4.14.0-0.ci-2026-08-15-104728

Download the installer for your operating system or run

oc adm release extract --tools quay-proxy.ci.openshift.org/openshift/ci:rc_payload__4.14.0-0.ci-2026-08-15-104728

Qualifiers (status api): None

Tests:

Blocking jobs
- aws-ovn-upgrade-4.14-minor Succeeded (1 retry) periodic-ci-openshift-release-main-ci-4.14-upgrade-from-stable-4.13-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- aws-sdn-serial Succeeded periodic-ci-openshift-release-main-ci-4.14-e2e-aws-sdn-serial
- azure-sdn-upgrade-4.14-minor Succeeded periodic-ci-openshift-release-main-ci-4.14-upgrade-from-stable-4.13-e2e-azure-sdn-upgrade
- gcp-ovn-upgrade-4.14-micro Succeeded (1 retry) periodic-ci-openshift-release-main-ci-4.14-e2e-gcp-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- hypershift-e2e Failed (1 retry) periodic-ci-openshift-hypershift-release-4.14-periodics-e2e-aws-ovn
  - Attempt 1 Failed
  - Attempt 2 Failed

Upgrades from:

4.14.0-0.ci-2026-07-08-022443 - F F F S
4.13.70 (changes) - F S S

Loading changelog, this may take a while ...

Changes from 4.14.0-0.ci-2026-07-08-022443

Created: 2026-08-15 10:49:22 +0000 UTC

Image Digest: sha256:db39ba2b45dcdc903f12dffc677a69f581cd47801f22254b9a2db72ab182214c

Components

Kubernetes 1.27.16
Red Hat Enterprise Linux CoreOS upgraded from 414.92.202607031936-0 to 414.92.202608112102-0 (diff)

Rebuilt images without code change

agent-installer-api-server git f09936a2 sha256:d8a9c9e67c25a7450f7056c95696df14868fb9fa6e3ec1f2af355ecd5b581bfa
baremetal-machine-controllers git 0c1c23f3 sha256:180d2bf0c6bcaf3cb427056180aada0733fd3aa01cf9de21e0ea0ab22c89c05a
baremetal-operator git 483d0191 sha256:8a2546d178ef8ed1c571407280a1f0e8910db1978fbd0f71ca4c1a4d0b573ed3
cli git 44b3ac26 sha256:3546582a6d497b9126f75f2ce23cf1c17d6b6922132c8a8471e6e498885cdad4
cli-artifacts git 44b3ac26 sha256:8da68df15a5684fd5cccee41c348d1a7fb98a7f9331b9bc54b5fa850cdf876ae
cluster-etcd-operator git 8892946e sha256:109f8b68646bf408b3899e04e3f05db8be7c02ae1fd6e94965592791b45b8648
cluster-image-registry-operator git c9f6afc6 sha256:e37660bb6028e8c342d1802e89cd8621c10768cdaf40518f4984cdb6c929e821
cluster-storage-operator git 133655e3 sha256:07e28b0c60ba4964b9cb4e9c705cbe8017f2080a5b7201cec39620ced5f58703
deployer git 44b3ac26 sha256:1da19a66ed786f2608315750214a79199e062d9d5f45571ee9082efff85956a0
machine-os-content sha256:0b60986ab6289d240c4c71053c9fe10bccd9cf0cd42112b53c1a1da0a96f8fdd
ovn-kubernetes git bb845e54 sha256:d7ed879f8ff891ea6ffc4a8aa38b185373d56e6180d4ea78e2136b850a9262b5
ovn-kubernetes-microshift git bb845e54 sha256:24569d57bcd2ead4d90cfece09396dcac910a00281d2990adccc6adc9bd5354f
prom-label-proxy git af40ed09 sha256:0e86df946c27bc4b4d3f17b5e6c9afce5d275cf76dc49bb570c4f56ef80f8077
rhel-coreos sha256:c7a7781641f4e42119ed11fb4506228a2bd19966f0d9b81852944856a6dfd913
rhel-coreos-extensions sha256:613f4501fc15b92cf1c6b9648b26234f7c5770acd26525239ea7e231bc3a671d
tools git 44b3ac26 sha256:629c977192c12cb96dbee65f71856a66e9ef7f66f888214561388003c7cc76da
vsphere-csi-driver-operator git 6593723f sha256:89f4946fc3124dbe86ecae06e070a030a5a7d7188d1da3752ac23140502af06b
vsphere-problem-detector git 664a9e32 sha256:68d10e7e15ffa8737fb88967e7579fbb43de94c33caf489da6650d9cb73f7c78

console

OCPBUGS-77116: [release-4.14] CVE-2026-26996 Bump minimatch library #16348
Fix for OCPBUGS-81595: CVE-2026-4800 #16568
OCPBUGS-88422: Bump axios to ^0.33.0 Addresses CVE-2026-44486 #16789
Full changelog

haproxy-router

OCPBUGS-86711: Strip X-SSL-* headers for plain HTTP #807
Full changelog

hypershift

[release 4.14] Fix OCPBUGS-99086: CVE-2026-16242 konnectivity agent auth #9131
CNTRLPLANE-3979: Update release-4.14 Konflux pipelines to use shared pipelineRef #9196
Full changelog

ironic-machine-os-downloader

OCPBUGS-87171: CI image build root tag and go version in go.mod sync with ART 4.14 config #120
Full changelog

kubevirt-csi-driver

OCPBUGS-83659: Bump google.golang.org/grpc to v1.79.3 #104
Full changelog

openshift-apiserver

OCPBUGS-82649: Address CVE-2026-35469 #659
Full changelog

prometheus

OCPBUGS-88588: remote: validate snappy decoded length before allocation in read endpoint #353
Full changelog

prometheus-alertmanager

OCPBUGS-100361: Set testdata CA expiry to 20 years from issue date (#4112) #147
Full changelog

route-controller-manager

OCPBUGS-86883: [release-4.14] bump google.golang.org/grpc to v1.64.1-sec.1 #94
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github