4.12.80

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.12.80-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-sdn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-aws-sdn-serial
- aws-sdn-upgrade-4.12-minor Succeeded (2 retries) periodic-ci-openshift-release-master-nightly-4.12-upgrade-from-stable-4.11-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.12-micro Succeeded (2 retries) periodic-ci-openshift-release-master-ci-4.12-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.12-fips-payload-scan
- gcp-sdn-upgrade-4.12-micro Succeeded periodic-ci-openshift-release-master-ci-4.12-e2e-gcp-sdn-upgrade
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.11.14, 4.11.16, 4.11.17, 4.11.18, 4.11.21, 4.11.22, 4.11.23, 4.11.24, 4.11.25, 4.11.26, 4.11.27, 4.11.28, 4.11.29, 4.11.30, 4.11.31, 4.11.32, 4.11.33, 4.11.34, 4.11.35, 4.11.36, 4.11.37, 4.11.38, 4.11.39, 4.11.40, 4.11.41, 4.11.42, 4.11.43, 4.11.44, 4.11.45, 4.11.46, 4.11.47, 4.11.48, 4.11.49, 4.11.50, 4.11.51, 4.11.52, 4.11.53, 4.11.54, 4.11.55, 4.12.10, 4.12.11, 4.12.12, 4.12.13, 4.12.14, 4.12.15, 4.12.16, 4.12.18, 4.12.19, 4.12.20, 4.12.21, 4.12.22, 4.12.23, 4.12.24, 4.12.25, 4.12.26, 4.12.27, 4.12.28, 4.12.29, 4.12.3, 4.12.30, 4.12.31, 4.12.32, 4.12.33, 4.12.34, 4.12.35, 4.12.36, 4.12.37, 4.12.38, 4.12.39, 4.12.4, 4.12.40, 4.12.41, 4.12.42, 4.12.43, 4.12.44, 4.12.45, 4.12.46, 4.12.47, 4.12.48, 4.12.49, 4.12.5, 4.12.50, 4.12.51, 4.12.53, 4.12.54, 4.12.55, 4.12.58, 4.12.59, 4.12.6, 4.12.60, 4.12.61, 4.12.62, 4.12.63, 4.12.64, 4.12.65, 4.12.66, 4.12.67, 4.12.68, 4.12.69, 4.12.7, 4.12.70, 4.12.71, 4.12.72, 4.12.73, 4.12.74, 4.12.75, 4.12.76, 4.12.8, 4.12.9

Upgrades to:

4.13.0-0.nightly-2025-09-05-022137 (changes) - Failed Success
4.13.0-0.ci-2025-09-05-185323 (changes) - Success Success
4.13.0-0.ci-2025-09-05-125323 (changes) - S F S
4.13.0-0.ci-2025-09-05-060742 (changes) - F S F S
4.13.0-0.ci-2025-09-04-211710 (changes) - Failed

Loading changelog, this may take a while ...

Changes from 4.12.56

Created: 2025-09-04 17:29:53 +0000 UTC

Image Digest: sha256:7c5f757b5d3d2048052401dd057f3096890b4075ca9b86b5f890a8e4c6d38b85

Components

Kubernetes 1.25.16
Red Hat Enterprise Linux CoreOS upgraded from 412.86.202404162110-0 to 412.86.202509030110-0 (diff)

