4.18.57

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.57-x86_64

Qualifiers (status api): None

Tests:

Blocking jobs
- upgrade Pending periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Pending periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial Pending periodic-ci-openshift-release-main-nightly-4.18-e2e-aws-ovn-serial
- aws-ovn-single-node-upgrade-4.18-micro Pending periodic-ci-openshift-release-main-ci-4.18-e2e-aws-upgrade-ovn-single-node
- aws-ovn-upgrade-4.18-micro Pending periodic-ci-openshift-release-main-ci-4.18-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.18-micro Pending periodic-ci-openshift-release-main-ci-4.18-e2e-azure-ovn-upgrade
- driver-toolkit Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-aws-driver-toolkit
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.18-fips-payload-scan
- gcp-ovn-rt-upgrade-4.18-minor Pending periodic-ci-openshift-release-main-ci-4.18-upgrade-from-stable-4.17-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.18 Succeeded periodic-ci-openshift-hypershift-release-4.18-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-ipv4 Pending periodic-ci-openshift-release-main-nightly-4.18-e2e-metal-ipi-ovn-ipv4
- metal-ipi-ovn-ipv6 Pending periodic-ci-openshift-release-main-nightly-4.18-e2e-metal-ipi-ovn-ipv6
- microshift-ovn-conformance-parallel Pending periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance-serial

Upgrades from:

Untested upgrades: 4.17.14, 4.17.15, 4.17.16, 4.17.17, 4.17.18, 4.17.19, 4.17.20, 4.17.21, 4.17.22, 4.17.23, 4.17.24, 4.17.25, 4.17.26, 4.17.27, 4.17.28, 4.17.29, 4.17.30, 4.17.31, 4.17.32, 4.17.33, 4.17.34, 4.17.35, 4.17.36, 4.17.37, 4.17.38, 4.17.39, 4.17.40, 4.17.41, 4.17.42, 4.17.43, 4.17.44, 4.17.45, 4.17.46, 4.17.47, 4.17.49, 4.17.50, 4.17.51, 4.17.52, 4.17.55, 4.17.56, 4.18.10, 4.18.11, 4.18.12, 4.18.13, 4.18.15, 4.18.16, 4.18.17, 4.18.18, 4.18.19, 4.18.20, 4.18.21, 4.18.22, 4.18.23, 4.18.24, 4.18.25, 4.18.26, 4.18.27, 4.18.28, 4.18.29, 4.18.30, 4.18.31, 4.18.32, 4.18.33, 4.18.34, 4.18.35, 4.18.36, 4.18.37, 4.18.38, 4.18.39, 4.18.4, 4.18.40, 4.18.41, 4.18.43, 4.18.44, 4.18.45, 4.18.46, 4.18.47, 4.18.48, 4.18.49, 4.18.5, 4.18.50, 4.18.51, 4.18.52, 4.18.6, 4.18.7, 4.18.8, 4.18.9

Loading changelog, this may take a while ...

Changes from 4.18.53

Created: 2026-10-08 21:02:06 +0000 UTC

Image Digest: sha256:7a0078ddb04d84aace3976582be4c7b6b3bf095c8e899a7459d3c61ec8bfe5c0

Components

Kubectl 1.31.1
Kubernetes 1.31.14
Kubernetes Tests 1.31.12
Red Hat Enterprise Linux CoreOS upgraded from 418.94.202608111829-0 to 418.94.202610071505-0 (diff)

