4.17.58

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.17.58-x86_64

Qualifiers (status api):

Tests:

Blocking jobs
- upgrade Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.17-e2e-aws-ovn-serial
- aws-ovn-upgrade-4.17-micro Succeeded (1 retry) periodic-ci-openshift-release-main-ci-4.17-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- aws-ovn-upgrade-micro Succeeded (1 retry) periodic-ci-openshift-release-main-ci-4.17-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- azure-ovn-upgrade-4.17-micro Succeeded periodic-ci-openshift-release-main-ci-4.17-e2e-azure-ovn-upgrade
- driver-toolkit Succeeded periodic-ci-openshift-release-main-nightly-4.17-e2e-aws-driver-toolkit
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.17-fips-payload-scan
- gcp-ovn-rt-upgrade-4.17-minor Succeeded periodic-ci-openshift-release-main-ci-4.17-upgrade-from-stable-4.16-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.17 Succeeded periodic-ci-openshift-hypershift-release-4.17-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-ipv4 Succeeded periodic-ci-openshift-release-main-nightly-4.17-e2e-metal-ipi-ovn-ipv4
- metal-ipi-ovn-ipv6 Failed (1 retry) periodic-ci-openshift-release-main-nightly-4.17-e2e-metal-ipi-ovn-ipv6
  - Attempt 1 Failed
  - Attempt 2 Failed

Upgrades from:

Untested upgrades: 4.16.11, 4.16.12, 4.16.13, 4.16.14, 4.16.15, 4.16.16, 4.16.17, 4.16.18, 4.16.19, 4.16.20, 4.16.21, 4.16.22, 4.16.23, 4.16.24, 4.16.25, 4.16.26, 4.16.27, 4.16.28, 4.16.29, 4.16.30, 4.16.31, 4.16.32, 4.16.33, 4.16.34, 4.16.37, 4.16.38, 4.16.39, 4.16.40, 4.16.41, 4.16.42, 4.16.43, 4.16.44, 4.16.45, 4.16.46, 4.16.47, 4.16.48, 4.16.49, 4.16.50, 4.16.51, 4.16.52, 4.16.53, 4.16.54, 4.16.55, 4.16.56, 4.16.57, 4.16.58, 4.16.59, 4.16.60, 4.16.61, 4.16.63, 4.16.64, 4.16.65, 4.16.66, 4.16.67, 4.16.68, 4.17.10, 4.17.11, 4.17.12, 4.17.13, 4.17.14, 4.17.15, 4.17.16, 4.17.17, 4.17.18, 4.17.19, 4.17.20, 4.17.21, 4.17.22, 4.17.23, 4.17.24, 4.17.25, 4.17.26, 4.17.27, 4.17.28, 4.17.29, 4.17.3, 4.17.30, 4.17.31, 4.17.32, 4.17.33, 4.17.34, 4.17.35, 4.17.36, 4.17.37, 4.17.39, 4.17.4, 4.17.40, 4.17.41, 4.17.42, 4.17.43, 4.17.44, 4.17.45, 4.17.46, 4.17.47, 4.17.48, 4.17.49, 4.17.5, 4.17.50, 4.17.52, 4.17.53, 4.17.54, 4.17.7, 4.17.8, 4.17.9

4.17.57 (changes) - F F S S S S S
4.17.56 (changes) - Failed
4.17.55 (changes) - Failed
4.17.51 - Success
4.17.38 (changes) - Failed
4.17.6 (changes) - Failed
4.17.2 (changes) - Success
4.17.1 (changes) - Success
4.17.0 (changes) - Failed
4.16.71 (changes) - Success Success
4.16.70 (changes) - Failed
4.16.69 (changes) - Success
4.16.62 (changes) - Success
4.16.36 (changes) - Failed
4.16.35 (changes) - Failed
4.16.10 (changes) - Success
4.16.9 (changes) - Failed
4.16.8 (changes) - Success
4.16.0-0.nightly-2026-09-23-035525 (changes) - Success

Upgrades to:

4.18.56 (changes) - Failed

Loading changelog, this may take a while ...

