4.12.97

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.12.97-x86_64

Qualifiers (status api): None

Tests:

Blocking jobs
- upgrade Pending (1 retry) periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Pending
- upgrade-minor Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-sdn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.12-e2e-aws-sdn-serial
- azure-ovn-upgrade-4.12-micro Pending (1 retry) periodic-ci-openshift-release-main-ci-4.12-e2e-azure-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Pending
- driver-toolkit Succeeded periodic-ci-openshift-release-main-nightly-4.12-e2e-aws-driver-toolkit
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.12-fips-payload-scan
- gcp-sdn-upgrade-4.12-micro Pending (1 retry) periodic-ci-openshift-release-main-ci-4.12-e2e-gcp-sdn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Pending
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.12-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-ipv4 Succeeded periodic-ci-openshift-release-main-nightly-4.12-e2e-metal-ipi-sdn-ipv4

Upgrades from:

Untested upgrades: 4.11.14, 4.11.15, 4.11.16, 4.11.17, 4.11.19, 4.11.20, 4.11.22, 4.11.23, 4.11.24, 4.11.25, 4.11.26, 4.11.27, 4.11.28, 4.11.29, 4.11.30, 4.11.31, 4.11.32, 4.11.33, 4.11.35, 4.11.36, 4.11.37, 4.11.38, 4.11.39, 4.11.40, 4.11.41, 4.11.42, 4.11.43, 4.11.44, 4.11.45, 4.11.46, 4.11.47, 4.11.48, 4.11.49, 4.11.50, 4.11.51, 4.11.52, 4.11.53, 4.11.54, 4.11.55, 4.11.56, 4.12.10, 4.12.11, 4.12.12, 4.12.13, 4.12.14, 4.12.15, 4.12.16, 4.12.17, 4.12.18, 4.12.20, 4.12.21, 4.12.22, 4.12.23, 4.12.24, 4.12.25, 4.12.26, 4.12.27, 4.12.28, 4.12.29, 4.12.3, 4.12.30, 4.12.31, 4.12.33, 4.12.34, 4.12.35, 4.12.36, 4.12.37, 4.12.38, 4.12.39, 4.12.4, 4.12.40, 4.12.41, 4.12.42, 4.12.43, 4.12.44, 4.12.45, 4.12.46, 4.12.47, 4.12.48, 4.12.49, 4.12.5, 4.12.50, 4.12.51, 4.12.52, 4.12.53, 4.12.54, 4.12.55, 4.12.56, 4.12.57, 4.12.58, 4.12.59, 4.12.6, 4.12.60, 4.12.61, 4.12.62, 4.12.63, 4.12.64, 4.12.65, 4.12.66, 4.12.67, 4.12.68, 4.12.69, 4.12.7, 4.12.70, 4.12.71, 4.12.72, 4.12.73, 4.12.74, 4.12.76, 4.12.77, 4.12.78, 4.12.79, 4.12.8, 4.12.80, 4.12.81, 4.12.82, 4.12.83, 4.12.84, 4.12.85, 4.12.86, 4.12.87, 4.12.88, 4.12.89, 4.12.9, 4.12.90, 4.12.91, 4.12.92, 4.12.93

Loading changelog, this may take a while ...

Changes from 4.12.75

Created: 2026-08-26 09:18:34 +0000 UTC

Image Digest: sha256:610f344ba2a621c2205f79032b10cf06865ee89d2ad8250e96a8d83b4d49f310

Components

Kubernetes 1.25.16
Red Hat Enterprise Linux CoreOS upgraded from 412.86.202503310142-0 to 412.86.202608241157-0 (diff)

