4.16.71

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.16.71-x86_64

Qualifiers (status api): None

Tests:

Blocking jobs
- upgrade Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Pending (2 retries) periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.16-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-main-ci-4.16-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.16-micro Pending (1 retry) periodic-ci-openshift-release-main-nightly-4.16-e2e-aws-sdn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Pending
- azure-ovn-upgrade-4.16-micro Pending (1 retry) periodic-ci-openshift-release-main-ci-4.16-e2e-azure-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Pending
- driver-toolkit Succeeded periodic-ci-openshift-release-main-nightly-4.16-e2e-aws-driver-toolkit
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.16-fips-payload-scan
- gcp-ovn-rt-upgrade-4.16-minor Succeeded periodic-ci-openshift-release-main-ci-4.16-upgrade-from-stable-4.15-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.16 Succeeded periodic-ci-openshift-hypershift-release-4.16-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-ipv4 Succeeded periodic-ci-openshift-release-main-nightly-4.16-e2e-metal-ipi-ovn-ipv4
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.16-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Untested upgrades: 4.15.21, 4.15.22, 4.15.23, 4.15.24, 4.15.25, 4.15.26, 4.15.27, 4.15.28, 4.15.29, 4.15.30, 4.15.31, 4.15.32, 4.15.33, 4.15.34, 4.15.35, 4.15.36, 4.15.37, 4.15.38, 4.15.39, 4.15.40, 4.15.41, 4.15.42, 4.15.43, 4.15.45, 4.15.46, 4.15.47, 4.15.48, 4.15.49, 4.15.50, 4.15.51, 4.15.52, 4.15.53, 4.15.54, 4.15.55, 4.15.56, 4.15.57, 4.15.58, 4.15.61, 4.15.62, 4.15.63, 4.15.64, 4.15.65, 4.15.66, 4.16.10, 4.16.11, 4.16.12, 4.16.13, 4.16.14, 4.16.15, 4.16.16, 4.16.17, 4.16.18, 4.16.19, 4.16.20, 4.16.21, 4.16.22, 4.16.23, 4.16.24, 4.16.25, 4.16.26, 4.16.27, 4.16.28, 4.16.29, 4.16.30, 4.16.31, 4.16.32, 4.16.33, 4.16.34, 4.16.35, 4.16.36, 4.16.37, 4.16.38, 4.16.39, 4.16.4, 4.16.40, 4.16.41, 4.16.42, 4.16.43, 4.16.44, 4.16.45, 4.16.46, 4.16.47, 4.16.48, 4.16.49, 4.16.5, 4.16.50, 4.16.51, 4.16.52, 4.16.53, 4.16.54, 4.16.55, 4.16.57, 4.16.58, 4.16.59, 4.16.6, 4.16.60, 4.16.61, 4.16.62, 4.16.63, 4.16.64, 4.16.65, 4.16.66, 4.16.67, 4.16.7, 4.16.9

4.16.70 (changes) - S F P F P F S
4.16.69 (changes) - Failed
4.16.68 (changes) - Success
4.16.56 - Success
4.16.8 (changes) - Success
4.16.3 (changes) - Failed
4.16.2 (changes) - Failed
4.16.1 (changes) - Failed
4.16.0 (changes) - Success
4.15.69 (changes) - Failed
4.15.68 (changes) - F F P F
4.15.67 (changes) - Success
4.15.60 (changes) - Failed
4.15.59 (changes) - Failed
4.15.44 (changes) - Success
4.15.20 (changes) - Failed
4.15.19 (changes) - Failed
4.15.18 (changes) - Failed
4.15.0-0.nightly-2026-09-15-112245 (changes) - Success

Loading changelog, this may take a while ...

Changes from 4.16.56

Created: 2026-09-17 06:07:12 +0000 UTC

Image Digest: sha256:e8d2a7b9f0565993f40582cdd56c27672720917d577da9b557ab11a554a71824

Components

Kubectl 1.29.7
Kubernetes 1.29.14
Kubernetes Tests 1.29.0
Red Hat Enterprise Linux CoreOS upgraded from 416.94.202601160124-0 to 416.94.202609140240-0 (diff)

