4.13.65

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.13.65-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded (1 retry) periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- upgrade-minor Succeeded (1 retry) periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
Informing jobs
- aws-sdn-serial Succeeded (1 retry) periodic-ci-openshift-release-main-nightly-4.13-e2e-aws-sdn-serial
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- aws-sdn-upgrade-4.13-micro Succeeded periodic-ci-openshift-release-main-nightly-4.13-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.13-micro Succeeded (2 retries) periodic-ci-openshift-release-main-ci-4.13-e2e-azure-ovn-upgrade
- driver-toolkit Succeeded periodic-ci-openshift-release-main-nightly-4.13-e2e-aws-driver-toolkit
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.13-fips-payload-scan
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.13-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-bm Succeeded (1 retry) periodic-ci-openshift-release-main-nightly-4.13-e2e-metal-ipi-sdn-bm
  - Attempt 1 Failed
  - Attempt 2 Succeeded

Upgrades from:

Untested upgrades: 4.12.19, 4.12.20, 4.12.21, 4.12.22, 4.12.24, 4.12.25, 4.12.26, 4.12.27, 4.12.28, 4.12.29, 4.12.31, 4.12.32, 4.12.33, 4.12.34, 4.12.35, 4.12.36, 4.12.37, 4.12.38, 4.12.39, 4.12.40, 4.12.41, 4.12.42, 4.12.43, 4.12.44, 4.12.45, 4.12.46, 4.12.47, 4.12.48, 4.12.49, 4.12.51, 4.12.53, 4.12.54, 4.12.55, 4.12.56, 4.12.57, 4.12.58, 4.12.59, 4.12.60, 4.12.61, 4.12.62, 4.12.63, 4.12.64, 4.12.65, 4.12.66, 4.12.67, 4.12.68, 4.12.69, 4.12.70, 4.12.71, 4.12.72, 4.12.73, 4.12.74, 4.12.75, 4.12.76, 4.12.77, 4.12.78, 4.12.79, 4.12.80, 4.12.81, 4.12.82, 4.12.83, 4.12.84, 4.13.10, 4.13.11, 4.13.12, 4.13.13, 4.13.14, 4.13.15, 4.13.16, 4.13.17, 4.13.18, 4.13.21, 4.13.22, 4.13.23, 4.13.24, 4.13.25, 4.13.26, 4.13.28, 4.13.29, 4.13.3, 4.13.30, 4.13.31, 4.13.32, 4.13.33, 4.13.34, 4.13.35, 4.13.36, 4.13.37, 4.13.38, 4.13.39, 4.13.4, 4.13.41, 4.13.42, 4.13.43, 4.13.44, 4.13.45, 4.13.46, 4.13.48, 4.13.49, 4.13.5, 4.13.50, 4.13.51, 4.13.52, 4.13.53, 4.13.54, 4.13.55, 4.13.56, 4.13.57, 4.13.58, 4.13.59, 4.13.6, 4.13.60, 4.13.61, 4.13.7, 4.13.8, 4.13.9

Upgrades to:

4.14.64 (changes) - F F F F F F F F F F F F F F F
4.14.0-0.nightly-2026-04-18-152350 (changes) - F F F F
4.14.0-0.nightly-2026-04-18-020728 (changes) - F F F F
4.14.0-0.nightly-2026-04-16-012435 (changes) - F F F F
4.14.0-0.nightly-2026-04-15-130349 (changes) - F F F
4.14.0-0.nightly-2026-04-14-213140 (changes) - Failed Failed
4.14.0-0.nightly-2026-04-14-134916 (changes) - Failed Success
4.14.0-0.nightly-2026-04-13-052504 (changes) - Success
4.14.0-0.nightly-2026-04-12-212848 (changes) - Failed Success
4.14.0-0.nightly-2026-04-12-054122 (changes) - Failed Success
4.14.0-0.nightly-2026-04-11-180419 (changes) - Failed Success
4.14.0-0.nightly-2026-04-11-023339 (changes) - Failed Success
4.14.0-0.nightly-2026-04-10-142240 (changes) - Success
4.14.0-0.nightly-2026-04-10-025557 (changes) - Failed Success
4.14.0-0.ci-2026-04-18-222914 (changes) - S F S
4.14.0-0.ci-2026-04-18-152020 (changes) - F S S
4.14.0-0.ci-2026-04-18-092020 (changes) - Success Failed
4.14.0-0.ci-2026-04-18-020604 (changes) - S F F
4.14.0-0.ci-2026-04-17-013533 (changes) - F S S
4.14.0-0.ci-2026-04-16-152545 (changes) - F S S
4.14.0-0.ci-2026-04-16-060240 (changes) - F F S S
4.14.0-0.ci-2026-04-15-212700 (changes) - Success Success
4.14.0-0.ci-2026-04-15-152700 (changes) - Success Success
4.14.0-0.ci-2026-04-15-070756 (changes) - F F S S
4.14.0-0.ci-2026-04-14-204514 (changes) - S F F F
4.14.0-0.ci-2026-04-14-104430 (changes) - F S S
4.14.0-0.ci-2026-04-14-041052 (changes) - Success Success
4.14.0-0.ci-2026-04-13-214720 (changes) - S F S
4.14.0-0.ci-2026-04-13-104431 (changes) - F S F S
4.14.0-0.ci-2026-04-11-160740 (changes) - Success Success
4.14.0-0.ci-2026-04-11-080847 (changes) - S F F
4.14.0-0.ci-2026-04-10-165333 (changes) - F F F F F F F F
4.14.0-0.ci-2026-04-10-053021 (changes) - F F S F S

Loading changelog, this may take a while ...