Rebuilt images without code change

alibaba-cloud-controller-manager git 191c9e34 sha256:7fcc8538f83a93bb4e7a88a8e417435c76defcf431b8184414f56cc506b723d0
alibaba-cloud-csi-driver git 4d3b1125 sha256:2ea886a42cdfe61bf90a7e70b608472d56aa0e127a221b0bf3ba05fe8c610cf3
alibaba-disk-csi-driver-operator git 99bcda8d sha256:3ba866c72305abe78dcbef9609bff4cb9d09e19e761a6256f21bbc6d01627502
apiserver-network-proxy git f56c606a sha256:7dc368342a1f019716340c9a7ce5a72330b0f03a3e0bfb874787cf33b8b9ec2e
aws-cloud-controller-manager git f90fb443 sha256:3c601dcd2409d1a066fa3eb780464da1ed4a778ffab694602b0679a411d66690
aws-ebs-csi-driver git bbab20f9 sha256:6b455ffeaa1e29cfc0b898f1d73d737eac2464b5469a0ddb6d915c17890a9870
aws-pod-identity-webhook git 31917a5f sha256:b874a66872add67b0210323db60e8c4125f6ec21c19c23f1b0fe30560353443e
azure-cloud-controller-manager git 2193ccfa sha256:4d26d0a4783e57034b74ea1d125ef6bf3474e7849ec8c275f824f4a6fd07dbc1
azure-cloud-node-manager git 2193ccfa sha256:da73c0e57102e37ad2855ccac0ac5fd625cd72f446bfa02bbfb17cd998083603
azure-disk-csi-driver-operator git 988b8cc8 sha256:1e4e00c6c61ac784173107b6c7b616a62bd2c6d686973251727ef8d5d41989fd
azure-file-csi-driver git 15aade4d sha256:7291486331cf88c22eeba81fd6989fee963fc6800283a4f7bcee6fdac74d9e91
baremetal-runtimecfg git 474ed48e sha256:2809007a4491838d0751a68f92336d653e4d6596c85e821aa774673697ed0bb5
cli git d6912573 sha256:0dde6a5f48a777d312fbfd07469288053f2f9eabdc64b638c4b932eed6a6597b
cli-artifacts git d6912573 sha256:0ba8d0b61cf9fb6fb602603c59348776bf1251c1067537587acb01b0715c4272
cloud-network-config-controller git c086bed7 sha256:ccbfc8f6066c1c18da33d8eafdeda759accac31b42bcabc83e7e7a94362ffb7a
cluster-authentication-operator git 4f7f6b1a sha256:0ae23c313064fd4f2746272ef8ca52ff832051cd29b52d7555a8a1b992e33b19
cluster-autoscaler git d16352d9 sha256:a0bb51b0f2c81216eba98f739cc660790f2ad8ee4bc3dc02206a62773aa9bc5f
cluster-autoscaler-operator git 29a6e57c sha256:1510448f62efd876d8c7832ff22c226249bfb8ca26338fb46911f7baf2794345
cluster-bootstrap git 138a1cf2 sha256:83204753c5fdd0aca0310a71e04402b7f7b5721adb6e11d413f8d99cc2e5dd97
cluster-cloud-controller-manager-operator git 3b1f0843 sha256:03c6f73ce8162ddc861b57a3f286b67653e2a90621028342f45ed42bd5a6e66e
cluster-config-operator git 92c3b102 sha256:b87941f941a3e9fa1199b187b62fa341c0b8239c623490de27181398dbdb7cfe
cluster-control-plane-machine-set-operator git fb7f08a2 sha256:be05eec5d6cb861acde25f4e116d77850a8c8c649323320d634dfa97a3ff6e6b
cluster-csi-snapshot-controller-operator git f573eded sha256:1d013c8294ef154cd1efc830b7c7bb78c4daf9996003d7c9dbff5f65a401eafd
cluster-dns-operator git 09a1de9f sha256:fa333741be9fe49762469afbce3ae8cf23bce13f939d67d51e07216f8f413948
cluster-kube-cluster-api-operator git d50f7322 sha256:c300f58845568c132cfb7dc3953ddd204ca6866d4aa33fed4da391ca622536e8
cluster-kube-controller-manager-operator git c3c07beb sha256:de5a7758cba40a160982faf2553855bea24e74cd019e9e903f18e81fc3d0a2da
cluster-machine-approver git 7b08a4de sha256:cc48fdce6b9c47b97accc83b1166be90e5251175cdaa7372d9bcf327768ea57d
cluster-network-operator git 28db40f1 sha256:363b98f136ab10cd3ca6b717dcc9e292f656215ac694975bf5b039e4eb7da035
cluster-node-tuning-operator git 20966da9 sha256:f538e1dfa4065390cedb1294c6e5af2c201fd4b744feeaf5a02940b9f1dfc0d5
