4.18.53

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.53-x86_64

Qualifiers (status api):

Tests:

Blocking jobs
- upgrade Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-aws-ovn-serial
- aws-ovn-single-node-upgrade-4.18-micro Succeeded (1 retry) periodic-ci-openshift-release-main-ci-4.18-e2e-aws-upgrade-ovn-single-node
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- aws-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-main-ci-4.18-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-main-ci-4.18-e2e-azure-ovn-upgrade
- driver-toolkit Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-aws-driver-toolkit
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.18-fips-payload-scan
- gcp-ovn-rt-upgrade-4.18-minor Succeeded periodic-ci-openshift-release-main-ci-4.18-upgrade-from-stable-4.17-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.18 Succeeded periodic-ci-openshift-hypershift-release-4.18-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-ipv4 Succeeded (1 retry) periodic-ci-openshift-release-main-nightly-4.18-e2e-metal-ipi-ovn-ipv4
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-metal-ipi-ovn-ipv6
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance-serial

Upgrades from:

Untested upgrades: 4.17.14, 4.17.15, 4.17.16, 4.17.17, 4.17.18, 4.17.19, 4.17.20, 4.17.21, 4.17.22, 4.17.23, 4.17.24, 4.17.25, 4.17.26, 4.17.27, 4.17.28, 4.17.29, 4.17.30, 4.17.31, 4.17.33, 4.17.34, 4.17.35, 4.17.36, 4.17.37, 4.17.38, 4.17.39, 4.17.41, 4.17.42, 4.17.43, 4.17.45, 4.17.46, 4.17.47, 4.17.48, 4.17.49, 4.17.50, 4.17.51, 4.17.52, 4.17.53, 4.18.10, 4.18.11, 4.18.12, 4.18.13, 4.18.14, 4.18.15, 4.18.16, 4.18.17, 4.18.18, 4.18.19, 4.18.20, 4.18.21, 4.18.22, 4.18.23, 4.18.24, 4.18.25, 4.18.26, 4.18.27, 4.18.28, 4.18.29, 4.18.30, 4.18.31, 4.18.33, 4.18.34, 4.18.35, 4.18.36, 4.18.38, 4.18.39, 4.18.4, 4.18.40, 4.18.41, 4.18.42, 4.18.44, 4.18.45, 4.18.46, 4.18.47, 4.18.48, 4.18.49, 4.18.5, 4.18.6, 4.18.7, 4.18.8, 4.18.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.18.32

Created: 2026-08-14 12:58:49 +0000 UTC

Image Digest: sha256:f9d84ee7a22c2f9d1e36e40e7b2a06af7e14b44f5c88450d5567291d1b638dce

Components

Kubectl 1.31.1
Kubernetes 1.31.14
Kubernetes Tests 1.31.12
Red Hat Enterprise Linux CoreOS upgraded from 418.94.202601202224-0 to 418.94.202608111829-0 (diff)

