirt-csi-driver #69
Full changelog

libvirt-machine-controllers

OCPBUGS-26506: Updating ose-libvirt-machine-controllers-container image to be consistent with ART for 4.15 #282
Full changelog

machine-api-operator

OCPBUGS-67989: bumped logrus to v1.9.3 #1460
OCPBUGS-59861: Updates GCP CredentialsRequest #1397
OCPBUGS-55410, OCPBUGS-55411: Updates GCP credentials request #1356
OCPBUGS-53251: add image/read permissions #1349
OCPBUGS-52481: Drop oVirt support #1340
Full changelog

machine-config-operator

OCPBUGS-77636: Machine-config controller should not log about non-existent pull-secret changes #5573
OCPBUGS-60214: [release-4.15] OCPBUGS-53248: Enforce VIPs to be collocated at the same host #4988
OCPBUGS-59737: Remove MachineConfigNode CRD from manifests #5188
OCPBUGS-48284: Do not run resolv-prepender from NM dispatcher #4783
OCPBUGS-57340: Do not enable on-prem-resolv-prepender.path for UPI #5115
OCPBUGS-36688: Add ipsec connect wait service #4937
OCPBUGS-54206: Update format verbs for alert logs #4943
OCPBUGS-54176: Update ObservedGeneration in KubeletConfig #4944
OCPBUGS-43742: Soften haproxy timeout for kubeapi probe #4663
OCPBUGS-50526: Add clarification to invalid maxUnavailable alert #4842
OCPBUGS-48583: trying to wait for sub-contorllers #4796
Full changelog

machine-image-customization-controller

OCPBUGS-67983: [4.15] uplift logrus #154
Full changelog

machine-os-images

OCPBUGS-54170: Change rhcos release browser url #58
Full changelog

multus-admission-controller

OCPBUGS-58769: Update the github.com/golang/glog module to v1.2.4 #104
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-55619: Fixes leftover podref issue #366
Full changelog

must-gather

OCPBUGS-36371: Run ppc node collection in parallel #430
OCPBUGS-42970: Collect etcd object count #456
OCPBUGS-48083: Update owners #474
Full changelog

network-metrics-daemon

OCPBUGS-58779: Bump github.com/golang/glog to v1.2.4 (#114) #114
OCPBUGS-60374: Replace e2e test image (#126) #126
swtich golint install method (#124) #124
Full changelog

nutanix-machine-controllers

OCPBUGS-47264: fixing CVE-2024-45338 #117
OCPBUGS-51850: CVE-2025-22868 #109
Full changelog

oauth-apiserver

OCPBUGS-74925: bump kubernetes-apiserver to pick up loopback cert expiration update #173
NO-JIRA: (chore): update OWNERS #175
Full changelog

oauth-proxy

OCPBUGS-61447: Update x/crypto to v0.31.0 #336
Full changelog

oc-mirror

OCPBUGS-77858: fix vendor for hermetic 4.15 #1361
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

openshift-apiserver

OCPBUGS-67998: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.15] #611
OCPBUGS-74923: bump kubernetes-apiserver to pick up loopback cert expiration update #600
OCPBUGS-58822: Fix image reference in TestImageStreamImportQuayIO #517
OCPBUGS-47766: Pass expected type to deploymentconfig/scale object validation. #466
Full changelog

openshift-controller-manager

OCPBUGS-57761: Set node-pullsecrets volume to read-only to protect image pull credentials #396
OCPBUGS-56474: Empty proxy variables are causing issues during the build #383
OCPBUGS-54344: Unable to look up the service account secrets for build #370
OCPBUGS-48280: Add team members to the OWNERS file #359
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-68000: CVE-2025-65637 openshift4/ose-openstack-cinder-csi-driver-rhel8-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.15.z] #192
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-61466: [release-4.15] Add NetworkPolicy as a supported kind #1051
OCPBUGS-61389: [4.15] e2e stability fixes #1084
OCPBUGS-57430: reduce cache expiry frequency [release-4.19] #1023
OCPBUGS-56463: fix(olm): improve error logging for missing olm.managed label (#3558) #1010
OCPBUGS-48662: Fix concurrent namespace resolution #948
OCPBUGS-48697: Fix excessive catalog source snapshots cause severe performance regression #958
OCPBUGS-46926, OCPBUGS-46933, OCPBUGS-47313: x/net bump to v0.34.0 [release-4.15] #940
Full changelog

operator-marketplace

OCPBUGS-62221: Remove Expect func so that the test case can use the retry logic #672
OCPBUGS-62119: Update memoryTarget on catalog source pods #666
OCPBUGS-49428: Upgrade golang.org/x/net [release-4.15] #588
Full changelog

ovirt-csi-driver-operator

OCPBUGS-68032: Bump github.com/sirupsen/logrus to v1.8.3 #144
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-56660, OCPBUGS-58162: Unpin OVS patch versions #2649 #2649
OCPBUGS-56419: Update to FDP25.A.1 24.03.5-40. #2573
OCPBUGS-50583: Bump OVN to 23.09.6-12 to consume fix for FDP-905 #2454
OCPBUGS-53384: [release-4.15] Dockerfile.base: bump OVS version to 3.3 #2492
OCPBUGS-43605: Add SDN node subnet gateway IP to host-network address_set #2419
OCPBUGS-46403: Add static route to the hairpin masquerade IPs to pod #2396
OCPBUGS-47799: Let OVN-northd bind remote ports #2407
OCPBUGS-44708: Add hybird overlay pod IPs to the namespace address_set #2399
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-68006: Fix CVE-2025-65637 by bumping logrus to v1.9.1 #99
Full changelog

powervs-machine-controllers

OCPBUGS-61702: Use OS_GIT_VERSION in Makefile when found (for Konflux builds) #128
OCPBUGS-54753: Fix for CVE-2024-51744 in github.com/golang-jwt/jwt/v4 in release-4.15 #115
Full changelog

prometheus

OCPBUGS-56740: BACKPORT: fix promtool analyze block shows metric name with 0 cardinality #256
Full changelog

prometheus-alertmanager

OCPBUGS-77058: Include go-verify-deps expected files in gitignore #117
Full changelog

service-ca-operator

OCPBUGS-68019: update logrus to v1.9.1 #321
Full changelog

tests

OCPBUGS-74300: Skip E2e: attach on previously attached volumes should work #30725
OCPBUGS-66329: Replace RunHostCmd with Exec function to censor bearer token being exposed #30528
OCPBUGS-57335: Fix regex parser for censoring private key #29913
OCPBUGS-61229: images/tests: Remove rteval #30207
OCPBUGS-57136: aws/edge: prevent test using unschedulable nodes #29897
OCPBUGS-55477: support provider type external #29739
NO-JIRA: Sync OWNERS from main branch #29856
OCPBUGS-55695: [build] Ensure Git Clone Does Not Run Privileged #29752
OCPBUGS-54769: Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com #29664
OCPBUGS-52582: Use payload pullspec for image info test #29590
OCPBUGS-41614: Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token #29502
OCPBUGS-49647: Fixing build s2i ruby test data inline with latest ruby version(>=3.0) #29503
OCPBUGS-48749: Add/remove team members to the OWNERS file for Builds #29551
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-61654: Fix unit tests #73
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-68022: CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.8.3 #159
Full changelog

vsphere-csi-driver-operator

OCPBUGS-68020, OCPBUGS-68024: CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.9.3 #323
Full changelog

vsphere-problem-detector

OCPBUGS-68031: bump github.com/sirupsen/logrus to v1.9.3 #201
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github