cluster-openshift-controller-manager-operator git ab963d8a sha256:fdb637781daa0e2c6f16697f951972bf0a049c2a430bceaa273bf6c691fa2140
cluster-platform-operators-manager git c930dc74 sha256:20035220f219992ba8f303b912ec526736b8ae6bec7cdc55e34bfa14eedad593
cluster-policy-controller git cb8862b0 sha256:d59851785900ab108cb5a4e0d7ff054b6bace7175e1e0e346cb7b86fff75eeff
cluster-update-keys git 2796e173 sha256:2d490215b593ad12495faa8dc20d28c9412a9075653bcd8b1ee810d0a89b11e9
cluster-version-operator git da2578c6 sha256:c40b41383ab554169e2644b8d4500cc61c7901ca3c0252877c865eb29c0b3d6b
configmap-reloader git e4d9170e sha256:033946d7083a07833679d2a11bbc6cbf80c0e4433b93cf37831810dd1da72a78
csi-driver-shared-resource git d054948f sha256:9726dade273d1de9df69726329418c57048e094773bed6c0736266d99f15ddc0
csi-driver-shared-resource-operator git cc297702 sha256:554133a11da88360bfde759f865486ab3bd38adc7db69c70bec6b2790756ff1c
csi-driver-shared-resource-webhook git d054948f sha256:18bf6958e542c698ae0299033c6daee5bf04187758cf0c32448f18bda79f14ba
csi-external-attacher git fac7b8fd sha256:06e0718d95aeadfe765ce943b39e86102e6ef12e53dedde86676ce7ffd8533a1
csi-external-provisioner git 3aa7c527 sha256:168a32842e97b0e99d5ca15cd97d557a6e0b0f5799a4e23608ed96caefcd6988
csi-external-resizer git 5b066ba4 sha256:8721ac1f8bb39bc599b6cde6822af942cf31a38705ffb2009af61ab4ae0baa9c
csi-external-snapshotter git 6fdb648f sha256:48b4347ae93e7ed5d8a72b2da936c6c5e5639298cf677ced89c5c2ba39c40428
csi-livenessprobe git e6545e71 sha256:9b80bb05aa7ce8206ababc318d09f6c7f9552cb239cfbcbe0b736c276d817ed1
csi-node-driver-registrar git c316b896 sha256:ffc38e5b6aaec526f1cbfbd5142aa03f3e86446082893564aff2ceb57e230276
csi-snapshot-controller git 6fdb648f sha256:03a108df341fb491446035d62f0f595c3567ed5b7afcd2a493d9fbc1744d8d90
csi-snapshot-validation-webhook git 6fdb648f sha256:af071bce4a5ec8c34024fe17f1772bba9adcbada13443871ffd98e272eb88665
deployer git d6912573 sha256:30e81802c835e09d007896a521ce27c6292fdfcca5da71d63e26bc2620029510
docker-builder git e3554521 sha256:4fd1cbb03f9c95202de8f1bd05cb4bee589f1adf34e274f96e2a0b27e48b09fc
egress-router-cni git a92e4157 sha256:21fcfa5f8116fe83aae757f5a7f89065fa2fb0b5f6f434afdb4319e30806bebc
etcd git bb82e891 sha256:38e56c452f2e5334b8cdb30ae0b3b7e4caa2dd4870f64f6f2838443fabc576fb
gcp-cloud-controller-manager git 8a84952e sha256:3663b0ab1a167bf80dd3ab324538f53848b0cd74469417d5761596ebdf2f524e
gcp-pd-csi-driver git 5dcfd675 sha256:2762db2ad1b2fac13a789559766595d381a18afe896ad8f257d66499d3208b6a
gcp-pd-csi-driver-operator git 30e97ba5 sha256:ee99db78c6c19af1b5ffccc8ce03fd95975fbc3128fc149a658049b2cff70e2f
ibm-cloud-controller-manager git 8bd0ea8f sha256:419b34b8934454438ca12fe18844f144e8d9671a86ba9a076d3569d2917d7f09
insights-operator git 6b543885 sha256:e9fa7b4a3d17853c5d2fc214f02c7356d45b84a16cc3732c0d2d34ccfa68d499
ironic-static-ip-manager git a8ade8fe sha256:0f6b6f54794977b99b056299fdc0b6cc2e3cb6617f3d714fdab2d79ac52a90bf
k8s-prometheus-adapter git 36c06694 sha256:4d90d0a6f6d35cfba67ce99d66409aa2eaa8e45ca02833a8930a39c8a7b40ab8
keepalived-ipfailover git 7e8a0105 sha256:eefe1df7bd9688ca35e0fe105fb21bc66dcd3db2e781e5865d93469bc1e20727
kube-rbac-proxy git c69fae78 sha256:43e60f2754bd3946e4c0c60da1f1e5eba03049985c4bc14696311b400fb27733