Removed images

ovirt-csi-driver
ovirt-csi-driver-operator

Rebuilt images without code change

agent-installer-csr-approver git 81d6bc27 sha256:c708aa82d79279e1b7e37443211a1c728b7b52993eca87a336abc3d41da0eafe
agent-installer-orchestrator git 81d6bc27 sha256:87a5d2031b32ffb99a4964614e8274b3d892970b4436ad43494ca32f46c40642
apiserver-network-proxy git 2f62712d sha256:f5834ae09e075919c34aff3b7fdce434b3e613957c86523b363ee084a2b938fc
aws-cloud-controller-manager git c3951906 sha256:655b172c8408b9cabb67c03ac911abeb20f4deb8da84eefaad7c6ea0b270d8df
aws-machine-controllers git 7b6bfc74 sha256:5d10996aeb4692fa4d0a101e3f38f352e221df96694d6de41021eb54d8ab3ade
aws-pod-identity-webhook git f54f9a19 sha256:be5b7d277d8930252764b13c1772df92926187e4f6052756176fa425d90225b6
azure-machine-controllers git 2fdaa544 sha256:d5f829b9cc7b7c3f8c39a9ff3ff4002cd0bb08036957d24eba0aba66e83182c7
azure-workload-identity-webhook git f60e4029 sha256:1e9a19a1bc05b351282a255d1ad75a13c0f82d85d5b2076bc25899e8d1347326
baremetal-cluster-api-controllers git 80c3a063 sha256:34730e3cb9199b28785900d169f8d1e9a7100109d3b2241ae1bb125c448aa372
baremetal-machine-controllers git 1ede6c3f sha256:85323732b71d7bbeb6d82b704f8f6d697f548a76816b649f754fca404c31640b
baremetal-runtimecfg git 35341068 sha256:12de47a70956d9de42d96a7d248f5d58518187ea5624aa6d48c14850734122b1
cloud-network-config-controller git f892b915 sha256:99374dcb8fb1ba18592483a5994bb1e01463bef763d0471440268b818ed89b9f
cluster-autoscaler-operator git 474ad65c sha256:442cf1177f62f02680ce76ca08c85870c2c026037e43ae200be12e6b3b161655
cluster-bootstrap git d1e01954 sha256:384d8a965ff08d62092cefa5a292c3c1ca27f8e45beab6e458ed0badc178b582
cluster-cloud-controller-manager-operator git 8abb0673 sha256:5a0c9dad77fdf231ffc6455abf5eca6b35d588b94f2b5ea6236a9a31bd1cc5cc
cluster-control-plane-machine-set-operator git d17bf3a1 sha256:24cb261f503869dd21c39ff023a2df4241f396800bac379b67b80dd404c30497
cluster-csi-snapshot-controller-operator git 6fe70008 sha256:f349c32c7530915c31022bd2f6525d739ab4fee5203729ca32b361c110ccc088
cluster-dns-operator git 7cafd0c7 sha256:251daffc69dab66e92bf02066677c66bf23b5447688023f512214279c0f4c907
cluster-image-registry-operator git 1e3caa4b sha256:a0996e12d3054535491d907c136c5bee8d12a8fc313ca8fe94b33d69e46f03fe
cluster-kube-storage-version-migrator-operator git 59ba356f sha256:608042b4050154f0a8885aa16b64628521b3e62f04ea1169d4742c148fa637cd
cluster-machine-approver git 01d5fbbe sha256:1f5416c8718fe43a9a3fa453fb10d762cd7a93c48b183d32acb3afa8229af362
cluster-openshift-apiserver-operator git 0a6f6eb9 sha256:44b18b9a7568d5a8c489f8de0fe2ba1e6c94b11db9fb09661fad01fde928e09f
cluster-openshift-controller-manager-operator git f1711cf3 sha256:bffc170ad32a20191102119f0423376ff9e3eb1d459ea455ed8cc6e5bbd05a43
cluster-samples-operator git bc725fd4 sha256:b2b8ad509c0c01da95c5840468e01621dba0ec1970b06da98000b47a57eb4ba4
cluster-update-keys git 8caab452 sha256:ad138572a35e48cb14fe223b08f6016a117e0b0c77b118dfc6d3090b52a52b75
configmap-reloader git e2aaf00a sha256:1f247b2cbab9778f7de9fffafd899c9de55a6c019e7113f0df1c7d393277f6fc
coredns git 8ca7f02b sha256:8fe0c5d7756b023356a72ef014091847a4c4186bae75e9988f95033bbfb4ffdb
csi-external-resizer git a1423690 sha256:b01c9566364ac3e8ae75b89b51d6e307fdf25990fda4e00d132ee8ad33b7078e
csi-livenessprobe git 3a977844 sha256:c721a8125d9eb8d4482e781a719c37ba1ba353ed7f8da66cae46458eaf67ea0c
