4.18.53

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.53-x86_64

Qualifiers (status api):

Tests:

Blocking jobs
- upgrade Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-aws-ovn-serial
- aws-ovn-single-node-upgrade-4.18-micro Succeeded (1 retry) periodic-ci-openshift-release-main-ci-4.18-e2e-aws-upgrade-ovn-single-node
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- aws-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-main-ci-4.18-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-main-ci-4.18-e2e-azure-ovn-upgrade
- driver-toolkit Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-aws-driver-toolkit
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.18-fips-payload-scan
- gcp-ovn-rt-upgrade-4.18-minor Succeeded periodic-ci-openshift-release-main-ci-4.18-upgrade-from-stable-4.17-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.18 Succeeded periodic-ci-openshift-hypershift-release-4.18-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-ipv4 Succeeded (1 retry) periodic-ci-openshift-release-main-nightly-4.18-e2e-metal-ipi-ovn-ipv4
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-metal-ipi-ovn-ipv6
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance-serial

Upgrades from:

Untested upgrades: 4.17.14, 4.17.15, 4.17.16, 4.17.17, 4.17.18, 4.17.19, 4.17.20, 4.17.21, 4.17.22, 4.17.23, 4.17.24, 4.17.25, 4.17.26, 4.17.27, 4.17.28, 4.17.29, 4.17.30, 4.17.31, 4.17.33, 4.17.34, 4.17.35, 4.17.36, 4.17.37, 4.17.38, 4.17.39, 4.17.41, 4.17.42, 4.17.43, 4.17.45, 4.17.46, 4.17.47, 4.17.48, 4.17.49, 4.17.50, 4.17.51, 4.17.52, 4.17.53, 4.18.10, 4.18.11, 4.18.12, 4.18.13, 4.18.14, 4.18.15, 4.18.16, 4.18.17, 4.18.18, 4.18.19, 4.18.20, 4.18.21, 4.18.22, 4.18.23, 4.18.24, 4.18.25, 4.18.26, 4.18.27, 4.18.28, 4.18.29, 4.18.30, 4.18.31, 4.18.33, 4.18.34, 4.18.35, 4.18.36, 4.18.38, 4.18.39, 4.18.4, 4.18.40, 4.18.41, 4.18.42, 4.18.44, 4.18.45, 4.18.46, 4.18.47, 4.18.48, 4.18.49, 4.18.5, 4.18.6, 4.18.7, 4.18.8, 4.18.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.18.37

Created: 2026-08-14 12:58:49 +0000 UTC

Image Digest: sha256:f9d84ee7a22c2f9d1e36e40e7b2a06af7e14b44f5c88450d5567291d1b638dce

Components

Kubectl 1.31.1
Kubernetes 1.31.14
Kubernetes Tests 1.31.12
Red Hat Enterprise Linux CoreOS upgraded from 418.94.202603261158-0 to 418.94.202608111829-0 (diff)