kube-state-metrics git 748f7131 sha256:ab6909f863746dd5d60b743122799fc863bcf5057c9a9444ca3d8b80389c9424
kuryr-cni git 8fd2f8b0 sha256:dcb74e9780640d2a0d7ff51cb3649ebd1f867ec0c52cd719dbb90624f9a56573
kuryr-controller git 8fd2f8b0 sha256:8c5f04f65f249a604b1f01725c6dc28f3a6a42c91c63c7d70a6a0771a7cef0dd
libvirt-machine-controllers git a2882f7a sha256:cb7bde8621b9f746636691e22c416ca23fc5109cfaefe6deb5ff826b67bce412
machine-os-content sha256:03889b26d1b0d4c68227c866889f06caf73db420e727b89bfe9b22108106e910
multus-cni git 07d8af54 sha256:3dfb5d6c40ad2c911e5e2ba6af0f78920fea6e23981a269b3ee490032ea7f741
multus-networkpolicy git 644461f2 sha256:54d32c174a45503d4d99cafd6776ff8e6a85ddf27769724afe84540b50b44442
multus-whereabouts-ipam-cni git 5993d022 sha256:a9e949e2d0cf93707a4e9f0d9458b6ba1e4216bb66a44dec48dcc955992adfc5
must-gather git a4db96b0 sha256:833e544b135ee0d6ea4b794e75e68829fdfc4d3417a076e9c800a863c1e99bdb
network-interface-bond-cni git 30386d6b sha256:5f16a1e923ef8f430941402d5d4d9c1d709b0f1910171241c857ef9d304fa823
network-tools git c76613c7 sha256:1614d81ed149dde2ff2ec60a73a49aa0c5c462fe381ca7e0dbf54f4a667e2f24
oauth-apiserver git 1053f142 sha256:8a9d2b55100a677f172e652b7c4a417d0759426a8ec3397ac56c3983bb9d5d2c
oauth-server git 0c434f42 sha256:5b553d2584ff66c858eb994a8f2b3767c4f503d430d5d852a2ff3a0d47bd9e2b
oc-mirror git 072aeade sha256:2e2b2a5666d40ffbefa26d4ca2aaed2755eec3deec64543c751a659084cc2930
olm-rukpak git bb06dd01 sha256:6246e533413df422ed73dcd287dd821f8f1005958c21bad2ab4e5c625fa4a339
openshift-state-metrics git 3d5dc18d sha256:5c1c7e54b316bcc37b873828bd9a1963b7061699e96ef3e5a8ac14619de6c0b1
openstack-machine-api-provider git 05657663 sha256:37641fbea02292bc0e350b7321253158585ccce10b8c29fa8178337f43dddb81
openstack-machine-controllers git f13e381e sha256:8c4f92510d2248f5c091ca33d6633b19966460d1877bccec895088e1fa70bd2c
operator-marketplace git a3aeac97 sha256:be031c3f354dca7e811b472617156bf3f501a89c7c5a3d5efb4ed617c48e4ddc
ovirt-csi-driver git 87ab3789 sha256:a2e559ad8e26d39db203c1f9d97b686cd44dd498067bce37e0164b6d7d49cd91
ovirt-machine-controllers git 03e8cb50 sha256:9970b4861430869e9c79fa4c44fb3dd7c7fd32c1fe927a87e0cc37935ea3ba6f
powervs-block-csi-driver git b78e8e78 sha256:e79783a8ef265f361836835f59cd8c50dd29e08353b0d9013de8e6f1f701180d
powervs-cloud-controller-manager git 4fb4334c sha256:4cbfc0d50ad48580414d952e7580331dc2f1f3c3e41692ac0d8fc0138879bf95
prom-label-proxy git b1907888 sha256:71ca2b57160a6ed5264b7f29e7d61f82dfb81274d32803b829e766a9bafd6043
prometheus-config-reloader git d1e399d5 sha256:29aef8203bff0fd8d465a108d2916b3cbde8d517a0eab7943f6d72f91c931b49
prometheus-node-exporter git 99077a3c sha256:e6ce8b328065cca7c89a077263d9413c366aa044882e570f1f1ecdf53efc4745
prometheus-operator git d1e399d5 sha256:eda345e78a2f6d5b740aaf7ae34858b4a1e5d06586f2b03f0ec5d2412e3d59a2
prometheus-operator-admission-webhook git d1e399d5 sha256:c16e0c6e77cea48d0f271aec08f0cd9281a6291e9469b522f5e3754f1b95853f
rhel-coreos-8 sha256:5995cf76337c1e67de91ae0f5c52465a1a3b6cee3c46a3baf358d7f1cfbe5a2e
rhel-coreos-8-extensions sha256:ec9d970d9911e53b2b3e0ead85a084b15a4f9595170ec53bf1657905ebaad7ae
telemeter git c9592ded sha256:887280f3439919722289a5041d2312dd51b48b42ba3227a739f20c65e9181382
tools git d6912573 sha256:d866c6752d2ea0d5cc1a69ac805e0121908fb325d0f91d9db69786ce91208a03