Rebuilt images without code change

agent-installer-utils git 63b87f06 sha256:5a16997e0083dc820ea45672f8fa185d2374b0b1ddefde642ce2967f6ceebf59
apiserver-network-proxy git 2f62712d sha256:5a93b4a16934dad1d17ac84b1d216fabf44c6113a1beb0e712bb5d0eafaa00db
aws-cloud-controller-manager git c3951906 sha256:940de8710c3445faf928eee4c47744fad482c3ada171b71ba7d2b28582aeaf22
aws-ebs-csi-driver git 96ae9d03 sha256:4b65f848898281ae876c984d7f09fe52ec4363b87f6ba1b3a6c9451cb628b050
aws-kms-encryption-provider git 075d56fd sha256:4f1af33ae943fbf1780298d3c249dc7aa48f64fa92bc04948e68a6cdba77e110
aws-machine-controllers git 7b6bfc74 sha256:7786567e5bcd4926fd6523cf23ede04d365858f7e6cb56c11d1f8d733d9e1251
aws-pod-identity-webhook git f54f9a19 sha256:752fc07e25c85ca62284e74ce2ce70efcf036219006f64a6b8ddc1752cb194fa
azure-kms-encryption-provider git baf90faf sha256:9cf0e416a364011f7910e6a88f0ba7e4380c1d8f9bab452937b44f08f406c233
azure-workload-identity-webhook git f60e4029 sha256:03b74e907d08cf2646f33e5b4818172ea889401489a12f1d7ebe6ce764b56b4f
baremetal-cluster-api-controllers git 80c3a063 sha256:24460671629e533a6b63e62badd122723fcd94a138e8d4e1fd5b513c9cc7578a
baremetal-machine-controllers git 1ede6c3f sha256:3c1f5cb6f0dd0395d02e8a4391e4e5465a5dbfb6507c27c6a4b2891c201ad70e
baremetal-operator git c138c6f1 sha256:8cf2b162f655af41fb75acffc743cf2ac694bec8de8ebd907408cc30776a45ee
baremetal-runtimecfg git 35341068 sha256:1cc997341bda428cbfc2c00755dc0a39b098657d726ffb089ef9d43f1057fb25
cloud-network-config-controller git f892b915 sha256:ef8b72bd9c5ca6ed1e98c0e56bb15998bc5acb0c5b54682aaec267a6cffc5287
cluster-authentication-operator git c3be8cbc sha256:f8fd555504404c34283ea9f08260a116af3ba599a4b7f58585161b751b5badee
cluster-autoscaler git 34730793 sha256:b7fb7b99618d983f3d97a4e71b60f94906139e32c9d7b4a0e8f219aa17a090ee
cluster-baremetal-operator git 3e6d1ab1 sha256:ecde7d72dd1e25ce15a9d7aa890ab59fc44db60919044982e748077da121aa27
cluster-bootstrap git d1e01954 sha256:da573e543075c33ea333d41d9a9cbe6654e38401b6d9b4f8b024486a344511ac
cluster-capi-controllers git c4c8799b sha256:576bc0bee5502c4abe51de3e5c1c81efe46cc0be3f8c847ca4b0e8d077bd5d87
cluster-capi-operator git b5b89440 sha256:66cf4b02aa76cdaf0d9cbd2a56158ffeda57794cdb6cd564932da6e774344da8
cluster-cloud-controller-manager-operator git 8abb0673 sha256:881df9a7441ca28bb2073b5314146aa3db005bb0f7fcdc660a327f9e8a704fd1
cluster-config-api git f9b2d1ae sha256:a4739d2732d32b211bb80066c35ab7caf7fb1971401c2833ecaaee4e0316d815
cluster-config-operator git fe5e9286 sha256:ba7102396ce2385d50ac0de2c996bf33881d024a3f40c7792e708d11eac8b7fa