Changes from 4.17.51

Created: 2026-09-24 12:33:40 +0000 UTC

Image Digest: sha256:027c19a0057cf115fdf33dd8a018a9f5195842afcd3a540e8dcd68ec398cbbce

Components

Kubectl 1.30.5
Kubernetes 1.30.14
Kubernetes Tests 1.30.14
Red Hat Enterprise Linux CoreOS upgraded from 417.94.202603102246-0 to 417.94.202609191027-0 (diff)

Removed images

ovirt-csi-driver
ovirt-csi-driver-operator

Rebuilt images without code change

agent-installer-node-agent git df4660b4 sha256:1714b345a7c41bc4029768dbd065c5aa408d8f61a8c8fa26f67502c4cae94b01
agent-installer-utils git b3595281 sha256:9b9afb6c6da52a17bb892f2ed8a0837b42bd5365359813d891011cf460ddafd3
apiserver-network-proxy git ea660559 sha256:112632a3f034e11ed77d22b6098e9c5865fabdaf5337afa0e89b00abe1d3b7e1
aws-machine-controllers git 2b53de06 sha256:9cb0d0119f26b1b629c5e317a0e7df74ad670f23ecc7567765079e6acc4f8736
aws-pod-identity-webhook git 80efc4ea sha256:1a2494ef9f409d8e0033f77ef384839039163d4511edcf7155730cb42f0e17b1
azure-machine-controllers git 439c5498 sha256:a969447d4874e9e0f4b58a60936239c682a934deb1a394a7b90ca2957f586b4b
azure-workload-identity-webhook git 6707f899 sha256:b320a4f564ba251e5d37551940dfa4da92ce4f6c0da6c44100fd77cea5cdbd45
baremetal-cluster-api-controllers git 41b34248 sha256:413b8cc7afda031e9bd315e594271d94a1da1da7866a0c2714a8c1af3ed10ec5
baremetal-machine-controllers git ae674d78 sha256:d25c9e274b3cbd16bdb9b998e21781f8121d04ce0e4e52def0ca8387438dc030
baremetal-operator git 087a24f2 sha256:c11251ee0347ec035865a3c7f52e308e66987715e084f791a4a58abd7e6b403a
baremetal-runtimecfg git 74518950 sha256:9c20db6ff3b44b266e3fae8b035ae6e22e5c1022d32ff469b384ff6ee5efa364
cloud-network-config-controller git 241af368 sha256:432360fe914c8d53b315d39883b34dda25115e46c9d58df8879a532190d81064
cluster-authentication-operator git 9f93cafc sha256:1ebd313fdf9e3b749405d287cdf5727687a3bca213df111902dc723c8fc33464
cluster-bootstrap git 95dd9129 sha256:2ec988521b6550e9609590ae63f7c30bd62e386c2f9b2af6a6853e987ebae23b
cluster-cloud-controller-manager-operator git 6d4c0096 sha256:8ffc5e0a69e5dc127c66717e254602b4f4394e2d38c64aaa36c620d8792c6345
cluster-config-api git 92c55bf0 sha256:3a4a965a4b8370a234a3f20287a16ac2edef53dfa5415954271c08576844c528
cluster-config-operator git cfd318de sha256:68e2bb52cb685c3d635d5240f56eaf5756ce0247af5d1e2fdd8b1f80754c0e4e
cluster-control-plane-machine-set-operator git f7e01c2f sha256:ae4f6e102c50e41783c0853117cced11e22b45fdc571f116f0cbd4c2f1091e15
cluster-csi-snapshot-controller-operator git ffba005b sha256:4993360373591870d18d3d43fccd6169d98afe681ffccf7a26db5c47371147d6
cluster-dns-operator git 81507f04 sha256:75fdf7e211b1ef4dfd7b4ea1b21fc025297be1ea5ab483b52e612bd641524a41
cluster-etcd-operator git bfffdcba sha256:9047e1ffe5856e8494552f1446105d8eee29679deba7fa3b62305b3913fa2714
cluster-image-registry-operator git 1a0cea11 sha256:3e63736d0b7c85f6194f99e6b5114b50e6795d472ccf3f868074944389395bd1
cluster-kube-apiserver-operator git 84e19b21 sha256:11e0cda6628c7861db10823e61b31c6f639dc49d07eadb881463551928d60991
cluster-kube-controller-manager-operator git 12f60539 sha256:8ff7a5315bd488a65ed1121bbd93df0063d97e53d790b377312a32065847fedb
