Back to index

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.13.25-x86_64

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
  • upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
• Informing jobs
  • aws-sdn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.13-e2e-aws-sdn-serial
  • aws-sdn-upgrade-4.13-micro Succeeded periodic-ci-openshift-release-master-nightly-4.13-e2e-aws-sdn-upgrade
  • azure-ovn-upgrade-4.13-micro Succeeded periodic-ci-openshift-release-master-ci-4.13-e2e-azure-ovn-upgrade
  • gcp-ovn-rt-upgrade-4.13-minor Succeeded periodic-ci-openshift-release-master-ci-4.13-upgrade-from-stable-4.12-e2e-gcp-ovn-rt-upgrade
  • metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.13-e2e-metal-ipi-ovn-ipv6
  • metal-ipi-sdn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.13-e2e-metal-ipi-sdn-bm

Upgrades from:

• 4.13.24 (changes) - S S S S
• 4.13.23 (changes) - Success
• 4.13.22 (changes) - Success
• 4.13.17 - Success
• 4.13.12 (changes) - Success
• 4.13.9 (changes) - Success
• 4.13.2 (changes) - Success
• 4.13.1 (changes) - Success
• 4.13.0 (changes) - Success
• 4.12.45 (changes) - Success
• 4.12.44 (changes) - S S S
• 4.12.43 (changes) - Success
• 4.12.39 (changes) - Success
• 4.12.34 (changes) - Success
• 4.12.29 (changes) - Success
• 4.12.18 (changes) - Success
• 4.12.17 (changes) - Failed
• 4.12.16 (changes) - Failed

Upgrades to:

• 4.14.33 (changes) - Failed
• 4.14.15 (changes) - Success
• 4.14.13 (changes) - Success
• 4.14.11 (changes) - Success
• 4.14.10 (changes) - Success
• 4.14.8 (changes) - Success
• 4.14.7 (changes) - Success
• 4.14.6 (changes) - F S S F
• 4.14.5 (changes) - Failed
• 4.13.39 (changes) - Failed
• 4.13.30 (changes) - Success
• 4.13.29 (changes) - Failed
• 4.13.28 (changes) - Success
• 4.13.27 (changes) - Success
• 4.13.26 (changes) - S S S F

---

Loading changelog, this may take a while ...

Changes from 4.13.17

Created: 2023-11-30 09:59:36 +0000 UTC

Image Digest: sha256:480f2026c07b0f2e19c3fc60a44e4a7147ab821474641952f077573d05747855

Release 4.13.25 was created from registry.ci.openshift.org/ocp/release:4.13.0-0.nightly-2023-11-28-225149

Components

• Kubernetes 1.26.9
• Red Hat Enterprise Linux CoreOS upgraded from 413.92.202310141129-0 to 413.92.202311281619-0 (diff)