Removed images

ovirt-csi-driver
ovirt-csi-driver-operator

Rebuilt images without code change

agent-installer-api-server git 73206081 sha256:1bfaf78feb8f561068ded25bc2bd230e2d12729b1c8e99973633fe72ce7dbed3
agent-installer-csr-approver git 81d6bc27 sha256:c708aa82d79279e1b7e37443211a1c728b7b52993eca87a336abc3d41da0eafe
agent-installer-node-agent git 81c09fb7 sha256:3e17f87e1f66d6316eb2294cc2f7dcc09d4c879e6cb8b5ed7a3a2de21846462b
agent-installer-orchestrator git 81d6bc27 sha256:87a5d2031b32ffb99a4964614e8274b3d892970b4436ad43494ca32f46c40642
agent-installer-utils git 63b87f06 sha256:be9c0daecc8ba0321666238fd77268e524dc67146ce3c7bdb1de66247e4a74d1
apiserver-network-proxy git 2f62712d sha256:f5834ae09e075919c34aff3b7fdce434b3e613957c86523b363ee084a2b938fc
aws-cloud-controller-manager git c3951906 sha256:655b172c8408b9cabb67c03ac911abeb20f4deb8da84eefaad7c6ea0b270d8df
aws-cluster-api-controllers git ed55fc2d sha256:74b1c635e7d1cdaff4fab4143787d242684ba5c60ce9e7952dcedd67d8802151
aws-machine-controllers git 7b6bfc74 sha256:5d10996aeb4692fa4d0a101e3f38f352e221df96694d6de41021eb54d8ab3ade
aws-pod-identity-webhook git f54f9a19 sha256:be5b7d277d8930252764b13c1772df92926187e4f6052756176fa425d90225b6
azure-machine-controllers git 2fdaa544 sha256:d5f829b9cc7b7c3f8c39a9ff3ff4002cd0bb08036957d24eba0aba66e83182c7
azure-workload-identity-webhook git f60e4029 sha256:1e9a19a1bc05b351282a255d1ad75a13c0f82d85d5b2076bc25899e8d1347326
baremetal-cluster-api-controllers git 80c3a063 sha256:34730e3cb9199b28785900d169f8d1e9a7100109d3b2241ae1bb125c448aa372
baremetal-machine-controllers git 1ede6c3f sha256:85323732b71d7bbeb6d82b704f8f6d697f548a76816b649f754fca404c31640b
baremetal-runtimecfg git 35341068 sha256:12de47a70956d9de42d96a7d248f5d58518187ea5624aa6d48c14850734122b1
cloud-network-config-controller git f892b915 sha256:99374dcb8fb1ba18592483a5994bb1e01463bef763d0471440268b818ed89b9f
cluster-autoscaler git 34730793 sha256:847ed9409a5da68a8535e2c62e88a799e8d3dfb3a2e53bdf1f34b47e351651f3
cluster-autoscaler-operator git 474ad65c sha256:442cf1177f62f02680ce76ca08c85870c2c026037e43ae200be12e6b3b161655
cluster-bootstrap git d1e01954 sha256:384d8a965ff08d62092cefa5a292c3c1ca27f8e45beab6e458ed0badc178b582
cluster-cloud-controller-manager-operator git 8abb0673 sha256:5a0c9dad77fdf231ffc6455abf5eca6b35d588b94f2b5ea6236a9a31bd1cc5cc
cluster-config-operator git fe5e9286 sha256:4548e76e60816b2d54e129b180ded961a9f06c905d86d7bcff5de2f31ea4d0fa
cluster-control-plane-machine-set-operator git d17bf3a1 sha256:24cb261f503869dd21c39ff023a2df4241f396800bac379b67b80dd404c30497
cluster-csi-snapshot-controller-operator git 6fe70008 sha256:f349c32c7530915c31022bd2f6525d739ab4fee5203729ca32b361c110ccc088
cluster-dns-operator git 7cafd0c7 sha256:251daffc69dab66e92bf02066677c66bf23b5447688023f512214279c0f4c907
cluster-image-registry-operator git 1e3caa4b sha256:a0996e12d3054535491d907c136c5bee8d12a8fc313ca8fe94b33d69e46f03fe
cluster-kube-apiserver-operator git e9bc9090 sha256:b00c04003c3348dcb8e14fcae8650ad4bf06b093d35ff641dfb484e65082f191
cluster-kube-controller-manager-operator git 6347fc81 sha256:c5c235e5e37a013cb4c6c9d6303f16dbd34013ddb18e58c1fc1922adfc24102d
cluster-kube-scheduler-operator git 4e99db62 sha256:2b9cf3f6a77c080579f1569b502bf2f6266a7f789e1fbbe20785c29fbc44f3e8