cluster-kube-scheduler-operator git 013ff606 sha256:d68f67b8ca5ab07595aac58072ba181e406f4f238fa1ef8cfa82c792066078c1
cluster-kube-storage-version-migrator-operator git 0097f210 sha256:631a4695519212d8dac7c7358cfd76d79d18e4a5fec2dcf54699dffcbb672251
cluster-machine-approver git acc2380e sha256:a1c358673f0b39a5fd0bbcac48ed8a741ba736ce101f60af5a90379cd622a73a
cluster-openshift-apiserver-operator git 8c61cd4b sha256:fd658812a4a3ddb5341c9b80d92010a575fcb4a2a82ddcccc2923c11b9fcea95
cluster-openshift-controller-manager-operator git b05a249d sha256:9633091b93b9f995e53160f7a25b48175942c511218a349852378aede3f16c56
cluster-policy-controller git 7209e90d sha256:0630c0319fbd0721a667824982a54cbef895b66237cbd9165c65dbdddcccb9dd
cluster-samples-operator git 1d2ba422 sha256:b58b3a3cea19b101e6826d0b2c8027a11d3c37f6f1b7cc017d367ceedafbdc34
cluster-update-keys git 63022033 sha256:d810d8efd7420335cbd67101197b31f308e153e28907c551384d5b9d0cbbc245
cluster-version-operator git b855c680 sha256:58b1ba85a3dc3629ac9005133432dcd7d662f41d3d9b17f75c40d82cf7a9c81c
configmap-reloader git 62d56d6a sha256:01b781d7a5d81138552ab43a2fcee9e5a4e6f6cbfa1931ed1ba705c1150c27f0
coredns git fe89d27d sha256:310990f8aa4a69aacf1be6e0b4c562c9dfb826dd36a373178066ed9262a31898
csi-driver-manila-operator git efc99a2a sha256:bf3075cbf80c1b7c967e1f64344122419535f4737cf60c099359bf0b6ef1bd54
csi-driver-shared-resource git 66aee5b0 sha256:4a653a995d39eb05bcf65b6450382c8152cb1dd683b4f06ead1fd171b619db8d
csi-driver-shared-resource-webhook git 66aee5b0 sha256:7ca533426db18b9b8930143eeae6f5005db23a323258182c0af773c868b24faa
csi-livenessprobe git e7d841dc sha256:9cbad6a40f44981e216da003e25d2a4728b15506c45c19f961b0e09afbd70fe1
csi-node-driver-registrar git 3dd2253e sha256:161aaddf2ffb787ba33ebcdf56a55123a51157e6852bdc25676834800d63eb8a
docker-builder git 12fc732c sha256:e33ca08d978286b1b852f3d59bc9789333fec0ae31f74d62fad34a49d34c8413
docker-registry git d0595c9e sha256:81fe7a353c6ef42e59066faca79ad08376069b19d9f9eb5b13893a6cb9a8c96f
driver-toolkit git 859518f6 sha256:ea4681ffb09993a07b0655782c2a6ecbc545788daa2761581bb12a6329bdcbcb
egress-router-cni git 3193a756 sha256:01617e470cc4602a0f988399ca53cfdae2be166a77e027762611fa966070c666
etcd git 0d9e0a90 sha256:ea084d3334cdd0fb9640c8116a61403e50db367122a7937634fc3b2c084e740c
gcp-cloud-controller-manager git 8ce997d7 sha256:914477baf8681bd471e78c783fed2207f393cefc097166b3a628a1ae3f988cab
gcp-workload-identity-federation-webhook git 08579e9f sha256:ed75b820527a3f45a9ff5c0b7071ba768dc691cbc0951e3c105ca5de43bddbd1
hyperkube git 4e295fa5 sha256:e435c01e4585fa029c849156ce4311f2c6b1532e80baead3db47d0b4cba6ffa0
ibm-cloud-controller-manager git ad8f7eb0 sha256:6f3b1367866519abff38ffc84728c51eac174885d3f5c49489ec4b0332bbe85a
ibm-vpc-block-csi-driver-operator git ee301303 sha256:022b432b9640106e7802b59dae06675f40283fa91efabd2fb44881bed1093784
ironic-machine-os-downloader git 9e6596c3 sha256:af77ab4e95a31457d67cab379f7efead603fc0628a2b179e19102312dd81891d
ironic-static-ip-manager git bc5b8a2c sha256:8a5f544098953ec25f477f2f6caf9d1d72014aed4da22221369506ce2944e5dd
