4.12.79

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.12.79-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Failed release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-sdn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-aws-sdn-serial
- aws-sdn-upgrade-4.12-minor Succeeded periodic-ci-openshift-release-master-nightly-4.12-upgrade-from-stable-4.11-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.12-micro Pending (1 retries) periodic-ci-openshift-release-master-ci-4.12-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.12-fips-payload-scan
- gcp-sdn-upgrade-4.12-micro Succeeded periodic-ci-openshift-release-master-ci-4.12-e2e-gcp-sdn-upgrade
- metal-ipi-ovn-ipv6 Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.12-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn Succeeded periodic-ci-openshift-release-master-nightly-4.12-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.11.14, 4.11.16, 4.11.17, 4.11.18, 4.11.19, 4.11.20, 4.11.21, 4.11.22, 4.11.23, 4.11.24, 4.11.25, 4.11.26, 4.11.27, 4.11.29, 4.11.30, 4.11.31, 4.11.32, 4.11.33, 4.11.34, 4.11.35, 4.11.36, 4.11.37, 4.11.38, 4.11.39, 4.11.40, 4.11.41, 4.11.42, 4.11.44, 4.11.45, 4.11.46, 4.11.47, 4.11.48, 4.11.49, 4.11.50, 4.11.51, 4.11.52, 4.11.53, 4.11.55, 4.11.56, 4.12.10, 4.12.12, 4.12.13, 4.12.14, 4.12.15, 4.12.16, 4.12.17, 4.12.18, 4.12.19, 4.12.20, 4.12.21, 4.12.22, 4.12.23, 4.12.24, 4.12.25, 4.12.26, 4.12.27, 4.12.28, 4.12.29, 4.12.3, 4.12.30, 4.12.31, 4.12.32, 4.12.33, 4.12.34, 4.12.35, 4.12.36, 4.12.37, 4.12.38, 4.12.39, 4.12.4, 4.12.40, 4.12.41, 4.12.42, 4.12.43, 4.12.44, 4.12.45, 4.12.46, 4.12.47, 4.12.48, 4.12.49, 4.12.5, 4.12.50, 4.12.51, 4.12.53, 4.12.54, 4.12.55, 4.12.57, 4.12.58, 4.12.59, 4.12.6, 4.12.60, 4.12.62, 4.12.63, 4.12.64, 4.12.65, 4.12.66, 4.12.67, 4.12.68, 4.12.69, 4.12.7, 4.12.70, 4.12.71, 4.12.72, 4.12.73, 4.12.74, 4.12.75, 4.12.8, 4.12.9

Upgrades to:

4.13.0-0.nightly-2025-08-01-163249 (changes) - S F S S F
4.13.0-0.nightly-2025-08-01-054450 (changes) - F F S S S S S
4.13.0-0.ci-2025-08-01-224041 (changes) - S S S
4.13.0-0.ci-2025-08-01-114133 (changes) - S S F F F F
4.13.0-0.ci-2025-07-31-200548 (changes) - Failed

Loading changelog, this may take a while ...

Changes from 4.12.56

Created: 2025-07-31 06:49:54 +0000 UTC

Image Digest: sha256:133fd703b5a550fc5be350af24597e0f07c83d7a4b0edfd3d24772342c572e84

Components

Kubernetes 1.25.16
Red Hat Enterprise Linux CoreOS upgraded from 412.86.202404162110-0 to 412.86.202507280202-0 (diff)