cluster-kube-storage-version-migrator-operator git 59ba356f sha256:608042b4050154f0a8885aa16b64628521b3e62f04ea1169d4742c148fa637cd
cluster-machine-approver git 01d5fbbe sha256:1f5416c8718fe43a9a3fa453fb10d762cd7a93c48b183d32acb3afa8229af362
cluster-openshift-apiserver-operator git 0a6f6eb9 sha256:44b18b9a7568d5a8c489f8de0fe2ba1e6c94b11db9fb09661fad01fde928e09f
cluster-openshift-controller-manager-operator git f1711cf3 sha256:bffc170ad32a20191102119f0423376ff9e3eb1d459ea455ed8cc6e5bbd05a43
cluster-samples-operator git bc725fd4 sha256:b2b8ad509c0c01da95c5840468e01621dba0ec1970b06da98000b47a57eb4ba4
cluster-update-keys git 8caab452 sha256:ad138572a35e48cb14fe223b08f6016a117e0b0c77b118dfc6d3090b52a52b75
cluster-version-operator git f72d7e2c sha256:ee256db8f038fb5816d89c58fbaa7a0dedbfb51559463f357ab0c7d5e33f985c
configmap-reloader git e2aaf00a sha256:1f247b2cbab9778f7de9fffafd899c9de55a6c019e7113f0df1c7d393277f6fc
coredns git 8ca7f02b sha256:8fe0c5d7756b023356a72ef014091847a4c4186bae75e9988f95033bbfb4ffdb
csi-external-resizer git a1423690 sha256:b01c9566364ac3e8ae75b89b51d6e307fdf25990fda4e00d132ee8ad33b7078e
csi-livenessprobe git 3a977844 sha256:c721a8125d9eb8d4482e781a719c37ba1ba353ed7f8da66cae46458eaf67ea0c
csi-node-driver-registrar git ef93f0be sha256:3c93ea215b7b9e4be655ba4f58dd24a4bc657736f7520ef959e2b81d993b014e
docker-builder git 529c9688 sha256:a7c58378e9286270987bcc98b19016d325ac8a85d535527a37c464c248c19853
docker-registry git 5c367551 sha256:94286ab28adb1e920162243182ad25b5434382cb0c592954f02a470a668d9d27
driver-toolkit git 2e139edc sha256:d694801ac276c544bca043039cb36bdf18022ffdcdd5ce3e32e9e396aee4d901
etcd git b5a4f8d0 sha256:634dd94b5c28c57844b9db0cadd575d65457d40b0492ed0f46fac757095dcac4
gcp-cloud-controller-manager git 6ea23561 sha256:62e119013aae8c5023072e99c768313035556c0bd74e31af046306220ce5bfda
gcp-workload-identity-federation-webhook git f0a670c7 sha256:8b3ab8e12a72cce6bb53c51f382186854c837d9723c0ca2b79df70de5849f6be
hyperkube git 91c24081 sha256:32ca7d3f630f47fadc39ca0097301fb908e91dc59a612d3643f1fcf0b1e9ad6a
ibm-cloud-controller-manager git a33026b1 sha256:007e573fb1c51de04bc7f1203e6c9177b1f61e243053417241adf425f742835f
ibm-vpc-block-csi-driver-operator git 1c7bc07e sha256:a1578c0cc8c92df0b523c005c7e756fd3d8d0de2681dc037674874dc10cb3e9b
ibmcloud-cluster-api-controllers git 4a0c35b0 sha256:ef677c8745c0eabbb0c23ab5e3b96870898ee1089698fef4f1c3367f52571813
insights-runtime-exporter git 3d444833 sha256:b489c926ee1989966951f4eb012fe9706d835916c8652d42d438326cd8a7324c
insights-runtime-extractor git 3d444833 sha256:b2c6beb201f5fe63031aaf8cb8bf8e9c52b654a1904ffda35ec4fee4409e05f8
ironic-machine-os-downloader git 50ca44fd sha256:1914298a2eb3b59ac7f760ec71bab6c42ed63bf686073bbf463a970437ee393e
ironic-static-ip-manager git cfbae04f sha256:209d7e2ed7d6c31860ffa098c00a18958ad9bec060d8fa9a1d8b043c908efbbf
keepalived-ipfailover git 716eb0ef sha256:c90233cc8a63e479e842a0cfcb7b2d5c85e843f9037521f65934da3b9564a306
kube-proxy git 91c24081 sha256:62f027d3e54a707379e22ad3072a56b4685ac93fb69b0eb0f97d2c550302123b
kube-rbac-proxy git 5a14ea9d sha256:906039b7eb04d804de00bb8886961caa81d77ac0bab617763cd3514b3bf745a3
kube-state-metrics git 046193a8 sha256:24fc4a11925fee1ec3ca8b2e7f84f5aed23dd5708cd30e55f475e92217e544c3
kube-storage-version-migrator git 815b43b7 sha256:e04586031cfb0527d656b131681bb707eabb2eb85f9ed291c151f92f00716852