agent-installer-api-server

OCPBUGS-78114: [release-4.12] NO-JIRA: hermetic 4.12 #9956
OCPBUGS-67386: Bump logrus from 1.9.0 to 19.3 #8768
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-67388: Bump logrus v1.9.0 to v1.9.3 #1465
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-node-agent

OCPBUGS-67390: Bump logrus v1.9.0 to v1.9.3 #1287
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

alibaba-machine-controllers

Updating ose-alibaba-machine-controllers images to be consistent with ART #35
Full changelog

aws-cluster-api-controllers

OCPBUGS-78231: [release-4.12] hermetic 4.12 #595
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-67399: Updated logrus to v1.8.3 #315
Full changelog

aws-machine-controllers

OCPBUGS-78268: hermetic 4.12 #176
Full changelog

azure-cluster-api-controllers

OCPBUGS-78180: [release-4.12] Hermetic 4.12 #368
Full changelog

azure-disk-csi-driver

OCPBUGS-56067: tech debt: rework vendor patches #106
Full changelog

azure-file-csi-driver-operator

OCPBUGS-67404: Bump github.com/sirupsen/logrus to v1.8.3 #116
Full changelog

azure-machine-controllers

OCPBUGS-78266: hermetic 4.12 #188
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-83750: Azure UPI ARM template: use storageAccountId #10511
OCPBUGS-78352: terraform/providers/google: Fixing inconsistencies with the service account creation #10385
OCPBUGS-66250: Replace terraform-provider-google with Openshift fork #10144
OCPBUGS-62820: Release 4.12 bump terraform provider azurerm #10002
OCPBUGS-55035: IBMCloud: Move to IBM TF openshift fork #9670
Full changelog

baremetal-machine-controllers

OCPBUGS-78103: [release-4.12] fix vendor/ for hermetic migration #247
Full changelog

