4.16.0-0.ci-2026-09-24-021521

Download the installer for your operating system or run

oc adm release extract --tools quay-proxy.ci.openshift.org/openshift/ci:rc_payload__4.16.0-0.ci-2026-09-24-021521

Qualifiers (status api): None

Tests:

Upgrades from:

Loading changelog, this may take a while ...

Changes from 4.16.0-0.ci-2026-09-18-141521

Created: 2026-09-24 02:16:59 +0000 UTC

Image Digest: sha256:eb03e32b37c0bb3d619539fa53b0b2a7682dd25d843f09cb760fceb1317e6a2e

Kubectl 1.29.7
Kubernetes 1.29.14
Kubernetes Tests 1.29.0
Red Hat Enterprise Linux CoreOS upgraded from 416.94.202609171141-0 to 416.94.202609231055-0 (diff)

rhel-coreos sha256:2a08825369084c1ab3edb28e01c2f8eb0896e7cf28249d69b08f5ecbad9f45fc
rhel-coreos-extensions sha256:5d8f7db1158addde15167c270e1970e67d339960c3864d20fa5084e2bf8f7984

OCPBUGS-102913: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #1616
Full changelog

OCPBUGS-102919, OCPBUGS-102939: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #608
Full changelog

OCPBUGS-102952: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 #1573
Full changelog

OCPBUGS-120748: update Containerfile.cli base images to floating tags [release-4.16] #9560
Full changelog

OCPBUGS-103085, OCPBUGS-103089: [release-4.16] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #401
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github