Rebuilt images without code change

alibaba-cloud-controller-manager git 191c9e34 sha256:e7b274b793f3e84b191392a1145926c1fe5f679bf10e0640ce3c7f47aac025ea
alibaba-cloud-csi-driver git 4d3b1125 sha256:a3ddd9e6505ac35d9a530d6df4e4447a0e54893aa85eaef83a9dce41b7022503
alibaba-disk-csi-driver-operator git 99bcda8d sha256:4891ec121c4d35ef7224c8c43a4de6df0a856d6ad6019f5d71049a8b03e4c4af
aws-cluster-api-controllers git 16156acc sha256:fbfe36ddd043b94c278b9e7ee9c3ca36cf5686f878e1ae032f39a5fd4271b7f7
aws-machine-controllers git 440886d0 sha256:e69aa7ff14d8f06b1430ae4ffac59c1fcd9703036e95e300dc657e852c80000e
azure-cloud-controller-manager git 2193ccfa sha256:2391223e432a5ee35a45fcfc150582ca393a489f63c6f9f53d12a68c936e27c4
azure-cloud-node-manager git 2193ccfa sha256:4a6f32426c1aa4f121e2a70d10dd5b4e8a9b706282ee8356b8f929fdd77da5dd
azure-disk-csi-driver-operator git 988b8cc8 sha256:2b29df447c2719b5098d61802c9ea18a553948f7c632280088f49a12a1474e96
azure-file-csi-driver git 15aade4d sha256:0558073a7bcf14ab91d6523b4eb3d5474988875dac50638779debff66629a781
azure-file-csi-driver-operator git 060ba825 sha256:d6aeab64129bb5bffeaff2d8bc5b99a085092d0778fb69af2fda223e758ef4de
baremetal-runtimecfg git 474ed48e sha256:097276f6f272bac22d956cf80c4c4a25cf1cb72830aca4c0cf644a094d8b2f75
cli git d6912573 sha256:1d9d3a81f5457baf50fd7635369abe091c486657aa3ca329059502c28653781c
cli-artifacts git d6912573 sha256:4e86f22fca491e1a92bd0b904ed1045611f2020bd04ad8930a97e7e9f15dbf5f
cluster-authentication-operator git 4f7f6b1a sha256:81dbc4489cdc733cf0c26014efcbefac542abfd3a856b476cccf44764c8ade2c
cluster-bootstrap git 138a1cf2 sha256:6901f6fb89ac09cad7f3790f3c7822672c413512cde54ca963b9c40fd27cef3f
cluster-capi-controllers git 03d89f21 sha256:aaf6701f35d57dbe7ea88c1f4f8eda6d34f52d448bbfedf1039b56bc11b1be05
cluster-capi-operator git 60a36d83 sha256:c38838736952ae0270f69945455538d317301ce4a70fc63da3d301f63755990a
cluster-cloud-controller-manager-operator git 3b1f0843 sha256:51c528acfebe568e51fddb2e984e46aa3cf61b5e872ffc2fcc6d90c271a84bf5
cluster-config-operator git 92c3b102 sha256:b7aaec625d951ba2f8360fabfc018a512709aa0bbacd2fccfb137006e8b3110e
cluster-kube-cluster-api-operator git d50f7322 sha256:4ae9b03872ec6cd5226952b6832baea0d360887679cfa947d99b2e238a2e44fb
cluster-kube-controller-manager-operator git c3c07beb sha256:017e08a5090e07dd0f100a28ae47d2ad335c01fb351e0eb0bc17a5658e6c8c75
cluster-kube-scheduler-operator git 48cd96c9 sha256:477a78a88963c7b05cb23a3655cca0ba384cdd56f2599409419033f01db2cec5
cluster-kube-storage-version-migrator-operator git 1a251f4d sha256:85c63ef433824e248c348453ecd720ada1e643996a7cc7762b4d133cfc598f9b
cluster-machine-approver git 7b08a4de sha256:e0156dea8d1638d268253aec05a4ab76c6d43adfe4bd8f59769dd9945074634c
cluster-node-tuning-operator git 20966da9 sha256:dd76eb2a87f0333776d62b23bc746ef39909f434d1a54cc08d08298b489fe90b
cluster-openshift-apiserver-operator git b870fc67 sha256:ae16c649b0278de831e429d2d8c8c14cdf445767f4a29ec894166f39d34270ff
cluster-openshift-controller-manager-operator git ab963d8a sha256:5727257449fbfe030191371a40f32f47007074d8dec0f16bd6428eed66f3558a
cluster-platform-operators-manager git c930dc74 sha256:15998cd00cc28526f27b5375ef56a72440a76979f2e5dfa22dea0cb22a606fb1
cluster-policy-controller git cb8862b0 sha256:b28d786467587df7ef337675ba2b00e92dbe1b76d89f059f221a44840c1070e2
cluster-storage-operator git 21ebf328 sha256:80a06fad12ebb58552657df9b4dc11f8246c260d3516f35211e10215f0019563
cluster-update-keys git 2796e173 sha256:6d5a3e0e77820333f6cb34b1ac5a540e9bfa1cba98ac8b3a61463d745d6bac86
configmap-reloader git e4d9170e sha256:5526d3ea4c2010a9f4593cce35f533d5ec3b3f882184487699472355a617265d
coredns git cc1194ea sha256:4e65089cdc6770f606eb8500bc51830f386b1b64f19f3d4856e92ecf2eac940f
csi-driver-manila-operator git 8dab5320 sha256:a3f0be57541b19a5d2c8d70c4d812a90aa9ba56d790d7fa8c77fb2da1d6e07c5
csi-driver-nfs git d9099257 sha256:5b1b45592c458ec8e78dc3824dd9c004ec7578661e5c6e43e6314a9262703ff8