csi-node-driver-registrar git ef93f0be sha256:3c93ea215b7b9e4be655ba4f58dd24a4bc657736f7520ef959e2b81d993b014e
driver-toolkit git 2e139edc sha256:d694801ac276c544bca043039cb36bdf18022ffdcdd5ce3e32e9e396aee4d901
etcd git b5a4f8d0 sha256:634dd94b5c28c57844b9db0cadd575d65457d40b0492ed0f46fac757095dcac4
gcp-cloud-controller-manager git 6ea23561 sha256:62e119013aae8c5023072e99c768313035556c0bd74e31af046306220ce5bfda
gcp-workload-identity-federation-webhook git f0a670c7 sha256:8b3ab8e12a72cce6bb53c51f382186854c837d9723c0ca2b79df70de5849f6be
ibm-cloud-controller-manager git a33026b1 sha256:007e573fb1c51de04bc7f1203e6c9177b1f61e243053417241adf425f742835f
ibm-vpc-block-csi-driver-operator git 1c7bc07e sha256:a1578c0cc8c92df0b523c005c7e756fd3d8d0de2681dc037674874dc10cb3e9b
ibmcloud-cluster-api-controllers git 4a0c35b0 sha256:ef677c8745c0eabbb0c23ab5e3b96870898ee1089698fef4f1c3367f52571813
ironic-machine-os-downloader git 50ca44fd sha256:1914298a2eb3b59ac7f760ec71bab6c42ed63bf686073bbf463a970437ee393e
ironic-static-ip-manager git cfbae04f sha256:209d7e2ed7d6c31860ffa098c00a18958ad9bec060d8fa9a1d8b043c908efbbf
keepalived-ipfailover git 716eb0ef sha256:c90233cc8a63e479e842a0cfcb7b2d5c85e843f9037521f65934da3b9564a306
kube-rbac-proxy git 5a14ea9d sha256:906039b7eb04d804de00bb8886961caa81d77ac0bab617763cd3514b3bf745a3
multus-admission-controller git 0d7ea6c7 sha256:d30846b389204d22add7ecdfbc5290245d6e45269ede8f2ccee95b92152dc43a
multus-networkpolicy git 3362bbc4 sha256:5725c2586ca9453c0fe1592b917e43ab82f1ffc705b944b828d8bd3617442bf4
multus-route-override-cni git 391c1b03 sha256:8950ca210b756b11076ea0abf4cdddc0a96b3d3e083f3b50d90fc322c0779a7f
multus-whereabouts-ipam-cni git 86191ded sha256:65a7c02d140358c2bbf36f096c2d2892a6e35acb6d52e24a0e94f32b88ad55cf
network-interface-bond-cni git e2de9255 sha256:2a692b003b67700f708252440406d011ec04b607bea53e8705868166e60c053e
network-metrics-daemon git 11e2dec9 sha256:e5a1764543293ebf92754a5df87688933822527cb4de0628edfccf9b4612dbe9
network-tools git 47b13549 sha256:0f8b003bc7bd27f0722fa1dff272fe17737977edc9d8fbb18c3847ccb5f10842
nutanix-cloud-controller-manager git d9fe8f38 sha256:829246abed4aa7cba3420e973008cee83638a5fdda77db6a4bd2be936ae64672
nutanix-machine-controllers git afe324bf sha256:38210e193ec01246cc4d511b524515552230086c7c555aca4b318de002671d6d
oc-mirror git 22a9fb87 sha256:e05c628f32568145f1dcd51daedca60ae5278717cb408b3ab3cc3e944d4fd704
olm-catalogd git 180aa92c sha256:1142adb908ac1e902cd22be933808a94c236956fe89f4182e64537eda0f697a7
openshift-controller-manager git 8ee74406 sha256:0001338f491dc4dd9e73b93959acf7d8b0149a43223e34b50a27f560a6c2f172
openshift-state-metrics git 3cca6fee sha256:09bd2919b7e377b217c488cef123b93e1407465f64d783e2cdcdabdb368dfd94
operator-marketplace git 34521c26 sha256:f3f7a717cf6a604d31cbba4b0b1a4d616ae90f9b7699d4d22e2ba239aea105d8
powervs-machine-controllers git 74e3ece7 sha256:4fcdede90f89d9574975bfb49f33253e4a0da161a802d9c3ada833bd2fccf719
prom-label-proxy git 35c11369 sha256:5cb390d24783bbae6bc76ab84bc79516b28112cdd510af7bf0061359e47d05c1
prometheus-node-exporter git 92e17ff5 sha256:b9a1a965f5d45df2c2a64927494216765575d9aa35a43527e238ce4986a8e1d8
rhel-coreos sha256:8094bcf53e3d0bf921ade75676c8fde22623b99d652b910c147345fc81f43960
rhel-coreos-extensions sha256:c445cdb64ce123fc47ed5037b81edd3c98bfee0579371690dabd1b6ae461ac9d
service-ca-operator git 30efb529 sha256:3d42e4bd786460c883fe9808202975093518a8fe919f78990968b5075830f784