baremetal-operator

OCPBUGS-53335: CVE-2025-29781 ose-baremetal-operator-container: Bare Metal Operator (BMO) can expose any secret from other namespaces via BMCEventSubscription CRD [openshift-4.12.z] #412
Full changelog

cloud-credential-operator

OCPBUGS-53420: github.com/golang/glog v1.2.4 #847
Full changelog

cluster-baremetal-operator

OCPBUGS-77451: Bump github.com/go-errors/errors to v1.5.1 #566
Full changelog

cluster-capi-controllers

OCPBUGS-86891: update CI build root and Dockerfile tags w.r.t ART 4.12 streams #299
OCPBUGS-77976: fix vendor for hermetic #267
Full changelog

cluster-capi-operator

NO-JIRA: Allow sustaining engineering to self serve dependency updates #564
Full changelog

cluster-etcd-operator

OCPBUGS-67421: Update logrus to 1.9.3 to address CVE-2025-65637 #1550
OCPBUGS-53508: fix CVE-2025-30204 #1416
Full changelog

cluster-image-registry-operator

OCPBUGS-67422: Bump logrus to 1.8.3 #1292
OCPBUGS-53868: Bump github.com/golang-jwt/jwt #1236
OCPBUGS-51594: bump golang.org/x/oauth2 #1223
Full changelog

cluster-ingress-operator

OCPBUGS-86709: Add configuration override for X-SSL strip #1494
Full changelog

cluster-kube-apiserver-operator

NO-JIRA: refactor: Updating go builder in the CI, Dockerfile and go.mod to be consistent with ART 4.12 #2175
OCPBUGS-67424: CVE-2025-65637 openshift4/ose-cluster-kube-apiserver-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.12.z] #2048
Full changelog

cluster-kube-scheduler-operator

CNTRLPLANE-2843: chore: update OWNERS #628
Full changelog

cluster-kube-storage-version-migrator-operator

NO-JIRA: Reconciling the ART and CI go tool chain versions #173
OCPBUGS-67429: Bump github.com/sirupsen/logrus to v1.8.3 #143
Full changelog

cluster-monitoring-operator

OCPBUGS-76642: test: remove image registry e2e tests #2816
OCPBUGS-77403: test/e2e: improve prometheus remote-write test #2819
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-76594: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.12] #660
Full changelog

cluster-samples-operator

OCPBUGS-63521: references to github.com/sclorg/django-ex.git now also refer to the branch #663
OCPBUGS-54913: add rhdmalone to owners #629
Full changelog

cluster-storage-operator

OCPBUGS-67444: Bump logrus to v1.8.3 #657
Full changelog

console

Fix for OCPBUGS-81593: CVE-2026-4800 #16570
OCPBUGS-88398, OCPBUGS-88416: Bump Axios to fix CVE-2026-44486. Requires a Patch of axios 0.33.0 types to be compatible with old version of TS #16793
OCPBUGS-79430: CVE-2026-29063 Bump immutable #16331
ART-18753: pin fsevents to latest #16482
NO-JIRA: enable multi-architecture yarn builds #16422
NO-JIRA: Updating openshift-enterprise-console-container image to be consistent with ART for 4.12 #12539
CONSOLE-5011: migrate to yarn berry #16084
NO-JIRA: Bump builder image to v29 #15988
OCPBUGS-74435: Bump lodash to latest #15973
OCPBUGS-44155: bump dompurify to latest #15595
OCPBUGS-57101: Add all files to vendor regardless of gitignore #15137
OCPBUGS-55210: Show Observe section without PROMETHEUS and MONITORING flags #14986
Full changelog

console-operator

Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.12 #1137
OCPBUGS-77996: [release-4.12] NO-JIRA: update go mod dependency for konflux #1119
Full changelog

container-networking-plugins

ART-13080: Fix Hermeto build issues #198
Full changelog

coredns

OCPBUGS-59711: Bump github.com/golang/glog to v1.2.4 #151
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-79763: Apply code mitigations for CVE-2026-33186 #401
OCPBUGS-67448: CVE-2025-65637 #365
OCPBUGS-58889: CARRY: don’t ignore json files #345
Full changelog