csi-driver-shared-resource git d054948f sha256:4a8ab5eda259737f9f23d4d55f39fdd946012d8afa0d9c3f74ccb15cdfdadc0b
csi-driver-shared-resource-operator git cc297702 sha256:343d4776c68f93db152424ec1984dc17e7d155322e778c9f4b5cb841249db891
csi-driver-shared-resource-webhook git d054948f sha256:57b36df7898dd12372e7f46d8cfc5c04438b40678be02695eea8df1b87a9a6ea
csi-external-attacher git fac7b8fd sha256:af3032e5e8f788f1a97d915137bd4e76aafe12de7999596f63cdb3f796360efc
csi-external-provisioner git 3aa7c527 sha256:c1b6332303d886b658a6d397d973223593432db4a1cad4be9f4f589467346546
csi-external-resizer git 5b066ba4 sha256:3c5a5762dbe8e9c17ed9abf54acfb2aa41f8db8dd8db561aed9316a7b2d94fc0
csi-external-snapshotter git 6fdb648f sha256:98c026534e0944fc8150bb06aacc9d373b9ae6b1aa56b1cb0b67535687c4d7e4
csi-livenessprobe git e6545e71 sha256:59350c57670938e987cf62ac83ae1282fe5b84458b8eb8f2053b4d9fca614bac
csi-node-driver-registrar git c316b896 sha256:13abaf9ea1d2738ef100b61bf7ff34283c21037e7e8087736f274f12f599df4a
csi-snapshot-controller git 6fdb648f sha256:b0c9bcb8d4178a4aa9a2c371b05fbe23a4ddefaded135bd58386a93cfea70475
csi-snapshot-validation-webhook git 6fdb648f sha256:3eee2e20a98f4f0ffde6c08a1f8bf7367d6f6698924617026779540210166bb3
deployer git d6912573 sha256:4ee5f206f8dbce98203fe42451e21570ed4ff4b9541bfd523a98886d13824bc5
docker-registry git 9e75355c sha256:ec5da07a4fe8b436089d7f506376a300abb97ea40645a2dc7314a4d623d1befc
driver-toolkit git 6e5c04c0 sha256:fdd5931559f49330dae5c4d7b7b6334061872cdcaaaf7d3318d2f66c6938da02
egress-router-cni git a92e4157 sha256:8e15f51c7829b1291d371c436937b9590ff9dccd872ced7003ae3e4748170b07
etcd git bb82e891 sha256:02626dbe3d65b19116d48eecdc8b837f8a1a98ee8676d13a7136ccd80f014c97
gcp-cloud-controller-manager git 8a84952e sha256:2e23d4d77823db7cee2f850e55f7b9b3a5eb6c18fa38945361402abef58a3a0a
gcp-cluster-api-controllers git e00019fa sha256:69de960e23a015f2f700a1e77606c85a2bb459451700a914cee02c85f9127eb5
gcp-machine-controllers git d6d8c1cc sha256:8f25f4636977236f3affef65216c73f1971716496b2487cb8073a24f83c5b8ab
gcp-pd-csi-driver git 5dcfd675 sha256:5198b41ad96e4f4c4f689d1a5b91bb9be5587e2ccb20d08f665c5ee6a2a4f3b7
gcp-pd-csi-driver-operator git 30e97ba5 sha256:e2b70dcdc3ef8b4575fad4ced368d83557e8e2df67a989c849dc05b7f2e14e12
ibm-cloud-controller-manager git 8bd0ea8f sha256:6034571c4bc92c339108e03061e8ee1b21ca99a53d6cacee1eacd25c73d26f99
ibmcloud-cluster-api-controllers git 0fe74f67 sha256:c259e3d3e75677ec9c61c8dcd428fba16c29d835fe711643761a66ea993575f6
ibmcloud-machine-controllers git 31a67dac sha256:cd06debcc100999488957716af3ed84c8bef1ba24f626d3f6328f5f9adafdbdb
ironic-machine-os-downloader git c65c1f1c sha256:30c8583db0243daef466ff8ff2eb7698ffcd658baa06157c15e32c474db2c16c
ironic-static-ip-manager git a8ade8fe sha256:8e0f1f0a5ceda5537067e546f517c2a1c2212b54b6335e444d01fb755fdab77a
k8s-prometheus-adapter git 36c06694 sha256:8126a26012bec00fff781345a9fd47c9c79e9d13a6dd9b1be164952845fe1f23
keepalived-ipfailover git 7e8a0105 sha256:8640ef0b42d2d34f6726ad49c5235fe3f288a3b715a2e3bb811b33d4eb5a4103
kube-state-metrics git 748f7131 sha256:1e8626368d4f45093fd7011fa0a16f0af7c65e0385d9c977023715ee3158fc36
kube-storage-version-migrator git 596745ce sha256:2b1d340e877cddfbe1d528af5afb60c0dcaf4aefe2c066d86a12d87f500d9942
kubevirt-cloud-controller-manager git a19615cd sha256:053449bde42348819087c4b9a3eea2a3c2c9ec77e68a9e1ec362bb29fe090357
kubevirt-csi-driver git f407c8a7 sha256:98a59cdf423b035c4a5bdf1bfaa8515c7dc1c6a5dbc71df1aa1885b27ac52dc0
kuryr-cni git 8fd2f8b0 sha256:fcc02fd46819d6b2e9426f33a9f8e847d5d1bf0e2a0e0b879f427324020c6a4e
kuryr-controller git 8fd2f8b0 sha256:b9e9fb5c03db2c604370230a7fe71481d0442469f92b72fb91e8380c504ba5ed
libvirt-machine-controllers git a2882f7a sha256:9cc7bfa3c67304d7c70d0cb429d775678f3627529c5917703713ffa474de2217
machine-image-customization-controller git e456249d sha256:aba52e92dc90437b8e5a39ebded7a8fadc9bf6d44bdf0e2143b439fd51f5cc3d
machine-os-content sha256:8e3bfe9e14342f39fca09b752272067e42417611768331ad668255047d8a647e