Changes from 4.13.1

Created: 2026-04-09 11:40:02 +0000 UTC

Image Digest: sha256:8f2d90675314d5860aa070a036e7b2ecc57ed56df6fddb229835cdb674364874

Components

Kubernetes upgraded from 1.26.3 to 1.26.15
Red Hat Enterprise Linux CoreOS upgraded from 413.92.202305231734-0 to 413.92.202604080111-0 (diff)

Rebuilt images without code change

alibaba-machine-controllers git 4c0f96a6 sha256:264f3b3a32c444e30c5c30c1df7e6286be82d6464f52fda953ae89534b052856
cluster-bootstrap git ee908b6b sha256:36a99b1f241c5e5e0a8fee16163c7c046904e18c32d5b8de3e486f1f216e38a7
configmap-reloader git 9adad592 sha256:e86af1f70604971a91452d8d0e11c4d7246f1237aae808477649a7bb1bfbb226
csi-driver-nfs git 2b914c21 sha256:bd5180d230672ae99ebd470e7c382bbf436f9351ff85e0dddda6341454aa8de5
driver-toolkit git d719bdcf sha256:0e8552930ebf6dae03eee2f0c5ed79ba200fed2e41782b10e929b9b58a3c5946
kubevirt-cloud-controller-manager git ee2033ec sha256:c879806649c4c6eeaaec155d6a1a16a9c86c78c362b18298a6fe0d416607fbbc
machine-os-content sha256:b8c5168b31cca24ea864e47a52119ed34a21a4cd661edbeab4fc3d0627249556
ovirt-machine-controllers git 22d89b3f sha256:251cad98307415ac1fcff1942c816edb72f940f15d4ac5f12207d375c2403f18
prom-label-proxy git b501d5e2 sha256:dde404e0c7c7dad0a1432d63229cb55692e775ff61dd40a05b3179a4a1c3b1d8
rhel-coreos sha256:1af7a24ac15f13c39e1eecb3c0ec2fd9342157b9cad8f9c725c02808e05068b4
rhel-coreos-extensions sha256:8ce9ffb365edf8da3c48caacf77830fe425178dc95251094891d53d6694116c0

agent-installer-api-server

MGMT-23439: Bump Go 1.18 to 1.20 and regenerate code #10043
MGMT-23439: Use archived dnf repositories for CentOS Stream 8 #10017
And 9 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-59114: CVE-2024-45339: Bump glog pkg to version 1.2.4 (#1195) #1195
OCPBUGS-53717: Bump jwt to 4.5.2 in release-4.13 (#1094) #1094
Bump golang.org/x/net to 0.33.0 (#1015) #1015
OCPBUGS-13612: Update version go-http-metrics/gin (#935) #935
MGMT-17595: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#835) #835
MGMT-17588: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#829) #829
MGMT-17541: Replace broken golangci reference (#826) #826
MGMT-13586: Wait for ETCD Bootstrap to complete (#670) (#717) #670
Full changelog

agent-installer-node-agent

OCPBUGS-67568: Bump logrus v1.9.0 to v1.9.3 #1280
And 12 elided commits (e.g. from squash or rebase merges)
Full changelog

alibaba-cloud-controller-manager

OCPBUGS-21238: Bump golang.org/x/net to v0.19.0 #43
Full changelog

alibaba-cloud-csi-driver

OCPBUGS-21329: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #37
OCPBUGS-16377: [release-4.13] UPSTREAM: 763: Bump (golang.org/x/net): to address CVE-2022-41723 #31
Full changelog

alibaba-disk-csi-driver-operator

OCPBUGS-21428: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #65
OCPBUGS-16250: Add management workloads annotations #55
Full changelog

apiserver-network-proxy

OCPBUGS-38066: Revert “Agent: Respect HTTPS_PROXY env vars for proxied connections” #61
OCPBUGS-31984: Bump golang.org/x/net to v0.23.0 #52
HOSTEDCP-1323: Merge latest code into 4.14 branch #45
OCPBUGS-10187: Updating ose-apiserver-network-proxy images to be consistent with ART #30
Full changelog

aws-cloud-controller-manager

OCPBUGS-32073: update for CVE-2023-45288 [release-4.13] #84
OCPBUGS-27964: bump go.opentelemetry.io #72
OCPBUGS-20738: Update golang.org/x/net to v0.17.0 #54
Full changelog

aws-cluster-api-controllers

OCPBUGS-78230: [release-4.13] hermetic 4.13 #594
OCPBUGS-32470: UPSTREAM: 4670:Update awsmachine providerID and instanceID immediately after ec2:RunInstances is called #509
OCPBUGS-20836: bump golang.org/x/net to v0.17.0 #482
OCPBUGS-15512: Pass right SGs for IsExternallyManaged on creation #468
Full changelog

aws-ebs-csi-driver

OCPBUGS-33363: [release-4.13] UPSTREAM: 1919: Add reserved-volume-attachments #266
OCPBUGS-20939: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #240
OCPBUGS-13811: Volume unmount repeats after successful unmount, preventing pod delete #225
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-67575: Updated logrus to v1.8.3 #314
OCPBUGS-33363: Explicitly reserve 1 attachment for the root disk #307
OCPBUGS-21034: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #281
OCPBUGS-13036: 4.13: Bump (golang.org/x/net): to address CVE-2022-41723 #220
Full changelog

aws-machine-controllers

OCPBUGS-24563: Reduce metrics cardinality #96
OCPBUGS-21568: Update golang.org/x/net to v0.17.0 #89
Full changelog

aws-pod-identity-webhook

OCPBUGS-32882: Upgrade go-jose module to 2.6.3 #190
OCPBUGS-21331: Upgrade golang/x/net for CVE-2023-39325 #184
NO-ISSUE: Sync OWNERS with team members #177
snyk: exclude vendor/ #172
OCPBUGS-12555: Update builder to OCP4.13/go1.19 #164
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-21419: Bump golang.org/x/net to v0.18.0 #94
OCPBUGS-17145: Increase service idle max timeout to 100 minutes #81
OCPBUGS-13952: Update x/net package to v0.8.0 #68
Full changelog

azure-cluster-api-controllers

OCPBUGS-78179: [release-4.13] Hermetic 4.13 #367
OCPBUGS-36022: Update go-retryablehttp to v0.7.7 #314
OCPBUGS-21503: bump golang.org/x/net to v0.17.0 #288
OCPBUGS-12557: Bump x/net package to v0.10.0 #278
Full changelog

azure-disk-csi-driver

OCPBUGS-23216: Update to v1.26.7 #63
OCPBUGS-20688: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #55
OCPBUGS-16318: 4.13: UPSTREAM: 1744: fix: CVE-2022-41723 #44
Full changelog