Rebuilt images without code change

alibaba-cloud-controller-manager git 191c9e34 sha256:3737c6f10d56ba6d8149078b06f369d11b1ead10b9669f3297f7e01cc1fb194a
alibaba-cloud-csi-driver git 4d3b1125 sha256:756155fb1ebb3ab31ef9d8af07a2df444534767f3a7bb1b117e0e71c87fe976d
alibaba-disk-csi-driver-operator git 99bcda8d sha256:4878cbca686246df0ccc8dea315242f05241586d1177a80a52bcddc438c6a10b
aws-cluster-api-controllers git 16156acc sha256:02bd0b920f3f8b0d7cc64fe95bfcd617228f07936ce84d2cb9b086217aabaa9b
aws-machine-controllers git 440886d0 sha256:49f0e2ee63b613da5f41da5117b65825c188d92e991621a8fd26aa8c65f54b7c
azure-cloud-controller-manager git 2193ccfa sha256:7989766df87e4c3af874974258908bcd774b99746068ec3d67faad695bce1ed7
azure-cloud-node-manager git 2193ccfa sha256:76180e067fef5b08d9ae32eefb38f3ccdf7178eafd3a258d0cfa90eee68c2c82
azure-disk-csi-driver-operator git 988b8cc8 sha256:bd2cccebfa41d57c429e36e46b5f1d280fc6ac60e630fe04369807bc266d93e4
azure-file-csi-driver git 15aade4d sha256:70d8f80091d14dbbc872008daed9eb5d91746c6b95888e76c04d2de9d7975995
azure-file-csi-driver-operator git 060ba825 sha256:5884ae0f98c101457a107be27ee3f3f91213888173a6ec6580986097e1a2a42d
baremetal-runtimecfg git 474ed48e sha256:04691ca10c577d665572fbc9da28b6f635fcd0592812b03db987968a6369465a
cli git d6912573 sha256:df31d6a075c6cedfdb5408f4d78ed4639af4a1d7439e7e522baf645862f2c277
cli-artifacts git d6912573 sha256:ecfd900185d12c7c00a107f764c3af80d0968f6d667f9eaab4967244f2aa976d
cluster-authentication-operator git 4f7f6b1a sha256:3154b7780b92e551a689137e69cf3988352c93da106b0fd6e6fde726af5a4829
cluster-bootstrap git 138a1cf2 sha256:a4431a5f60bf10f5c6b70b4ee7dcff8ce933b2bff179ad8f47e405b0cf8d6a6c
cluster-capi-controllers git 03d89f21 sha256:97dc37302b9c77bd1afb362efc6688f5bb8921629bb543fee2dd3e1e2c7670e4
cluster-capi-operator git 60a36d83 sha256:a766265fed08cd1e0dff2da0b17247bb21dbcab5620ac7863ddead41ac192f13
cluster-cloud-controller-manager-operator git 3b1f0843 sha256:bf54cd260c32da87cdb201570d7098954f4847f1287757ccabe4e780ed52845b
cluster-config-operator git 92c3b102 sha256:ab76d3e603d700a7786857ca7c50d7a82264d45b66c936ff604c2d45ab0dc99b
cluster-kube-cluster-api-operator git d50f7322 sha256:c4c25596c63c67592c084e697b9ed826c628b441c17a3390f50ef80d1743d9ab
cluster-kube-controller-manager-operator git c3c07beb sha256:17df5e85494c27c326b44e15f356a98887a698745cb392f54d245443e697e685
cluster-kube-scheduler-operator git 48cd96c9 sha256:c9901c150d3a3ee55afa44a931a4794a5fb2e54bba35c495831caf301676ed3f
cluster-kube-storage-version-migrator-operator git 1a251f4d sha256:85510d88eca66906b5bc9cd21d095e2e5e092d154850bb1320e85b71e33e6536
cluster-machine-approver git 7b08a4de sha256:bde6dbfd44f96dc90e5a78c7c373ea56c1b6f3137523b660c9c1be2f1752b614
cluster-node-tuning-operator git 20966da9 sha256:1c395ca81a66bb8ba61b7d59d5df6c7e2f5b209347a394054ad4e0081caa59ae
cluster-openshift-apiserver-operator git b870fc67 sha256:2d1ac9b6e84efbadef7542907f61d61cf075b64e877ee835fe08857ff79581e1
cluster-openshift-controller-manager-operator git ab963d8a sha256:d254dc0767a6edb8b9f2999cd907054151d83f4b96f8b0ef9833223be5c71aeb
cluster-platform-operators-manager git c930dc74 sha256:a6fbdc56f55d0f5f08bc237c417b853866bfbe23183680528175512b356c8b78
cluster-policy-controller git cb8862b0 sha256:37370c3b631d15c3fca40f1898804a7aef7a122b83ca80def93e05cdfacc06b4
cluster-storage-operator git 21ebf328 sha256:89ef901f34d0591fa193f634536c47a8d3f66e1f2fe3aabdd64e228c88a5227c
cluster-update-keys git 2796e173 sha256:90bda371ed576c58b1f1f918275232db7e8b6268c9a3bdc6b8ff7583c83d63e6
configmap-reloader git e4d9170e sha256:9cb7c233e52056c3c530e04473b1b7070fd070ca4cfacf5ad41fa6e13293e342
coredns git cc1194ea sha256:377f9efe96d70af9b13453ecfa365b2855d2f52551cecf9918135dfe94b1466f
csi-driver-manila-operator git 8dab5320 sha256:ecdbdd43b82078f39f915e95959045b0ee580fb0a235fd408313d861e08c6aed