multus-admission-controller git e27952fc sha256:830412b2f4e9b1bdc72c45df9ed32ff122f4432d682446e72beaa1f9d9ea959b
multus-networkpolicy git 644461f2 sha256:8388d894ceddb9831eae659f96e8ac9a4270beffcc6a5be32b193944bf8554ea
multus-route-override-cni git efd6ffbb sha256:02581784a955e804b71ad517c6cfdb68f6f20163a1637ba30c3cd6f9344d163f
network-interface-bond-cni git 30386d6b sha256:93c77d6c9271fec3fa4b2583b5dbb49664f4290c06be99297e539009a3f8f1c6
network-metrics-daemon git fad45782 sha256:6ddb72ef2581c2eb800253e067cc3e5540a4903644dd2deb725b189dbcd175e7
network-tools git c76613c7 sha256:6d3a067238099aef28097a1d166d67c1af76fbb7779239100bca35ff6bf1868f
oauth-proxy git 03e5b13b sha256:8fbc41a24a600a1328daefde0e4fec10c029dce4ba33fe9dab6d6c2d3c8c6444
openshift-state-metrics git 3d5dc18d sha256:37f98f022697de64e75de90a071becede839d826c4a435a2484b70cd4661c601
openstack-cinder-csi-driver-operator git d09e51ae sha256:88da6f70f8e67614c992c105a851d6c3f4d890428685b6ce9f30d6c0881ef66b
openstack-machine-api-provider git 05657663 sha256:b4c3a37185104bd7cf5e5e9954e26a1ace9bc122bd534f5d128cb9c8417bc205
openstack-machine-controllers git f13e381e sha256:79067131bce8a24cb79f998694d9ba23036b054c15070ebf47227ef3a8edd648
ovirt-csi-driver git 87ab3789 sha256:a838fb3d46bf2efd9db584ca0618bdd1c124f4e6002728cf541f168ad325ba0c
ovirt-csi-driver-operator git e5e02335 sha256:ffbb5f99e3b47e4e3696141d8139d3cfd69031dd80a9512f7e5086a26edd2c66
ovirt-machine-controllers git 03e8cb50 sha256:0b44f2a9536e1a6467a9c306d3403ae69054832b36074a4457a9aa9b55d560de
powervs-block-csi-driver git b78e8e78 sha256:b1b9b070c909edc858c1eee8b7908faba3511447fdc4292a1029ca105f8eefbf
powervs-block-csi-driver-operator git 7dadc08a sha256:b8f22a26062ea0cf4bde56a3124298420083dd3ce37944a7faf9d6511927c9ee
powervs-cloud-controller-manager git 4fb4334c sha256:9ffe2739989ea1a40cd5fa0623a975f21ce52fdb4780bbc9aaa90d16a41ae856
powervs-machine-controllers git 8a37e70a sha256:e415f458896cc5d393cb0802e773a3e132db126ac6b810b97b32f9819b366d2d
prom-label-proxy git b1907888 sha256:aaa3c4096df714facca57c601eeef0c4b1baf6a2da44b4ac5bbb158f8cac4ff5
prometheus git 72ceaef4 sha256:65929c468b60fc4a70dd398b277125892783fe69cafa748e49d9d9831838add7
prometheus-alertmanager git 914cad82 sha256:0559b9fbdfec7a120119eab2fdbf1452824733662fdd61ebeb97c53b842b4eda
prometheus-config-reloader git d1e399d5 sha256:2e03179c1d3e187d3677cc2f56a4e88884a42a6d6e9bc6e88af673aead4c41e6
prometheus-node-exporter git 99077a3c sha256:3a864473193d02e0f4f85f856ffbb966dc9e08a6dbef8e0c1f7ceccffbf0481b
prometheus-operator git d1e399d5 sha256:b21ae087bc2182d014e9930dc338f224005d9459bf79c96b222dbf4e69029320
prometheus-operator-admission-webhook git d1e399d5 sha256:c1cd50501ac943e0e82eb24e61a728de51f7596e38b5fa84f02b43f3e0748e7e
rhel-coreos-8 sha256:de3b7c558735be8349d58ef464921046a1ac5e7547894cdc05f82901c6dabdc0
rhel-coreos-8-extensions sha256:24c52c5a37a1ae8c67b0f6fea8136cee48ae55aaf1f086aea5834b66e2ebbc84
route-controller-manager git 0f141ce9 sha256:64e62412c176edbef497c57ac54ad617ebf7fdcf16cd2b2b399eaa661fcf8527
service-ca-operator git ef1d057d sha256:1f98ed72b28ffdc084031fc5075860c6d87a15d95bf9997ee3403a1e68b0f563
thanos git 2867a6b5 sha256:508767eadcabd2e58515a8d0f55bad893dbe57b15ea38160bad89e4bfa4c0f34
tools git d6912573 sha256:cf3f87e6912a14810fb183e6f61f56dae0306177b10d524cf28ecca4f83824d7
vsphere-cloud-controller-manager git e170dce5 sha256:3943fdae0f20f1dc03672a2112bd42d907ff0cfbd8491691a0e979d2f9e4f20d
vsphere-cluster-api-controllers git a61d43b7 sha256:d46107d7977a99bb2372ceec2aa4a9237dd10527483623fa65e3c4a62e1e3637
vsphere-csi-driver git e4c0e103 sha256:00539ebebed396000b4fad666e59ea0c89951f31c23bc5e6ca49b4134c74065a
vsphere-csi-driver-operator git d7cca470 sha256:73945bb1583841cd1502cd2ab65a07e52d9e7e8d18965d858b770a9cfd12da23
vsphere-csi-driver-syncer git e4c0e103 sha256:cb0e813add52905838ae4889e0ef7b39f985f988adc13f57f6bdac0e3594394f
vsphere-problem-detector git f25ae2ad sha256:ceefca187a8313c301f90d198cf40913d1210d04c3f0beacdb25d72bc429eb07