Rebuilt images without code change

• agent-installer-api-server git 06189bcd sha256:65051167c011a18856a71f7b6b01558a202e6021dd729ef66bff28c9a69c7586
• agent-installer-csr-approver git edf25423 sha256:9272145554a78ea255cd9a7dbbaaee765ce50e5f7441cfb5882a06de0e228b25
• agent-installer-node-agent git 35357f57 sha256:202bf5de688a2d6c4541147f05edad0f4fedbb5e18b7f4a0feee16735968e6ca
• agent-installer-orchestrator git edf25423 sha256:cb498ce24484e8ab0acf528157bfb67f6e03a04c2159256698cc9836541b3fbe
• alibaba-cloud-controller-manager git b5200baa sha256:d0becc92c62ac78052e3e0ade2e57d581c7220b9a039f16f57cf60508a6e7e35
• alibaba-machine-controllers git 4c0f96a6 sha256:78678818f304a8061712a3c24e9cc89febf85229a12c36b68fbcb423f3df4a77
• aws-machine-controllers git ba3b3a31 sha256:d0b08d3d139e88884c9970e88b8a69575e1f3d42f295328875187eaa2e05abcd
• cluster-bootstrap git ee908b6b sha256:16f18abaefc553282c4b94202f55e36e35b57e5109f4a92ad7074e1fbca7a94b
• cluster-cloud-controller-manager-operator git ef4594ef sha256:de8f6fa39e8cc735902e7836c4faf8fa2fb5a5aa1e66595ef51f862af0d1b2a0
• cluster-update-keys git 5b725937 sha256:d794e33630f85b156d3197a55ac4c204cdde802574857face3cf55b02beda043
• configmap-reloader git 9adad592 sha256:90ef55e8f872ec3441b25fc3caac24c54bcda8792e68743d52619420cfbcdc92
• csi-driver-manila-operator git b1295cd1 sha256:e0389a524a61c03464861e4e4024d67a97ddeff0bf153b27f26f39a5190036e3
• csi-driver-nfs git 2b914c21 sha256:7a7b1d3d713c5273c21f2fcdad756b8e196739e7c28b6e6f67b86d2344404df1
• docker-registry git 47a15ac8 sha256:c42de131f98f7cac0d23a3475755b7383fb0f9f3580c55a21c5e5e81203572cf
• driver-toolkit git d719bdcf sha256:882a499930f037a6f18232d11c97a54eea34b0d8969b72174a575a66b5633045
• egress-router-cni git 756e3845 sha256:66a9eec784b405740846c9198513dbb561d9c183061981a60f20d5933289a364
• gcp-cloud-controller-manager git efaf4dc6 sha256:cce88563f8175998eed5ec52b93c0499ffb51e34d9d7e007e8c53f555928a5fd
• ibm-cloud-controller-manager git 59edd923 sha256:e934fac663727ac396586fb2a654829b73ffc8f20abd3d5dd3fe2a0b3405c1a6
• ibmcloud-cluster-api-controllers git d221afa4 sha256:3f7cc2d455c83efbef4e16c035becaf727e3040bc3568d88fe96bfeaf5031f95
• ibmcloud-machine-controllers git bb253a0c sha256:465dfa72378c829ad99c91b032e94112dec8eea6f1246573c83d67861fc948b9
• ironic-agent git 508e6124 sha256:ba051631a9f0e9085f1ab08f859fbe1866506fe119c7e28df58972e8b6c74674
• ironic-machine-os-downloader git ce291779 sha256:6123e24ac7437ac70783031582fcd3b1133ec0e91257e015a857d374d9e8c7a9
• ironic-static-ip-manager git 4536724a sha256:92858e766904207786d4135ffe1e526afba14f4ba923d4427980a43cc41f83eb
• keepalived-ipfailover git 04659348 sha256:24a06f446f6dd9d9de46d04ef6eddd69776c2aa97dcae561f01c4f2377be02ac
• kube-storage-version-migrator git bad104d1 sha256:21abc54c13389d0359cd1c2e1429e86de3270b57b283e2f1231d50a7ae9873a9
• kubevirt-cloud-controller-manager git ee2033ec sha256:f5e59cd0a3bfd970419b55eb061fb8266e612f8ac0a34b938f781130b22e5aad
• kubevirt-csi-driver git efa0b943 sha256:e4cc1c83fea2bcee27e015d5ff9d39c852b29f995f43d685370be3694d7e6f5a
• kuryr-cni git 36754b7b sha256:48e8b642930ac511bf932143c75d300a1eb9edde35468e926b331e3561b00bf7
• kuryr-controller git 36754b7b sha256:91d831dcc7595a354f01350f6aa35c25491029e5553c45e14f7cafbde6790c6a
• libvirt-machine-controllers git d4b7a8ab sha256:5770427de31cc5456bbbaf52317501f206257c2cf10dabac656971239cc07ccf
• machine-os-content sha256:0ceff742d0c7d84ccd7e1b8cc67f0d9094b9aa8f4a0a19412374adcb00b15efd
• machine-os-images git b14856ff sha256:5c7cd4106b80271422aaaa41cbf3f61a5aa1100eb81cc785940e1d18851f9e10
• multus-route-override-cni git ca3bbec5 sha256:9edd1ea5e36fdabb17350e25987c8570e1bb80619d9df73e7ddabc7e9948e1e3
• multus-whereabouts-ipam-cni git 7ea40205 sha256:5c304ef02453837804b548be3862c1f7ff9260e97d792ba06dec6e81d51d0e62
• must-gather git 288ef2fc sha256:a5de1a6bd48f8056a645a252f280773cfb7d05a90b800fd2f28e3702687d5616
• network-interface-bond-cni git 84bda2af sha256:310f7a914d837b38a47f8fbe1abc2d8deef143c240592c6dbec30f583f327a65
• network-tools git 073feda1 sha256:74d8652cbf3e961a088788d63b781d7682621b5775b1a1c3ac7afb6fd8195a07
• nutanix-cloud-controller-manager git 4d1c58e2 sha256:ef97bcf81b035d43371a365dc7ec50d0284480a0d82b2e851a2a3222cfaf5e82
• nutanix-machine-controllers git be43191e sha256:3b581bbecac1ae3a5d56f2f25defe5c7a09af15658bc32f4e991523fcbdd09c2
• oauth-apiserver git 41c2dfea sha256:de4a7f833a14c78820678e355af692bd30721f8ca4cd5717a87aebec94d01c8f
• oauth-proxy git 44af5a3a sha256:4adf456a8ad216384b98299b0de7d5f0cd3356acbb7f785a9d13d2206d15faa9
• openshift-apiserver git 0b827682 sha256:ef619aa61424418c9c76e40846ca963daad260be760697991b7f611a14d39b90
• openshift-controller-manager git 385057e5 sha256:6e162477e5c663f77f78c687c0f1b95423630e30a6811b7cdda259506ae82dfc
• openstack-machine-api-provider git 7bce9d67 sha256:b943df04733a6a621940f85451994bc0a0ecc376dcde5b821633b04d345193af
• ovirt-machine-controllers git 22d89b3f sha256:8e6d776bcbfb52e811d93530dce5d94b5f4e97b67368645a7f4adbf60a47b936
• prom-label-proxy git b501d5e2 sha256:557a54cb7a270f1337b4a8dc582a3a2bfe12bf0294ab1ad0f86978875c605bb8
• rhel-coreos sha256:b24793ebd965f259432d8e411608f44e74648423fb55b7dbe845d2b8e08f43d0
• rhel-coreos-extensions sha256:8157254df31beda8c2ded6f2c99546fe34c328d8997af9fb1e1be27675aab371
• route-controller-manager git 6667a6cb sha256:7e63aa59704c1f16365a7457cf88d8da6db7c32aa11a1702e2bdf104ba2c656a
• service-ca-operator git 5984aac1 sha256:3387ecf963d39147d6c949f41051f29057a2d66c93009e2a0f0f0d50a4df1465