azure-disk-csi-driver-operator

OCPBUGS-20766: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #102
OCPBUGS-16250: Add management workloads annotations #86
Full changelog

azure-file-csi-driver

OCPBUGS-41678: bump mount-utils to treat ENODEV error as corrupted mount #81
OCPBUGS-20862: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #38
OCPBUGS-16321: 4.13: UPSTREAM: 1211: fix: CVE-2022-41723 #30
Full changelog

azure-file-csi-driver-operator

OCPBUGS-67580: Bump github.com/sirupsen/logrus to v1.8.3 #115
OCPBUGS-20964: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #77
OCPBUGS-16250: Add management workloads annotations #67
Full changelog

azure-machine-controllers

OCPBUGS-78265: hermetic 4.13 #187
OCPBUGS-29906: Don’t create availability set when using spot instances #104
OCPBUGS-24563: Reduce metrics cardinality #89
OCPBUGS-20758: Bump x/net package to v0.18.0 #83
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-76931: terraform/provider/google: Fixing inconsistencies with the service account creation #10384
OCPBUGS-66232: Replace terraform-provider-google with Openshift fork #10141
OCPBUGS-62848: Release 4.13 bump terraform provider azurerm #10006
OCPBUGS-55034: IBMCloud: Move to IBM TF openshift fork #9668
OCPBUGS-39217: Add yq v4 to ci image #8922
OCPBUGS-36088: [release-4.13]: bump go-retryablehttp for CVE fix #8659
OCPBUGS-29124: IBMCloud: Handle disk delete errors #7989
OCPBUGS-37168: Add yq-v4 to the upi-installer image for CI #8743
OCPBUGS-35976: [release-4.13] bump github.com/containers/image for CVE fix #8651
OCPBUGS-33732: preserve category name when trying to find tag category #8419
OCPBUGS-33062: openstack: Honour worker server group policy #8323
OCPBUGS-32359: Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility #8284
OCPBUGS-22979: IBMCloud: Add eu-es region #7685
OCPBUGS-30629: baremetal: populate customDeploy in advance #8129
OCPBUGS-29627: update RHCOS 4.13 bootimage metadata to 413.92.202402131523-0 #8038
OCPBUGS-30000: [release-4.13] Bump containerd for vulnerability fix #8073
OCPBUGS-28654: Fix depreciated typo #7963
OCPBUGS-27453: baremetal: correct external_http_url for v6-only BMCs #7934
OCPBUGS-23499: update RHCOS 4.13 bootimage metadata to 413.92.202401100947-0 #7920
OCPBUGS-25420: destroy: gcp: fix destroying regional disks #7840
OCPBUGS-23464: Add KMS encryption keys if provided #7746
OCPBUGS-23141: Specify google cloud CLI to version 447.0.0 #7706
OCPBUGS-22939: azure: validation: validate defaultMachinePlatform #7679
OCPBUGS-14551: [vSphere] Upi installation failed due to VMs for master and worker node creation failed #7229
OCPBUGS-19307: Implement workaround to allow SNO installations for OKD/FCOS #7480
OCPBUGS-18787: vSphere set bootstrap/master efi #7481
OCPBUGS-19320: [release-4.13] for vsphere ipi add cluster domain to the uploaded vm configs so that… #7498
OCPBUGS-20141: [release-4.13] Use updated ansible-core for Openstack image #7559
OCPBUGS-19670: [release-4.13] Allow different service account for xpn installs in gcp #7524
OCPBUGS-19773: Increase bootstrap timeout for vSphere platform by 30 mins #7530
OCPBUGS-16383: [release-4.13] Default dataStore is returned the name instead the inventoryPath #7343
OCPBUGS-13681: FCOS: bump to latest stable version #7188
OCPBUGS-11093: Azure: don’t set default subscriptionID for disk encryption sets #7432
OCPBUGS-17809: Allow destroy for C2S isolated (us-iso and us-isob) partitions #7427
OCPBUGS-15231: new Aws secret regions support #7264
OCPBUGS-15222: terraform: aws: secret regions now support ALIAS record #7262
OCPBUGS-17823: CORS-2445: GCP: Add osImage to the install config #7431
OCPBUGS-14432: Replica validations #7423
OCPBUGS-13865: vSphere Add ova sha query; additional debugging #7198
OCPBUGS-16640: [release-4.13] Update azure cli version to 2.49.0 #7357
OCPBUGS-16777: update RHCOS 4.13 bootimage metadata to 413.92.202307260246-0 #7410
CORS-2764: AWS Shared VPC Backport [release-4.13] #7362
OCPBUGS-17104: [release-4.13] vsphere terraform bump #7383
OCPBUGS-17397: backport openstack UPI for ansible 2.10 #7385
OCPBUGS-15290: GCP: ic: improve project validation #7361
OCPBUGS-16390: Allow override of networkType #7344
OCPBUGS-16673: Fix timing issue between network services #7358
OCPBUGS-14711: Convert Rendezvous IPv6 address to canonical format #7237
OCPBUGS-16066: Use correct SELinux label. Make rename atomic. #7315
OCPBUGS-14599: Log additional host info at warning level #7233
OCPBUGS-15866: Use the same names for public LB in IPI and UPI Azure #7302
OCPBUGS-16124: azure: skip LB creation when not needed #7322
OCPBUGS-13812: ic: azure: validate diskTypes in AzureStack #7195
OCPBUGS-15230: azure: skip NSG creation when BYO vnet #7263
OCPBUGS-15591: [release-4.13] gcp: add confidential compute support for boostrap TF #7298
OCPBUGS-15187: images: installer: add xz to the container #7260
OCPBUGS-14867: Shorten SNO installation duration by releasing CPC lease #7241
OCPBUGS-13752: Set AdditionalTrustBundle in override when mirroring not enabled #7191
OCPBUGS-15289: gcp use preconfigured private zone for installation #7271
OCPBUGS-14916: Replace with govc docker image and fix ibmcli folder permission issue #7245
OCPBUGS-13323: update RHCOS 4.13 bootimage metadata to 413.92.202306140611-0 #7248
OCPBUGS-14860: GCP XPN Private Cluster Fails with no Public Zone #7240
OCPBUGS-13765: Support /dev/disk/by-path root device hints #7193
OCPBUGS-14171: Ignore IAM Roles that the Installer is not authorized to access #7210
OCPBUGS-11530: [release-4.13] add project filter to gcp usage api requests #7045
OCPBUGS-10493: Nutanix Hostname of the VM is not set when using DHCP network config #7016
OCPBUGS-14027: GCP XPN: Pass instance service acct in manual mode #7204
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