agent-installer-api-server

OCPBUGS-53692: Bump jwt to 4.5.2 in release-4.12 (#7513) #7513
MGMT-17596: Bump x/net to v0.24.0 to mitigate CVE-2023-45288 (#6214) #6214
MGMT-17590: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#6207) #6207
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

Bump golang.org/x/net to 0.33.0 (#1026) #1026
MGMT-17596: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#836) #836
MGMT-17590: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#828) #828
Full changelog

agent-installer-node-agent

OCPBUGS-46953: Bump golang.org/x/net to 0.33.0 (#887) #887
MGMT-17596: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#707) #707
MGMT-17590: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#701) #701
Full changelog

alibaba-machine-controllers

Updating ose-alibaba-machine-controllers images to be consistent with ART #35
Full changelog

apiserver-network-proxy

OCPBUGS-38066: Revert “Agent: Respect HTTPS_PROXY env vars for proxied connections” #61
OCPBUGS-31984: Bump golang.org/x/net to v0.23.0 #52
Full changelog

aws-cloud-controller-manager

OCPBUGS-32079: update for CVE-2023-45288 [release-4.12] #85
Full changelog

aws-ebs-csi-driver

OCPBUGS-33457: UPSTREAM: 1919: Add reserved-volume-attachments #267
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-33457: Explicitly reserve 1 attachment for the root disk #308
Full changelog