Removed images

ovirt-csi-driver
ovirt-csi-driver-operator

Rebuilt images without code change

agent-installer-api-server git 5c16119a sha256:8137c1985e4e7502843f5f40c23068351549bb7e037136c4aeffe3b5a1d5ef67
agent-installer-csr-approver git 302f47ff sha256:5700afe46a4ec3aadcce47c53b87571885eb0bb83ba801e06f733fe0cb8e2e71
agent-installer-node-agent git 720b5023 sha256:99d1bef2fcff1fa090d6b733e7f3aa9216a6e2b1f7917ef016281871e2331319
agent-installer-orchestrator git 302f47ff sha256:3d2efcdc688117cf718388c7f778dafd290d2bc7f91dab26e0202d14fa24719a
alibaba-machine-controllers git 248372a4 sha256:bd26ee69f692cfd0b7219fcdc321bc0f78a092445acb2d6c19d328b236f8c737
apiserver-network-proxy git ca81b6a3 sha256:232c2437b1a13130261d04ad7f29e4cb976526c9861ed587dc2301ca4a3fb760
aws-cloud-controller-manager git a53e9def sha256:5e60b9e2ec70104ec1aa444d7ec069425990016d489c99eb149a833101d50475
aws-ebs-csi-driver git 1d29a74a sha256:0d04bbbfe3b0788de68095f0d9f9d333827749756e30c8372d29a7b4246025e9
aws-ebs-csi-driver-operator git ea7977e7 sha256:9d3e19fab4290be04c0581004aab4e419799f61c500c2494a8a6131ff0e7c214
aws-kms-encryption-provider git c66065de sha256:4e96851f8b50446bec88435d7aeb14b92465d077b3dc32bbd2047d2596ddc62e
aws-machine-controllers git 169f6ab7 sha256:a71d352be4edfa2399bdae3d2b0013872b446be5c7a3eb66468aeefcb587b0d2
aws-pod-identity-webhook git 459c5314 sha256:a3a1def15422f7958a1e8e69441eb775215b1513cc01450d5570a9c61e48bfcf
azure-disk-csi-driver git 6b55f6fb sha256:49a906056b57a048aa9b23a9e4f068688d77243de61c4fabddfd7d727947dab8
azure-disk-csi-driver-operator git ea7977e7 sha256:dc06d55b34d92622062d02bfe4b64a3b15e27cf30fb54b1a21ba129c299b28fb
azure-file-csi-driver-operator git ea7977e7 sha256:118c36d903eb4c49bf3ed449d537bd340acf3c0b81ad375c7731fd1f41935bf1
azure-machine-controllers git 5d4b4f31 sha256:0c4c53ca9f547cce52ffffe6c3c7d2dc8b1ed820dc32bead3189c6b81574510b
azure-workload-identity-webhook git 5b8d171e sha256:852c92ef851ceaa29bcf983636c806090570ae12f4e4076cddbf726342cc7177
baremetal-runtimecfg git db2c4c71 sha256:71fc55e07354c230c88c5981b33cce1808b958ce3d84cdf2bc9d22e38da24768
cloud-network-config-controller git b3854cc9 sha256:d571c72f557cb1d88b4fcb53252a34a855c6e2d1ac505f5d90fcc4f1587e436b
cluster-authentication-operator git 0e39ace5 sha256:5ef6c812646a6d1dd2176a86f440ad796d626f625d338eaa43cd5c731b30b461
cluster-autoscaler-operator git 70164fc6 sha256:c2f73d7f3d841f1b8f347e05603ec0e73493e235ee1e47db0c477ef678a2ae3b
cluster-bootstrap git 27bfb59f sha256:dbd5cd832b1fbea59f57f074f5580513cfdfa1e17e749c51c123e5571a5bdc2b
cluster-capi-controllers git 5830a10a sha256:71b4258cfc0c04ff619bcf4604364413f01c27b2e4250f87d3fe5151be195888
cluster-cloud-controller-manager-operator git d721cd62 sha256:0f5c0d144840d77c7851f230150cdab2048e25f6e295b9a0df31ad4d9f0a9d40
cluster-config-api git 0677a887 sha256:2523fff2b897fdba95e1b3e04d9d64b85316cd6660aab7ac7d73476f01d6d928
cluster-config-operator git 441d29c9 sha256:08d35278cd85b3254441d238ed9fe4c6d586c3fa7f5269531d09c9f524032ac0
cluster-control-plane-machine-set-operator git 14571e8a sha256:d4989d07bd5e69d3a608bec972a7b7982a5af6208fb24938f620e9b23412ec97
cluster-csi-snapshot-controller-operator git 439826e1 sha256:ba130d95d0b3a3f580f310d7c1b0803b65d03c33b1146b2eea96b47ee0e9dc99
cluster-dns-operator git a4b1cfb4 sha256:e69a1a64c9ed5a16ea4a86d69efe49c3a64a977bb823c89216605d5239fcdb24
cluster-kube-cluster-api-operator git 95ceaa9e sha256:d7a9e203746aaed827daea2fa2643eb04e517fa0ad4ba629403c3e1043bc29db
cluster-kube-controller-manager-operator git b3faac1f sha256:9b6f8a797b81c1638b6c31779693eeafc1097653856bb0fa1723afdc6ef6611b
cluster-machine-approver git 7685374f sha256:7c7d849724599dac400b86d399cee3cebc6e09a218ceb07fb8acd00d2788e1a7