agent-installer-api-server

MGMT-23439: Pin gotestsum to v1.12.2 for Go 1.21 compatibility #10019
OCPBUGS-74898: Retry incomplete cluster registration in ABI #8817
OCPBUGS-74911: Remove root=/dev/disk/by-label/dm-mpath-root from kargs #8820
Full changelog

agent-installer-node-agent

MGMT-21849: Skip arping for remote IPs not in outgoing NIC’s subnet #1332
Full changelog

agent-installer-utils

OCPBUGS-68243: bump github.com/sirupsen/logrus to v1.9.3 #237
Full changelog

aws-cluster-api-controllers

OCPBUGS-77903: [release-4.18] update go mod dependency for konflux #589
Full changelog

aws-ebs-csi-driver

OCPBUGS-82745: Address CVE-2026-35469 #327
OCPBUGS-86167: UPSTREAM: 2367: cleanup: make verify should ignore copyright year #321
OCPBUGS-80206: Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.71.3-sec.1 #313
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-80308: Bump google.golang.org/grpc #542
OCPBUGS-79429: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.18 #531
OCPBUGS-78299: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.17 #524
OCPBUGS-76582: Fix Cinder, Manila driver metrics #501
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

aws-kms-encryption-provider

OCPBUGS-80184: Bump google.golang.org/grpc to v1.79.3 #43
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-80210, OCPBUGS-80211, OCPBUGS-80350: Bump google.golang.org/grpc to v1.79.3 #190
Full changelog

azure-cluster-api-controllers

OCPBUGS-80212: Bump google.golang.org/grpc to v1.79.3 #390
OCPBUGS-77905: [release-4.18] update go mod dependency for konflux #362
Full changelog

azure-disk-csi-driver

OCPBUGS-80213: Address CVE-2026-33186 #142
OCPBUGS-78037: add instantAccessDurationMinutes parameter to enable IA snapshots for PremiumV2/UltraSSD disks #130
Full changelog

azure-file-csi-driver

OCPBUGS-80216: Address CVE-2026-33186 #133
Full changelog

azure-kms-encryption-provider

OCPBUGS-80185: Bump google.golang.org/grpc to 1.64.1-sec.1 patch #46
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-95616: azure: Add field in installconfig to disallow shared access key #10670
OCPBUGS-78550: fix wavelength zone name regex #10409
OCPBUGS-45579: PowerVS: Listen to machineNetwork #9277
OCPBUGS-73784: pkg/asset/manifests/azure: save cidr blocks #10217
OCPBUGS-76598: Increase agent-installer pre-network-manager timeout #10299
OCPBUGS-67203: Update the RHCOS 4.18 bootimage metadata #10294
OCPBUGS-74676: [release-4.18] GCP: skip AI zones #10275
OCPBUGS-69880: Azure UPI ARM template: use storageAccountId #10179
OCPBUGS-68244: [4.18] uplift logrus #10166
Full changelog

baremetal-operator

OCPBUGS-98321: Add BMH finalizer on PreprovisioningImage #509
OCPBUGS-59259: Fix HFC error handling in actionPreparing #502
OCPBUGS-87967: Fix preprovisioning network Secret lifecycle during BMH deletion #495
OCPBUGS-76988: Unblock BMH direct deletion when detached annotation is present #461
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-83872: pkg/cli/admin/upgrade: Tighten force warnings #2165
Full changelog

cloud-credential-operator

OCPBUGS-80219: Fix CVE-2026-33186 using openshift-sustaining grpc-go fork #1041
OCPBUGS-74548: Resolve nil pointer exception in hasResourceTags #968
Full changelog

cluster-authentication-operator

OCPBUGS-75897: set appropriate rolling update settings #835
Full changelog

cluster-autoscaler

OCPBUGS-78699: allow clusterapi provider to skip paused resources #413
OCPBUGS-75925: Fixes histograms becoming empty after loaded from checkpoints #402
Full changelog

cluster-baremetal-operator

OCPBUGS-81549: Explicitly set the ReadOnlyRootFilesystem flag to false #584
OCPBUGS-78708: Update kubebuilder tools to more latest version #579
Full changelog

cluster-capi-controllers

OCPBUGS-80220: Bump google.golang.org/grpc to v1.79.3 #297
Full changelog

cluster-capi-operator

OCPBUGS-80224: Bump google.golang.org/grpc to v1.79.3 #566
NO-JIRA: Allow sustaining engineering to self serve dependency updates #558
Full changelog

cluster-config-api

OCPBUGS-98486: add new serviceAccountToken fs type #2927
Full changelog

cluster-config-operator

OCPBUGS-68249: Update logrus to 1.9.3 to address CVE-2025-65637 #464
Full changelog

cluster-etcd-operator

OCPBUGS-78776: [release-4.18] : Prefer to remove members where they have another healthy machine in the same failure domain index #1573
OCPBUGS-76284: Add priority field to prevent early shutdown #1545
Full changelog

cluster-ingress-operator

OCPBUGS-86715: Add configuration override for X-SSL strip (#1477) #1477
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-76284: Add priority field to prevent early shutdown #2031
Full changelog

cluster-kube-cluster-api-operator

OCPBUGS-80231: Bump google.golang.org/grpc to v1.79.3 #77
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-76284: Add priority field to prevent early shutdown #906
Full changelog