csi-driver-nfs git d9099257 sha256:80455deb94b7d3608ff41a1e539eb243f52ce76b071961c255bb5a5e16863b03
csi-driver-shared-resource git d054948f sha256:197ebfa76d22011169313d6b76c705bd6949d803cc020442d742462f9b74f1d5
csi-driver-shared-resource-operator git cc297702 sha256:1482c8f855deee34bf1b977916ffe9eac428533b115ab3067106880606ed02cc
csi-driver-shared-resource-webhook git d054948f sha256:4434f1e9e0b2f0a49000dad0153766c3b137fe26006ead878ecc1d95143beae0
csi-external-attacher git fac7b8fd sha256:7242460717b3c29acc4def2a4dec21b539c87c1151941b3f9d549f35c64ea1eb
csi-external-provisioner git 3aa7c527 sha256:5cb7e2e5cf20870ebb892831e1d6a54c926e1f1311264a423e6d16acaf56a5bf
csi-external-resizer git 5b066ba4 sha256:e57403203b77206caca5ab9c05ba70b09cbf86caf3a5178dc1b4fc15ab11a255
csi-external-snapshotter git 6fdb648f sha256:b8ce816a2548cd33c3103a5830e656b74c7534690afc7e3356d5dace7c10c010
csi-livenessprobe git e6545e71 sha256:b917aea1bb38c694542beefc5502b8e456ba10c23477d73bf25ceaeb77280dcc
csi-node-driver-registrar git c316b896 sha256:12adcf29a878a8e4e0b1960b165dd9f9b7a93d237454c1a31d9fe447c0c1b7d4
csi-snapshot-controller git 6fdb648f sha256:18ee0939d60cb2501114ee7dfec1983446e681b1712d11a0415a23614c62776f
csi-snapshot-validation-webhook git 6fdb648f sha256:da2e1729669e2dba26ef4a454a048915d11c782a714e2dfde84cd96300ce16b3
deployer git d6912573 sha256:7bd60093c2d14f02d77de205d9eb4a296744a549ebd053a4038d0794e7a3e62d
driver-toolkit git 6e5c04c0 sha256:9f5e17d8432fbeb0f1e7b1acac68a6407d6205a6c7d6a943f6c9b196beac4e9c
egress-router-cni git a92e4157 sha256:08d082338922e89d9612dd0e5f98ac58c9a16d08f5faf7a8f19eb6f937e5e77c
etcd git bb82e891 sha256:3e93e19473f81377dcd3f0120e2124d6ccde64a0473f134bf15d4b2951734bf0
gcp-cloud-controller-manager git 8a84952e sha256:07b1b2c2906d264cfaea15308715f7fa3b03e52e8c4448b76e3ada38e7944628
gcp-cluster-api-controllers git e00019fa sha256:6f72b3df14c4fed06636fe38844e4ab60229c43de993d38a0257066b1880b819
gcp-machine-controllers git d6d8c1cc sha256:00c935dfb1b18cea9b95de640916a4fd2f1ca32400f291125f1b2a400bba477a
gcp-pd-csi-driver git 5dcfd675 sha256:28ec403a82cd8229aac65447d634ae88c1728062e78e2c85aea4a54d7fb32912
gcp-pd-csi-driver-operator git 30e97ba5 sha256:8f3f9b902dc63894557d873354fabca9815b33df1a934d70995bc22a6f6f6a41
ibm-cloud-controller-manager git 8bd0ea8f sha256:b816945718eee717f164b6121ab523c42a1ffbee52692ff018ff80d7f040d59b
ibmcloud-cluster-api-controllers git 0fe74f67 sha256:3337f1a1e0a3c2cd4d7b2959629a820edd6a10628a8e7d0c8b530a113e5456c6
ibmcloud-machine-controllers git 31a67dac sha256:0a54738c411d8b795bc546810bd0ecb3887a633cd771ee749ecf26e5a49a9d7b
ironic-machine-os-downloader git c65c1f1c sha256:899824855b3c975e666e016af760e2ad8a73beebb3105a33b59ec62d2f774583
ironic-static-ip-manager git a8ade8fe sha256:ef33a3eee445cbf6a928e1cc4a8313ad495268a522490188b47c4d3114491215
k8s-prometheus-adapter git 36c06694 sha256:33212322fe1c34cc3e8e716998cc13d7c5cca70713a920cba736fff4437ebc06
keepalived-ipfailover git 7e8a0105 sha256:7255b94a2c8f360f6604da25b4b8f201c7e67fb3b615046485b23cc1c7bbe206
kube-state-metrics git 748f7131 sha256:f79b19dfcea13107b29e22f5d101392f2a574500d1a26c4a9f783b80acf05928
kubevirt-cloud-controller-manager git a19615cd sha256:3af6fa259764f9d6ab191975e0b7267f11b11166c5d0cfdf4800214e9a769aa5
kubevirt-csi-driver git f407c8a7 sha256:cb0ed211a4ddf88911c1c785e41dfb0b32b68e185c918dc97aeda2f95ea53cdc
kuryr-cni git 8fd2f8b0 sha256:653ea157de585e7bb83cd7adcb1d48d9f50833a160a751d9fe91f8ce7692531a
kuryr-controller git 8fd2f8b0 sha256:3f7c2047f34dd6a9ed3591ff6d58d1d4301052b05196984c754f51fa3f5216b9
libvirt-machine-controllers git a2882f7a sha256:7f1e9ea250558b7f2a2c7c8f40b4fb95ab805d45bdcafaf0674b4701bb12d2ac
machine-image-customization-controller git e456249d sha256:ebfef4c44eaa4b91d3c1c0a702b61a2cb8063d00500b9de9090da8a548fd20cf