cluster-control-plane-machine-set-operator git d17bf3a1 sha256:03b80df38918f9232fae0b3e459a21cc5e9aa752c219551f3090aa69f64927aa
cluster-dns-operator git 7cafd0c7 sha256:3c1ffaef60ddf77536fe682567657a01506d4c5601101b2bd38427b57001a711
cluster-etcd-operator git 3af8b9d6 sha256:b52cf108bb58ff00b96d76f412af729d1532a904889b2d56048b89c6e036a006
cluster-image-registry-operator git 1e3caa4b sha256:c0d9e8a0ddbf4adb8aff2fd84e0949a77025bff8828eba9dc05d148eac0fc3cf
cluster-kube-apiserver-operator git e9bc9090 sha256:4c62e61d0ee0e353bb94e1e5b5e53f137f375e1f42f29134f2c3d88be3b6ddb3
cluster-kube-cluster-api-operator git efe651a9 sha256:1a248b1a98cb44b1efda0cc2ce00830a7912926b1c55a4e76a722087f2d83837
cluster-kube-controller-manager-operator git 6347fc81 sha256:13d89f2847becda4a8b67601ca179b45223c326d2ee2afda6defbf545ae13c7b
cluster-kube-scheduler-operator git 4e99db62 sha256:118260a9d8b1b9b13521ce9b21c1e6ddf120063176750d25196919ae2245073a
cluster-kube-storage-version-migrator-operator git 59ba356f sha256:b31e900865518298f78ea6294838661ac4897b38f7c677b3d316ab6dad644b40
cluster-machine-approver git 01d5fbbe sha256:a5c6adf68d274d5cfd611984619dd3364e5c86a353f9e18e6b30ad518f21dc3f
cluster-network-operator git bb2b3f7e sha256:864d2b3201d85cf4e2592fd9f3e05ae86061d4731f8c4c9b0187c31fe6713831
cluster-node-tuning-operator git cb375d17 sha256:c8ee3c7d7c71b8edb37e2c359a2d109de070600d2da744944336474c0816a7d9
cluster-olm-operator git fa9d9ab4 sha256:f4276d1b34ff76e8cae5d9ceb7c965a3f0bd846dac446e03f5ee54058bfd4b5c
cluster-openshift-apiserver-operator git 0a6f6eb9 sha256:08dd68332af078ceba22ee41840be77cc6e484102d1d8b947f2910923ac6ce6a
cluster-openshift-controller-manager-operator git f1711cf3 sha256:1423f8df85267d761d1cd9d19a7e532ca8673032e2ef9d95f6bae21293070a1e
cluster-policy-controller git 3b44245d sha256:3d6dd268333d73646005d6671134f599ff72f33bb94304ad3d30fd4dee9998a4
cluster-samples-operator git bc725fd4 sha256:caec8d2579d95b2889abf4079dff35c7c969e24357638daffcb2f8b1c4867eee
cluster-storage-operator git fe353404 sha256:8efc6412e1c7c8cdf1d8104ca3f8d1ae55b52909682226998d3fe8ca29acc576
cluster-update-keys git 8caab452 sha256:424c48e8b047539e32c6d2ce5834e358cb8393235cd2c9fa200ccd21b5d32b5b
cluster-version-operator git f72d7e2c sha256:ee088ab8bd77bec165fbd89c4180d8743f073f08df03b8a889846deee4834c1b
configmap-reloader git e2aaf00a sha256:8c313df477cab0adffa34fab25565e300b2643ea68e1b88e487aeabd7cfa4745
container-networking-plugins git 090b88ce sha256:3f531390acbcdb276e60bee3b0105f6df7d814ff979b44e6dab984c03d3988f4