cluster-kube-scheduler-operator

CNTRLPLANE-2843: chore: update OWNERS #622
OCPBUGS-76284: Add priority field to prevent early shutdown #612
Full changelog

cluster-monitoring-operator

OCPBUGS-104540: Backport e2e stabilization 4.18 #3030
OCPBUGS-100375: [release-4.18] fix: watch cluster wide proxy changes and apply changes accordingly #3024
OCPBUGS-94081: ship collector:node_scrape_collector_success:avg to Telemetry #2992
OCPBUGS-86995: increase lookup interval #2944
OCPBUGS-77274: AlertingRule: fix duplicate PrometheusRules after MD5->SHA-224 naming change #2833
Full changelog

cluster-network-operator

OCPBUGS-100191: Bump github.com/containernetworking/cni v0.8.0 -> v1.3.0 #3096
OCPBUGS-85443: Remove duplicated openssl parameter #3006
OCPBUGS-84869: wait for patch port to apply drop garp flows #2988
OCPBUGS-84180: fix(hypershift): use net.JoinHostPort for URL construction #2977
OCPBUGS-77151: Add config override for openflow-probe #2965
OCPBUGS-78833: Fix whereabouts-token-watcher DaemonSet improvements #2940
OCPBUGS-74154: whereabouts-config is a reserved name for user interaction. #2884
Full changelog

cluster-node-tuning-operator

OCPBUGS-90575: Requeue PerformanceStatus update when status write fails #1552
OCPBUGS-82752: Bump github.com/moby/spdystream from v0.4.0 to v0.5.1 #1544
OCPBUGS-75954: PPC: filter out namespaces dir #1465
Full changelog

cluster-olm-operator

OCPBUGS-80239: Bump google.golang.org/grpc to v1.79.3 #200
Full changelog

cluster-policy-controller

OCPBUGS-98486: Backport fs type service account token 4.18 #196
Full changelog

cluster-storage-operator

OCPBUGS-87556: remove oVirt code from CSO 4.18 #707
OCPBUGS-77627: add vsphere permissions for checking if users is authorized to see metrics #670
Full changelog

cluster-version-operator

OCPBUGS-70182: Unify capitalization when comparing architectures for available updates #1327
Full changelog

console

OCPBUGS-100069: quickstart page i18n misses (Fix Quick Starts i18n bundle lookup for zh-CN) #16872
OCPBUGS-91944: Prevent binary secret data corruption when editing #16673
OCPBUGS-99487: Disable Knative e2e Cypress tests in CI #16803
OCPBUGS-99648: Disable shipwright e2e tests to unblock CI #16818
OCPBUGS-86453: [release-4.18] shell-quote: Arbitrary code execution via command injection due to unescaped line terminators #16511
Fix for OCPBUGS-81604: CVE-2026-4800 #16563
OCPBUGS-84284: Bump follow-redirects to 1.16.0 to fix CVE-2026-40895 #16675
OCPBUGS-77125: [release-4.18] CVE-2026-26996 Bump minimatch library #16344
OCPBUGS-79447: Bump immutable #16325
NO-JIRA: enable multi-architecture yarn builds #16421
CONSOLE-5011: migrate to yarn berry #16073
NO-JIRA: Bump builder image to v29 #15995
OCPBUGS-65808: Fix PatternFly dark theme colors for charts and form inputs #15951
OCPBUGS-74458: Bump lodash to latest #15965
OCPBUGS-73753: Fix Helm chart installation with CA/TLS certificates #15914
Full changelog

console-operator

OCPBUGS-98985: [4.18] Stabilize telemetry config to prevent continuous console pod rollouts #1190
OCPBUGS-77861: update go mod dependency for konflux #1113
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-85672: CI Build root image tag sync with ART #236
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-80309: Bump google.golang.org/grpc #387
Full changelog

csi-driver-nfs

OCPBUGS-82754: Bump github.com/moby/spdystream@v0.5.1 #194
OCPBUGS-80254: Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.71.3-sec.1 to avoid go version bump and fix CVE-2026-33186 #180
Full changelog

csi-external-attacher

OCPBUGS-80255: Bump google.golang.org/grpc to v1.79.3 #105
Full changelog

csi-external-provisioner

OCPBUGS-82755: Address CVE-2026-35469 #135
OCPBUGS-80256: Bump google.golang.org/grpc #130
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-80258, OCPBUGS-80261, OCPBUGS-80262: Bump google.golang.org/grpc to v1.79.3 #211
Full changelog