csi-driver-manila-operator

OCPBUGS-67449: Bump logrus #255
Full changelog

csi-driver-nfs

OCPBUGS-84927: Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.64.1-sec.1 to avoid go version bump and fix CVE-2026-33186 #186
Full changelog

docker-registry

OCPBUGS-53652: bump jwt and oauth dependencies #442
Full changelog

driver-toolkit

OCPBUGS-63597: Remove realtime kernel from 4.12.z #176
Full changelog

gcp-cluster-api-controllers

OCPBUGS-78284: [release-4.12] hermetic migration 4.12 #278
OCPBUGS-78284: [release-4.12] hermetic migration 4.12 #271
Full changelog

gcp-machine-controllers

OCPBUGS-83657: Address CVE-2026-33186 #174
OCPBUGS-78183: hermetic 4.12 #143
Full changelog

haproxy-router

OCPBUGS-86709: Strip X-SSL-* headers for plain HTTP #809
OCPBUGS-74943: Adding escapeHAProxySingleQuotes for sanitize [release-4.12] #784
OCPBUGS-78110: [release-4.12] hermetic 4.12 #744
Full changelog

hyperkube, pod

OCPBUGS-77661: Skip E2e: attach on previously attached volumes should work #2649
OCPBUGS-77469: hermetic 4.12 #2652
OCPBUGS-67374, OCPBUGS-67472: CVE-2025-65637 - bump github.com/sirupsen/logrus to v1.9.3 [4.12] #2596
OCPBUGS-78226: UPSTREAM: 133262: Remove permafailing tests using an expired GCP project #2625
Full changelog

hypershift

OCPBUGS-77768: fix vendor for hermetic 4.12 #7823
Updating ose-hypershift-container image to be consistent with ART for 4.12 #6976
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-79756: Bump google.golang.org/grpc to v1.79.3 #158
OCPBUGS-77214: [release-4.12] standardize build paths #128
OCPBUGS-58873: bump github.com/golang/glog to v1.2.4 #111
OCPBUGS-56067: tech debt: rework vendor patches #95
OCPBUGS-53908: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #88
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-67476, OCPBUGS-67477: bump github.com/sirupsen/logrus to v1.8.3 #163
OCPBUGS-60058: [IBM VPC] set offlineExpansion to false in e2e test manifest #153
Full changelog

ibm-vpc-node-label-updater

OCPBUGS-56067: tech debt: rework vendor patches #52
OCPBUGS-53540: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #48
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-67292: [release-4.12] Fix incomplete vendor/ #134
Full changelog

ibmcloud-machine-controllers

OCPBUGS-78276: hermetic 4.12 #79
Full changelog

ironic

OCPBUGS-69787: Bump eventlet version to 0.30.2-5 #767
Full changelog

ironic-agent

OCPBUGS-96903: Replace individual package removal with a single rpm -e loop #280
OCPBUGS-69778: adding eventlet 0.30.2-5 #236
Full changelog

ironic-machine-os-downloader

OCPBUGS-87168: CI Build root image tag and go version in go.mod sync with ART 4.12 #118
Full changelog

kube-proxy, sdn

OCPBUGS-56130: Handle openshift-host-network namespace as special when it modifies #657
Full changelog

kube-storage-version-migrator

NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-11). #231
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-95078: OWNERS: Update component to Cloud Compute / KubeVirt Provider #76
Full changelog

kubevirt-csi-driver

OCPBUGS-83660: Bump google.golang.org/grpc to v1.79.3 #110
Full changelog

machine-api-operator

OCPBUGS-78271: hermetic 4.12 #1470
Full changelog

machine-config-operator

OCPBUGS-77981: hermetic 4.12 #5734
OCPBUGS-58874: [release-4.12] Bump golang/glog to fix CVE-2024-45339 #5174
Full changelog

machine-image-customization-controller

OCPBUGS-67478: bumped logrus to v1.9.3 #161
Full changelog

machine-os-images

OCPBUGS-87882: Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs #106
Full changelog