alibaba-cloud-csi-driver

• OCPBUGS-21329: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #37
• Full changelog

alibaba-disk-csi-driver-operator

• OCPBUGS-21428: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #65
• Full changelog

aws-cloud-controller-manager

• OCPBUGS-20738: Update golang.org/x/net to v0.17.0 #54
• Full changelog

aws-cluster-api-controllers

• OCPBUGS-20836: bump golang.org/x/net to v0.17.0 #482
• Full changelog

aws-ebs-csi-driver

• OCPBUGS-20939: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #240
• Full changelog

aws-ebs-csi-driver-operator

• OCPBUGS-21034: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #281
• Full changelog

aws-pod-identity-webhook

• NO-ISSUE: Sync OWNERS with team members #177
• snyk: exclude vendor/ #172
• Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

• OCPBUGS-21419: Bump golang.org/x/net to v0.18.0 #94
• Full changelog

azure-cluster-api-controllers

• OCPBUGS-21503: bump golang.org/x/net to v0.17.0 #288
• Full changelog

azure-disk-csi-driver

• OCPBUGS-23216: Update to v1.26.7 #63
• OCPBUGS-20688: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #55
• Full changelog

azure-disk-csi-driver-operator

• OCPBUGS-20766: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #102
• Full changelog

azure-file-csi-driver

• OCPBUGS-20862: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #38
• Full changelog

azure-file-csi-driver-operator

• OCPBUGS-20964: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #77
• Full changelog

azure-machine-controllers

• OCPBUGS-20758: Bump x/net package to v0.18.0 #83
• Full changelog

baremetal-installer, installer, installer-artifacts

• OCPBUGS-23464: Add KMS encryption keys if provided #7746
• OCPBUGS-23141: Specify google cloud CLI to version 447.0.0 #7706
• OCPBUGS-22939: azure: validation: validate defaultMachinePlatform #7679
• OCPBUGS-14551: [vSphere] Upi installation failed due to VMs for master and worker node creation failed #7229
• OCPBUGS-19307: Implement workaround to allow SNO installations for OKD/FCOS #7480
• Full changelog

baremetal-machine-controllers

• OCPBUGS-21701: Uplift x/net to v0.17.0 #199
• Full changelog

baremetal-operator

• OCPBUGS-23504: hack for deploying V6-only clusters from dualstack hubs #321
• OCPBUGS-21167: Uplift x/net to v0.17.0 #309
• Full changelog

baremetal-runtimecfg

• OCPBUGS-22207: deps: upgrade x/sys #282
• Full changelog

cli, cli-artifacts, deployer, tools

• AUTH-443: Add OAuth2 Authorization Code Grant Flow for login #1599
• OCPBUGS-22815: regeneratemco: explicitly check for PlatformStatus field #1593
• Full changelog

cloud-credential-operator

• OCPBUGS-21367: Upgrade golang/x/net for CVE-2023-39325 #623
• snyk: exclude vendor/ #616
• Full changelog

cloud-network-config-controller

• OCPBUGS-22299: Azure: skip backend pool if attached to an outbound rule #126
• Full changelog

cluster-authentication-operator

• AUTH-443: Add openshift-cli-client OAuth Client #641
• OCPBUGS-22210: increase timeout for probes #638
• Full changelog

cluster-autoscaler

• OCPBUGS-23272: Rebase 4.13 branch onto cluster autoscaler 1.26.4 #268
• Full changelog

cluster-autoscaler-operator

• OCPBUGS-20770: Bump x/net package to v0.18.0 #299
• Full changelog

cluster-baremetal-operator

• OCPBUGS-23504: hack for deploying V6-only clusters from dualstack hubs #391
• OCPBUGS-23444: Update the deprecated field APIServerInternalIP to APIServerInternalIPs #385
• OCPBUGS-20867: Uplift x/net to v0.17.0 #370
• Full changelog

cluster-capi-controllers

• OCPBUGS-21531: bump golang.org/x/net to v0.17.0 #185
• Full changelog

cluster-capi-operator

• OCPBUGS-21082: bump golang.org/x/net to v0.17.0 #137
• Full changelog

cluster-config-operator

• : OCPBUGS-21269: bump library-go to include switch to HTTP/1.1 #372
• Full changelog

cluster-control-plane-machine-set-operator

• OCPBUGS-21364: Bump golang.org/x/net to v0.17.0 #259
• Full changelog

cluster-csi-snapshot-controller-operator

• OCPBUGS-21461: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #168
• Full changelog

cluster-dns-operator

• OCPBUGS-21534: Bump golang.org/x/net/http2 to v0.17.0 for CVE-2023-39325 in cluster-dns-operator #390
• Full changelog

cluster-etcd-operator

• Revert “[release-4.13] OCPBUGS-23044: remove revision stability check from bootstrap complet…” #1166
• OCPBUGS-22783: relax readiness to local serializable requests #1144
• OCPBUGS-23044: remove revision stability check from bootstrap complet… #1151
• OCPBUGS-21155: fixing CVE-2023-39325 by updating dependencies #1143
• OCPBUGS-20488: prioritize podman pull in etcdctl dl #1136
• Full changelog