cluster-openshift-controller-manager-operator git 2ed3cf99 sha256:0192b33f478c5066fdd08174f00d1f7173b4a55f8fd5b63780583558eff236b0
cluster-policy-controller git eaea543f sha256:1c979367d279bb5c3046cc7f6e5775e8dd642e5e3f27d531a2db9515699b85da
cluster-samples-operator git f9a02d5c sha256:d734cdafab5d33b931b98efa52671acc6203ba8d897a76d9740089d8e8043911
cluster-update-keys git e8478585 sha256:8d58b60aa8f70fc6aabb13842b81941dd0d94619890cc22a2b2c2161e9314097
cluster-version-operator git be820285 sha256:28eba979263a7a3d42a016df966291674482449f0b4f6f0f3b606993174fa4ea
configmap-reloader git dc91ddc4 sha256:9cb4660c57c1370e2c03462f8d4368f1d9c36cfa802a9c512c081c8da5cd60ce
csi-driver-manila-operator git c25d1ff2 sha256:d50acce62c814623b73a7b53e70e62dac25bb86aecf076fb0cef8b3db55d63d4
csi-driver-shared-resource git bc125def sha256:f8734d0dcfbcc231c8b442a26416c94f01a21d483ec2b918962242c65506ebb0
csi-driver-shared-resource-operator git 1e1194bc sha256:03be6a21b33bb1160bd916029cf007c7c4f22416acafb18841ef7580742dc5f3
csi-driver-shared-resource-webhook git bc125def sha256:8b7d6aaaca17c12b117989a68cbcaa1e811f601af1ce613e83c4f90b98b3e19e
csi-external-attacher git 7da80aab sha256:3f98438f3c14c8d23fa409973ab6b537a185b368fbf2d3e0c9b89705102e46fb
csi-external-provisioner git 9e8af011 sha256:2e620e4ab851168f0b941b25667ce30c60b9f3a26ca4d9b26e88422363829092
csi-external-resizer git 06e08fd2 sha256:7088d97f56fecc1be7e8a137719588fd6dbdcaf1f4b382e19e189836711d931d
csi-external-snapshotter git ee32ba01 sha256:c57d63a8188483a858059944165858140bde0508c182fb0ad8c51821db58353b
csi-livenessprobe git f5e3ff55 sha256:1dd9edb2a453850885ed66e77160b53ac789b95d0d13d6eccec9008b63746d06
csi-node-driver-registrar git d1a2105b sha256:50a3a486721082b3c945f4adeaa15ca4c44121a64bdc9dd80aa703d1e6c82b95
csi-snapshot-controller git ee32ba01 sha256:002278473d90bea99f7d2d3151041239d01d8a18517c11e8fba8ec828a210452
csi-snapshot-validation-webhook git ee32ba01 sha256:0ded947aa0def69d2088dbfe04f56b2445c63b78627cb5a812e47ac7df82600f
docker-builder git b602ffcb sha256:497992bb3a7e0b1341ca39d9e4cdcdaba5b9fc5e676da94015479e803382a000
docker-registry git 072c544c sha256:fa34322ff2e224d72c10e262065c77bb551b041ef200ca9ceb765aa4b57fc87d
driver-toolkit git 1d5732f0 sha256:553ce1f95c82803481c05a1d5d5c25944fc1d723ae6abf26db5476c4fe74bd66
egress-router-cni git 7089efe6 sha256:cb1b38eccd46a1e2d773c9da00e0c943e5b763353ffd7e7f14e6c340e3607109
etcd git e7911c0d sha256:62c40d72c5be86c61b4a3fcad1da2dd022e338ab68220d89779fd9431bfc85e6
gcp-cloud-controller-manager git 26b43dfc sha256:6c522cd327087e941caa7fff16da65342dc362e2ec5e330d45a62008d39eb1cb
gcp-pd-csi-driver-operator git 799327f7 sha256:963069e79e7e799ce45743dab13edc3869a1cc898f5e9739e1407d63e85b6f60
ibm-cloud-controller-manager git f961f16d sha256:ab45262757ccc1371327c2e27173282876cf824e8987f1186ae45ec958b3189f
ibm-vpc-block-csi-driver-operator git 9ca53768 sha256:ed45deb7c83a45600de5cf3903438cc93a978a85d94c61547009b0cdbc10ae2d
insights-operator git a06a980f sha256:d896e02da93f2ea6631a8cff36ab16659e7c44561f435be4ac00427b2b4d39bf
ironic-machine-os-downloader git 93b8b5fa sha256:c8b454e91d21f675be05a1db233bd5f66216fc175554bb987dbb8667f9796819
ironic-static-ip-manager git f44e8a08 sha256:ada5ed7b9057130b3dab27f53f7c02389d50a37ac91bbeda680b69fa6b69e067
k8s-prometheus-adapter git e4f859be sha256:4a55b26e3575fc9c30c6b62004aaea4b2d7f330f1b4a417340b8a49ffe98bf81
keepalived-ipfailover git b58673a3 sha256:79cbcd88cfa15beadf151553c6601dae1c7862f97e0aa61ed96d363dcd691212
kube-proxy git 53fea06b sha256:cfd7fd7fdbcf0118052f46ddae3d32c5d5c5309f2ed9bfa0663774c4924b4451
kube-rbac-proxy git c38f4734 sha256:6fc5a76861417cf930f87bc7f6f8c3a0846ca71bddf63f2e6671c081af179b79