docker-builder

OCPBUGS-66990: bump buildah to 1.37.7 to fix CVE-2025-52881 #498
Full changelog

docker-registry

OCPBUGS-68253: update logrus to v1.9.1 #464
Full changelog

egress-router-cni

OCPBUGS-100191: Bump containernetworking/cni to v1.3.0 github.com/containernetworking/plugins to 1.4.0 #109
Full changelog

gcp-cluster-api-controllers

OCPBUGS-80270: Bump google.golang.org/grpc to v1.79.3 #290
OCPBUGS-78278: [release-4.18] update go mod dependency for konflux #265
Full changelog

gcp-machine-controllers

OCPBUGS-80293: Bump google.golang.org/grpc to v1.79.3 #165
Full changelog

gcp-pd-csi-driver

OCPBUGS-80274: Bump google.golang.org/grpc to v1.71.3-sec.1 in release-4.18 #112
OCPBUGS-68258: UPSTREAM: 2056: bump github.com/sirupsen/logrus to v1.9.3 #89
OCPBUGS-44772: Fix Hyperdisk Resize That Requires Iops/Throughput Adjustment #83
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-80273: Replace google.golang.org/grpc with fork #187
Full changelog

haproxy-router

OCPBUGS-86715: Strip X-SSL-* headers for plain HTTP #800
OCPBUGS-80275: Bump google.golang.org/grpc to v1.79.3 #768
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-54724: Fix implementation of ContainsCIDR to allow non-equal addresses #2267
Full changelog

hypershift

OCPBUGS-99142: fix(backport): konnectivity agent auth #9096
OCPBUGS-62756: Restart HCP on stale serving certs #8245
OCPBUGS-89356: build(operator): drop hypershift-no-cgo from operator container images #8760
NO-JIRA: remove path filter from control-plane-operator pipelines #8665
OCPBUGS-80278: fix CVE-2026-33186 by replacing grpc-go #8515
OCPBUGS-84180: fix(cno): use brackets only for IPv6 in server URL #8346
OCPBUGS-76532: feat(updates): enable CVO metrics access with RHOBS monitoring flag #7699
OCPBUGS-77368: Fix ignition-server pod restarts #7878
CNTRLPLANE-1708: Backport Customer Global Pull Secret to OpenShift 4.18.z #7354
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-80280: Bump google.golang.org/grpc to v1.79.3 #143
OCPBUGS-77207: [release-4.18] standardize build paths #122
Full changelog

ibmcloud-machine-controllers

OCPBUGS-81647: bump vpc go sdk #91
NO-JIRA: Modernize test infrastructure to align with other MAPI providers #87
Full changelog

insights-operator

OCPBUGS-80283: Bump google.golang.org/grpc to v1.79.3 #1283
OCPBUGS-76963: Extends the time for the extractor liveness probe #1234
OCPBUGS-76537: [release-4.18] [bugfix] The ConfigMap value for StoragePath is ignored on basic routine #1239
Full changelog

insights-runtime-exporter, insights-runtime-extractor

OCPBUGS-77789: remove dnf cache from the container images #69
Full changelog

ironic

OCPBUGS-76459: Bump pyasn1 to 0.5.1-4 #826
OCPBUGS-74407: Update sushy to include DGX B200 credentials fix #832
OCPBUGS-74115: Bump keystonemiddleware version to 10.7.1-0.20260216144200.4c001ba for CVE-2026-22797 fix #795
Full changelog

ironic-agent

OCPBUGS-95066: Replace individual package removal with a single rpm -e loop #286
OCPBUGS-95066: Replace dnf remove with rpm -e to prevent dependency removal #274
Full changelog

kube-metrics-server

OCPBUGS-80190: Bump google.golang.org/grpc to v1.79.3 #64
Full changelog

kube-state-metrics

OCPBUGS-74873: Deduplicate CRS stores #131
Full changelog

kube-storage-version-migrator

OCPBUGS-78273: fix /vendor for hermetic 4.18 #239
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-39554: Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART for 4.18 #45
OCPBUGS-95084: OWNERS: Update component to Cloud Compute / KubeVirt Provider #77
Full changelog

kubevirt-csi-driver

OCPBUGS-80191: Bump google.golang.org/grpc to v1.79.3 #101
OCPBUGS-79362: Add annotation-based fallback for infra VM node ID resolution #86
Full changelog

libvirt-machine-controllers

OCPBUGS-77194: Fix incomplete vendor/ #300
Full changelog

machine-api-operator

OCPBUGS-78795: [release-4.18] : correct aws kms permissions #1478
OCPBUGS-78796: [release-4.18] Use resource group when generating default Azure image #1480
Full changelog