cluster-image-registry-operator

• OCPBUGS-22126: increase storage account key cache expiration #940
• OCPBUGS-20698: mitigate effects of rapid reset #946
• Full changelog

cluster-ingress-operator

• OCPBUGS-20781: Bump golang.org/x/net for CVE-2023-44487 #987
• OCPBUGS-22402: test/e2e: Don’t use openshift/origin-node #991
• Full changelog

cluster-kube-apiserver-operator

• : OCPBUGS-20880: bump library-go to include switch to HTTP/1.1 #1573
• Full changelog

cluster-kube-cluster-api-operator

• OCPBUGS-20981: bump golang.org/x/net to v0.17.0 #28
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-21103: Drop flags removed in k8s 1.26 [4.13] #766
• OCPBUGS-21078: Bump deps to address CVE-2023-44487 [4.13] #758
• Full changelog

cluster-kube-scheduler-operator

• OCPBUGS-21811: Bump deps to address CVE-2023-44487 #502
• Full changelog

cluster-kube-storage-version-migrator-operator

• : OCPBUGS-21355: bump library-go to include switch to HTTP/1.1 #97
• Full changelog

cluster-machine-approver

• OCPBUGS-21447: Bump x/net package to v0.18.0 #213
• OCPBUGS-23368: Filter non node CSRs in metrics #210
• Full changelog

cluster-monitoring-operator

• OCPBUGS-21457: Set the new –disable-http2 flag for prometheus-adapter to disable HTTP2 #2146
• OCPBUGS-22920: jsonnet: pin commits #2144
• OCPBUGS-22842: [release-4.13] add RHACS telemetry metrics #2139
• OCPBUGS-22308: fix: force HTTP/1.1 connections #2134
• OCPBUGS-21250: upgrade golang.org/x/net to v0.17.0 #2122
• OCPBUGS-22099: Extend remote write test timeout #2127
• Full changelog

cluster-network-operator

• SDN-4184: Limit OVN-Kubernetes RBAC permissions #2093
• OCPBUGS-20278: Edited multus-admission-controller deployment config to not add autoount a service account token #1885
• Full changelog

cluster-node-tuning-operator

• Disable HTTP/2 for webhook and metrics servers (#846) #846
• Remove obsolete protocols and weak ciphers (#843) #843
• OCPBUGS-18493: e2e: deflake IRQ load-balancing (#782) #782
• Use RHEL9 as a base (#829) #829
• OCPBUGS-17943: Add rtentsk plugin to pp tuned profile Signed-off-by: Brent Rowsell <browsell@redhat.com> (#796) #796
• nto: avoid timeout when there are too many CSV (#818) #818
• Full changelog

cluster-openshift-apiserver-operator

• : OCPBUGS-20707: bump library-go to include switch to HTTP/1.1 #555
• OCPBUGS-22210: increase timeout for probes #553
• Full changelog

cluster-openshift-controller-manager-operator

• OCPBUGS-20796: bump(k8s,openshift) to address CVE-2023-44487 #310
• Full changelog

cluster-platform-operators-manager

• OCPBUGS-20998: [release-4.13] Bump golang.org/x/net to v0.17.0 #97
• Full changelog

cluster-policy-controller

• OCPBUGS-21103: Bump deps to address CVE-2023-44487 [4.13] #135
• Full changelog

cluster-samples-operator

• OCPBUGS-22390: Sync library to remove invalid dockerhub references for OKD #521
• Full changelog

cluster-storage-operator

• OCPBUGS-21284: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #406
• Full changelog

cluster-version-operator

• OCPBUGS-20744: [4.13] Bump http-related deps #989
• OCPBUGS-19472: Reconcile Volumes in SCCs and flag Upgradeable=False when detecting modified SCC #969
• Full changelog

console

• OCPBUGS-11316: Fix description for BuildAdapter SDK extension #12703
• OCPBUGS-22986: Correct logout process #13310
• OCPBUGS-23065: remove expandable toggle for conditional update risk d… #13316
• OCPBUGS-22784: add support for new features annotations while preservi… #13299
• OCPBUGS-19532: use active namespace in Create cta href of create action for operator backed #13179
• OCPBUGS-18271: update the KnativeServing API version to v1beta1 for global-config extension #13112
• Full changelog

console-operator

• OCPBUGS-22333: Make enabled plugins unique #805
• Full changelog

container-networking-plugins

• OCPBUGS-20594: build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 [backport 4.13] #130
• Full changelog

coredns

• OCPBUGS-21046: UPSTREAM: <carry>: openshift: Address CVE-2023-39325 #102
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OCPBUGS-21251: Merge upstream 1.26 into release-4.13 #240
• Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

• OCPBUGS-23116: Should reference configmaps instead of secrets #153
• OCPBUGS-20719: bump golang.org/x/net to v0.17.0 #147
• Full changelog

csi-driver-shared-resource-operator

• OCPBUGS-20806: bump golang.org/x/net to v0.17.0 #87
• Full changelog

csi-external-attacher

• OCPBUGS-21161: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #61
• Full changelog

csi-external-provisioner

• OCPBUGS-20759: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #73
• Full changelog

csi-external-resizer

• OCPBUGS-20908: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #148
• Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