baremetal-machine-controllers

OCPBUGS-78102: [release-4.13] fix vendor/ for hermetic migration #246
OCPBUGS-46640: Bump x/net 0.33.0 #229
OCPBUGS-29822: Extend metal3remediation aggregation role #212
OCPBUGS-21701: Uplift x/net to v0.17.0 #199
OCPBUGS-16084: Fix Metal3Remediation CRD install order #194
Full changelog

baremetal-operator

OCPBUGS-53334: BMO can expose any secret via BMCEventSubscription CRD 4.13 #411
OCPBUGS-30629: Do not update instance_info and deploy_interface for active nodes #337
OCPBUGS-23504: hack for deploying V6-only clusters from dualstack hubs #321
OCPBUGS-21167: Uplift x/net to v0.17.0 #309
OCPBUGS-17365: Trigger reconcile on Secret change #295
OCPBUGS-16013: Bump go.etcd.io/etcd/client/pkg/v3 from 3.5.6 to 3.5.9 #292
OCPBUGS-17229: Set minimum TLS version for webhook to 1.2 #294
OCPBUGS-13374: Do not try to update images for nodes in transient states #282
OCPBUGS-13927: Deleting unmanaged BMH get stuck fix #281
Full changelog

baremetal-runtimecfg

OCPBUGS-26929: Add .snyk file to ignore vendor and test files #295
OCPBUGS-22207: deps: upgrade x/sys #282
OCPBUGS-20081: Increase timeout for bootstrap kubeapi #278
OCPBUGS-18582: Move haproxy firewall rule check earlier in loop #271
OCPBUGS-17423: Don’t render config with incomplete unicast peer list #267
OCPBUGS-14487: Support IPv6 VIP for setup with multipe IPv6 addresses #259
OCPBUGS-15101: Use machine-config state instead of comparing roles #261
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-30288: oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators #1700
OCPBUGS-25418: Add client version in must-gather summary #1635
OCPBUGS-24461: Overwrite template’s namespace with the explicit one #1617
AUTH-443: Add OAuth2 Authorization Code Grant Flow for login #1599
OCPBUGS-22815: regeneratemco: explicitly check for PlatformStatus field #1593
OCPBUGS-20298: Use quay redis image instead docker mysql #1566
OCPBUGS-19942: Truncate existing files when writing from inspect #1553
OCPBUGS-13527: Bump x org deps 4.13 #1422
OCPBUGS-16055: mcs cert: account for environments that use IP directly #1500
OCPBUGS-16193: reboot: set ignition version to 3.1 #1508
OCPBUGS-16172: Add tls-server-name when property exists in kubeconfig #1506
handle the error case of node retrieval while waiting for reboot #1484
bring some cert rotation helpers back into 4.13 #1474
OCPBUGS-14249: preserve explicit release image in ClusterVersion #1435
OCPBUGS-14180: Remove closed centos7 registry from newapp unit tests #1432
Full changelog

cloud-credential-operator

OCPBUGS-53419: github.com/golang/glog v1.2.4 #846
OCPBUGS-51546: Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected #831
OCPBUGS-43340: Update github.com/sirupsen/logrus v1.8.3 #770
OCPBUGS-37834: Resolve SNYK errors in security job. #743
OCPBUGS-37421: SNYK ignore go-client misreporting #740
OCPBUGS-36028: IBM/go-sdk-core update to v5.17.4 #722
OCPBUGS-32898: Upgrade go-jose module to 2.6.3 #698
OCPBUGS-27912: Resolve all outstanding snyk vulnerabilities #651
NO-JIRA: Removing andrew from OWNERS #644
OCPBUGS-25369: Discover AWS dns suffix from partition and region. #640
OCPBUGS-21367: Upgrade golang/x/net for CVE-2023-39325 #623
snyk: exclude vendor/ #616
OCPBUGS-12565: CVE-2022-41723 ose-cloud-credential-operator-container: net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding [openshift-4] #543
Full changelog

cloud-network-config-controller

OCPBUGS-32180: Avoid nil pointer panic while assigning private IP on Azure #139
OCPBUGS-22299: Azure: skip backend pool if attached to an outbound rule #126
OCPBUGS-15856: Azure: Handle already existing IP configurations #116
OCPBUGS-14635: increase GCP egress ip capacity to 100 from 10 #113
Full changelog

cluster-authentication-operator

OCPBUGS-28760: Fix http2 [4.13] #654
AUTH-443: Add openshift-cli-client OAuth Client #641
OCPBUGS-22210: increase timeout for probes #638
OCPBUGS-15258: Correctly link oauth apiserver ServiceMonitor with its Service #617
OCPBUGS-13763: dont log tokens #618
Full changelog

cluster-autoscaler

OCPBUGS-45151: [release-4.13] VPA: Update OWNERS file #328
OCPBUGS-40929: update VPA golang.org/x/net for http rapid reset for CVE-2024-8421 #317
OCPBUGS-31702: add check for taint.value == nil #295
OCPBUGS-30874: Fix unstructured taint parsing in Cluster API provider #289
OCPBUGS-23272: Rebase 4.13 branch onto cluster autoscaler 1.26.4 #268
Full changelog

cluster-autoscaler-operator

OCPBUGS-31992: Update x/net to v0.25.0 #324
OCPBUGS-20770: Bump x/net package to v0.18.0 #299
OCPBUGS-17056: Address long acquire times during update #289
OCPBUGS-17098: update x/net dependency to 0.7.0 #280
OCPBUGS-16768: add nutanix labels that should be ignored #278
Full changelog