containernetworking-plugins-microshift git 090b88ce sha256:db5979df3d919729bbe5147f106e4333e851304a52be195e5c636751786778c7
coredns git 8ca7f02b sha256:99fc02110e39e7da53c09760130d9e5323c033a2f5860d13299fc29428b4d499
csi-driver-manila git a34070f9 sha256:c92ae4cf04c3ed06b46d49ebd77b428f41e0c7a8e9bd5868ac30916c3c493062
csi-driver-nfs git a651acb2 sha256:3e5e3023cd18d68195c93c9b65ed90dfa7bb274b9aa3eaaf035a7e9208d31cdd
csi-external-attacher git e3557783 sha256:987f34075f512df5bc6904655a6699e44b1b39a666d9e0e60f5efad0149ce2bd
csi-external-provisioner git c5e3a50d sha256:a33f332841ca1e45590739d2503c4fea90742d951cd20b620e01708a187b2da2
csi-livenessprobe git 3a977844 sha256:17986861d66301ef2a8aa300eea479eed53384e88c0bba6833a1a0f0dff489fa
csi-node-driver-registrar git ef93f0be sha256:5836927263d59a7ae6d2eb60346ba93739bb8c55512918a129790be292b07a60
docker-registry git 5c367551 sha256:1e755f1f8294b500074dab851c0208e69191f50ac67fa5ce48c1929aab520951
driver-toolkit git 2e139edc sha256:833bdc9069cc70a8a71f7de363908135b3b56d305ab697e617a312dcb43e087f
egress-router-cni git 632b6ad4 sha256:a9cf1ff0dbdb4312ffd95e714e2004d0f80f07d60994ecae12f1ec0dc83a337b
etcd git b5a4f8d0 sha256:8c37d0dff16cddfa282ab64348e4cbef0bdaa5a12d8ddb40dd1eaedb14e3cae0
gcp-cloud-controller-manager git 6ea23561 sha256:4b6dbc51f0b775f4af3def8a1f3ec9dce96750c996f4a478fd031ceb461c3c0a
gcp-cluster-api-controllers git 6d453944 sha256:01bf387c940209d9937cfbd878079cf0480f8e114f454412dbb035a4c0574b88
gcp-pd-csi-driver git 96f27ae3 sha256:634de9404963152af8fef3bebb9f759eec1ecbd17adb61f1080d1bf8b27c7b1a
gcp-pd-csi-driver-operator git 4432976a sha256:7a5b060b712ddb46f6376ca7371fa84912e061766a6eee0acccd371257407f3f
gcp-workload-identity-federation-webhook git f0a670c7 sha256:b64a3be7980c51d7ce89ebd290f7bd576bd8defd55a38e418db42d4977376ee9
hyperkube git 91c24081 sha256:d296d8e551c706bbdd6ad7f7389b709efa018ed81a251ffe0e12d634480c574f
ibm-cloud-controller-manager git a33026b1 sha256:31ba37a07969d438776ca4ea3a00e676d057f3096028fc8563728e4e153aa7d1
ibm-vpc-block-csi-driver git 4f6a6d3b sha256:db3f4d94f8cc1c1dcf9967c9b2605d8149441060a88470e60b5c11778c40634a
ibm-vpc-block-csi-driver-operator git 1c7bc07e sha256:2317c7c0a5fd8be766fb070b4a784d23f0b38169a6e230d59e1bfb6fbd56b220
insights-operator git f91e85af sha256:c4b01da98dbea794164f9e2d4827f8632b97e9365e67ef72227bc557519ab05c
insights-runtime-exporter git 3d444833 sha256:2d7c66bb00d6e55d72b69493f0ed889b037cd7d09add396c4e39bf61ddf35909
insights-runtime-extractor git 3d444833 sha256:c0151f0e14abef08c5951ffe6301e204e40666397553df53a805ed1d6e3f415b