• OCPBUGS-21011: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #110
• Full changelog

csi-livenessprobe

• OCPBUGS-20636: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #51
• Full changelog

csi-node-driver-registrar

• OCPBUGS-20686: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #53
• Full changelog

docker-builder

• OCPBUGS-22468: [release-4.13] Bump github.com/sigstore/rekor #374
• OCPBUGS-23021: Add -p flag to cp command to preserve timestamps #371
• OCPBUGS-20709: [release-4.13] Bump golang.org/x/net #363
• Full changelog

etcd

• OCPBUGS-22697: [4.13] Carrying fixes for CVE-2023-44487 #225
• Full changelog

gcp-cluster-api-controllers

• OCPBUGS-21398: Bump golang.org/x/net to v0.17.0 #204
• Full changelog

gcp-machine-controllers

• OCPBUGS-20851: Bump x/net package to v0.18.0 #68
• Full changelog

gcp-pd-csi-driver

• OCPBUGS-20735: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #46
• Full changelog

gcp-pd-csi-driver-operator

• OCPBUGS-20827: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #88
• Full changelog

haproxy-router

• OCPBUGS-21117: Bump golang.org/x/net to v0.17.0 to address CVE-2023-39325 #531
• Full changelog

hyperkube, pod

• OCPBUGS-18829: cm: reorder setting of sched_load_balance for sandbox slice #1696
• OCPBUGS-23287: UPSTREAM: 121881: Use golang library instead of mklink #1802
• openshift-hack: Fix sporadic 141 errors in build-rpms #1773
• OCPBUGS-20114: UPSTREAM: <carry>: Do not allow nodes to set forbidden openshift labels #1746
• Full changelog

hypershift

• OCPBUGS-23455: Use the same etcd snapshot for all replicas during etcd restore #3205
• NO-JIRA: Red Hat Trusted App Pipeline purge hypershift-operator-release-413 #3217
• Full changelog

ibm-vpc-block-csi-driver

• OCPBUGS-18143: [IBM VPC] failed provisioning volume in proxy cluster #47
• OCPBUGS-21230: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #51
• Full changelog

ibm-vpc-block-csi-driver-operator

• OCPBUGS-21319: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #82
• Full changelog

ibm-vpc-node-label-updater

• OCPBUGS-21432: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #28
• Full changelog

insights-operator

• OCPBUGS-22953: create Prometheus rules programmatically according the… (#860) #860
• OCPBUGS-22914: remove username & password config options (#859) #859
• OCPBUGS-20750: update dependencies (#840) #840
• Add cherry-pick from 4.14 (#848) #848
• Full changelog

ironic

• OCPBUGS-23506: Uplift eventlet version #427
• OCPBUGS-23356: Upgrade werkzeug dependency #422
• OCPBUGS-19078: Handle Eject DVD 4.13 #416
• OCPBUGS-23072: Use bash process substitution instead of pipe #413
• Full changelog

k8s-prometheus-adapter

• OCPBUGS-21457: upgrade golang.org/x/net to 0.17.0 to address CVE #90
• Full changelog

kube-proxy, sdn

• OCPBUGS-22932: Change the permission of 80-openshift-network.conf to 600 #582
• OCPBUGS-14504: Use the ovsver build arg to infer the openvswitch short version number #572
• Full changelog

kube-rbac-proxy

• OCPBUGS-20702: v0.15.0 downstream release 4.13 #84
• Full changelog

kube-state-metrics

• OCPBUGS-20778: bump x/net to v0.17.0 #102
• Full changelog

machine-api-operator

• OCPBUGS-21513: Bump golang.org/x/net to v0.18.0 #1175
• Full changelog

machine-config-operator

• OCPBUGS-23536: Introduce kubelet-dependencies.target and firstboot-osupdate.target #4043
• OCPBUGS-21052: Update library-go and kube deps to latest version #4011
• OCPBUGS-22205: Consider ingress VIPs when selecting node IP #3991
• OCPBUGS-18031: on-prem: run resolv-prepender on NM reapply event #3880
• OCPBUGS-22412: bootstrap_test: always set APIVersion and Kind for DNS #4002
• OCPBUGS-21721: install/0000_90_machine-config-operator_90_deletion: Drop this file #3983
• Full changelog

machine-image-customization-controller

• OCPBUGS-21549: Uplift x/net to v0.17.0 #105
• Full changelog

multus-admission-controller

• OCPBUGS-21353: Update go.mod for CVE-2023-39325 [Release-4.13] #72
• Full changelog

multus-cni

• OCPBUGS-21076: Update go.mod for CVE-2023-39325 [Release-4.13] #195
• Full changelog

multus-networkpolicy

• OCPBUGS-21438: Update go.mod for CVE-2023-39325 (#35) #35
• Full changelog

network-metrics-daemon

• Update the k8s dependencies to 1.26.10 (#83) #83
• Full changelog

oauth-server

• AUTH-443: update osin to latest version #139
• Full changelog

oc-mirror

• OCPBUGS-21460: Fix CVE-2023-44487 and CVE-2023-39325 (#714) #714
• Full changelog

olm-rukpak

• OCPBUGS-23403: [release-4.13] Address http2 vulnerability #58
• OCPBUGS-21363: [release-4.13] Bump golang.org/x/net to v0.17.0 #40
• UPSTREAM: <carry>: add downstream owners #42
• Full changelog

openshift-state-metrics

• OCPBUGS-20723: bump x/net to v0.17.0 #108
• Full changelog

openstack-cinder-csi-driver-operator

• OCPBUGS-21565: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #136
• Full changelog

operator-lifecycle-manager, operator-registry

• OCPBUGS-20815: [release-4.13] fix apiserver vulnerability #616
• OCPBUGS-22133: [release-4.13] Bump golang.org/x/net to v0.17.0 #589
• Full changelog

operator-marketplace

• OCPBUGS-20977: [release-4.13] bump golang.org/x/net to 0.17.0 #549
• Full changelog

ovirt-csi-driver

• OCPBUGS-23155: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #130
• Full changelog

ovirt-csi-driver-operator

• OCPBUGS-23241: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #127
• Full changelog

ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9

• OCPBUGS-14314: Fix compilation error in e2e.go tests due to missing int32 parameter #1682
• OCPBUGS-20047: Adjust python ssl library dependency check #1924
• Full changelog

powervs-block-csi-driver

• OCPBUGS-21089: CVE-2023-39325 - Update net dependencies - 4.13 #52
• Update OWNERS add yussufsh #54
• Full changelog

powervs-block-csi-driver-operator

• OCPBUGS-21186: CVE-2023-39325 - Update net dependencies - 4.13 #41
• Update OWNERS add yussufsh #45
• Full changelog

powervs-cloud-controller-manager

• OCPBUGS-21280: CVE-2023-39325 - Update net dependencies - 4.13 #46
• Full changelog

powervs-machine-controllers

• OCPBUGS-21880: CVE-2023-39325 - Bump golang.org/x/net to v0.17.0 - 4.13 #55
• Full changelog

prometheus

• OCPBUGS-21240: update golang.org/x/net to v0.17.0 [4.13] #174
• Full changelog

prometheus-alertmanager

• OCPBUGS-21043: Bump golang.org/x/net to v0.17.0 #81
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• OCPBUGS-20861: Bump golang.org/x/net to v0.17.0 #248
• Full changelog

prometheus-node-exporter

• OCPBUGS-21143: upgrade golang.org/x/net to v0.17.0 #135
• Full changelog

telemeter

• OCPBUGS-21327: [release-4.13]: Bump golang.org/x/net to v0.17.0 #485
• Full changelog

tests

• AUTH-443: Add oauth-server redirect URI validation e2e tests #28396
• OCPBUGS-19378: [4.13] backport etcd restore tests #28267
• Full changelog

thanos

• OCPBUGS-21157: Bump golang.org/x/net to v0.17.0 #125
• Full changelog

vsphere-cloud-controller-manager

• OCPBUGS-21506: Bump golang.org/x/net to v0.18.0 #55
• Full changelog

vsphere-cluster-api-controllers

• OCPBUGS-21556: bump golang.org/x/net to v0.17.0 #23
• Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

• OCPBUGS-21561: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #91
• Full changelog

vsphere-csi-driver-operator

• OCPBUGS-21434: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #174
• Full changelog

vsphere-problem-detector

• OCPBUGS-21577: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #130
• Full changelog