keepalived-ipfailover git e3879e9e sha256:0c64c2337cdfe6bd0592d562c57af97bfba84d4d95697a01119784376b309809
kube-proxy git fd50551b sha256:c349de81ecba84f3d86dfea984361ccf32e032056e44d11c3a18897bb97639e4
kube-rbac-proxy git f708b5ec sha256:a60f9f1bfd06c27ed1f1a6495517671adfe20ff9c085a7d31f1275f7d2409a4d
kube-state-metrics git b40c02a5 sha256:7f9eb6cb953b3b4e3efb5e0a30768f10a072fe6301b733c44ab535337a538885
kube-storage-version-migrator git 69b07ae0 sha256:aad08f80dc8f86f08b14b47094b6a9f7986a241bb2f65dedfc76622572c56a2a
machine-image-customization-controller git 03af8514 sha256:72604d524edd398893d05f31f6ca5abd5f62f825cf8fb2cbcc1414f97f31cacd
multus-admission-controller git 041b743a sha256:e2e11b231011fadec8948cb683d56b076705831676aa17a9241b633d2e0cd21d
multus-networkpolicy git 4d0b1703 sha256:2a2bb313354c77af113366c9d508fec82abe77c1980d6a4c59df7a7134634857
multus-route-override-cni git 391c1b03 sha256:d4d20eae3ebd068f97cc3cff40fc5c76164b366b4b6f5045eb4dbf8201c7c061
multus-whereabouts-ipam-cni git 40cfb3dc sha256:22b2bce8e61688a6cc777c577e48d0a48a45576a1361397dc686f9c8f1fd78e6
network-metrics-daemon git f56bbf7a sha256:f90f92d88c10b6e38c38a64451df835d5eb5b374f3df5ebffb8abc1b42bedc1d
network-tools git e59e7b25 sha256:9d4fbeb207e7c147ba84968a4defad815250a71645ae5d02b8a8b64ca51e81b1
nutanix-cloud-controller-manager git c9f6cd1f sha256:7ca3eaae410e4674351926b7a1519ce83f60c23f778386812dc687777cea8445
nutanix-machine-controllers git a4fadcbc sha256:d4ef18ec13beaa5cd4de49d6962a55417340281aee330f9e8b8b1056057c9cc3
oauth-apiserver git e078aeb2 sha256:f704d89df2dbd81a516045c1f816dbc77adf51f7e361fd63768f4a7d8f2b6265
oc-mirror git 58375b70 sha256:7745a37ddc962ccdb488afa94f188c5c11881fe95a02d5342b1155fb5883fdd8
olm-catalogd git c740e056 sha256:895a1d9a6c955e45362fa06dbc0396afee80da62de4d654fb10ce8d9f4541989
openshift-controller-manager git 967faa66 sha256:d6741e127837060137ab2de652a1deb0801a87ff9e726d1ab412539a1485153e
openshift-state-metrics git adf64920 sha256:3943be4fe5646ed778046f29b855dd06db3c9280d6f839428c564aeb6ae4d166
openstack-cluster-api-controllers git 5593c5f7 sha256:2b00dca400d132235a7bc49010c48e869bcef083afcaeda997e6e86229301f7a
operator-marketplace git 5cf36fde sha256:ab3887faeb83874700faf6ade4279acb28988869bae95f243bb80dfb181ce1a7
pod git 4e295fa5 sha256:7a903fe3af440803d85611674806bc0cd6341bc48550cd0278a1930124f9d20f
powervs-machine-controllers git b7478d7e sha256:f85e831980f4106d921eb29ee22bdb36f92aa865fa342e163df098ff92479e2a
prom-label-proxy git c84c4898 sha256:3eb770814f37840138902078776e756d057f875b159a577dcfd2f3c323e026dd
prometheus-node-exporter git 8f095361 sha256:7235ed1e15a599e85f899d330e11a849a5b6fd337345323b0c4dc79cf5c2d728
rhel-coreos sha256:490004790ca6d28beca181605cadcc7081f871b39fd699fc0be7686d99a877f3
rhel-coreos-extensions sha256:d7be4f8a623ff4b60cd4e3e8a7b68f5d241e8ff5f77540ef8679459b253fd41d
service-ca-operator git 2cb0a44d sha256:6e778d0bcf931e7cebd3c0c46b13bc0a9b0df2666760acf9ec1d0c132b395cc6
tests git 5abe37f6 sha256:99686878563328ab9410341ae731a3b4f309a114a709277c8c0543258390c486
vsphere-csi-driver-operator git e1de36a2 sha256:a148efa87dd6075ed73c598cfd1e762f8259fda44893c2a653324af8907a000c