aws-pod-identity-webhook

OCPBUGS-32880: Upgrade go-jose module to 2.6.3 #191
Full changelog

azure-cluster-api-controllers

OCPBUGS-36021: Update go-retryablehttp to v0.7.7 #315
Full changelog

azure-disk-csi-driver

OCPBUGS-56067: tech debt: rework vendor patches #106
Full changelog

azure-machine-controllers

OCPBUGS-36148: Fix mapi_instance_create_failed metric with accelerated networking #115
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-55035: IBMCloud: Move to IBM TF openshift fork #9670
OTA-1310: data/manifests/bootkube/cvo-overrides: Default to eus-4.12 #9373
OCPBUGS-36087: [release-4.12]: bump go-retryablehttp for CVE fix #8660
OCPBUGS-39290: Add yq v4 to ci image #8929
OCPBUGS-36179: [release-4.12]: bump github.com/container/images for CVE fix #8663
OCPBUGS-22981: IBMCloud: Add eu-es region #7686
OCPBUGS-30630: baremetal: populate customDeploy in advance #8144
OCPBUGS-32449: Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility #8290
Full changelog

baremetal-machine-controllers

OCPBUGS-46642: Bump x/net to 0.33.0 #230
Full changelog

baremetal-operator

OCPBUGS-53335: CVE-2025-29781 ose-baremetal-operator-container: Bare Metal Operator (BMO) can expose any secret from other namespaces via BMCEventSubscription CRD [openshift-4.12.z] #412
OCPBUGS-30630: Do not update instance_info and deploy_interface for active nodes #338
Full changelog

cloud-credential-operator

OCPBUGS-53420: github.com/golang/glog v1.2.4 #847
OCPBUGS-51538: Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected #832
OCPBUGS-37322: update modules: grpc, protobuf, logrus #764
OCPBUGS-42166: Resolve SNYK errors in security job. #760
OCPBUGS-37422: SNYK ignore go-client misreporting #744
NO-JIRA: Add jstuever to OWNERS #733
OCPBUGS-36027: IBM/go-sdk-core update to v5.17.4 #723
OCPBUGS-32897: Upgrade go-jose module to 2.6.3 #699
Full changelog

cloud-network-config-controller

OCPBUGS-33198: Avoid nil pointer panic while assigning private IP on Azure #141
Full changelog

cluster-autoscaler

OCPBUGS-45152: [release-4.12] VPA: Update OWNERS file #329
OCPBUGS-40928: update VPA golang.org/x/net for http rapid reset for CVE-2024-8421 #318
Full changelog

cluster-autoscaler-operator

OCPBUGS-32005: Update x/net to v0.25.0 #325
Full changelog

cluster-baremetal-operator

OCPBUGS-32006: bump x/net to 0.23.0 #440
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-48325: Add unreadyNodeGracePeriod for allowing brief node hiccups #344
OCPBUGS-35421: Improved debugging of API listing errors #306
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-32429: create suitable role and roleBinding for csi-snapshot-webhook #207
Full changelog

cluster-dns-operator

OCPBUGS-52502: [release-4.12] Add runbook_url for CoreDNSErrorsHigh #435
Full changelog

cluster-etcd-operator

OCPBUGS-53508: fix CVE-2025-30204 #1416
OCPBUGS-35501: return errors in wait-for-ceo #1277
OCPBUGS-32001: update golang x net #1256
Full changelog

cluster-image-registry-operator

OCPBUGS-51594: bump golang.org/x/oauth2 #1223
OCPBUGS-36033: go.*,vendor: bump go-retryablehttp #1071
Full changelog

cluster-ingress-operator

OCPBUGS-43703: Add e2e test for duplicate Transfer-Encoding headers #1158
OCPBUGS-43703: Add alert for RFC 7230 violation in Transfer-Encoding headers #1162
OCPBUGS-35454: internal service changed fix target port logic #1092
OCPBUGS-35304: TestHostNetworkPortBinding: Delete t.Parallel() #1083
OCPBUGS-35027: Don’t add clientca-configmap finalizer if deleting #1080
OCPBUGS-34888: desiredRouterDeployment: Set HostPort if needed #1076
OCPBUGS-34757: Avoid spurious updates for internalTrafficPolicy #1070
OCPBUGS-34110: Avoid spurious updates for scope in IngressClass #1056
OCPBUGS-34548: Use centos7 tag for quay.io/centos7/httpd-24-centos7 image #1068
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-50880: Increase waitForFallbackDegradedConditionTimeout #1811
Full changelog

cluster-monitoring-operator

OCPBUGS-35558: label for infra nodes for metric cluster:capacity_cpu_cores:sum #2383
OCPBUGS-28766: fix generation of telemeter token hash #2306
Full changelog