---

View changelog in Markdown or change previous release: 4.13.244.13.234.13.224.13.214.13.194.13.184.13.174.13.164.13.154.13.144.13.134.13.124.13.114.13.104.13.94.13.84.13.74.13.64.13.54.13.44.13.34.13.24.13.14.13.04.13.0-rc.84.13.0-rc.74.13.0-rc.64.13.0-rc.54.13.0-rc.44.13.0-rc.34.13.0-rc.24.13.0-rc.04.12.734.12.724.12.714.12.704.12.694.12.684.12.674.12.664.12.654.12.644.12.634.12.624.12.614.12.604.12.594.12.584.12.574.12.564.12.554.12.544.12.534.12.524.12.514.12.504.12.494.12.484.12.474.12.464.12.454.12.444.12.434.12.424.12.414.12.404.12.394.12.384.12.374.12.364.12.354.12.344.12.334.12.324.12.314.12.304.12.294.12.284.12.274.12.264.12.254.12.244.12.234.12.224.12.214.12.204.12.194.12.184.12.174.12.164.12.154.12.144.12.134.12.124.12.114.12.104.12.94.12.84.12.74.12.64.12.54.12.44.12.34.12.24.12.14.12.04.12.0-rc.84.12.0-rc.74.12.0-rc.64.12.0-rc.54.12.0-rc.44.12.0-rc.34.12.0-rc.24.12.0-rc.14.12.0-rc.04.11.594.11.584.11.574.11.564.11.554.11.544.11.534.11.524.11.514.11.504.11.494.11.484.11.474.11.464.11.454.11.444.11.434.11.424.11.414.11.404.11.394.11.384.11.374.11.364.11.354.11.344.11.334.11.324.11.314.11.304.11.294.11.284.11.274.11.264.11.254.11.244.11.234.11.224.11.214.11.204.11.194.11.184.11.174.11.164.11.154.11.144.11.134.11.124.11.114.11.104.11.94.11.84.11.74.11.64.11.54.11.44.11.34.11.24.11.14.11.04.11.0-rc.74.11.0-rc.64.11.0-rc.54.11.0-rc.44.11.0-rc.34.11.0-rc.24.11.0-rc.14.11.0-rc.04.11.0-fc.34.11.0-fc.24.11.0-fc.0───4.19.0-0.nightly-2025-02-11-1619124.19.0-0.nightly-2025-02-11-0359124.19.0-0.nightly-2025-02-10-2028384.19.0-0.nightly-2025-02-10-1040064.19.0-0.nightly-2025-02-10-0342434.19.0-0.nightly-2025-02-09-2233214.19.0-0.nightly-2025-02-09-1224404.19.0-0.nightly-2025-02-09-0646364.19.0-0.nightly-2025-02-08-2224184.19.0-0.nightly-2025-02-08-1413424.19.0-0.nightly-2025-02-08-0625224.19.0-0.nightly-2025-02-07-1817114.19.0-0.nightly-2025-01-30-0918584.19.0-0.nightly-2025-01-30-040815───4.19.0-0.ci-2025-02-11-1501554.19.0-0.ci-2025-02-11-0901554.19.0-0.ci-2025-02-11-0301554.19.0-0.ci-2025-02-10-2101554.19.0-0.ci-2025-02-10-1501554.19.0-0.ci-2025-02-10-0901554.19.0-0.ci-2025-02-10-0301554.19.0-0.ci-2025-02-09-2101554.19.0-0.ci-2025-02-09-1501554.19.0-0.ci-2025-02-09-0901554.19.0-0.ci-2025-02-09-014913───4.18.0-0.nightly-2025-02-11-1340474.18.0-0.nightly-2025-02-11-0603014.18.0-0.nightly-2025-02-10-2339114.18.0-0.nightly-2025-02-10-1424344.18.0-0.nightly-2025-02-10-0244444.18.0-0.nightly-2025-02-09-0917104.18.0-0.nightly-2025-02-07-2358314.18.0-0.nightly-2025-02-07-1827324.18.0-0.nightly-2025-02-07-1038294.18.0-0.nightly-2025-02-07-0427564.18.0-0.nightly-2025-02-06-1912404.18.0-0.nightly-2025-02-06-0927134.18.0-0.nightly-2025-02-05-0334474.18.0-0.nightly-2025-02-04-1921344.18.0-0.nightly-2025-02-04-1145524.18.0-0.nightly-2025-02-04-0504394.18.0-0.nightly-2025-02-03-2346334.18.0-0.nightly-2025-02-03-0727134.18.0-0.nightly-2025-02-01-1851174.18.0-0.nightly-2025-01-31-1415024.18.0-0.nightly-2025-01-31-0753534.18.0-0.nightly-2025-01-30-0931094.18.0-0.nightly-2025-01-30-0201114.18.0-0.nightly-2025-01-29-1332314.18.0-0.nightly-2025-01-29-063712───4.18.0-0.ci-2025-02-11-1720244.18.0-0.ci-2025-02-11-1120244.18.0-0.ci-2025-02-11-0512164.18.0-0.ci-2025-02-10-2312164.18.0-0.ci-2025-02-10-1712164.18.0-0.ci-2025-02-10-1112164.18.0-0.ci-2025-02-10-0512164.18.0-0.ci-2025-02-09-092330───4.17.0-0.nightly-2025-02-11-1312084.17.0-0.nightly-2025-02-11-0635354.17.0-0.nightly-2025-02-10-2318284.17.0-0.nightly-2025-02-10-1838274.17.0-0.nightly-2025-02-10-1112334.17.0-0.nightly-2025-02-10-0227544.17.0-0.nightly-2025-02-09-0552504.17.0-0.nightly-2025-02-09-0009354.17.0-0.nightly-2025-02-08-0957454.17.0-0.nightly-2025-02-07-2258004.17.0-0.nightly-2025-02-07-1040524.17.0-0.nightly-2025-02-06-2126474.17.0-0.nightly-2025-02-06-1252014.17.0-0.nightly-2025-02-06-0252104.17.0-0.nightly-2025-02-05-1336234.17.0-0.nightly-2025-02-04-2150044.17.0-0.nightly-2025-02-04-1109264.17.0-0.nightly-2025-02-04-0603254.17.0-0.nightly-2025-02-04-0052584.17.0-0.nightly-2025-02-03-1544004.17.0-0.nightly-2025-02-03-0127114.17.0-0.nightly-2025-02-01-0907024.17.0-0.nightly-2025-01-31-1