cluster-baremetal-operator

OCPBUGS-31993: bump x/net to 0.23.0 #439
OCPBUGS-23504: hack for deploying V6-only clusters from dualstack hubs #391
OCPBUGS-23444: Update the deprecated field APIServerInternalIP to APIServerInternalIPs #385
OCPBUGS-20867: Uplift x/net to v0.17.0 #370
OCPBUGS-19369: Guard against nil PlatformStatus #363
OCPBUGS-15472: Limit role binding to openshift-machine-api namespace #346
Full changelog

cluster-capi-controllers

OCPBUGS-77975: fix vendor for hermetic #266
OCPBUGS-21531: bump golang.org/x/net to v0.17.0 #185
OCPBUGS-12567: Bump x/net package to v0.10.0 #176
Full changelog

cluster-capi-operator

OCPBUGS-21082: bump golang.org/x/net to v0.17.0 #137
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-35562: update azure and ash tolerations on node manager #353
OCPBUGS-35562: update unit tests [release-4.13] #354
OCPBUGS-21169: Bump golang.org/x/net to v0.18.0 #296
OCPBUGS-17101: update x/net dependency to 0.7.0 #269
OCPBUGS-15746: Alibaba platforms should not be upgradeable #260
OCPBUGS-13011: Add beta topology labels flag to Azure cloud node manager #250
Full changelog

cluster-config-operator

OCPBUGS-28802: Add required PSa labels #404
: OCPBUGS-21269: bump library-go to include switch to HTTP/1.1 #372
CORS-2766: AWS Shared VPC API Bump [release-4.13] #337
OCPBUGS-16164: retire LatencySensitive featureset #329
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-48259: Add unreadyNodeGracePeriod for allowing brief node hiccups #342
OCPBUGS-35380: Improved debugging of API listing errors #304
OCPBUGS-30156: Never delete a Machine when there’s a single Machine in an index #286
OCPBUGS-21364: Bump golang.org/x/net to v0.17.0 #259
OCPBUGS-20482: fix: e2e: add gcp custom type to test framework #249
OCPBUGS-17055: Address long acquire times during update #240
OCPBUGS-15330: Fix lint issue #222
OCPBUGS-15161: Surface cpms vs machine diff #218
OCPBUGS-14024: Check ProviderSpec before generating MachineInfo #211
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-32334: create suitable role and roleBinding for csi-snapshot-webhook #206
OCPBUGS-21461: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #168
Full changelog

cluster-dns-operator

OCPBUGS-52501: [release-4.13] Add runbook_url for CoreDNSErrorsHigh #434
OCPBUGS-11449: Enable topology-aware hints iff nodes in >=2 zones #418
OCPBUGS-11449: Ignore max unavailable for status #417
OCPBUGS-11449: Set DNS DaemonSet’s maxSurge value to 10% #366
OCPBUGS-21534: Bump golang.org/x/net/http2 to v0.17.0 for CVE-2023-39325 in cluster-dns-operator #390
OCPBUGS-11449: Enable topology-aware hints if, and only if, nodes have zones #367
OCPBUGS-15225: Add support for protocolStrategy API field to enable force_tcp configuration #372
Full changelog

cluster-etcd-operator

OCPBUGS-67597: Update logrus to 1.9.3 to address CVE-2025-65637 #1549
OCPBUGS-53509: fix CVE-2025-30204 #1415
OCPBUGS-35077: return errors in wait-for-ceo #1273
OCPBUGS-31988: update golang x net #1255
OCPBUGS-30248: fix panic in health check timeouts #1217
OCPBUGS-30245: [4.13] Replace nodelister with master nodelister everywhere #1216
OCPBUGS-23572: Add annotation in the etcd-guard static pod for worklo… #1163
OCPBUGS-23106: [4.13] Remove z-upgrades from UpgradeBackupController #1154
Revert “[release-4.13] OCPBUGS-23044: remove revision stability check from bootstrap complet…” #1166
OCPBUGS-22783: relax readiness to local serializable requests #1144
OCPBUGS-23044: remove revision stability check from bootstrap complet… #1151
OCPBUGS-21155: fixing CVE-2023-39325 by updating dependencies #1143
OCPBUGS-20488: prioritize podman pull in etcdctl dl #1136
OCPBUGS-19378: [4.13] Backports of backup/restore fixes #1117
OCPBUGS-19825: Update staticpod file permissions to conform with CIS benchmarks #1125
OCPBUGS-16804: reset snapshot default counts to avoid file already lo… #1080
OCPBUGS-12487: update golang.org/x/net/http2 #1075
Full changelog

cluster-image-registry-operator

OCPBUGS-67598: Bump logrus to 1.8.3 #1291
OCPBUGS-53869: Bump github.com/golang-jwt/jwt #1235
OCPBUGS-51602: bump golang.org/x/oauth2 #1222
OCPBUGS-36034: go.*,vendor: bump go-retryablehttp #1070
OCPBUGS-29935: pkg/storage/s3: enable bucket key on encryption settings #1007
OCPBUGS-22126: increase storage account key cache expiration #940
OCPBUGS-20698: mitigate effects of rapid reset #946
Full changelog