libvirt-machine-controllers git 875b03bd sha256:c03540feab73c4ade7f20b00446d0471fe449c72c9f7428f80952e9ff4b8cb1f
machine-api-operator git b3a96a46 sha256:cc3cfa05529d84f8b369b49262b15b71cd74de5339672311f0d2bf6b5c93182d
metallb-frr git 760c6639 sha256:318f21dbb09fe81c989c350f842dc66dee70741a39e4386d347a9a525a15b894
multus-admission-controller git 0d7ea6c7 sha256:d30846b389204d22add7ecdfbc5290245d6e45269ede8f2ccee95b92152dc43a
multus-networkpolicy git 3362bbc4 sha256:5725c2586ca9453c0fe1592b917e43ab82f1ffc705b944b828d8bd3617442bf4
multus-route-override-cni git 391c1b03 sha256:8950ca210b756b11076ea0abf4cdddc0a96b3d3e083f3b50d90fc322c0779a7f
multus-whereabouts-ipam-cni git 86191ded sha256:65a7c02d140358c2bbf36f096c2d2892a6e35acb6d52e24a0e94f32b88ad55cf
network-interface-bond-cni git e2de9255 sha256:2a692b003b67700f708252440406d011ec04b607bea53e8705868166e60c053e
network-metrics-daemon git 11e2dec9 sha256:e5a1764543293ebf92754a5df87688933822527cb4de0628edfccf9b4612dbe9
network-tools git 47b13549 sha256:0f8b003bc7bd27f0722fa1dff272fe17737977edc9d8fbb18c3847ccb5f10842
nutanix-cloud-controller-manager git d9fe8f38 sha256:829246abed4aa7cba3420e973008cee83638a5fdda77db6a4bd2be936ae64672
nutanix-machine-controllers git afe324bf sha256:38210e193ec01246cc4d511b524515552230086c7c555aca4b318de002671d6d
oauth-apiserver git 1078b191 sha256:5c86755183719bdfe69cc900c906fc169b77282e184ab08f9e1b1439030b8fb4
oc-mirror git 22a9fb87 sha256:e05c628f32568145f1dcd51daedca60ae5278717cb408b3ab3cc3e944d4fd704
olm-catalogd git 180aa92c sha256:1142adb908ac1e902cd22be933808a94c236956fe89f4182e64537eda0f697a7
openshift-controller-manager git 8ee74406 sha256:0001338f491dc4dd9e73b93959acf7d8b0149a43223e34b50a27f560a6c2f172
openshift-state-metrics git 3cca6fee sha256:09bd2919b7e377b217c488cef123b93e1407465f64d783e2cdcdabdb368dfd94
openstack-cluster-api-controllers git d5e6ff9f sha256:75f35a823dbb0f7278ba4ac560b4af3f573f14733af9a3b7a74a2d2c508f3915
operator-marketplace git 34521c26 sha256:f3f7a717cf6a604d31cbba4b0b1a4d616ae90f9b7699d4d22e2ba239aea105d8
pod git 91c24081 sha256:c36db0d069c1010934c30f12190053840322aa17bc192d50a8e8f6bd863e0620
powervs-machine-controllers git 74e3ece7 sha256:4fcdede90f89d9574975bfb49f33253e4a0da161a802d9c3ada833bd2fccf719
prom-label-proxy git 35c11369 sha256:5cb390d24783bbae6bc76ab84bc79516b28112cdd510af7bf0061359e47d05c1
prometheus-config-reloader git 9bbce0b8 sha256:75b640d6c1fbed30772fe2df2f95ca65a42c91ebd5af4b62be812c9c35c027f9
prometheus-node-exporter git 92e17ff5 sha256:b9a1a965f5d45df2c2a64927494216765575d9aa35a43527e238ce4986a8e1d8
prometheus-operator git 9bbce0b8 sha256:a802941b70f43aac2386fb4b0fde4bf2802b801c43cc165f3622ac05903a0499
prometheus-operator-admission-webhook git 9bbce0b8 sha256:c5778949723f2400a798cf61230676c47ca31ceebac4f3027e7df1f6e2d9e7cb
rhel-coreos sha256:8094bcf53e3d0bf921ade75676c8fde22623b99d652b910c147345fc81f43960
rhel-coreos-extensions sha256:c445cdb64ce123fc47ed5037b81edd3c98bfee0579371690dabd1b6ae461ac9d
service-ca-operator git 30efb529 sha256:3d42e4bd786460c883fe9808202975093518a8fe919f78990968b5075830f784
tests git 43c51244 sha256:3cd3fe2b651a5190fb28e9f2748ee2f7cf1a49cbf405dcbc43256db7893a406d
vsphere-cloud-controller-manager git b4dbf34a sha256:e7acfa607a8832aa587f3a144d0d70aa6cc0970f81d1474a2308f1da5c33cfbf

