4.17.0-0.ci-2026-10-29-094252

Download the installer for your operating system or run

oc adm release extract --tools quay-proxy.ci.openshift.org/openshift/ci:rc_payload__4.17.0-0.ci-2026-10-29-094252

Qualifiers (status api): None

Tests:

Blocking jobs
- aws-ovn-upgrade-4.17-minor Succeeded periodic-ci-openshift-release-main-ci-4.17-upgrade-from-stable-4.16-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.17-minor Succeeded periodic-ci-openshift-release-main-ci-4.17-upgrade-from-stable-4.16-e2e-azure-ovn-upgrade
- gcp-ovn-upgrade-4.17-micro Succeeded periodic-ci-openshift-release-main-ci-4.17-e2e-gcp-ovn-upgrade

Upgrades from:

Loading changelog, this may take a while ...

Changes from 4.17.0-0.ci-2026-10-27-214252

Created: 2026-10-29 09:43:35 +0000 UTC

Image Digest: sha256:5fd87be90ce4d0ef214920be680468bb3886891e9ba002e56bf3468e009116e0

Components

Kubectl 1.30.5
Kubernetes 1.30.14
Kubernetes Tests 1.30.14
Red Hat Enterprise Linux CoreOS 417.94.202610210229-0

azure-workload-identity-webhook

OCPBUGS-103156: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 #64
Full changelog

console

OCPBUGS-127155: [release-4.17] inkify-it: Denial of Service via crafted mailto: links #17382
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-103277, OCPBUGS-103279: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork- #421 #421
Full changelog

gcp-workload-identity-federation-webhook

OCPBUGS-103230: Replace golang.org/x/net with github.com/openshift-sustaining/net v0.35.0-sec.4 #27
Full changelog

oauth-apiserver

OCPBUGS-103267: Replace golang.org/x/net with github.com/openshift-sustaining/net v0.35.0-sec.4 #225
Full changelog

oauth-server

OCPBUGS-103265: Replace golang.org/x/net with openshift-sustaining/net v0.35.0-sec.4 for CVE-2026-33814 #280
Full changelog

route-controller-manager

OCPBUGS-103135: Fix CVE-2026-33814 by adding patch for golang.org/x/net package #111
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-103318: Replace golang.org/x/net with sustaining fork for CVE-2026-33814 in 4.17 #136
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github