cluster-ingress-operator

OCPBUGS-43095: Add alert for RFC 7230 violation in Transfer-Encoding headers #1161
OCPBUGS-43095: Add e2e test for duplicate Transfer-Encoding headers #1150
OCPBUGS-36551: Add Regexp Anchor to TestAll #1104
OCPBUGS-35453: [release-4.13] internal service changed fix target port logic #1089
OCPBUGS-35094: TestHostNetworkPortBinding: Delete t.Parallel() #1082
OCPBUGS-34765: Don’t add clientca-configmap finalizer if deleting #1073
OCPBUGS-34409: desiredRouterDeployment: Set HostPort if needed #1062
OCPBUGS-33990: Avoid spurious updates for internalTrafficPolicy [Backport to 4.13] #1055
OCPBUGS-34476: Use centos7 tag for quay.io/centos7/httpd-24-centos7 image #1065
OCPBUGS-20781: Bump golang.org/x/net for CVE-2023-44487 #987
OCPBUGS-22402: test/e2e: Don’t use openshift/origin-node #991
OCPBUGS-17733: [release-4.13] remove shared VPC cred request #972
NE-1341: Add support for AWS shared VPC in another account #966
OCPBUGS-15434: [release-4.13] Fix invalid DNS name formatting for GCP #958
OCPBUGS-15515: Update TestAWSELBConnectionIdleTimeout to not use wildcard DNS record #955
OCPBUGS-12743: bump controller-runtime to fix the multi namespace cache indexing #921
OCPBUGS-13964, OCPBUGS-13967: Handle mTLS CRLs, and fix accidental CRL duplication #935
OCPBUGS-12918: gatewayclass: Update for OSSM 2.4 API change #917
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-67602: CVE-2025-65637 openshift4/ose-cluster-kube-apiserver-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.13.z] #2047
OCPBUGS-50850: Increase waitForFallbackDegradedConditionTimeout #1809
OCPBUGS-34062: [4.13] add a controller that reconciles SCCs’ volumes #1677
OCPBUGS-25922: [release-4.13] dashboard: use recording rules for most metrics #1611
: OCPBUGS-24023: Add workload partitioning annotation #1591
: OCPBUGS-20880: bump library-go to include switch to HTTP/1.1 #1573
OCPBUGS-19825: Update staticpod file permissions to conform with CIS benchmarks #1558
OCPBUGS-15853: pkg/operator/configobserver: check that the serving certificate refer… #1522
OCPBUGS-17081: make webhook connection failure a warning in log #1532
OCPBUGS-13763: dont log jwt tokens #1499
Full changelog

cluster-kube-cluster-api-operator

OCPBUGS-20981: bump golang.org/x/net to v0.17.0 #28
OCPBUGS-13093: Bump golang.org/x/net #20
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-27066: bump(library-go)=release-4.13 #788
OCPBUGS-21103: Drop flags removed in k8s 1.26 [4.13] #766
OCPBUGS-21078: Bump deps to address CVE-2023-44487 [4.13] #758
OCPBUGS-19825: Update staticpod file permissions to conform with CIS benchmarks #752
Full changelog

cluster-kube-scheduler-operator

CNTRLPLANE-2843: chore: update OWNERS #627
OCPBUGS-27065: bump(library-go)=release-4.13 #528
OCPBUGS-21811: Bump deps to address CVE-2023-44487 #502
OCPBUGS-19825: Update staticpod file permissions to conform with CIS benchmarks #497
OCPBUGS-14651: disable debug pporf with unauthenticated port for 4.13 #480
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-67607: Bump github.com/sirupsen/logrus to v1.8.3 #142
: OCPBUGS-21355: bump library-go to include switch to HTTP/1.1 #97
Full changelog

cluster-machine-approver

OCPBUGS-21447: Bump x/net package to v0.18.0 #213
OCPBUGS-23368: Filter non node CSRs in metrics #210
Full changelog

cluster-monitoring-operator

OCPBUGS-76488: test: remove image registry e2e tests #2813
OCPBUGS-33581: label for infra nodes for metric cluster:capacity_cpu_cores:sum #2344
OCPBUGS-28767: fix generation of telemeter token hash #2305
OCPBUGS-25388: Add RHACM telemetry metric for 4.13 #2203
OCPBUGS-21457: Set the new –disable-http2 flag for prometheus-adapter to disable HTTP2 #2146
OCPBUGS-22920: jsonnet: pin commits #2144
OCPBUGS-22842: [release-4.13] add RHACS telemetry metrics #2139
OCPBUGS-22308: fix: force HTTP/1.1 connections #2134
OCPBUGS-21250: upgrade golang.org/x/net to v0.17.0 #2122
OCPBUGS-22099: Extend remote write test timeout #2127
OCPBUGS-11016: Node Exporter ignores network interface under name “cali[a-f0-9]*” #1927
OCPBUGS-16023: Add the trusted CA bundle in UWM Prometheus pods #2041
OCPBUGS-15469: Limit the value of GOMAXPROCS on node-exporter to 4. #2021
OCPBUGS-14251: Add new web console usage metrics #1976
OCPBUGS-12488: go.mod: update golang.org/x/net to v0.7.0 #1957
OCPBUGS-13007: Add build number to rules #1964
Full changelog

cluster-network-operator

OCPBUGS-78106: fix vendor for hermetic 4.13 #2914
OCPBUGS-43856: manifests/02-cncc-credentials: Set skipServiceCheck for GCP #2547
OCPBUGS-38403: Add missing runbook for OVNKubernetesNorthdInactive #2471
OCPBUGS-37941: update whereabouts crd #2458
OCPBUGS-30150: ipsec: fix openssl typo #2290
OCPBUGS-29674: add env var in whereabouts-reconciler daemonset #2279
OCPBUGS-29301: Update ingressconfig_controller to use field Manager #2267
OCPBUGS-28208: ipsec: fix oopsy from 2e3fc8e (cherry-pick of 980c08318e) #2222
OCPBUGS-28777: fix whereabouts conformance test failures #2241
OCPBUGS-27958: Add ConfigMap mount to the whereabouts-reconciler DaemonSet #2220
NO-JIRA: add kyrtapz as reviewer and approver for release 4.13 #2229
OCPBUGS-22293: remove all managed fields used by old manager #2094
OCPBUGS-24570: Disable weak SSH cipher suitesRm weak ciphers 4.13 #2163
OCPBUGS-21716: Bump golang.org/x/net and github.com/openshift/library-go #2123
OCPBUGS-22896: run update-codegen after adding maxLogFiles cfg #2162
OCPBUGS-22971: HyperShift: Use the local konnectivity proxy when checking proxy readiness #2098
OCPBUGS-22896: Remove oldest ovn acl log files when file limit exceeded #2097
SDN-4184: Limit OVN-Kubernetes RBAC permissions #2093
OCPBUGS-20278: Edited multus-admission-controller deployment config to not add autoount a service account token #1885
OCPBUGS-19894: remove prestop hooks for northd, sbdbd and nbdb #2001
OCPBUGS-18722: IBMCloud specific: patch out management workload for dataplane component thats needed for bootstrapping #1994
OCPBUGS-18342: Fix bond-cni’s default directory in multus manifest #1977
OCPBUGS-13920: add Hypershift release-image annotation to multus #1817
OCPBUGS-18099: [release-4.13] Use encapsulation=true for IBM Cloud #1932
OCPBUGS-17721: Enhance check controller to remove old check objects #1950
OCPBUGS-17457: prevent creation of multiple cni-sysctl-allowlist-ds pods #1936
OCPBUGS-11539: Hypershift: Add RollingUpdate parameters to multus-admission-controller #1774
OCPBUGS-15977: Add logic to pick the openshift-sdn shims from right directories #1880
OCPBUGS-15962: Add logic to pick the ovn-k8s-cni-overlay binary from the right dir #1877
Change rhel7/8 to rhel8/9 #1869
OCPBUGS-15476: Add release version annotation to whereabouts-reconciler #1853
OCPBUGS-15139: Remove nodeSelector for architecture in whereabouts daemonset #1840
OCPBUGS-14871: Do not rely on ControlPlaneTopology do determine if running in HyperShift #1837
OCPBUGS-13809: Use IfNotPresent instead of Always in OVNK upgrades pre-puller #1813
OCPBUGS-14367: High API requests due to allowlist and operconfig reconcilers running too often #1824
Full changelog