aws-ebs-csi-driver

OCPBUGS-82745: Address CVE-2026-35469 #327
OCPBUGS-86167: UPSTREAM: 2367: cleanup: make verify should ignore copyright year #321
OCPBUGS-80206: Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.71.3-sec.1 #313
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-80308: Bump google.golang.org/grpc #542
Full changelog

aws-kms-encryption-provider

OCPBUGS-80184: Bump google.golang.org/grpc to v1.79.3 #43
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-80210, OCPBUGS-80211, OCPBUGS-80350: Bump google.golang.org/grpc to v1.79.3 #190
Full changelog

azure-cluster-api-controllers

OCPBUGS-80212: Bump google.golang.org/grpc to v1.79.3 #390
Full changelog

azure-disk-csi-driver

OCPBUGS-80213: Address CVE-2026-33186 #142
OCPBUGS-78037: add instantAccessDurationMinutes parameter to enable IA snapshots for PremiumV2/UltraSSD disks #130
Full changelog

azure-file-csi-driver

OCPBUGS-80216: Address CVE-2026-33186 #133
Full changelog

azure-kms-encryption-provider

OCPBUGS-80185: Bump google.golang.org/grpc to 1.64.1-sec.1 patch #46
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-95616: azure: Add field in installconfig to disallow shared access key #10670
Full changelog

baremetal-operator

OCPBUGS-98321: Add BMH finalizer on PreprovisioningImage #509
OCPBUGS-59259: Fix HFC error handling in actionPreparing #502
OCPBUGS-87967: Fix preprovisioning network Secret lifecycle during BMH deletion #495
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-83872: pkg/cli/admin/upgrade: Tighten force warnings #2165
Full changelog

cloud-credential-operator

OCPBUGS-80219: Fix CVE-2026-33186 using openshift-sustaining grpc-go fork #1041
Full changelog

cluster-authentication-operator

OCPBUGS-75897: set appropriate rolling update settings #835
Full changelog

cluster-baremetal-operator

OCPBUGS-81549: Explicitly set the ReadOnlyRootFilesystem flag to false #584
Full changelog

cluster-capi-controllers

OCPBUGS-80220: Bump google.golang.org/grpc to v1.79.3 #297
Full changelog

cluster-capi-operator

OCPBUGS-80224: Bump google.golang.org/grpc to v1.79.3 #566
NO-JIRA: Allow sustaining engineering to self serve dependency updates #558
Full changelog

cluster-config-api

OCPBUGS-98486: add new serviceAccountToken fs type #2927
Full changelog

cluster-etcd-operator

OCPBUGS-78776: [release-4.18] : Prefer to remove members where they have another healthy machine in the same failure domain index #1573
Full changelog