machine-config-operator

OCPBUGS-94116: move cleanUpDuplicatedMC to avoid double reboot on first updated #6249
OCPBUGS-91747: Verify extension packages are installed #6216
OCPBUGS-98445: Remove sensitive ControllerConfig logging #6294
OCPBUGS-97588: Bootstrap MCS logging entire ignition #6268
OCPBUGS-86845: Apply password only if changes exist #6113
OCPBUGS-86695: use –delete-if-present for karg removal #6102
OCPBUGS-86844: Fix ssh and password rollbacks #6096
OCPBUGS-86692: Fix re-cordon detection #6101
OCPBUGS-86300: Add terminationMessagePolicy to build pod containers #6074
OCPBUGS-86021: Fix units rollback if update failure #6052
OCPBUGS-79483: set default-timeout-stop to 200s globally #5805
OCPBUGS-62692: configure-ovs: work around a Cisco switch issue #5329
OCPBUGS-78056: Prevent unnecessary systemd unit disable #5758
OCPBUGS-74148: enable nodeip-configuration for platform external #5578
OCPBUGS-77777: reduce MCO image size #5738
OCPBUGS-77576: mcd_config_drift not working properly #5726
OCPBUGS-77421: Remove MCD liveness probe #5710
OCPBUGS-74644: After OCL is enabled few phases in MCN are not updating as expected #5605
OCPBUGS-77092: Machine-config controller should not log about non-existent pull-secret changes #5680
OCPBUGS-77041: machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] #5671
OCPBUGS-76560: [release-4.18]: cherry pick to few fixes that needed for missing services and configuration #5653
Full changelog

machine-image-customization-controller

OCPBUGS-82149: Return error when network data Secret lacks nmstate key #174
OCPBUGS-77888: Clean up dnf cache to reduce container image size #168
Full changelog

machine-os-images

OCPBUGS-87876: Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs #100
Full changelog

metallb-frr

OCPBUGS-74485: Dockerfile: unpin FRR rpm #121
Full changelog

monitoring-plugin

OCPBUGS-79448: immutable bump: fix for CVE-2026-29063 #922
OU-1241: unset frontend timeout to use the backend configuration #905
OCPBUGS-83374: fix: re encode params when redirecting from graph to query-browser #878
NO-JIRA: fix: pin http-errors to 2.0.1 for hermetic builds #870
OU-993: adding cypress Dockerfiles #861
OU-876: monitoring automated testing backported and adjusted to pf-5 and diff UI #777
NO-JIRA: simplify dockerfile by removing cachito dependencies [release-4.18] #818
OCPBUGS-70291: fix: update qs vulnerable dependency #739
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-85249: Fix server url in kubeconfig #298
NO-ISSUE: [release-4.18] Bump Go to 1.22 and fix CI build root image #291
OCPBUGS-77853: hermetic 4.18 #276
Full changelog

must-gather

OCPBUGS-86019: Collect object size with the object count #547
Full changelog

networking-console-plugin

OCPBUGS-41880: Fix namespace retention between NetworkPolicies tabs when MultiNetworkPolicies are disabled #433
OCPBUGS-41880: Retain namespace selection between network policies tabs #424
OCPBUGS-87000: Update Dockerfile.art to 4.22 build image #426
OCPBUGS-83382: Fix CVE 2026 34043 serialize javascript 4.18 #413
[release-4:18] OCPBUGS-85067: Migration from yarn to npm #412
OCPBUGS-81606: Fix CVE-2026-CVE-2026-4800 in lodash #401
OCPBUGS-79449: Bump immutable #390
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

oauth-apiserver

NO-JIRA: (chore): update OWNERS file #170
Full changelog

oauth-server

OCPBUGS-81803: Bump github.com/go-jose/go-jose/v3 from v3.0.3 to v3.0.5 #238
Full changelog

olm-operator-controller

OCPBUGS-100434: increase catalog HTTP client timeout from 10s to 5m #787
OCPBUGS-87830: [release-4.18] operator-controller: clean up orphaned temp dirs in catalog cache #751
OCPBUGS-80304: Update grpc-go to v1.71.3-sec.1 to fix CVE-2026-33186 #735
Full changelog

openshift-apiserver

OCPBUGS-82769: Address CVE-2026-35469 #657
OCPBUGS-74234: Bump library-go for route path validation fix #603
OCPBUGS-69955: Add ValidatingAdmissionPolicy and check for omissions next time. #589
Full changelog