machine-os-content sha256:3ba15cc2acc00a546f482cebfaffe7945380682097405384cb4e8175e90de6c2
multus-networkpolicy git 644461f2 sha256:a405ecc4c2550dbe889d4e047016171c3163b72fe0130e8e9c134025d384e5e8
multus-route-override-cni git efd6ffbb sha256:9da59b21215588a173b120038e76f543095fc673b0baf7a3f07df3292c1ac811
network-interface-bond-cni git 30386d6b sha256:796a799c1ec579cfd251466c4ff59b76283bae61ebacbcb6f9919c3158644cff
network-tools git c76613c7 sha256:df257ec329a26180c477152d05ce893db5acc59d7bf34123f539afca36584d49
oauth-proxy git 03e5b13b sha256:c55b8db990ba44a0a4fd7bc356245d20d773b6dfd998e63f73c08738c5801c19
openshift-state-metrics git 3d5dc18d sha256:a1cac3e6ab06155b472fac67c56c6155a28ea51ccdc8793a6d83e8b7ec941f43
openstack-cinder-csi-driver-operator git d09e51ae sha256:66e45a958a011c9f256b52e93e32b73b167ab28811ef764187212c94d025d04b
openstack-machine-api-provider git 05657663 sha256:1fa8586509b2b1e684f515ef3d94fcb4c73b3d0a495c49cc179fae12cb8c63be
openstack-machine-controllers git f13e381e sha256:01e5286d651fcedc55ebefc68ef4552ff1070f089f11a4f43e0b2f7065f22e2a
ovirt-csi-driver git 87ab3789 sha256:507cc745c2d42a2cccb529734b525561809a8f1d1f4508daffed650038af3f51
ovirt-csi-driver-operator git e5e02335 sha256:78ad1ba41573fc9e40e28d695826b7d89b53fd25ebdaf74fdbbfd744a3f7b4eb
ovirt-machine-controllers git 03e8cb50 sha256:f3dfa01c44eef8b92a39376e4ae8069a4f27146526cf75ca22a90ee2e14095e9
powervs-block-csi-driver git b78e8e78 sha256:216ceaedaf45398770d3df2019423f0b96bc2604a97ed198acf8a9b26395b70d
powervs-block-csi-driver-operator git 7dadc08a sha256:acbcf68bf23eb15989bbbbeb30840a4a266c482e644a9a2e28adce058a80f7ac
powervs-cloud-controller-manager git 4fb4334c sha256:b7d46a4c00391b8f2a5ee0546554160aebf558acaf07f60d9c4ddcf8fc0a73e7
powervs-machine-controllers git 8a37e70a sha256:f053ecd0625349615fa3e83fac5b88200d5555f6d52c8135e6aa9277b97b9db2
prom-label-proxy git b1907888 sha256:e11b957d3903e6b03430315ed4a31bad8eab19f462be8f7d953a6e5cb0083cf7
prometheus git 72ceaef4 sha256:5a777607d688057a75b22f145118819d6ba7da5723d6eb923f19f8ec2ec7f8fd
prometheus-alertmanager git 914cad82 sha256:8f3f2c1ce9b05e565ac879441c2f759ea4fb28d664e0b5000c229710558d24ce
prometheus-config-reloader git d1e399d5 sha256:a4134f102041918aa0479395b5fe663ec6d5a09c5361bba63ba14511a2d8e77b
prometheus-node-exporter git 99077a3c sha256:76761983ed1abf29574c333ab76c0b9c0ce9b809075d12a31966d093f2e3983e
prometheus-operator git d1e399d5 sha256:4cd44de1d6d90eb9c278a35dc6a7c392e4dae3b50de808358693f8f5d89c2cae
prometheus-operator-admission-webhook git d1e399d5 sha256:08743647cfedde2eac5cf66dbfa3e1e7abb17e7523d5aafd22d5917d7826b818
rhel-coreos-8 sha256:e5a076672ba084b5238a37c07f99d063b5372f404bd3368d098000ed9fbf908a
rhel-coreos-8-extensions sha256:d68f7c943ca39968942f0aa515b6a75696f837ae143fd0b4a2c888302faab4d5
route-controller-manager git 0f141ce9 sha256:98cc992ccb28bf94945e6066234472909e4d9be19d45ebab9b2db4c851885d60
service-ca-operator git ef1d057d sha256:96890a1f2a0b2cf5d2b957bae9208f759b005b0d86001dfd3f7b3e025d972379
thanos git 2867a6b5 sha256:ae6e3aa5922b54bbc6ce8619cccd7649f9acbf14f15ef2faa5ebf2567b59a9da
tools git d6912573 sha256:b182bfea8ee3661f1b8bed3d2d94f03db91f346fe67cc19af203d9082d6a22c9
vsphere-cloud-controller-manager git e170dce5 sha256:e968914f92abc3e9811dd81a0a4abcf1b99115c5665be6aae26f2167e4fc2d3a
vsphere-cluster-api-controllers git a61d43b7 sha256:e77ba2e5fd5a4f66871db6160bd228202163edad4c5549782966dd953ed3861b
vsphere-csi-driver git e4c0e103 sha256:a85d6dbc3c19dc71a75d92e0ea78d94c566cdd4ad7e73a11ce7c65a1d0b6766d
vsphere-csi-driver-operator git d7cca470 sha256:7ea7e001a69213d15b824ae6f773b3d5dfb5747cd7d170df5bea0413f3652a7e
vsphere-csi-driver-syncer git e4c0e103 sha256:edad3f6c2b60b4a5152373b81481aff4482d35eea86ec7b23cdd484333004f9e
vsphere-problem-detector git f25ae2ad sha256:724c744878c8d75a6663fba9a8f5d76826c4d8bdece9e64593b0116f42112fdc