cluster-ingress-operator

OCPBUGS-86715: Add configuration override for X-SSL strip (#1477) #1477
Full changelog

cluster-kube-cluster-api-operator

OCPBUGS-80231: Bump google.golang.org/grpc to v1.79.3 #77
Full changelog

cluster-monitoring-operator

OCPBUGS-104540: Backport e2e stabilization 4.18 #3030
OCPBUGS-100375: [release-4.18] fix: watch cluster wide proxy changes and apply changes accordingly #3024
OCPBUGS-94081: ship collector:node_scrape_collector_success:avg to Telemetry #2992
OCPBUGS-86995: increase lookup interval #2944
Full changelog

cluster-network-operator

OCPBUGS-100191: Bump github.com/containernetworking/cni v0.8.0 -> v1.3.0 #3096
OCPBUGS-85443: Remove duplicated openssl parameter #3006
OCPBUGS-84869: wait for patch port to apply drop garp flows #2988
OCPBUGS-84180: fix(hypershift): use net.JoinHostPort for URL construction #2977
OCPBUGS-77151: Add config override for openflow-probe #2965
OCPBUGS-78833: Fix whereabouts-token-watcher DaemonSet improvements #2940
Full changelog

cluster-node-tuning-operator

OCPBUGS-90575: Requeue PerformanceStatus update when status write fails #1552
OCPBUGS-82752: Bump github.com/moby/spdystream from v0.4.0 to v0.5.1 #1544
Full changelog

cluster-olm-operator

OCPBUGS-80239: Bump google.golang.org/grpc to v1.79.3 #200
Full changelog

cluster-policy-controller

OCPBUGS-98486: Backport fs type service account token 4.18 #196
Full changelog

cluster-storage-operator

OCPBUGS-87556: remove oVirt code from CSO 4.18 #707
OCPBUGS-77627: add vsphere permissions for checking if users is authorized to see metrics #670
Full changelog

console

OCPBUGS-100069: quickstart page i18n misses (Fix Quick Starts i18n bundle lookup for zh-CN) #16872
OCPBUGS-91944: Prevent binary secret data corruption when editing #16673
OCPBUGS-99487: Disable Knative e2e Cypress tests in CI #16803
OCPBUGS-99648: Disable shipwright e2e tests to unblock CI #16818
OCPBUGS-86453: [release-4.18] shell-quote: Arbitrary code execution via command injection due to unescaped line terminators #16511
Fix for OCPBUGS-81604: CVE-2026-4800 #16563
OCPBUGS-84284: Bump follow-redirects to 1.16.0 to fix CVE-2026-40895 #16675
OCPBUGS-77125: [release-4.18] CVE-2026-26996 Bump minimatch library #16344
OCPBUGS-79447: Bump immutable #16325
NO-JIRA: enable multi-architecture yarn builds #16421
Full changelog

console-operator

OCPBUGS-98985: [4.18] Stabilize telemetry config to prevent continuous console pod rollouts #1190
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-85672: CI Build root image tag sync with ART #236
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-80309: Bump google.golang.org/grpc #387
Full changelog

csi-driver-nfs

OCPBUGS-82754: Bump github.com/moby/spdystream@v0.5.1 #194
OCPBUGS-80254: Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.71.3-sec.1 to avoid go version bump and fix CVE-2026-33186 #180
Full changelog

csi-external-attacher

OCPBUGS-80255: Bump google.golang.org/grpc to v1.79.3 #105
Full changelog

csi-external-provisioner

OCPBUGS-82755: Address CVE-2026-35469 #135
OCPBUGS-80256: Bump google.golang.org/grpc #130
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-80258, OCPBUGS-80261, OCPBUGS-80262: Bump google.golang.org/grpc to v1.79.3 #211
Full changelog

egress-router-cni

OCPBUGS-100191: Bump containernetworking/cni to v1.3.0 github.com/containernetworking/plugins to 1.4.0 #109
Full changelog