cluster-network-operator

OCPBUGS-43872: manifests/02-cncc-credentials: Set skipServiceCheck for GCP #2548
OCPBUGS-38905: Add missing runbook for OVNKubernetesNorthdInactive #2479
OCPBUGS-37942: [release-4.12] update whereabouts crd #2461
Full changelog

cluster-samples-operator

OCPBUGS-54913: add rhdmalone to owners #629
OCPBUGS-49664: add shannon and aroyoredhat as owners #600
OCPBUGS-21179: update k8s.io/apiserver version #590
Full changelog

cluster-version-operator

OCPBUGS-45333: deps: bump golang.org/x/net to 0.31.0 #1122
Full changelog

console

OCPBUGS-57101: Add all files to vendor regardless of gitignore #15137
OCPBUGS-55210: Show Observe section without PROMETHEUS and MONITORING flags #14986
Dockerfile yarn line update #14838
OCPBUGS-45291: Application creation fail when manually entering input scaling value in local setup #14572
OCPBUGS-45235: Edit the secret and add the Chinese in the web-console, garbled characters will be displayed #14561
OCPBUGS-36561: Increase login flow state paramater length/entropy #14539
OCPBUGS-43639: Copy response code from proxied plugin requests #14423
OCPBUGS-33519: Observe > Metrics targets, Alert user if they do not have access to information on this page (e.g. 403). #14334
OCPBUGS-41600: Fix plugin proxy handler #14266
OCPBUGS-41854: Redirects to new PipelineRun logs URL from old PipelineRun logs URL #14283
OCPBUGS-34564: Routes created by devfiles do not always use HTTPS #13907
OCPBUGS-34933: Helm Plugin’s Catalog incorrectly renders a single index entry into multiple tiles #13930
OCPBUGS-32146: Bump graphql-go to v1.3.0 #13923
OCPBUGS-34845: Fix PipelineRun Logs tab navigation #13920
OCPBUGS-33778: fix issues with Edit Route form #13859
Full changelog

console-operator

OCPBUGS-33386: Reset console operator’s conditions #898
Full changelog

container-networking-plugins

ART-13080: Fix Hermeto build issues #198
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-58889: CARRY: don’t ignore json files #345
Full changelog

docker-builder

OCPBUGS-43296: Bump buildah to 1.26.9 #449
OCPBUGS-43187: runc library bump to 1.1.12 #440
OCPBUGS-49345: skipping some unit tests to avoid failures as they are duplicate #437
OCPBUGS-48738: Add new team members to the OWNERS file #433
Replace ‘coreydaley’ with ‘sayan-biswas’ #408
BUILD-854: Add adambkaplan as approver #406
Full changelog

haproxy-router

OCPBUGS-43703: add duplicate_te_header_total metric #632
OCPBUGS-35875: Properly handle rewrite-target annotation #610
OCPBUGS-33432: Route ‘haproxy.router.openshift.io/timeout’ value is not validated #593
OCPBUGS-34212: Reject routes with MD5 certs #601
OCPBUGS-33517: Count active services before setting weight to 1 #581
Full changelog

hyperkube, pod

OCPBUGS-37282: UPSTREAM: 126104: Add funcs in pkg/filesystem/util that can actually … #2046
OCPBUGS-30454: CVE 2024-24786 #1974
Full changelog

hypershift

OCPBUGS-41516: set Konnectivity cipher suites #4283
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-56067: tech debt: rework vendor patches #95
OCPBUGS-53908: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #88
OCPBUGS-36063: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #75
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-36069: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #124
Full changelog

ibm-vpc-node-label-updater

OCPBUGS-56067: tech debt: rework vendor patches #52
OCPBUGS-53540: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #48
Full changelog

insights-operator

OCPBUGS-32004: bump golang.org/x/net version (#932) #932
Full changelog

ironic

OCPBUGS-48145, OCPBUGS-48596: Bump jinja to 3.0.1-6.el9.2 #627
OCPBUGS-43949, OCPBUGS-43957: Bump python-waitress [4.12] #609
OCPBUGS-37766, OCPBUGS-39385: Include fixes for CVE-2024-44082 #586
OCPBUGS-38513: set min version for python3-webob #558
OCPBUGS-33373: bump werkzeug #547
OCPBUGS-34897: bump jinja2 #541
OCPBUGS-32362: [4.12] remove unused prometheus-exporter #489
OCPBUGS-32386: Use unix sockets by default for reverse proxy communication #477
Full changelog

ironic-agent

OCPBUGS-39385: Include fixes for CVE-2024-44082 #165
OCPBUGS-38513: set webob and bump werkzeug #153
Full changelog