agent-installer-api-server

OCPBUGS-58863, OCPBUGS-58864: Bump glog to v1.2.5 in release-4.12 (#7919) #7919
OCPBUGS-53692: Bump jwt to 4.5.2 in release-4.12 (#7513) #7513
MGMT-17596: Bump x/net to v0.24.0 to mitigate CVE-2023-45288 (#6214) #6214
MGMT-17590: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#6207) #6207
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-58865: CVE-2024-45339: Bump glog pkg version to 1.2.4 (#1196) #1196
Bump golang.org/x/net to 0.33.0 (#1026) #1026
MGMT-17596: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#836) #836
MGMT-17590: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#828) #828
Full changelog

agent-installer-node-agent

OCPBUGS-58867, OCPBUGS-58868: Bump glog to v1.2.5 in release-4.12 (#1077) #1077
OCPBUGS-46953: Bump golang.org/x/net to 0.33.0 (#887) #887
MGMT-17596: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#707) #707
MGMT-17590: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#701) #701
Full changelog

alibaba-machine-controllers

Updating ose-alibaba-machine-controllers images to be consistent with ART #35
Full changelog

apiserver-network-proxy

OCPBUGS-38066: Revert “Agent: Respect HTTPS_PROXY env vars for proxied connections” #61
OCPBUGS-31984: Bump golang.org/x/net to v0.23.0 #52
Full changelog

aws-cloud-controller-manager

OCPBUGS-32079: update for CVE-2023-45288 [release-4.12] #85
Full changelog

aws-ebs-csi-driver

OCPBUGS-33457: UPSTREAM: 1919: Add reserved-volume-attachments #267
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-33457: Explicitly reserve 1 attachment for the root disk #308
Full changelog

aws-pod-identity-webhook

OCPBUGS-32880: Upgrade go-jose module to 2.6.3 #191
Full changelog

azure-cluster-api-controllers

OCPBUGS-36021: Update go-retryablehttp to v0.7.7 #315
Full changelog

azure-disk-csi-driver

OCPBUGS-56067: tech debt: rework vendor patches #106
Full changelog

azure-machine-controllers

OCPBUGS-36148: Fix mapi_instance_create_failed metric with accelerated networking #115
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-55035: IBMCloud: Move to IBM TF openshift fork #9670
OTA-1310: data/manifests/bootkube/cvo-overrides: Default to eus-4.12 #9373
OCPBUGS-36087: [release-4.12]: bump go-retryablehttp for CVE fix #8660
OCPBUGS-39290: Add yq v4 to ci image #8929
OCPBUGS-36179: [release-4.12]: bump github.com/container/images for CVE fix #8663
OCPBUGS-22981: IBMCloud: Add eu-es region #7686
OCPBUGS-30630: baremetal: populate customDeploy in advance #8144
OCPBUGS-32449: Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility #8290
Full changelog