ironic-machine-os-downloader git 50ca44fd sha256:4f3374cf88b88017569e48474b9bc554e38e35e6fcdca24dd90a9b2e133fcf79
ironic-static-ip-manager git cfbae04f sha256:6e27452fbec10ea31a2f66a50275c1a77c73d13fa068cfdc3a0f5a6e8ee2aeec
keepalived-ipfailover git 716eb0ef sha256:c6c37c2793220b251ab3fb1be3eb6d75b9dc4b5858b2d4709d468c6f51c37790
kube-proxy git 91c24081 sha256:459bce7bece35e0a547debd085b2ee85ae7dc09df9c6ba7ce1ab1a4a6fe84e18
kube-storage-version-migrator git 815b43b7 sha256:bd60461ded1ab23efd7a66329a9dcc0c011e0d7c61f3dd47daf1bb2f623ba9bf
kubevirt-cloud-controller-manager git 1d880a29 sha256:020ed1b8e6c472d443c19d88724bd6df7fe64cdd5de3907dec5cec2a5aac9989
kubevirt-csi-driver git 140f6dfc sha256:c4b4ef5bbbed0dd92ab8ebe6f317ad71b7fdf3cf668735604265f829c82135ed
libvirt-machine-controllers git 875b03bd sha256:bb05b453588568e16102bf51744eba407fc2463b4147034a86b5ad51c5ee4937
machine-image-customization-controller git c8569da6 sha256:cc300795b2368be99a1170eeb7b361deff1d4c65f25cc488b8cbcbcdd33a085f
machine-os-images git b2321b2c sha256:a718182ae11045ef57a571003bcbf21b0274eeaa44678a22f850be861bb6a6f8
metallb-frr git 760c6639 sha256:bf58bd085c2dca740d5956a403f11d4a5c5bc751a6764f1f3429c8e7aa81dc58
multus-admission-controller git 0d7ea6c7 sha256:1e7ea5ee63ffce5f35c0dd3840532ce733b3e6560e9b7576354aa6a17df8aa89
multus-cni git c5fd5666 sha256:e90c686abdebd543cb8fdd960f90d69aa97b0135e422588dcd43d4ea65d04d4d
multus-cni-microshift git c5fd5666 sha256:206200e162f278d537242e7f6c1f6834dfb0385d6d175ddb731d715d6bfe86af
multus-networkpolicy git 3362bbc4 sha256:6975d136de8e3a903215ae6dec646d304d0807ef598dd66be15e679a28ab3057
multus-route-override-cni git 391c1b03 sha256:4d72e39a0237ac813fdcfd9feee67322b45225725717d4a322c1f74edce39c85
multus-whereabouts-ipam-cni git 86191ded sha256:52bd83637a10ac92dd65724b6bb3b7479578c1079fd0cc181dd3c0d24d06836a
must-gather git bfba924c sha256:3eb8da9d3d13c5220cab14ed36bad5374825c4457d3f61bc71a650336baafbf2
network-interface-bond-cni git e2de9255 sha256:96ed773a4632e21be37c769d742b96a777a0bbdb2d84f5676282ba641a55dd62
network-metrics-daemon git 11e2dec9 sha256:081d40c63e89555e8429c61ee9edbd3ad19ea00046384e943ecfae1d4d348c0b
network-tools git 47b13549 sha256:4237c627877f9eb38015f8e5afc02e4d46e208f4cdc2cba44a6ec00bad4eaca7
nutanix-cloud-controller-manager git d9fe8f38 sha256:d210a071c093fe10e1acb973764f13838e8648ba509784bf5c76bee0130d5078
nutanix-machine-controllers git afe324bf sha256:db4cf432d1c325c7101248b2423dbbdb582268706265f00b952988521ba2d349