kube-storage-version-migrator git 6f213320 sha256:6cfcfe0ff8a597e5e748de06ba448144ab808eda1b304e9d2f2e57c60affa545
machine-image-customization-controller git 5460f7c3 sha256:cfd39dfbe1e93b2b88239325f6d36f01257324b621f28163994cca17a52cfdd8
multus-admission-controller git a15bf454 sha256:34dbcbcd5eef6c0f2b8e240789f74d534b9d07b8cadb088f649762d63afe0ccf
multus-networkpolicy git f988f894 sha256:986c2b2e3dacd38bf2061bfb986d68126ebff3938c0bf7632d283d2734ae9220
multus-route-override-cni git 73594f77 sha256:35b106a0a37d2e00035e8af50c00931eb71182a6264f19251e7febfd3f3446ba
multus-whereabouts-ipam-cni git b8c8fc12 sha256:f4913d21a1e7517ceadf657dccb4a45edb7db6efdc179e0e34d2931b716070ab
network-interface-bond-cni git e6880659 sha256:f202f6381acd2fb18c09053eced7376f9a07975730e5f5fae1afbbfebc7b223a
network-metrics-daemon git 1210db38 sha256:782285f9f0b40d297891ad68ab212f91435bb844a700801e599487ae0ae92d22
network-tools git 234ed43e sha256:b1a1e3657402ab422ad1c954dc378a6edb3a4140577a79831e7ca708257e4365
nutanix-cloud-controller-manager git 28bf5963 sha256:93e94afbc1cc22addaf0d03ea579a3a1e7f320c251faf67dcc89f8a40069bd1d
nutanix-machine-controllers git 2f2e121b sha256:908c8c8f7fbe9dc5c65f9f1b750038b2180415bb35d27c41f95e6537005bb132
oauth-server git 3739138c sha256:df0023dea65a94f98e6a2cadcc102e3c92e2bed435e8d6da52b87f2258dcd177
oc-mirror git b137a53a sha256:eea7ab1d78132518e1b246025f1d7ae5295372f2d1903365e8680bae1111f0ec
olm-catalogd git 79975a51 sha256:9ea11447beb1d5cc5789d342e42b5f3b122b80e927d19b5802b0339c47d9e11e
olm-operator-controller git 80b8649c sha256:9af7eaeebc824e3d0c43d3a9a3a2ae6a34c2b365151a552d4865791745dfcf7e
olm-rukpak git 282cc84c sha256:8ce48fee25d10d39c94e8097f8bacd3789fd302835fc48e773538e97ab4757f3
openshift-controller-manager git 90f73f7e sha256:38bfc98aa16cb8ca4cc46c6fa7492236df89c4a585b83514d8d82f6530755ac3
openshift-state-metrics git 59b8a0ff sha256:3b1781dbaeeb592ee2f55e140ee9d87ac246d2084967035d05902eec5f429420
openstack-cinder-csi-driver-operator git 85b52097 sha256:e20701f7ec058bf5908f8cf057b810f00e2bcc59602d1096c164b2f40e676307
openstack-cluster-api-controllers git 3b972b2b sha256:18850cf832e20cc7a4565594cbfa40bb0aa9232b5f2c05a7512e4228ab30ce39
powervs-block-csi-driver-operator git 9c5dd8d1 sha256:104b58e46a71bc3377b7ee7a6e4b91d4f8f8852898ca274959529fc976f9b65f
powervs-cloud-controller-manager git 20e6dc70 sha256:f3269813e5c87e54dcea90fab797756920d3ff1d4b15794034ea64c6ce3dd544
powervs-machine-controllers git 2bfcc0f8 sha256:870ebfed40f374654b3706173fce7a97c932d9298b8a922afc9c4271003500db
prom-label-proxy git 5e14722e sha256:cb491a96cf34a8f1571d85e19271f8806374c2eddecd3e36ec2327eccc2b1a72
prometheus-config-reloader git c7262a43 sha256:22ab64d5a4b2611247ac9c03972c94ef71c3ae5d50c2bc543ea9d8121feb623a
prometheus-node-exporter git 29ba26d1 sha256:29326e598520ee783586b4ebd2d4b9b2f2d9e0aee6a6479dbbf60d34e382b910
prometheus-operator git c7262a43 sha256:46657bbbd4c943da85896c3c6421e51f518de0b223dc18f4580d5affba1d702a
prometheus-operator-admission-webhook git c7262a43 sha256:fa3ebab4bc68b1f068eac084a1af4e3b0876aecc56f96f02e7430784776c7bf3
rhel-coreos sha256:60138ef967bb97d4dfc367ac07664168b79652d1b6f97cbde4b88df3f29786fa
rhel-coreos-extensions sha256:bf87a72e8310e56479dd0f09928859ec4edc71e78818497203ed9e7f742fe180
sdn git 53fea06b sha256:587378e1f9ac1458b88dac5751495530ba6f73116a381f2d20a0839d18049664
service-ca-operator git 538c7b98 sha256:98d7d641692831f41ada81f7842e27ed0337bed7e1bb193a5f66481709a86efa
telemeter git c1ecd105 sha256:91ce2a271a8e6f318f51248c8e6eb36461394968ff4529cf50cb6ac120498186
thanos git 85eee25c sha256:4437bd6a972eeff5c4de6f7f994fd4926885b573d733a65709260a8c2be8fc6e
vsphere-csi-driver-operator git 7940ea16 sha256:cf01bad098ebaeac2e755dfaa0ae47facdb6436f932bdf7e6ff0e69ad44cfdac