baremetal-machine-controllers

OCPBUGS-46642: Bump x/net to 0.33.0 #230
Full changelog

baremetal-operator

OCPBUGS-53335: CVE-2025-29781 ose-baremetal-operator-container: Bare Metal Operator (BMO) can expose any secret from other namespaces via BMCEventSubscription CRD [openshift-4.12.z] #412
OCPBUGS-30630: Do not update instance_info and deploy_interface for active nodes #338
Full changelog

cloud-credential-operator

OCPBUGS-53420: github.com/golang/glog v1.2.4 #847
OCPBUGS-51538: Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected #832
OCPBUGS-37322: update modules: grpc, protobuf, logrus #764
OCPBUGS-42166: Resolve SNYK errors in security job. #760
OCPBUGS-37422: SNYK ignore go-client misreporting #744
NO-JIRA: Add jstuever to OWNERS #733
OCPBUGS-36027: IBM/go-sdk-core update to v5.17.4 #723
OCPBUGS-32897: Upgrade go-jose module to 2.6.3 #699
Full changelog

cloud-network-config-controller

OCPBUGS-33198: Avoid nil pointer panic while assigning private IP on Azure #141
Full changelog

cluster-autoscaler

OCPBUGS-45152: [release-4.12] VPA: Update OWNERS file #329
OCPBUGS-40928: update VPA golang.org/x/net for http rapid reset for CVE-2024-8421 #318
Full changelog

cluster-autoscaler-operator

OCPBUGS-32005: Update x/net to v0.25.0 #325
Full changelog

cluster-baremetal-operator

OCPBUGS-32006: bump x/net to 0.23.0 #440
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-48325: Add unreadyNodeGracePeriod for allowing brief node hiccups #344
OCPBUGS-35421: Improved debugging of API listing errors #306
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-32429: create suitable role and roleBinding for csi-snapshot-webhook #207
Full changelog

cluster-dns-operator

OCPBUGS-52502: [release-4.12] Add runbook_url for CoreDNSErrorsHigh #435
Full changelog

cluster-etcd-operator

OCPBUGS-53508: fix CVE-2025-30204 #1416
OCPBUGS-35501: return errors in wait-for-ceo #1277
OCPBUGS-32001: update golang x net #1256
Full changelog

cluster-image-registry-operator

OCPBUGS-53868: Bump github.com/golang-jwt/jwt #1236
OCPBUGS-51594: bump golang.org/x/oauth2 #1223
OCPBUGS-36033: go.*,vendor: bump go-retryablehttp #1071
Full changelog

cluster-ingress-operator

OCPBUGS-43703: Add e2e test for duplicate Transfer-Encoding headers #1158
OCPBUGS-43703: Add alert for RFC 7230 violation in Transfer-Encoding headers #1162
OCPBUGS-35454: internal service changed fix target port logic #1092
OCPBUGS-35304: TestHostNetworkPortBinding: Delete t.Parallel() #1083
OCPBUGS-35027: Don’t add clientca-configmap finalizer if deleting #1080
OCPBUGS-34888: desiredRouterDeployment: Set HostPort if needed #1076
OCPBUGS-34757: Avoid spurious updates for internalTrafficPolicy #1070
OCPBUGS-34110: Avoid spurious updates for scope in IngressClass #1056
OCPBUGS-34548: Use centos7 tag for quay.io/centos7/httpd-24-centos7 image #1068
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-50880: Increase waitForFallbackDegradedConditionTimeout #1811
Full changelog

cluster-monitoring-operator

OCPBUGS-35558: label for infra nodes for metric cluster:capacity_cpu_cores:sum #2383
OCPBUGS-28766: fix generation of telemeter token hash #2306
Full changelog

cluster-network-operator

OCPBUGS-43872: manifests/02-cncc-credentials: Set skipServiceCheck for GCP #2548
OCPBUGS-38905: Add missing runbook for OVNKubernetesNorthdInactive #2479
OCPBUGS-37942: [release-4.12] update whereabouts crd #2461
Full changelog

cluster-samples-operator

OCPBUGS-54913: add rhdmalone to owners #629
OCPBUGS-49664: add shannon and aroyoredhat as owners #600
OCPBUGS-21179: update k8s.io/apiserver version #590
Full changelog