agent-installer-api-server

MGMT-23439: Pin gotestsum to v1.12.2 for Go 1.20 compatibility #10016
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-103137: Bump x/net to v0.35.0-sec.4 #2296
Full changelog

aws-cloud-controller-manager

OCPBUGS-88219: replace golang.org/x/net with sustaining fork v0.35.0-sec.4 #181
Full changelog

aws-cluster-api-controllers

🌱 OCPBUGS-123711: UPSTREAM: <carry>: Remove upstream .github files unused in OpenShift CI #644
OCPBUGS-78175: [release-4.17] update go mod dependency for konflux #590
Full changelog

aws-ebs-csi-driver

OCPBUGS-82699: Address CVE-2026-35469 #328
OCPBUGS-86234: UPSTREAM: 2367: cleanup: make verify should ignore copyright year #323
OCPBUGS-80031: Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.71.3-sec.1 #314
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator

OCPBUGS-103147, OCPBUGS-103155: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #609
OCPBUGS-80133: Bump google.golang.org/grpc #543
Full changelog

aws-kms-encryption-provider

OCPBUGS-80009: Bump google.golang.org/grpc to v1.79.3 #44
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-80035, OCPBUGS-80036, OCPBUGS-80174: Bump google.golang.org/grpc to v1.79.3 #181
Full changelog

azure-cluster-api-controllers

OCPBUGS-80037: Bump google.golang.org/grpc to v1.79.3 #386
OCPBUGS-77983: [release-4.17] update go mod dependency for konflux #363
Full changelog

azure-disk-csi-driver

OCPBUGS-80038: Address CVE-2026-33186 #143
Full changelog

azure-file-csi-driver

OCPBUGS-103162: Bump golang.org/x/net to v0.35.0-sec.4 #159
OCPBUGS-92849: Bump golang.org/x/crypto to v0.33.0-sec.3 #149
OCPBUGS-80041: Bump google.golang.org/grpc to v1.79.3 #130
Full changelog

azure-kms-encryption-provider

OCPBUGS-80010: Bump google.golang.org/grpc to 1.64.1-sec.1 patch #47
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-77898: Update RHCOS-release-4.17 bootimage metadata to 417.94.202607240132-0 #10796
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-91064, OCPBUGS-94526: Bump golang.org/x/net to openshift-sustaining/net v0.35.0-sec.2 #2345
OCPBUGS-111835: Fix pre-existing unit test failures #2373
Full changelog

cloud-credential-operator

OCPBUGS-81861: Bump go-jose/go-jose/v4@v4.1.4 #1039
OCPBUGS-80044: Bump google.golang.org/grpc to v1.79.3 #1025
Full changelog