agent-installer-utils

OCPBUGS-68046: bump github.com/sirupsen/logrus to v1.9.3 #239
Full changelog

alibaba-cloud-controller-manager

OCPBUGS-102906: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 to address CVE-2026-33814 #62
Full changelog

aws-cluster-api-controllers

OCPBUGS-78227: [release-4.16] update go mod dependency for konflux #591
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-79998, OCPBUGS-85635, OCPBUGS-85636: Bump google.golang.org/grpc to v1.79.3 #182
Full changelog

azure-cluster-api-controllers

OCPBUGS-78176: [release-4.16] update go mod dependency for konflux #364
Full changelog

azure-file-csi-driver

UPSTREAM: 3221: OCPBUGS-115466: Bump golang.org/x/crypto to v0.33.0-sec.5 #165
OCPBUGS-89335: Address CVE-2026-33186 #139
Full changelog

azure-kms-encryption-provider

OCPBUGS-79927: Bump google.golang.org/grpc to 1.64.1-sec.1 patch #48
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-67206: Update RHCOS-release-4.16 bootimage metadata to 416.94.202608150307-0 #10798
Revert “OCPBUGS-60668: Update RHCOS-release-4.16 bootimage metadata to 416.94.202601221345-0” #10846
OCPBUGS-60668: Update RHCOS-release-4.16 bootimage metadata to 416.94.202601221345-0 #10281
OCPBUGS-74885: Azure UPI ARM template: use storageAccountId #10282
OCPBUGS-76586: terraform/provider/google: Fixing GCP inconsistencies present with the service account creation #10298
Full changelog

baremetal-machine-controllers

OCPBUGS-78099: [release-4.16] fix vendor/ for hermetic migration 4.16 #243
Full changelog