cluster-version-operator

OCPBUGS-45333: deps: bump golang.org/x/net to 0.31.0 #1122
Full changelog

console

OCPBUGS-57101: Add all files to vendor regardless of gitignore #15137
OCPBUGS-55210: Show Observe section without PROMETHEUS and MONITORING flags #14986
Dockerfile yarn line update #14838
OCPBUGS-45291: Application creation fail when manually entering input scaling value in local setup #14572
OCPBUGS-45235: Edit the secret and add the Chinese in the web-console, garbled characters will be displayed #14561
OCPBUGS-36561: Increase login flow state paramater length/entropy #14539
OCPBUGS-43639: Copy response code from proxied plugin requests #14423
OCPBUGS-33519: Observe > Metrics targets, Alert user if they do not have access to information on this page (e.g. 403). #14334
OCPBUGS-41600: Fix plugin proxy handler #14266
OCPBUGS-41854: Redirects to new PipelineRun logs URL from old PipelineRun logs URL #14283
OCPBUGS-34564: Routes created by devfiles do not always use HTTPS #13907
OCPBUGS-34933: Helm Plugin’s Catalog incorrectly renders a single index entry into multiple tiles #13930
OCPBUGS-32146: Bump graphql-go to v1.3.0 #13923
OCPBUGS-34845: Fix PipelineRun Logs tab navigation #13920
OCPBUGS-33778: fix issues with Edit Route form #13859
Full changelog

console-operator

OCPBUGS-33386: Reset console operator’s conditions #898
Full changelog

container-networking-plugins

ART-13080: Fix Hermeto build issues #198
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-58889: CARRY: don’t ignore json files #345
Full changelog

docker-builder

OCPBUGS-43296: Bump buildah to 1.26.9 #449
OCPBUGS-43187: runc library bump to 1.1.12 #440
OCPBUGS-49345: skipping some unit tests to avoid failures as they are duplicate #437
OCPBUGS-48738: Add new team members to the OWNERS file #433
Replace ‘coreydaley’ with ‘sayan-biswas’ #408
BUILD-854: Add adambkaplan as approver #406
Full changelog

docker-registry

OCPBUGS-53652: bump jwt and oauth dependencies #442
Full changelog

haproxy-router

OCPBUGS-43703: add duplicate_te_header_total metric #632
OCPBUGS-35875: Properly handle rewrite-target annotation #610
OCPBUGS-33432: Route ‘haproxy.router.openshift.io/timeout’ value is not validated #593
OCPBUGS-34212: Reject routes with MD5 certs #601
OCPBUGS-33517: Count active services before setting weight to 1 #581
Full changelog

hyperkube, pod

OCPBUGS-37282: UPSTREAM: 126104: Add funcs in pkg/filesystem/util that can actually … #2046
OCPBUGS-30454: CVE 2024-24786 #1974
Full changelog

hypershift

OCPBUGS-41516: set Konnectivity cipher suites #4283
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-58873: bump github.com/golang/glog to v1.2.4 #111
OCPBUGS-56067: tech debt: rework vendor patches #95
OCPBUGS-53908: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #88
OCPBUGS-36063: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #75
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-60058: [IBM VPC] set offlineExpansion to false in e2e test manifest #153
OCPBUGS-36069: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #124
Full changelog

ibm-vpc-node-label-updater

OCPBUGS-56067: tech debt: rework vendor patches #52
OCPBUGS-53540: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #48
Full changelog

insights-operator

OCPBUGS-32004: bump golang.org/x/net version (#932) #932
Full changelog

ironic

OCPBUGS-48145, OCPBUGS-48596: Bump jinja to 3.0.1-6.el9.2 #627
OCPBUGS-43949, OCPBUGS-43957: Bump python-waitress [4.12] #609
OCPBUGS-37766, OCPBUGS-39385: Include fixes for CVE-2024-44082 #586
OCPBUGS-38513: set min version for python3-webob #558
OCPBUGS-33373: bump werkzeug #547
OCPBUGS-34897: bump jinja2 #541
OCPBUGS-32362: [4.12] remove unused prometheus-exporter #489
OCPBUGS-32386: Use unix sockets by default for reverse proxy communication #477
Full changelog

ironic-agent

OCPBUGS-39385: Include fixes for CVE-2024-44082 #165
OCPBUGS-38513: set webob and bump werkzeug #153
Full changelog

kube-proxy, sdn

OCPBUGS-56130: Handle openshift-host-network namespace as special when it modifies #657
Full changelog

kube-rbac-proxy

OCPBUGS-32000: CVE-2023-45288 [4.12] #106
Full changelog

kube-storage-version-migrator

NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-11). #231
Full changelog

machine-api-operator

OCPBUGS-43872: install/0000_30_machine-api-operator_00_credentials-request: Set skipServiceCheck again for GCP #1305
OCPBUGS-32007: Update x/net to v0.25.0 #1257
Full changelog