cluster-autoscaler

OCPBUGS-78700: allow clusterapi provider to skip paused resources #414
Full changelog

cluster-autoscaler-operator

OCPBUGS-103166: Bump x/net package in release-4.17 #389
Full changelog

cluster-baremetal-operator

OCPBUGS-77446: Bump github.com/go-errors/errors to v1.5.1 #561
Full changelog

cluster-capi-controllers

OCPBUGS-80045: Bump google.golang.org/grpc to v1.79.3 #291
Full changelog

cluster-capi-operator

OCPBUGS-80049: Bump google.golang.org/grpc to v1.79.3 #570
NO-JIRA: Allow sustaining engineering to self serve dependency updates #559
Full changelog

cluster-ingress-operator

OCPBUGS-103182: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 #1572
OCPBUGS-86714: Add configuration override for X-SSL strip #1486
Full changelog

cluster-kube-cluster-api-operator

OCPBUGS-80056: Bump google.golang.org/grpc to v1.79.3 #78
Full changelog

cluster-monitoring-operator

OCPBUGS-103184: [release-4.17] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame- #3075 #3084
Full changelog

cluster-network-operator

OCPBUGS-85244: whereabouts-token-watcher DaemonSet improvements #3016
OCPBUGS-84181: fix(hypershift): use net.JoinHostPort for URL construction #2983
Full changelog

cluster-node-tuning-operator

OCPBUGS-82706: Bump github.com/moby/spdystream from v0.2.0 to v0.5.1 #1548
OCPBUGS-78214: PPC: filter out namespaces dir #1481
Full changelog

cluster-olm-operator

OCPBUGS-80063: Bump google.golang.org/grpc to v1.79.3 #201
Full changelog

cluster-storage-operator

OCPBUGS-87591: remove oVirt code from CSO 4.17 #708
Full changelog

console

Fix for OCPBUGS-92069: CVE-2026-44990 #16718
OCPBUGS-78672: Namespace is not persisting when switching to developer view from the topology page of admin page #16160
OCPBUGS-98411: CVE-2026-59869 bump js-yaml #17086
OCPBUGS-100514, OCPBUGS-101790: Fix CVE-2026-69153 and CVE-2026-45623 - Bump postcss #17059
OCPBUGS-100172: Prevent binary secret data corruption when editing #16879
OCPBUGS-105790: Disable shipwright e2e tests to unblock CI #16955
OCPBUGS-87986: [release-4.17] shell-quote: Arbitrary code execution via command injection due to unescaped line terminators #16600
Fix for OCPBUGS-81600: CVE-2026-4800 #16564
OCPBUGS-84283: Bump follow-redirects to 1.16.0 to fix CVE-2026-40895 #16738
OCPBUGS-77124: [release-4.17] CVE-2026-26996 Bump minimatch library #16345
OCPBUGS-79443: Bump immutable #16326
NO-JIRA: enable multi-architecture yarn builds #16419
CONSOLE-5011: migrate to yarn berry #16074
Full changelog

console-operator

OCPBUGS-77862: update go mod dependency for konflux #1114
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-85671: CI Build root image tag sync with ART #235
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-80134: Bump google.golang.org/grpc #388
Full changelog

csi-driver-nfs

OCPBUGS-82708: Bump github.com/moby/spdystream@v0.5.1 #195
OCPBUGS-80077: Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.71.3-sec.1 to avoid go version bump and fix CVE-2026-33186 #181
Full changelog

csi-driver-shared-resource-operator

OCPBUGS-103198: Bump golang.org/x/net to v0.35.0-sec.3 #127
OCPBUGS-80080: Bump google.golang.org/grpc to v1.79.3 #125
Full changelog

csi-external-attacher

OCPBUGS-80082: Bump google.golang.org/grpc to v1.79.3 #106
Full changelog

csi-external-provisioner

OCPBUGS-82709: Address CVE-2026-35469 #142
OCPBUGS-80083: Bump google.golang.org/grpc #131
Full changelog