baremetal-operator

OCPBUGS-77278: Unblock BMH direct deletion when detached annotation is present #463
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-91215, OCPBUGS-91552, OCPBUGS-91589: Bump golang.org/x/net to openshift-sustaining/net v0.35.0-sec.2 #2346
OCPBUGS-111894: Fix pre-existing unit test failures #2374
Full changelog

cloud-credential-operator

OCPBUGS-81849: Bump go-jose/go-jose/v4@v4.1.4 #1040
OCPBUGS-79941: Bump google.golang.org/grpc to v1.79.3 #1026
Full changelog

cluster-autoscaler

OCPBUGS-78702: allow clusterapi provider to skip paused resources #415
Full changelog

cluster-baremetal-operator

OCPBUGS-77447: Bump github.com/go-errors/errors to v1.5.1 #562
Full changelog

cluster-capi-operator

OCPBUGS-79943: Bump google.golang.org/grpc to v1.79.3 #573
NO-JIRA: Allow sustaining engineering to self serve dependency updates #560
Full changelog

cluster-etcd-operator

OCPBUGS-68058: Update logrus to 1.9.3 to address CVE-2025-65637 #1546
Full changelog

cluster-image-registry-operator

OCPBUGS-68059: : Bump github.com/sirupsen/logrus to v1.9.1 #1285
Full changelog

cluster-ingress-operator

OCPBUGS-86713: Add configuration override for X-SSL strip #1487
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-68064: CVE-2025-65637 openshift4/ose-cluster-kube-apiserver-rhel9-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.16.z] #2043
Full changelog

cluster-kube-scheduler-operator

CNTRLPLANE-2843: chore: update OWNERS #624
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-68069: Bump github.com/sirupsen/logrus to v1.9.1 #144
Full changelog

cluster-monitoring-operator

OCPBUGS-77276: AlertingRule: fix duplicate PrometheusRules after MD5->SHA-224 naming change #2831
Full changelog

cluster-network-operator

OCPBUGS-67000: Re-disable metrics server #2855
OCPBUGS-63233: Manual feature backport of cert rotation for whereabouts #3040
OCPBUGS-84182: fix(hypershift): use net.JoinHostPort for URL construction #2981
OCPBUGS-75890: Tweak iptables-alerter to try to avoid crictl bug #2898
: NO-JIRA: Update CNO reviewers/approvers #2768
Full changelog

cluster-node-tuning-operator

OCPBUGS-82675: Bump github.com/moby/spdystream from v0.2.0 to v0.5.1 #1551
OCPBUGS-78766: [4.16] PPC: filter out namespaces dir #1466
Full changelog

cluster-olm-operator

OCPBUGS-86243: Update grpc-go to v1.67.3-sec.1 to fix CVE-2026-33186 #206
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-68072: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.16] #654
Full changelog

cluster-storage-operator

OCPBUGS-87613: remove oVirt code from CSO 4.16 #709
OCPBUGS-78769: Add patch permission to provisioner role #685
Full changelog

console

OCPBUGS-98424: CVE-2026-59869 bump js-yaml #17158
Fix for OCPBUGS-92076: CVE-2026-44990 #16719
OCPBUGS-100513, OCPBUGS-101789: Fix CVE-2026-69153 and CVE-2026-45623 - Bump postcss #17060
OCPBUGS-114417: Prevent binary secret data corruption when editing #17101
OCPBUGS-105793: Disable failing OLM and other e2e tests to unblock CI #16958
OCPBUGS-105796: Fix operator-hub e2e test by replacing unavailable Red Hat catalog source with Community #17081
OCPBUGS-87987: [release-4.16] shell-quote: Arbitrary code execution via command injection due to unescaped line terminators #16599
OCPBUGS-81597: CVE-2026-4800 #16566
OCPBUGS-77123: [release-4.16] CVE-2026-26996 Bump minimatch library #16346
OCPBUGS-79439: Bump immutable #16657
OCPBUGS-88027: Fix JSON annotation parsing to prevent OperatorHub crash #16588
OCPBUGS-88377, OCPBUGS-88380, OCPBUGS-88412, OCPBUGS-88419, OCPBUGS-88444: CVE-2026-44495 #16612
OCPBUGS-88554: Stabilize legacy OperatorHub Cypress waits #16608
NO-JIRA: enable multi-architecture yarn builds #16417
OCPBUGS-83299: [release-4.16] openshift4/ose-console-rhel9: Axios: Remote Code Execution via Prototype Pollution escalation #16298
OCPBUGS-78673: Namespace is not persisting when switching to developer view from the topology page of admin page #16161
CONSOLE-5011: migrate to yarn berry #16078
OCPBUGS-76578: Bump axios #16032
NO-JIRA: Bump builder image to v29 #15993
OCPBUGS-74447: Bump lodash to latest #15967
Full changelog