machine-config-operator

OCPBUGS-58874: [release-4.12] Bump golang/glog to fix CVE-2024-45339 #5174
OCPBUGS-44325: Panic seen in CI job for MCC pod #4689
OCPBUGS-38382: [release-4.12] daemon/update: disable systemd unit before overwriting #4530
OCPBUGS-33665: Run resolv-prepender entirely async #4364
Full changelog

machine-os-images

OCPBUGS-54173: Change rhcos release browser url #61
Full changelog

multus-admission-controller

OCPBUGS-60292: Bump github.com/golang/glog to v1.2.4 #107
OCPBUGS-60850: Update owners #109
Full changelog

multus-cni

OCPBUGS-28520: Fix SAST scan issues for multus-cni-container [4.12] #225
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-37942, OCPBUGS-38019: [release-4.12] Stateful fixes #310
Full changelog

must-gather

OCPBUGS-48086: Update owners #477
Full changelog

network-metrics-daemon

Replace e2e test image (#134) #134
swtich golint install method (#133) #133
Correct 4.16 owners file (#131) #131
Full changelog

nutanix-machine-controllers

OCPBUGS-47263: fixing CVE-2024-45338 #114
OCPBUGS-20956: bump golang.org/x/net to v0.17.0 #88
Full changelog

oauth-apiserver

OCPBUGS-32010: bump x/net to 0.24.0 #113
Full changelog

oauth-server

OCPBUGS-27478: bump osin deps #144
Full changelog

oc-mirror

changes the owners file (#1011) #1011
OCPBUGS-48513: e2e: use same version of crane as in go.mod (#1027) #1027
Full changelog

openshift-apiserver

OCPBUGS-32447: ose-openshift-apiserver-container: golang: net/http, x… #481
Full changelog

openshift-controller-manager

OCPBUGS-58296: Inconsistencies in dependencies are fixed #410
OCPBUGS-58157: Set node-pullsecrets volume to read-only to protect image pull credentials #403
OCPBUGS-57171: Empty proxy variables are causing issues during the build #389
OCPBUGS-49644: Add new team members to the OWNERS file #364
OCPBUGS-41953: Add adambkaplan as approver #336
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-46925, OCPBUGS-46932, OCPBUGS-47312: x/net bump to v0.34.0 [release-4.12] #943
NO-ISSUE: [release-4.12] Backport e2e fixes #880
OCPBUGS-38610: (fix) Resolver: list CatSrc using client, instead of referring to registry-server cache (#3349) #875
OCPBUGS-42161: adds paginating lister for evaluating CRs’ upgrade fitness versus new CRDs #873
OCPBUGS-41881: [CARRY] perform operator apiService certificate validity checks directly #866
OCPBUGS-32854: bump go-jose to v2.6.3 #782
OCPBUGS-35242: Unblock CI #773
Full changelog

operator-marketplace

OCPBUGS-49426: Upgrade golang.org/x/net [release-4.12] #591
NO-ISSUE: Updating marketplace-operator images to be consistent with ART [4.12] #510
OCPBUGS-32081: update golang.org/x/net for CVE-2023-45288 #567
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-59935: Dockerfile: Remove ovs version pinning #2698
NO-JIRA: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.12 #2092
OCPBUGS-55951: Bump ovn and ovs to latest 23.06 and 3.1 respectively #2554
OCPBUGS-50502: EgressIP: Reload certificates for the grpc heatlhcheck server #2457
OCPBUGS-35876: [release-4.12] ipv6+all protocols conntrack flush #2214
OCPBUGS-29864: CVE-2022-41723: avoid quadratic complexity in HPACK decoding #2204
OCPBUGS-34273, OCPBUGS-34414: Improves service iptables efficiency on start up + ICMP error messages to pass through #2184
OCPBUGS-32990: Bump OVS #2144
OCPBUGS-33422: [release-4.12] Full implementation of KEP-1669 ProxyTerminatingEndpoints + ETP=local fix #2135
OCPBUGS-25889: [release-4.12] OVN bump to 23.06.1-112 #2154
Full changelog

telemeter

OCPBUGS-34827: fix issuer check during JWT authentication 4.12 #541
Full changelog

tests

OCPBUGS-56120: [build] Ensure Git Clone Does Not Run Privileged #29788
OCPBUGS-37799: Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token #29621
OCPBUGS-54772: Component Readiness: [Networking / ovn-kubernetes] [EgressFirewall] test regressed #29662
OCPBUGS-54147: Add/remove team members to the OWNERS file for Builds #29622
OCPBUGS-52585: Use payload pullspec for image info test #29593
OCPBUGS-41585: Removes dependency on samples operator images #29080
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github