kube-proxy, sdn

OCPBUGS-56130: Handle openshift-host-network namespace as special when it modifies #657
Full changelog

kube-rbac-proxy

OCPBUGS-32000: CVE-2023-45288 [4.12] #106
Full changelog

machine-api-operator

OCPBUGS-43872: install/0000_30_machine-api-operator_00_credentials-request: Set skipServiceCheck again for GCP #1305
OCPBUGS-32007: Update x/net to v0.25.0 #1257
Full changelog

machine-config-operator

OCPBUGS-44325: Panic seen in CI job for MCC pod #4689
OCPBUGS-38382: [release-4.12] daemon/update: disable systemd unit before overwriting #4530
OCPBUGS-33665: Run resolv-prepender entirely async #4364
Full changelog

machine-os-images

OCPBUGS-54173: Change rhcos release browser url #61
Full changelog

multus-cni

OCPBUGS-28520: Fix SAST scan issues for multus-cni-container [4.12] #225
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-37942, OCPBUGS-38019: [release-4.12] Stateful fixes #310
Full changelog

must-gather

OCPBUGS-48086: Update owners #477
Full changelog

nutanix-machine-controllers

OCPBUGS-20956: bump golang.org/x/net to v0.17.0 #88
Full changelog

oauth-apiserver

OCPBUGS-32010: bump x/net to 0.24.0 #113
Full changelog

oauth-server

OCPBUGS-27478: bump osin deps #144
Full changelog

oc-mirror

changes the owners file (#1011) #1011
OCPBUGS-48513: e2e: use same version of crane as in go.mod (#1027) #1027
Full changelog

openshift-apiserver

OCPBUGS-32447: ose-openshift-apiserver-container: golang: net/http, x… #481
Full changelog

openshift-controller-manager

OCPBUGS-58157: Set node-pullsecrets volume to read-only to protect image pull credentials #403
OCPBUGS-57171: Empty proxy variables are causing issues during the build #389
OCPBUGS-49644: Add new team members to the OWNERS file #364
OCPBUGS-41953: Add adambkaplan as approver #336
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-46925, OCPBUGS-46932, OCPBUGS-47312: x/net bump to v0.34.0 [release-4.12] #943
NO-ISSUE: [release-4.12] Backport e2e fixes #880
OCPBUGS-38610: (fix) Resolver: list CatSrc using client, instead of referring to registry-server cache (#3349) #875
OCPBUGS-42161: adds paginating lister for evaluating CRs’ upgrade fitness versus new CRDs #873
OCPBUGS-41881: [CARRY] perform operator apiService certificate validity checks directly #866
OCPBUGS-32854: bump go-jose to v2.6.3 #782
OCPBUGS-35242: Unblock CI #773
Full changelog

operator-marketplace

OCPBUGS-49426: Upgrade golang.org/x/net [release-4.12] #591
NO-ISSUE: Updating marketplace-operator images to be consistent with ART [4.12] #510
OCPBUGS-32081: update golang.org/x/net for CVE-2023-45288 #567
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

NO-JIRA: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.12 #2092
OCPBUGS-55951: Bump ovn and ovs to latest 23.06 and 3.1 respectively #2554
OCPBUGS-50502: EgressIP: Reload certificates for the grpc heatlhcheck server #2457
OCPBUGS-35876: [release-4.12] ipv6+all protocols conntrack flush #2214
OCPBUGS-29864: CVE-2022-41723: avoid quadratic complexity in HPACK decoding #2204
OCPBUGS-34273, OCPBUGS-34414: Improves service iptables efficiency on start up + ICMP error messages to pass through #2184
OCPBUGS-32990: Bump OVS #2144
OCPBUGS-33422: [release-4.12] Full implementation of KEP-1669 ProxyTerminatingEndpoints + ETP=local fix #2135
OCPBUGS-25889: [release-4.12] OVN bump to 23.06.1-112 #2154
Full changelog

telemeter

OCPBUGS-34827: fix issuer check during JWT authentication 4.12 #541
Full changelog

tests

OCPBUGS-56120: [build] Ensure Git Clone Does Not Run Privileged #29788
OCPBUGS-37799: Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token #29621
OCPBUGS-54772: Component Readiness: [Networking / ovn-kubernetes] [EgressFirewall] test regressed #29662
OCPBUGS-54147: Add/remove team members to the OWNERS file for Builds #29622
OCPBUGS-52585: Use payload pullspec for image info test #29593
OCPBUGS-41585: Removes dependency on samples operator images #29080
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github