console-operator

OCPBUGS-77992: update go mod dependency for konflux #1115
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-85669: CI Build root image tag sync with ART #234
Full changelog

coredns

OCPBUGS-77463: Modify .gitignore to not exclude vendor build folders #168
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-79978: Bump google.golang.org/grpc #389
OCPBUGS-68080: fix CVE-2025-65637 #361
Full changelog

csi-driver-nfs

OCPBUGS-84931: Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.67.3-sec.1 to avoid go version bump and fix CVE-2026-33186 #182
Full changelog

gcp-cluster-api-controllers

OCPBUGS-78280: [release-4.16] update go mod dependency for konflux #267
Full changelog

gcp-machine-controllers

OCPBUGS-79970: Bump google.golang.org/grpc to v1.79.3 #167
OCPBUGS-79970: [release-4.16] Fix setup-envtest GCS 401 by downloading binaries directly #176
Full changelog

gcp-pd-csi-driver

OCPBUGS-68087: Update logrus to 1.9.3 #92
Full changelog

haproxy-router

OCPBUGS-86713: Strip X-SSL-* headers for plain HTTP #805
OCPBUGS-79960: Bump google.golang.org/grpc to v1.79.3 #769
Full changelog

hyperkube, pod

OCPBUGS-68041, OCPBUGS-68091: CVE-2025-65637 - bump github.com/sirupsen/logrus to v1.9.3 [4.16] #2582
OCPBUGS-74299: Skip E2e: attach on previously attached volumes should work #2568
Full changelog

hypershift

OCPBUGS-99075: fix(backport): konnectivity agent auth #9097
OCPBUGS-84182: fix(cno): use brackets only for IPv6 in server URL #8348
OCPBUGS-76534: feat(updates): enable CVO metrics access with RHOBS monitoring flag #7704
OCPBUGS-74375, OCPBUGS-74376: Support proxy authentication when user/pass is included in URL #7578
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-79964: Bump google.golang.org/grpc to v1.79.3 #145
OCPBUGS-77210: [release-4.16] standardize build paths #124
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-103009: Replace golang.org/x/net with openshift-sustaining/net #170
OCPBUGS-115544: Fetch envtest assets from the controller-tools releases #181
Full changelog

ibmcloud-machine-controllers

OCPBUGS-103003: replace golang.org/x/net with openshift-sustaining/net v0.35.0-sec.4 #106
NO-JIRA: fix unit tests broken by deprecated kubebuilder-tools bucket #113
Full changelog

ironic

OCPBUGS-85333: update ironic-image commit hash to address CVE-2026-43003 #912
OCPBUGS-100162: bump openstack-ironic pin for CVE-2026-44918 fix #908
OCPBUGS-104459: bump openstack-ironic pin for CVE-2026-54423 fix(release-4.16) #877
OCPBUGS-76457: Bump pyasn1 to 0.5.1-4 #828
Full changelog

ironic-agent

OCPBUGS-85333: Update ironic-python-agent commit hash to address CVE-2026-43003 #316
OCPBUGS-99890: Bump ironic-python-agent pinned commit for CVE-2026-66138 #310
OCPBUGS-95070: Replace individual package removal with a single rpm -e loop #288
OCPBUGS-95070: Replace dnf remove with rpm -e to prevent dependency removal #276
OCPBUGS-61165: netutils: Use ethtool ioctl to get permanent mac address #215
Full changelog

kube-metrics-server

OCPBUGS-79929: Bump google.golang.org/grpc to v1.79.3 #66
Full changelog

kube-state-metrics

OCPBUGS-74875: Deduplicate CRS stores #133
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-95082: OWNERS: Update component to Cloud Compute / KubeVirt Provider #82
Full changelog

kubevirt-csi-driver

OCPBUGS-79930: Bump google.golang.org/grpc to v1.79.3 #108
Full changelog

libvirt-machine-controllers

OCPBUGS-77196: Fix incomplete vendor/ #302
Full changelog

machine-api-operator

OCPBUGS-98439: Use resource group when generating default Azure image #1516
OCPBUGS-76849: bumped logrus to v1.9.3 #1463
Full changelog