multus-admission-controller

OCPBUGS-60292: Bump github.com/golang/glog to v1.2.4 #107
OCPBUGS-60850: Update owners #109
Full changelog

multus-route-override-cni

OCPBUGS-78160: hermetic 4.12 #64
Full changelog

network-metrics-daemon

-sOCPBUGS-59700:Bump github.com/golang/glog to v1.2.4 (#125) #125
Replace e2e test image (#134) #134
swtich golint install method (#133) #133
Correct 4.16 owners file (#131) #131
Full changelog

nutanix-machine-controllers

OCPBUGS-78158: hermetic 4.12 #132
OCPBUGS-51849: Fixing CVE-2025-22868 #121
OCPBUGS-47263: fixing CVE-2024-45338 #114
Full changelog

openshift-apiserver

OCPBUGS-90518: Address CVE-2026-35469 #663
OCPBUGS-76481: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.12] #614
OCPBUGS-79381: Fix image reference in TestImageStreamImportQuayIO #623
Full changelog

openshift-controller-manager

OCPBUGS-58296: Inconsistencies in dependencies are fixed #410
OCPBUGS-58157: Set node-pullsecrets volume to read-only to protect image pull credentials #403
OCPBUGS-57171: Empty proxy variables are causing issues during the build #389
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-67502: Bump logrus #191
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-86254: Drop github.com/distribution/distribution in go.mod #1312
OCPBUGS-61471: [release-4.12] Add NetworkPolicy as a supported kind #1054
OCPBUGS-61392: [4.12] e2e stability fixes #1087
Full changelog

ovirt-csi-driver-operator

OCPBUGS-67542: Bump github.com/sirupsen/logrus to v1.8.3 #148
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

CORENET-6055, OCPBUGS-84636: [release-4.12] Dockerfile: Unpin OVN and consume the latest from FDP #3075
OCPBUGS-59935: Dockerfile: Remove ovs version pinning #2698
NO-JIRA: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.12 #2092
OCPBUGS-55951: Bump ovn and ovs to latest 23.06 and 3.1 respectively #2554
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-67511: Fix CVE-2025-65637 by bumping logrus to v1.8.3 #102
Full changelog

powervs-machine-controllers

OCPBUGS-78043: hermetic 4.12 #138
OCPBUGS-54012: Fix for CVE-2025-30204 & CVE-2024-51744 in github.com/golang-jwt/jwt/v4 in release-4.12 #123
Full changelog

prometheus

OCPBUGS-88580: remote: validate snappy decoded length before allocation in read endpoint #356
OCPBUGS-86876: Bump google.golang.org/grpc #325
OCPBUGS-67512: CVE-2025-65637 Update sirupsen/logrus to 1.9.3 #291
Full changelog

prometheus-alertmanager

OCPBUGS-77906: Include go-verify-deps expected files in gitignore #124
Full changelog

route-controller-manager

OCPBUGS-86881: [release-4.12] bump google.golang.org/grpc to v1.64.1-sec.1 #97
Full changelog

service-ca-operator

NO-JIRA: Updating ose-service-ca-operator-container image to be consistent with ART for 4.12 #360
Full changelog

tests

OCPBUGS-56120: [build] Ensure Git Clone Does Not Run Privileged #29788
OCPBUGS-37799: Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token #29621
OCPBUGS-54772: Component Readiness: [Networking / ovn-kubernetes] [EgressFirewall] test regressed #29662
OCPBUGS-54147: Add/remove team members to the OWNERS file for Builds #29622
Full changelog

thanos

OCPBUGS-67525: CVE-2025-65637 Update sirupsen/logrus to 1.9.3 #169
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-78036: hermetic migration 4.12 #111
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-78026: hermetic migration 4.12 #90
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-67529: CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.8.3 #162
Full changelog

vsphere-csi-driver-operator

OCPBUGS-67528, OCPBUGS-67534: CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.8.3 #327
Full changelog

vsphere-problem-detector

OCPBUGS-67540: bump github.com/sirupsen/logrus to v1.9.3 #204
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github