4.16.0-0.ci-2026-09-25-021521

Download the installer for your operating system or run

oc adm release extract --tools quay-proxy.ci.openshift.org/openshift/ci:rc_payload__4.16.0-0.ci-2026-09-25-021521

Qualifiers (status api): None

Tests:

Blocking jobs
- aws-ovn-upgrade-4.16-minor Pending periodic-ci-openshift-release-main-ci-4.16-upgrade-from-stable-4.15-e2e-aws-ovn-upgrade
- aws-sdn-serial Pending periodic-ci-openshift-release-main-ci-4.16-e2e-aws-sdn-serial
- gcp-ovn-upgrade-4.16-micro Pending periodic-ci-openshift-release-main-ci-4.16-e2e-gcp-ovn-upgrade
- hypershift-e2e Pending periodic-ci-openshift-hypershift-release-4.16-periodics-e2e-aws-ovn

Upgrades from:

Loading changelog, this may take a while ...

Changes from 4.16.0-0.ci-2026-09-18-141521

Created: 2026-09-25 02:17:22 +0000 UTC

Image Digest: sha256:7d813fcc05d13cbfcd0180e045ff5e9404ed87ff01e5e988b897346e6b1041f6

Kubectl 1.29.7
Kubernetes 1.29.14
Kubernetes Tests 1.29.0
Red Hat Enterprise Linux CoreOS upgraded from 416.94.202609171141-0 to 416.94.202609241921-0 (diff)

rhel-coreos sha256:71c6dc81d36e93fbd82d9e784c97d8fa1330189a7a38e8f3a9899e43fc37c3c5
rhel-coreos-extensions sha256:e7de7ded67c712401bfa252b79a1a4267167b9f035752b8bbec7562c619b8cfd

OCPBUGS-102913: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #1616
Full changelog

OCPBUGS-102919, OCPBUGS-102939: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #608
Full changelog

OCPBUGS-127603: Update gcloud version to one that can be found #10918
OCPBUGS-67206: Update RHCOS-release-4.16 bootimage metadata to 416.94.202608150307-0 #10798
Revert “OCPBUGS-60668: Update RHCOS-release-4.16 bootimage metadata to 416.94.202601221345-0” #10846
OCPBUGS-60668: Update RHCOS-release-4.16 bootimage metadata to 416.94.202601221345-0 #10281
Full changelog

OCPBUGS-102952: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 #1573
Full changelog

OCPBUGS-120748: update Containerfile.cli base images to floating tags [release-4.16] #9560
Full changelog

OCPBUGS-103085, OCPBUGS-103089: [release-4.16] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #401
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github