openstack-cluster-api-controllers

OCPBUGS-64816: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.11 into release-4.18 #371
Full changelog

openstack-machine-api-provider

OCPBUGS-93867: Revendor CAPO #174
OCPBUGS-69648: Don’t record event for every reconcile #143
OCPBUGS-76792: Fix make test #159
OCPBUGS-74986: Revendor CAPO #152
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-80311, OCPBUGS-80312, OCPBUGS-80313: Fix CVE-2026-33186 with openshift-sustaining/grpc-go v1.71.3-sec.1 [release-4.18] #1314
OCPBUGS-81473: Fix nil pointer dereference in sortUnpackJobs when sorting non-failed jobs #1273
OCPBUGS-77714: Remove the collect-profiles info from the microshift kustomization file #1245
OCPBUGS-76924: Remove the collect-profiles job #1231
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-82773: Bump github.com/moby/spdystream to v0.5.1 #3321
OCPBUGS-98957: Branch Sync release-4.19 to release-4.18 [07-09-2026] #3290
OCPBUGS-86230: Branch Sync release-4.19 to release-4.18 [05-19-2026] #3197
OCPBUGS-74399, OCPBUGS-85434: Branch Sync release-4.19 to release-4.18 [05-12-2026] #3184
OCPBUGS-77151, OCPBUGS-83567: Branch Sync release-4.19 to release-4.18 [04-16-2026] #3143
OCPBUGS-82148: Branch Sync release-4.19 to release-4.18 [04-05-2026] #3117
OCPBUGS-81479: node: fix serviceUpdateNotNeeded nil pointer comparison #3101
OCPBUGS-78015: Add pperiyasamy to OWNERS for release-4.18 #3045
OCPBUGS-77516: Clear stale conntrack UDP entries for nodePorts #3016
OCPBUGS-77083, OCPBUGS-77106: [release-4.18] combined backport PR for 2 escalations #2987
OCPBUGS-48710: Branch Sync release-4.19 to release-4.18 [02-04-2026] #2970
OCPBUGS-74270: release-4.18 fix(localnet, ipamless): Prevent LSP deletion on sync #2943
Full changelog

powervs-block-csi-driver

OCPBUGS-80317: Fix CVE-2026-33186 by bumping google.golang.org/grpc to 1.79.3 #130
OCPBUGS-82774: Fix CVE-2026-35469 by bumping github.com/moby/spdystream to v0.5.1 #124
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-80318: Fix CVE-2026-33186 by bumping google.golang.org/grpc to 1.79.3 #111
Full changelog

powervs-cloud-controller-manager

OCPBUGS-80319: Replace google.golang.org/grpc with openshift-sustaining fork v1.71.3-sec.1 to v1.79.3 to fix CVE-2026-33186 #99
Full changelog

prometheus

OCPBUGS-88628: remote: validate snappy decoded length before allocation in read endpoint #346
OCPBUGS-80320: Bump google.golang.org/grpc to v1.79.3 #308
Full changelog

prometheus-alertmanager

OCPBUGS-100355: Set testdata CA expiry to 20 years from issue date (#4112) #148
OCPBUGS-74976: Include go-verify-deps expected files in gitignore #114
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-77298: backport upstream fix to reconcile resources with inconsistent status #370
OCPBUGS-77398: Validate webhookURL secret for MSTeams receiver in AlertmanagerConfig CRD #366
Full changelog

route-controller-manager

OCPBUGS-80199: Bump google.golang.org/grpc to v1.79.3 #85
Full changelog

telemeter

OCPBUGS-80333: Bump google.golang.org/grpc to v1.79.3 #599
OCPBUGS-81804: [release-4.18] Fix CVE-2026-34986 #596
Full changelog

tests

OCPBUGS-77876: Backport: Remove duplicated graceful termination test from release-4.18 #30702
OCPBUGS-74207: Unrevert TLS tests with fixes #30708
Full changelog

thanos

OCPBUGS-80335: Bump google.golang.org/grpc to v1.79.3 #184
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-77668: hermetic migration 4.18 #105
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-80340: Bump google.golang.org/grpc to v1.79.3 #104
OCPBUGS-78018: hermetic migration 4.18 #84
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-80343: Bump google.golang.org/grpc to v1.79.3 #176
OCPBUGS-68278: CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.9.3 #156
Full changelog

vsphere-csi-driver-operator

OCPBUGS-81673: Fix password escaping #342
Full changelog

vsphere-problem-detector

OCPBUGS-81556: fix concurrent map writes #215
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github