oauth-apiserver git 1078b191 sha256:a24745b739d04a593c59465317f7493b50eb4e512d6cf0078ea27180a3c6288a
olm-catalogd git 180aa92c sha256:82c3658fd84c45fa96b84ec7ec83e1c0e95220b0f569d585d6afcc1e843aafb1
openshift-apiserver git 0185e4bf sha256:d605ad6efb565614668802fcf13540a5234fcc3b4f0edc56b447138b47d9261e
openshift-controller-manager git 8ee74406 sha256:578135d5682f6414b2ee0f6414bbf7ca69e4ef820aad253bc39161c196e2ff19
openshift-state-metrics git 3cca6fee sha256:e6cd723cc08a7f81bac938db81745622c0a65ff663894a1804a593dcbd718d77
openstack-cinder-csi-driver git a34070f9 sha256:77331c8825e5c568b43e72d74031b66edc3779ad02e52ddc3356a066105c15b1
openstack-cloud-controller-manager git a34070f9 sha256:5d8c7b68d4beb3b9dc631e15341bb898e74f7c1184eb1bb04311aeaa328fc3b6
openstack-cluster-api-controllers git d5e6ff9f sha256:08504b794e2f739763fcf739427d166c0e6f815127383bf7586cdaa821c09167
openstack-machine-api-provider git b8e611fc sha256:255718ad8f21372834532d48e26d9005dcfdc968dfbca418ed5819a109f859d8
operator-marketplace git 34521c26 sha256:0d3895c461611247b960d2de3bd6a3b760042ebeb37d8903b8e951fd86049d6b
pod git 91c24081 sha256:db0b12098170bedb976476ecca2bf421dc468ea5091fb9ff1aff814f38f93a70
powervs-block-csi-driver git e8700dfa sha256:5388f5735989403f368f0f8e6de36575cb3656fd046f28aaa4a20609c491b0f6
powervs-block-csi-driver-operator git 9c9131b7 sha256:4aff8591e2849cba0361d2de8a0b15906b8ef180e3a72d394f7da46dd71b1dc3
powervs-cloud-controller-manager git 601c30ff sha256:8c42254ab9ed817fb0ca72df9e6f50ad56aeda774657b85fe84585ba6b8bb83b
powervs-machine-controllers git 74e3ece7 sha256:e328d2d19ddf3b81c0a40b8321f8926cdd0dbf3b69a1769d13a5b3babf6b30a2
rhel-coreos sha256:2703a7a7a0e52d303e2ff5957711d716d75c73e228ab45dc98f4131f975c4b87
rhel-coreos-extensions sha256:1cdab458d19f23c49aeeda26b42819cd1d51da235e4a0dba4131950625f2a674
route-controller-manager git 2484b3e8 sha256:171067e22b2ac9e5ac381620ea3db079949dbb02032fb7d6400ec560254eb1a9
service-ca-operator git 30efb529 sha256:875c92d66ebe8bc400712254b0eb20e3fc459f12d21ebf837e063920773bd529
telemeter git 999cdb5f sha256:31017d46032661fd17f83d01de09a46b5e825277e0b112aa9927153fc504c80e
tests git 43c51244 sha256:6e12e63b2807f9ad40cf37626887d71143013dd670c76a95e92ac9be75cf1ced
thanos git 265d24eb sha256:3835e655adf54b1d47dfd8c05d242a7f5d50c59277e714662b7c9c8a9a85647a
vsphere-cloud-controller-manager git b4dbf34a sha256:7d47d56b133b95bfe9a7e9bcb9ca6c058f80c98b2e70e5d5bece8c109cabe5a2
vsphere-cluster-api-controllers git afae9545 sha256:779b00c1273aa945ee14a17ea89b34c41cc49f7c9139f744a59ce978f922a787