csi-external-resizer

OCPBUGS-103208: Bump golang.org/x/net to v0.35.0-sec.4 #214
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-80085, OCPBUGS-80088, OCPBUGS-80089: Bump google.golang.org/grpc to v1.79.3 #214
Full changelog

gcp-cluster-api-controllers

OCPBUGS-80095: Bump google.golang.org/grpc to v1.79.3 #291
OCPBUGS-78279: [release-4.17] update go mod dependency for konflux #266
Full changelog

gcp-machine-controllers

OCPBUGS-103253: Bump golang.org/x/net to v0.35.0-sec.3 #190
OCPBUGS-80118: Bump google.golang.org/grpc to v1.79.3 #166
Full changelog

gcp-pd-csi-driver

OCPBUGS-80099: Replace google.golang.org/grpc with openshift-sustaining fork v1.71.3-sec.1 #113
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-80098: Replace google.golang.org/grpc with fork #188
Full changelog

haproxy-router

OCPBUGS-86725: Prevent SSRF via FQDN-typed EndpointSlices #835
OCPBUGS-86714: Strip X-SSL-* headers for plain HTTP #804
OCPBUGS-80100: Address CVE-2026-33186 #779
Full changelog

hypershift

OCPBUGS-76289: CVE-2025-52881 openshift/hypershift multicluster-engine/hypershift-rhel9-operator: container escape and denial of service due to arbitrary write gadgets and procfs write redirects [mce-2.7] #8292
OCPBUGS-99079: fix(backport): konnectivity agent auth #9104
OCPBUGS-89357: build(operator): drop hypershift-no-cgo from operator container images #8761
OCPBUGS-80103: fix https://github.com/advisories/GHSA-p77j-4mvh-x3m3 by replacing grpc-go #8516
OCPBUGS-84181: fix(cno): use brackets only for IPv6 in server URL #8347
OCPBUGS-76533: feat(updates): enable CVO metrics access with RHOBS monitoring flag #7703
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-80105: Bump google.golang.org/grpc to v1.79.3 #144
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-86974: Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART for 4.17 #155
OCPBUGS-103234: Replace golang.org/x/net with openshift-sustaining/net #171
OCPBUGS-115543: Fetch envtest assets from the controller-tools releases #182
Full changelog

ibmcloud-machine-controllers

OCPBUGS-103227: replace golang.org/x/net with openshift-sustaining/net v0.35.0-sec.4 #105
NO-JIRA: vendor golint instead of relying on the CI build root #114
OCPBUGS-81667: bump vpc go sdk #92
NO-JIRA: Modernize test infrastructure to align with other MAPI providers #88
Full changelog

insights-operator

OCPBUGS-80108: Bump google.golang.org/grpc to v1.79.3 #1284
Full changelog

ironic

OCPBUGS-88474: Update the commit hash for openstack-ironic that addresses CVE-2026-43003 #905
OCPBUGS-100163: Update openstack-ironic commit hash for CVE-2026-44918 #902
OCPBUGS-76458: Bump pyasn1 to 0.5.1-4 #827
OCPBUGS-74114: Bump keystonemiddleware version to 10.7.1-0.20260216144200.4c001ba for CVE-2026-22797 fix #796
Full changelog

ironic-agent

OCPBUGS-88474: Update commit hash for openstack-ironic-python-agent that addresses CVE-2026-43003 #315
OCPBUGS-99886: Bump ironic-python-agent pinned commit for CVE-2026-66138 #309
OCPBUGS-95067: Replace individual package removal with a single rpm -e loop #287
OCPBUGS-95067: Replace dnf remove with rpm -e to prevent dependency removal #275
Full changelog

kube-metrics-server

OCPBUGS-80013: Bump google.golang.org/grpc to v1.79.3 #65
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-95083: OWNERS: Update component to Cloud Compute / KubeVirt Provider #79
Full changelog

kubevirt-csi-driver

OCPBUGS-80014: Bump google.golang.org/grpc to v1.79.3 #102
Full changelog

libvirt-machine-controllers

OCPBUGS-77195: Fix incomplete vendor/ #301
Full changelog

machine-api-operator

OCPBUGS-79373: [release-4.17] Use resource group when generating default Azure image #1481
Full changelog