machine-config-operator

OCPBUGS-98960: Remove sensitive ControllerConfig logging #6315
OCPBUGS-98253: Bootstrap MCS logging entire ignition #6290
OCPBUGS-62171: Fix - NetworkManager restart or crash renders br-ex unusable #5354
OCPBUGS-60113: Enable debug logging for nodeip-configuration #5218
OCPBUGS-77253: Machine-config controller should not log about non-existent pull-secret changes #5694
OCPBUGS-77184: machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] #5685
Full changelog

machine-os-images

OCPBUGS-87878: Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs #102
Full changelog

monitoring-plugin

Fix for OCPBUGS-113514: CVE-2026-18446 #1184
Fix for OCPBUGS-94001: CVE-2026-13676 #1049
Fix for OCPBUGS-90069 OCPBUGS-90073: CVE-2026-12151 CVE-2026-9697 #1007
OCPBUGS-79441: immutable bump #898
OU-1260: [release-4.16] feat: use npm instead of yarn #813
OCPBUGS-76807: fix for CVE-2025-69873 #849
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-85251: Fix server url in kubeconfig #300
NO-ISSUE: [release-4.16] Bump Go to 1.21 and fix CI build root image #292
Full changelog

must-gather

OCPBUGS-86218: Collect object size with the object count #550
OCPBUGS-66106: Separate resources with comma to fix malformed inspect #515
Full changelog

oauth-apiserver

OCPBUGS-74112: UPSTREAM: <carry>: bump kubernetes-apiserver to pick up loopback cert expiration update #166
NO-JIRA: (chore): update OWNERS file #172
Full changelog

openshift-apiserver

OCPBUGS-82682: Address CVE-2026-35469 #649
OCPBUGS-68104: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.16] #610
OCPBUGS-74113: UPSTREAM: <carry>: bump kubernetes-apiserver to pick up loopback cert expiration update #595
Full changelog

openstack-machine-api-provider

OCPBUGS-78170: hermetic 4.16 #163
OCPBUGS-76794: Fix make test #155
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-79980, OCPBUGS-79981, OCPBUGS-87898: Fix CVE-2026-33186 with openshift-sustaining/grpc-go v1.67.3-sec.1 [release-4.16] #1318
OCPBUGS-82057: Drop github.com/distribution/distribution dep #1302
OCPBUGS-77959: Remove the collect-profiles info from the microshift kustomization file #1251
OCPBUGS-77169: Remove the collect-profiles job #1235
Full changelog

operator-marketplace

OCPBUGS-68108, OCPBUGS-68109: CVE-2025-65637 fixed in logrus v1.9.3+ #722
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-83497: External gateway: Remove routes for external gateway pods in terminating or not ready state #3140
OCPBUGS-78033: Add pperiyasamy to OWNERS for release-4.16 #3047
OCPBUGS-77685: Clear stale conntrack UDP entries for nodePorts #3038
OCPBUGS-77187: Fix conntrack reconciliation to use service port instead of endpoint port #2998
CORENET-6055, OCPBUGS-76277: [release-4.16] Dockerfile: Unpin OVN and consume the latest from FDP #2972
Full changelog

powervs-block-csi-driver

OCPBUGS-105268: Mitigate CVE-2025-30204 by bumping github.com/golang-jwt/jwt/v4 to v4.5.2 #139
Full changelog

prometheus

OCPBUGS-88616: remote: validate snappy decoded length before allocation in read endpoint #349
OCPBUGS-79985: Bump google.golang.org/grpc #321
Full changelog

prometheus-alertmanager

OCPBUGS-100357: Set testdata CA expiry to 20 years from issue date (#4112) #146
OCPBUGS-76536: Include go-verify-deps expected files in gitignore #116
Full changelog

route-controller-manager

OCPBUGS-79934: Bump google.golang.org/grpc to v1.79.3 #87
Full changelog

tests

OCPBUGS-105460: Use tagged version for openshift/kubernetes dependency #31541
OCPBUGS-74299: Update to latest openshift/kubernetes #30825
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-78028: hermetic migration 4.16 #107
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-78020: hermetic migration 4.16 #86
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-86874: Bump google.golang.org/grpc #182
OCPBUGS-68119: CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.8.3 #158
Full changelog

vsphere-problem-detector

OCPBUGS-103110: Bump golang.org/x/net to v0.35.0-sec.4 #235
OCPBUGS-86445: fix concurrent map writes #219
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github