# 4.18.51 Created: 2026-07-30 12:30:59 +0000 UTC Image Digest: `sha256:0bf08effa1f11a7afd1c21574a1d25b4004b12511fe790c651162074e48e06fe` ## Changes from 4.18.50 ### Components * Kubectl 1.31.1 * Kubernetes 1.31.14 * Kubernetes Tests 1.31.12 * Red Hat Enterprise Linux CoreOS upgraded from 418.94.202607211754-0 to 418.94.202607272025-0 ### Rebuilt images without code change * [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [cb375d17](https://github.com/openshift/cluster-node-tuning-operator/commit/cb375d177811aa52b53124335de2f87f417136d8) `sha256:4ae0174eec7cff35f2ae0926d28975ad4d2f303c4c3259fc5e2b9deea91699ad` * [driver-toolkit](https://github.com/openshift/driver-toolkit) git [2e139edc](https://github.com/openshift/driver-toolkit/commit/2e139edc4aeefbbc41536eeeedc91f317f0835fd) `sha256:14580d43056d87cf84a2ce5f2fc7fa5ad3dd47745e53f431bff1203db20a7b77` * [ironic](https://github.com/openshift/ironic-image) git [75856ee3](https://github.com/openshift/ironic-image/commit/75856ee3e738e9941b57881e31a307c1d79a4ee8) `sha256:683cd49dfc9a43c876db6cf94b9f7e417cee3f7bc0adbd320aa0cb924b817732` * [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [50ca44fd](https://github.com/openshift/ironic-rhcos-downloader/commit/50ca44fd48943433d502e8bcff3804f5cac7cb5a) `sha256:3df178f2cdc1b46a0fb728b1ce65689052c1728cfacadd4ad95383017a625202` * [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [01882e9e](https://github.com/openshift/monitoring-plugin/commit/01882e9e933c81141b22d0095827ec5f0ec44ccf) `sha256:4873d888ea06945c205c5d1810c0ab733fb1ecfd09a7479a57bdfa79b0a817f3` * rhel-coreos `sha256:3493f43c22c3d53713d9e81838574d8726aaccea9853412a93d074c8ec8028ac` * rhel-coreos-extensions `sha256:fa0e9623b44d355f62485beba39a741a7efe9488874a8cb08bfa226ab345b72d` ### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/f0e7fae4b6b9a2777c498b23b818e306954aaf3e) * [OCPBUGS-80219](https://issues.redhat.com/browse/OCPBUGS-80219): Fix CVE-2026-33186 using openshift-sustaining grpc-go fork [#1041](https://github.com/openshift/cloud-credential-operator/pull/1041) * [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/363e98bd7ca3872072a8aad152525c61388b10a5...f0e7fae4b6b9a2777c498b23b818e306954aaf3e) ### [console](https://github.com/openshift/console/tree/e98893bd0feddafbd5dbe8b355cf85a0bd946271) * [OCPBUGS-91944](https://issues.redhat.com/browse/OCPBUGS-91944): Prevent binary secret data corruption when editing [#16673](https://github.com/openshift/console/pull/16673) * [OCPBUGS-99487](https://issues.redhat.com/browse/OCPBUGS-99487): Disable Knative e2e Cypress tests in CI [#16803](https://github.com/openshift/console/pull/16803) * [OCPBUGS-99648](https://issues.redhat.com/browse/OCPBUGS-99648): Disable shipwright e2e tests to unblock CI [#16818](https://github.com/openshift/console/pull/16818) * [OCPBUGS-86453](https://issues.redhat.com/browse/OCPBUGS-86453): [release-4.18] shell-quote: Arbitrary code execution via command injection due to unescaped line terminators [#16511](https://github.com/openshift/console/pull/16511) * Fix for OCPBUGS-81604: CVE-2026-4800 [#16563](https://github.com/openshift/console/pull/16563) * [Full changelog](https://github.com/openshift/console/compare/551206fcfd31f4a8d96314e73c5bf4a1f03bbf57...e98893bd0feddafbd5dbe8b355cf85a0bd946271) ### [hypershift](https://github.com/openshift/hypershift/tree/e503a20f6760cefcfc4d6987f1a0a908683d67b6) * [OCPBUGS-99142](https://issues.redhat.com/browse/OCPBUGS-99142): fix(backport): konnectivity agent auth [#9096](https://github.com/openshift/hypershift/pull/9096) * [Full changelog](https://github.com/openshift/hypershift/compare/aa97a7f2cb6f2cb4f783cc9719523c1809fc4d13...e503a20f6760cefcfc4d6987f1a0a908683d67b6) ### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/a362b5965c47d38e15cfe32f69e66a525819e45c) * [OCPBUGS-94116](https://issues.redhat.com/browse/OCPBUGS-94116): move cleanUpDuplicatedMC to avoid double reboot on first updated [#6249](https://github.com/openshift/machine-config-operator/pull/6249) * [Full changelog](https://github.com/openshift/machine-config-operator/compare/cb086bddfb6c687d4cc49cf86976bc34472ae04b...a362b5965c47d38e15cfe32f69e66a525819e45c) ### [prometheus](https://github.com/openshift/prometheus/tree/632e9bbd28f5aa8b2c8f88e564aadad5a752bc0f) * [OCPBUGS-88628](https://issues.redhat.com/browse/OCPBUGS-88628): remote: validate snappy decoded length before allocation in read endpoint [#346](https://github.com/openshift/prometheus/pull/346) * [Full changelog](https://github.com/openshift/prometheus/compare/988ce8bbdcaea76028aa84c6bbd2f6a1f08fd1a4...632e9bbd28f5aa8b2c8f88e564aadad5a752bc0f)