machine-config-operator

OCPBUGS-98583: Remove sensitive ControllerConfig logging #6300
OCPBUGS-97845: Bootstrap MCS logging entire ignition #6274
OCPBUGS-74149: enable nodeip-configuration for platform external #5577
OCPBUGS-77979: hermetic 4.17 #5733
Full changelog

machine-os-images

OCPBUGS-87877: Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs #101
Full changelog

metallb-frr

OCPBUGS-76548: Dockerfile: unpin FRR rpm #124
Full changelog

monitoring-plugin

Fix for OCPBUGS-98163: CVE-2026-13676 #1050
Fix for OCPBUGS-90525 OCPBUGS-90526: CVE-2026-12151 CVE-2026-9697 #1008
OCPBUGS-79444: immutable bump #897
OU-1260: [release-4.17] feat: use npm instead of yarn #812
OCPBUGS-76809: fix for CVE-2025-69873 #848
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-85250: Fix server url in kubeconfig #299
NO-ISSUE: [release-4.17] Bump Go to 1.22 and fix CI build root image #290
OCPBUGS-77854: hermetic 4.17 #277
Full changelog

must-gather

OCPBUGS-86069: Collect object size with the object count #548
Full changelog

network-interface-bond-cni

OCPBUGS-77350: Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.17 #110
Full changelog

networking-console-plugin

OCPBUGS-98764: Updating linkify-it to 5.0.2 to fix CVE-2026-48801 #459
OCPBUGS-100158: Updating networking-console-plugin-container image to be consistent with ART for 4.17 #455
OCPBUGS-87998: Retain namespace selection between network policies tabs #428
OCPBUGS-83379: fix CVE-2026-34043 - Update serialize-javascript to 7.0.5 #416
[release-4:17] OCPBUGS-85376: Migration from yarn to npm #414
OCPBUGS-81602: Fix CVE-2026-CVE-2026-4800 in lodash #402
OCPBUGS-79445: Bump immutable #389
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

oauth-server

OCPBUGS-81795: Bump github.com/go-jose/go-jose/v3 from v3.0.3 to v3.0.5 #239
Full changelog

olm-operator-controller

OCPBUGS-80129: Update grpc-go to v1.71.3-sec.1 to fix CVE-2026-33186 #736
Full changelog

openshift-apiserver

OCPBUGS-82720: Address CVE-2026-35469 #658
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-80133: Bump google.golang.org/grpc to v1.79.3 #194
Full changelog

openstack-machine-api-provider

OCPBUGS-78169: hermetic 4.17 #162
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-103275, OCPBUGS-103278, OCPBUGS-103286: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 #1368
OCPBUGS-80136, OCPBUGS-80137, OCPBUGS-80138: Fix CVE-2026-33186 with openshift-sustaining/grpc-go v1.71.3-sec.1 [release-4.17] #1315
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-82724: Bump github.com/moby/spdystream to v0.5.1 #3322
OCPBUGS-81639: External gateway: Remove routes for external gateway pods in terminating or not ready state #3107
OCPBUGS-78029: Add pperiyasamy to OWNERS for release-4.17 #3046
Full changelog

powervs-block-csi-driver

OCPBUGS-80142: Fix CVE-2026-33186 by bumping google.golang.org/grpc to 1.79.3 #131
OCPBUGS-82725: Fix CVE-2026-35469 by bumping github.com/moby/spdystream to v0.5.1 #125
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-80144: Fix CVE-2026-33186 by bumping google.golang.org/grpc to v1.79.3 #112
Full changelog

powervs-cloud-controller-manager

OCPBUGS-80145: Replace google.golang.org/grpc with openshift-sustaining fork v1.71.3-sec.1 to v1.79.3 to fix CVE-2026-33186 #103
Full changelog

prometheus

OCPBUGS-88631: remote: validate snappy decoded length before allocation in read endpoint #348
OCPBUGS-80146: Bump google.golang.org/grpc #320
Full changelog