cluster-node-tuning-operator

E2E: workload hints: compare existing profile with changes being made to avoid mcp getting stuck (#1069) #1069
OCPBUGS-33030: [release-4.13][manual]Reduce number of reboots in offline tests (#1048) #1048
Scheduler plugin: ignore IRQs (#1027) #1027
irqbalance: set banned cpus list to 0 (#1003) #1003
OCPBUGS-24353: rps: cherry-picks of rps fixes (#865) #865
Disable HTTP/2 for webhook and metrics servers (#846) #846
Remove obsolete protocols and weak ciphers (#843) #843
OCPBUGS-18493: e2e: deflake IRQ load-balancing (#782) #782
Use RHEL9 as a base (#829) #829
OCPBUGS-17943: Add rtentsk plugin to pp tuned profile Signed-off-by: Brent Rowsell <browsell@redhat.com> (#796) #796
nto: avoid timeout when there are too many CSV (#818) #818
OCPBUGS-19459: check for object being nil (#820) #820
Add kubeconfig path for IBM Managed OpenShift (#814) #814
OCPBUGS-14137: e2e: perfprof: add SNO device recovery test (#653) (#806) #653
OCPBUGS-18868: [release-4.14] e2e: add expected max latancy to hwlatdetec test & rename constant (#788) (#808) #788
Sync DaemonSet if operand image changes (#786) #786
Revert “Revert “Release leader election on manager exit (#773)” (#797)” (#802) #773
OCPBUGS-19351: Keep Profile status.bootcmdline around (#803) #803
Revert “Release leader election on manager exit (#773)” (#797) #773
Release leader election on manager exit (#773) #773
Tighten the rules for modifying Tuned Profiles (#766) #766
OCPBUGS-18063: cgroup: Match the name of the cgroup to what is expected by kubelet (#774) #774
update tsc karg to tsc=reliable (#757) #757
OCPBUGS-17845: deflake ht aware test (#763) #763
OCPBUGS-17794: rps: use default rps mask kernel API (#760) #760
Improve render error handling (#755) #755
nto:tuned: remove sched_min_granularity_ns settings (#726) #726
Fix a race in e2e test rollback.go code (#740) #740
E2E: Add memory manager sanity test case (#573) (#695) #573
e2e: latency testing: increase the expected threshold (#709) #709
Do not rollback settings on TuneD exit (#704) #704
Switch to rslave/HostToContainer volume mount propagation (#705) #705
e2e: perf-prof: disable truncating gomega output (#707) #707
OCPBUGS-14895: Do not fail creating cgroups if they exist already (#684) #684
OCPBUGS-14331: Fix updating numa core siblings map in GetCpuSiblings function (#669) #669
render: remove uid from render-sync target (#594) (#609) #594
Remove cpu-quota.crio.io: disable annotation (#670) #670
Add PerformanceProfiles to ‘oc adm must-gather’ (#657) #657
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-76595: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.13] #659
: OCPBUGS-20707: bump library-go to include switch to HTTP/1.1 #555
OCPBUGS-22210: increase timeout for probes #553
OCPBUGS-13763: dont log tokens #541
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-38455: Update opentelemetry to mitigate CVE #365
OCPBUGS-20796: bump(k8s,openshift) to address CVE-2023-44487 #310
Full changelog

cluster-platform-operators-manager

OCPBUGS-20998: [release-4.13] Bump golang.org/x/net to v0.17.0 #97
Full changelog

cluster-policy-controller

OCPBUGS-21103: Bump deps to address CVE-2023-44487 [4.13] #135
OCPBUGS-14091: [4.13] fix ClusterResourceQuotas to work for all api resources including custom resources #116
Full changelog

cluster-samples-operator

OCPBUGS-63520: references to github.com/sclorg/django-ex.git now also refer to the branch #662
OCPBUGS-54812: add rhdmalone to owners #628
OCPBUGS-49663: add shannon and aroyoredhat as owners #599
OCPBUGS-21198: update k8s.io/apiserver version #589
OCPBUGS-22390: Sync library to remove invalid dockerhub references for OKD #521
OCPBUGS-15756: Update Jenkins and Jenkins Agent Base image versions #505
OCPBUGS-14598: Updating to use Jenkins 4.13 images #503
Full changelog

cluster-storage-operator

OCPBUGS-67622: Bump logrus to v1.8.3 #656
OCPBUGS-33468: Fix problem-detector proxy setting #473
OCPBUGS-21284: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #406
OCPBUGS-18132: Add patch for allowing configmap updates via clusterrole #396
OCPBUGS-19036: Fix PodStartupStorageOperationsFailing alert #397
OCPBUGS-15378: decrease severity for MultipleDefaultStorageClasses alert #383
Full changelog

cluster-update-keys

NO-ISSUE: Updating ose-cluster-update-keys-container image to be consistent with ART for 4.13 #78
OCPBUGS-43886: keys: Update Red Hat keys to use SHA256 signatures #67
Adding the new CI Signer public key #50
Full changelog