319264.17.0-0.nightly-2025-01-30-2110444.17.0-0.nightly-2025-01-30-1527264.17.0-0.nightly-2025-01-30-0330254.17.0-0.nightly-2025-01-29-1123294.17.0-0.nightly-2025-01-29-024000───4.17.0-0.ci-2025-02-11-1700244.17.0-0.ci-2025-02-11-1100244.17.0-0.ci-2025-02-11-0500244.17.0-0.ci-2025-02-10-2130434.17.0-0.ci-2025-02-10-1530434.17.0-0.ci-2025-02-10-0446084.17.0-0.ci-2025-02-09-0616194.17.0-0.ci-2025-02-08-225934───4.16.0-0.nightly-2025-02-11-1558544.16.0-0.nightly-2025-02-11-0622094.16.0-0.nightly-2025-02-11-0107124.16.0-0.nightly-2025-02-10-1753004.16.0-0.nightly-2025-02-10-0244054.16.0-0.nightly-2025-02-09-0453214.16.0-0.nightly-2025-02-07-0309004.16.0-0.nightly-2025-02-06-2102304.16.0-0.nightly-2025-02-06-1629074.16.0-0.nightly-2025-02-06-0051254.16.0-0.nightly-2025-02-05-1536014.16.0-0.nightly-2025-02-05-0332574.16.0-0.nightly-2025-02-04-1830414.16.0-0.nightly-2025-02-04-0016024.16.0-0.nightly-2025-02-03-1553384.16.0-0.nightly-2025-02-03-0133174.16.0-0.nightly-2025-01-31-0453444.16.0-0.nightly-2025-01-30-1808304.16.0-0.nightly-2025-01-30-1200104.16.0-0.nightly-2025-01-29-1819544.16.0-0.nightly-2025-01-29-001746───4.16.0-0.ci-2025-02-11-1845114.16.0-0.ci-2025-02-11-1104504.16.0-0.ci-2025-02-11-0504504.16.0-0.ci-2025-02-10-2111454.16.0-0.ci-2025-02-09-0543324.16.0-0.ci-2025-02-08-225253───4.15.0-0.nightly-2025-02-11-1414174.15.0-0.nightly-2025-02-11-0607344.15.0-0.nightly-2025-02-10-1912024.15.0-0.nightly-2025-02-10-1207434.15.0-0.nightly-2025-02-10-0526224.15.0-0.nightly-2025-02-09-0016524.15.0-0.nightly-2025-02-08-0024454.15.0-0.nightly-2025-02-07-1841574.15.0-0.nightly-2025-02-07-0253034.15.0-0.nightly-2025-02-06-165002───4.15.0-0.ci-2025-02-10-1959234.15.0-0.ci-2025-02-10-0429354.15.0-0.ci-2025-02-09-0527064.15.0-0.ci-2025-02-08-2249494.15.0-0.ci-2025-02-07-232830───4.14.0-0.nightly-2025-02-11-1938264.14.0-0.nightly-2025-02-11-0612494.14.0-0.nightly-2025-02-10-2154204.14.0-0.nightly-2025-02-10-1715034.14.0-0.nightly-2025-02-09-0923434.14.0-0.nightly-2025-02-09-0157294.14.0-0.nightly-2025-02-07-092236───4.14.0-0.ci-2025-02-11-1743024.14.0-0.ci-2025-02-11-0156094.14.0-0.ci-2025-02-10-1956094.14.0-0.ci-2025-02-10-1356094.14.0-0.ci-2025-02-09-0928464.14.0-0.ci-2025-02-09-0208394.14.0-0.ci-2025-02-07-0928554.14.0-0.ci-2025-02-04-2348524.14.0-0.ci-2025-02-04-1248064.14.0-0.ci-2025-02-03-1524184.14.0-0.ci-2025-02-03-060400───4.13.0-0.nightly-2025-02-08-0803324.13.0-0.nightly-2025-02-08-0121144.13.0-0.nightly-2025-02-05-0819544.13.0-0.nightly-2025-02-01-1216524.13.0-0.nightly-2025-02-01-0440334.13.0-0.nightly-2025-01-25-0157254.13.0-0.nightly-2025-01-18-0451344.13.0-0.nightly-2025-01-11-022931───4.13.0-0.ci-2025-02-08-1203084.13.0-0.ci-2025-02-08-0121264.13.0-0.ci-2025-02-07-0543544.13.0-0.ci-2025-02-06-2343544.13.0-0.ci-2025-02-06-1137364.13.0-0.ci-2025-02-04-220344───4.12.0-0.nightly-2025-02-11-1818044.12.0-0.nightly-2025-02-11-0429534.12.0-0.nightly-2025-02-10-1400444.12.0-0.nightly-2025-02-10-0539324.12.0-0.nightly-2025-02-07-0637544.12.0-0.nightly-2025-02-04-0932314.12.0-0.nightly-2025-02-03-145904───4.12.0-0.ci-2025-02-11-1758244.12.0-0.ci-2025-02-11-0832104.12.0-0.ci-2025-02-10-2001294.12.0-0.ci-2025-02-10-0539364.12.0-0.ci-2025-02-07-0654094.12.0-0.ci-2025-02-06-2017554.12.0-0.ci-2025-02-05-1830544.12.0-0.ci-2025-02-03-1852064.12.0-0.ci-2025-01-29-2009564.12.0-0.ci-2025-01-29-0230344.12.0-0.ci-2025-01-28-140919───4.11.0-0.nightly-2024-07-06-0140574.11.0-0.nightly-2024-07-01-0855474.11.0-0.nightly-2024-04-20-1326214.11.0-0.nightly-2024-04-15-1237064.11.0-0.nightly-2024-04-15-0346274.11.0-0.nightly-2024-03-18-1654324.11.0-0.nightly-2024-03-12-2229304.11.0-0.nightly-2024-02-01-0446274.11.0-0.nightly-2024-01-19-1107024.11.0-0.nightly-2024-01-15-0229494.11.0-0.nightly-2024-01-10-203533───4.11.0-0.ci-2025-01-08-1727074.11.0-0.ci-2025-01-08-1041384.11.0-0.ci-2024-11-14-2201374.11.0-0.ci-2024-11-14-1432224.11.0-0.ci-2024-09-18-0735584.11.0-0.ci-2024-09-17-2036254.11.0-0.ci-2024-07-01-0910384.11.0-0.ci-2024-06-07-1944004.11.0-0.ci-2024-06-05-1627184.11.0-0.ci-2024-06-01-042714───4.19.0-ec.14.19.0-ec.0

Source code for this page located on github