gcp-cluster-api-controllers

OCPBUGS-80270: Bump google.golang.org/grpc to v1.79.3 #290
Full changelog

gcp-machine-controllers

OCPBUGS-80293: Bump google.golang.org/grpc to v1.79.3 #165
Full changelog

gcp-pd-csi-driver

OCPBUGS-80274: Bump google.golang.org/grpc to v1.71.3-sec.1 in release-4.18 #112
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-80273: Replace google.golang.org/grpc with fork #187
Full changelog

haproxy-router

OCPBUGS-86715: Strip X-SSL-* headers for plain HTTP #800
OCPBUGS-80275: Bump google.golang.org/grpc to v1.79.3 #768
Full changelog

hypershift

OCPBUGS-99142: fix(backport): konnectivity agent auth #9096
OCPBUGS-62756: Restart HCP on stale serving certs #8245
OCPBUGS-89356: build(operator): drop hypershift-no-cgo from operator container images #8760
NO-JIRA: remove path filter from control-plane-operator pipelines #8665
OCPBUGS-80278: fix CVE-2026-33186 by replacing grpc-go #8515
OCPBUGS-84180: fix(cno): use brackets only for IPv6 in server URL #8346
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-80280: Bump google.golang.org/grpc to v1.79.3 #143
Full changelog

ibmcloud-machine-controllers

OCPBUGS-81647: bump vpc go sdk #91
Full changelog

insights-operator

OCPBUGS-80283: Bump google.golang.org/grpc to v1.79.3 #1283
OCPBUGS-76963: Extends the time for the extractor liveness probe #1234
Full changelog

ironic

OCPBUGS-76459: Bump pyasn1 to 0.5.1-4 #826
OCPBUGS-74407: Update sushy to include DGX B200 credentials fix #832
Full changelog

ironic-agent

OCPBUGS-95066: Replace individual package removal with a single rpm -e loop #286
OCPBUGS-95066: Replace dnf remove with rpm -e to prevent dependency removal #274
Full changelog

kube-metrics-server

OCPBUGS-80190: Bump google.golang.org/grpc to v1.79.3 #64
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-39554: Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART for 4.18 #45
OCPBUGS-95084: OWNERS: Update component to Cloud Compute / KubeVirt Provider #77
Full changelog

kubevirt-csi-driver

OCPBUGS-80191: Bump google.golang.org/grpc to v1.79.3 #101
Full changelog

machine-config-operator

OCPBUGS-94116: move cleanUpDuplicatedMC to avoid double reboot on first updated #6249
OCPBUGS-91747: Verify extension packages are installed #6216
OCPBUGS-98445: Remove sensitive ControllerConfig logging #6294
OCPBUGS-97588: Bootstrap MCS logging entire ignition #6268
OCPBUGS-86845: Apply password only if changes exist #6113
OCPBUGS-86695: use –delete-if-present for karg removal #6102
OCPBUGS-86844: Fix ssh and password rollbacks #6096
OCPBUGS-86692: Fix re-cordon detection #6101
OCPBUGS-86300: Add terminationMessagePolicy to build pod containers #6074
OCPBUGS-86021: Fix units rollback if update failure #6052
Full changelog

machine-image-customization-controller

OCPBUGS-82149: Return error when network data Secret lacks nmstate key #174
Full changelog

machine-os-images

OCPBUGS-87876: Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs #100
Full changelog

monitoring-plugin

OCPBUGS-79448: immutable bump: fix for CVE-2026-29063 #922
OU-1241: unset frontend timeout to use the backend configuration #905
OCPBUGS-83374: fix: re encode params when redirecting from graph to query-browser #878
NO-JIRA: fix: pin http-errors to 2.0.1 for hermetic builds #870
OU-993: adding cypress Dockerfiles #861
OU-876: monitoring automated testing backported and adjusted to pf-5 and diff UI #777
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-85249: Fix server url in kubeconfig #298
NO-ISSUE: [release-4.18] Bump Go to 1.22 and fix CI build root image #291
Full changelog