agent-installer-api-server

OCPBUGS-89884: patching golang.org/x/crypto with sustaining/crypto@v0.33.0-sec.2 #10800
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-103348: Bump x/net to v0.35.0-sec.4 #2297
Full changelog

agent-installer-node-agent

OCPBUGS-103362: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #1618
Full changelog

aws-cluster-api-controllers

🐛 OCPBUGS-123705: UPSTREAM: <carry>: Fix unit tests for OpenShift CI environment #642
🌱 OCPBUGS-123680: UPSTREAM: <carry>: Remove upstream .github files unused in OpenShift CI #641
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-103360, OCPBUGS-103371: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #610
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-103373, OCPBUGS-103550: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 #208
Full changelog

azure-cluster-api-controllers

OCPBUGS-89899: Address CVE-2026-39829 #401
Full changelog

azure-disk-csi-driver

OCPBUGS-114621: UPSTREAM: 3277: fix: allow . in Azure tags #179
Full changelog

azure-file-csi-driver

OCPBUGS-103366: Bump golang.org/x/net to v0.35.0-sec.4 #158
OCPBUGS-92789: Bump golang.org/x/crypto to v0.33.0-sec.3 #148
Full changelog

azure-machine-controllers

OCPBUGS-103471: replace golang.org/x/net with openshift-sustaining/net@v0.35.0-sec.4 #213
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-89882, OCPBUGS-89888, OCPBUGS-89919, OCPBUGS-92878: Replace golang.org/x/crypto with github.com/openshift-sustaining/crypto@v0.33.0-sec.4 #10901
OCPBUGS-121872: Update gcloud version to one that can be found #10857
OCPBUGS-77052: Update RHCOS-release-4.18 bootimage metadata to 418.94.202608142238-0 #10795
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-103346, OCPBUGS-103383: Use patched x/net fork v0.35.0-sec.4 #2418
OCPBUGS-91365, OCPBUGS-94688: Bump golang.org/x/net to openshift-sustaining/net v0.35.0-sec.2 #2344
OCPBUGS-109669: Fix pre-existing unit test failures on release-4.18 #2372
Full changelog

cloud-credential-operator

OCPBUGS-81887: Bump go-jose/go-jose/v4@v4.1.4 #1031
Full changelog

cluster-autoscaler-operator

OCPBUGS-103386: Bump x/net package in release-4.18 #388
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-103405: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #293
Full changelog

cluster-ingress-operator

OCPBUGS-103414: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 #1571
Full changelog

cluster-monitoring-operator

NO-ISSUE: synchronize OWNERS from main branch [release-4.18] #3116
OCPBUGS-103412: [release-4.18] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #3075
OCPBUGS-105311: [release-4.18] wrap library-go resourceCache with mutex for thread safety #3041
Full changelog

console

OCPBUGS-127183: Re-enable Knative Cypress e2e tests #16907
OCPBUGS-113759: block GraphQL introspection over websocket #17130
Fix for OCPBUGS-92075: CVE-2026-44990 #16717
OCPBUGS-100515, OCPBUGS-101791: Fix CVE-2026-69153 and CVE-2026-45623 - Bump postcss #17058
OCPBUGS-98420: [release-4.18] CVE-2026-59869 bump js-yaml #17076
OCPBUGS-81520: Console can only show user name instead of full name as the display name #16238
OCPBUGS-86740, OCPBUGS-87085, OCPBUGS-97763: [release-4.18] bump package: protobufjs, fast-uri #16728
Full changelog

console-operator

OCPBUGS-103424: Use github.com/openshift-sustaining/net patch to fix CVE-2026-33814 #1223
Full changelog

csi-external-resizer

OCPBUGS-103430: Bump golang.org/x/net to v0.35.0-sec.4 #213
OCPBUGS-80257: Bump google.golang.org/grpc to v1.79.3 #203
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-103427, OCPBUGS-103428: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 #228
Full changelog

docker-builder

OCPBUGS-89907, OCPBUGS-90327, OCPBUGS-92414, OCPBUGS-92621, OCPBUGS-92892: Bump golang.org/x/crypto to fix CVE-2025-22869,CVE-2025-47913,CVE-2026-46597,CVE-2026-39829,CVE-2026-39832 #549
Full changelog

gcp-machine-controllers

OCPBUGS-103482: Bump golang.org/x/net to v0.35.0-sec.3 #189
Full changelog

haproxy-router

OCPBUGS-86726: Prevent SSRF via FQDN-typed EndpointSlices #821
Full changelog

hypershift

fix(deps): OCPBUGS-76288: Update runc, selinux, and their transitive deps to fix CVE-2025-52881 #8289
ACM-37663: Rebase hypershift operator runtime image to RHEL 9.8 ELS #9451
ACM-38044: update Containerfile.cli base images to floating tags [release-4.18] #9044
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-103453: Replace golang.org/x/net with openshift-sustaining/net #172
OCPBUGS-115513: Fetch envtest assets from the controller-tools releases #183
Full changelog

ibmcloud-machine-controllers

OCPBUGS-103467: replace golang.org/x/net with openshift-sustaining/net v0.35.0-sec.4 #104
OCPBUGS-41223: Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART for 4.18 #45
NO-JIRA: vendor golint instead of relying on the CI build root #115
Full changelog

ironic

OCPBUGS-88475: Updating openstack-ironic commit that fixes CVE-2026-43003 #903
OCPBUGS-105860: update ironic pin to include CVE-2026-54423 fix (release-4.18) #893
OCPBUGS-100164: Update openstack-ironic commit hash for CVE-2026-44918 #888
Full changelog

ironic-agent

OCPBUGS-99888: Correct ironic-python-agent pin to include the CVE-2026-66138 fix #314
OCPBUGS-88475: Update openstack-ironic-python-agent commit hash that address CVE-2026-43003 #313
OCPBUGS-99888: Bump ironic-python-agent pinned commit for CVE-2026-66138 #308
Full changelog

kube-metrics-server

NO-ISSUE: synchronize OWNERS from main branch [release-4.18] #81
Full changelog

kube-rbac-proxy

OCPBUGS-39450: Updating kube-rbac-proxy-container image to be consistent with ART for 4.18 #105
Full changelog

kube-state-metrics

NO-ISSUE: synchronize OWNERS from main branch [release-4.18] #172
Full changelog

machine-api-operator

OCPBUGS-103469: replace golang.org/x/net with openshift-sustaining/net@v0.35.0-sec.4 #1545
Full changelog

machine-config-operator

OCPBUGS-127017: Update message for MachineOSBuildFailed condition #6566
OCPBUGS-122250: Add missing verb in MCC RBAC #6540
OCPBUGS-105477: Replace wildcard permissions with explicit verbs and resources in MCC ClusterRole #6391
Full changelog

monitoring-plugin

OCPBUGS-103481: CVE-2026-33814-4-18 openshift4/ose-monitoring-plugin-rhel9: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [openshift-4.18] #1217
NO-JIRA: [release-4.18] Sanitize alert runbook URLs #1297
OCPBUGS-98772: [release-4.18] replace outdated react-linkify dependency #1179
OCPBUGS-74461: CVE-2025-13465 openshift4/ose-monitoring-plugin-rhel9: prototype pollution in _.unset and _.omit functions [openshift-4.18] #1141
Full changelog

networking-console-plugin

OCPBUGS-98784: Updating linkify-it to 5.0.2 to fix CVE-2026-48801 #460
OCPBUGS-99991: Updating networking-console-plugin-container image to be consistent with ART for 4.18 #454
Full changelog

oauth-proxy

OCPBUGS-112094: bugfix: rewrite open redirect strings to ‘/’ #384
Full changelog

oauth-server

OCPBUGS-87072: bugfix: default to english when Accept-Language header contains more than 1000 underscores #272
Full changelog

olm-operator-controller

OCPBUGS-103488: [release-4.18] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #804
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-103497, OCPBUGS-103502, OCPBUGS-103503: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 #1366
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-129152: Branch Sync release-4.20 to release-4.18 [10-05-2026] #3511
OCPBUGS-112810, OCPBUGS-113507: Branch Sync release-4.19 to release-4.18 [08-21-2026] #3410
OCPBUGS-105851: Branch Sync release-4.19 to release-4.18 [08-11-2026] #3386
Full changelog

prom-label-proxy

NO-ISSUE: synchronize OWNERS from main branch [release-4.18] #409
Full changelog

prometheus

NO-ISSUE: synchronize OWNERS from main branch #386
OCPBUGS-93696: fix for CVE-2026-42151 #368
Full changelog

prometheus-alertmanager

NO-JIRA: synchronize OWNERS with main #189
OCPBUGS-103512: Use github.com/openshift-sustaining/net patch to fix CVE-2026-33814 #172
OCPBUGS-98183: build(deps): hashicorp/memberlist to a forked version #165
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-103510, OCPBUGS-103513: [release-4.18] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #397
Full changelog

prometheus-node-exporter

NO-ISSUE: synchronize OWNERS from main branch [release-4.18] #202
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-92888: Bump golang.org/x/crypto/ssh to v0.33.0-sec.3 #193
Full changelog

vsphere-csi-driver-operator

OCPBUGS-103531: Bump golang.org/x/net to v0.35.0-sec.3 #356
Full changelog

vsphere-problem-detector

OCPBUGS-103545: Bump golang.org/x/net to v0.35.0-sec.4 #233
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github