must-gather

OCPBUGS-86019: Collect object size with the object count #547
Full changelog

networking-console-plugin

OCPBUGS-41880: Fix namespace retention between NetworkPolicies tabs when MultiNetworkPolicies are disabled #433
OCPBUGS-41880: Retain namespace selection between network policies tabs #424
OCPBUGS-87000: Update Dockerfile.art to 4.22 build image #426
OCPBUGS-83382: Fix CVE 2026 34043 serialize javascript 4.18 #413
[release-4:18] OCPBUGS-85067: Migration from yarn to npm #412
OCPBUGS-81606: Fix CVE-2026-CVE-2026-4800 in lodash #401
OCPBUGS-79449: Bump immutable #390
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

oauth-server

OCPBUGS-81803: Bump github.com/go-jose/go-jose/v3 from v3.0.3 to v3.0.5 #238
Full changelog

olm-operator-controller

OCPBUGS-100434: increase catalog HTTP client timeout from 10s to 5m #787
OCPBUGS-87830: [release-4.18] operator-controller: clean up orphaned temp dirs in catalog cache #751
OCPBUGS-80304: Update grpc-go to v1.71.3-sec.1 to fix CVE-2026-33186 #735
Full changelog

openshift-apiserver

OCPBUGS-82769: Address CVE-2026-35469 #657
Full changelog

openstack-machine-api-provider

OCPBUGS-93867: Revendor CAPO #174
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-80311, OCPBUGS-80312, OCPBUGS-80313: Fix CVE-2026-33186 with openshift-sustaining/grpc-go v1.71.3-sec.1 [release-4.18] #1314
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-82773: Bump github.com/moby/spdystream to v0.5.1 #3321
OCPBUGS-98957: Branch Sync release-4.19 to release-4.18 [07-09-2026] #3290
OCPBUGS-86230: Branch Sync release-4.19 to release-4.18 [05-19-2026] #3197
OCPBUGS-74399, OCPBUGS-85434: Branch Sync release-4.19 to release-4.18 [05-12-2026] #3184
OCPBUGS-77151, OCPBUGS-83567: Branch Sync release-4.19 to release-4.18 [04-16-2026] #3143
OCPBUGS-82148: Branch Sync release-4.19 to release-4.18 [04-05-2026] #3117
OCPBUGS-81479: node: fix serviceUpdateNotNeeded nil pointer comparison #3101
Full changelog

powervs-block-csi-driver

OCPBUGS-80317: Fix CVE-2026-33186 by bumping google.golang.org/grpc to 1.79.3 #130
OCPBUGS-82774: Fix CVE-2026-35469 by bumping github.com/moby/spdystream to v0.5.1 #124
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-80318: Fix CVE-2026-33186 by bumping google.golang.org/grpc to 1.79.3 #111
Full changelog

powervs-cloud-controller-manager

OCPBUGS-80319: Replace google.golang.org/grpc with openshift-sustaining fork v1.71.3-sec.1 to v1.79.3 to fix CVE-2026-33186 #99
Full changelog

prometheus

OCPBUGS-88628: remote: validate snappy decoded length before allocation in read endpoint #346
OCPBUGS-80320: Bump google.golang.org/grpc to v1.79.3 #308
Full changelog

prometheus-alertmanager

OCPBUGS-100355: Set testdata CA expiry to 20 years from issue date (#4112) #148
Full changelog

route-controller-manager

OCPBUGS-80199: Bump google.golang.org/grpc to v1.79.3 #85
Full changelog

telemeter

OCPBUGS-80333: Bump google.golang.org/grpc to v1.79.3 #599
OCPBUGS-81804: [release-4.18] Fix CVE-2026-34986 #596
Full changelog

thanos

OCPBUGS-80335: Bump google.golang.org/grpc to v1.79.3 #184
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-80340: Bump google.golang.org/grpc to v1.79.3 #104
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-80343: Bump google.golang.org/grpc to v1.79.3 #176
Full changelog

vsphere-csi-driver-operator

OCPBUGS-81673: Fix password escaping #342
Full changelog

vsphere-problem-detector

OCPBUGS-81556: fix concurrent map writes #215
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github