cluster-version-operator

OCPBUGS-45332: deps: bump golang.org/x/net to 0.31.0 #1121
OCPBUGS-27049: pkg/cvo/availableupdates: Only bump LastAttempt on Cincinnati pulls #1019
OCPBUGS-20744: [4.13] Bump http-related deps #989
OCPBUGS-19472: Reconcile Volumes in SCCs and flag Upgradeable=False when detecting modified SCC #969
OCPBUGS-20321: pkg/cvo/sync_worker: Always enable the DeploymentConfig capability #981
OCPBUGS-19828: pkg/clusterconditions/promql: Warm cache with 1s delay #974
OCPBUGS-20263: pkg/clusterconditions/cache: Avoid panic on all-fresh-cache evaluation #980
OCPBUGS-16613: Add admin-gate ack-4.13-kube-1.27-api-removals-in-4.14 #948
Full changelog

console

CONSOLE-5011: migrate to yarn berry #16083
NO-JIRA: Bump builder image to v29 #15989
OCPBUGS-74437: Bump lodash to latest #15972
OCPBUGS-44160: bump dompurify to latest #15594
OCPBUGS-57100: Add all files to vendor regardless of gitignore #15136
OCPBUGS-54892: Show Observe section without PROMETHEUS and MONITORING flags #14960
OCPBUGS-45292: A value submitted in From view is wrapped with single quotation after switching to Yaml view. #14573
OCPBUGS-44356: Application creation fail when manually entering input scaling value in local setup #14509
OCPBUGS-45197: Edit the secret and add the Chinese in the web-console, garbled characters will be displayed #14552
OCPBUGS-44585: Need to allow blank for Project/namespace when setting SA Subject in ‘Project access tab’ #14497
OCPBUGS-36557: Increase login flow state paramater length/entropy #14483
OCPBUGS-42951: The filepath including leading slash makes error during parsing devfile using Gitlab #14383
OCPBUGS-41594: Redirects to new PipelineRun logs URL from old PipelineRun logs URL #14263
OCPBUGS-35259: fix vCenter cluster being empty #13952
OCPBUGS-32147: Bump graphql-go to v1.3.0 #13922
OCPBUGS-33978: Helm Plugin’s Catalog incorrectly renders a single index entry into multiple tiles #13872
OCPBUGS-34342: Fix PipelineRun Logs tab navigation #13890
OCPBUGS-24395: Extra space is in the translation text(Chinese) of ‘Create rolebinding’ and ‘replicate rolebinding’ #13405
OCPBUGS-33777: restrict Masthead logo to max-height to 60px #13860
OCPBUGS-33749: Add visual connector between VMs and non VMs workloads #13857
OCPBUGS-33382: Routes created by devfiles do not always use HTTPS #13827
OCPBUGS-33650: fix issues with Edit Route form #13851
OCPBUGS-32500: PipelineRuns in Console show wrong status or load indefinitely #13780
OCPBUGS-31077: Pipeline Name gets changed to “new-pipeline” on the Edit Pipeline YAML/Builder #13683
OCPBUGS-31595: Fix operands list endpoint. #13714
OCPBUGS-29063: add additional check to determine if file is binary #13579
OCPBUGS-28788: Copy response code from proxied plugin requests #13561
OCPBUGS-29243: Add a new allowInsecure option to the internet proxy #13593
OCPBUGS-27406: Add Pipeline metrics tab using plugin #13525
OCPBUGS-23483: add access to create, edit and delete silences for developer user from developer perspective #13349
OCPBUGS-25427: Fix plugin proxy handler #13449
OCPBUGS-25465: fix runtime error on Node details Overview when Machin… #13452
OCPBUGS-25146: add access review for impersonate #13437
OCPBUGS-24591: ConsolePlugin metrics must no longer be grouped by the vendor #13424
OCPBUGS-22241: Save also the location.search and .hash values in localStorage to restore them after login #13271
OCPBUGS-24240: Subsequent PipelineRuns take initial PipelineRun name into account #13385
OCPBUGS-23497: Cannot Edit Shipwright Build #13352
OCPBUGS-11316: Fix description for BuildAdapter SDK extension #12703
OCPBUGS-22986: Correct logout process #13310
OCPBUGS-23065: remove expandable toggle for conditional update risk d… #13316
OCPBUGS-22784: add support for new features annotations while preservi… #13299
OCPBUGS-19532: use active namespace in Create cta href of create action for operator backed #13179
OCPBUGS-18271: update the KnativeServing API version to v1beta1 for global-config extension #13112
OCPBUGS-20232: show all the legends for Pipeline metrics in PipelineRun TaskRun Duration chart #13224
OCPBUGS-20231: fetch TaskRuns without selector and reduces the get TaskRuns requests #13223
OCPBUGS-20330: Check if filtered object contains name property #13227
OCPBUGS-13285: add multipath device type to LocalVolumeSet #12804
OCPBUGS-17481: Fix that “Delete application” doesn’t work in topology when Pipelines operator is not installed #13083
OCPBUGS-18764: Fixed Edit Application form for Knative Services #13147
OCPBUGS-18538: OCP console mandate secret for repository creation #13135
OCPBUGS-18679: [knative] Don’t rely on openshift/hello-openshift as a sample image #13140
OCPBUGS-18289: Not able to import the repository with .tekton directory and func.yaml file present #13116
OCPBUGS-18443: Fix crash when filtering the quick start catalog #13127
OCPBUGS-18312: Web console slowness on Project>Project access page #13119
OCPBUGS-18335: Fix DeploymentConfig list performance issues by lazy loading their ReplicationControllers #13120
OCPBUGS-17876: Fix topology crash when a console.topology/data/factory extension tries to resolve a resource with version from the CRDs which doesn’t exists #13095
OCPBUGS-16668: Dynamic plugin translation support for plurals broken #13041
OCPBUGS-17181: Creation of GH webhook and attaching it to repo while importing from git using PAC #13060
OCPBUGS-16040: fix bug where binary secret values are corrupted on edit and add test coverage #13048
OCPBUGS-16659: Fix RTE in bridge. #13038
OCPBUGS-16158: “Duplicate RoleBinding” leads to “Unsupported value” error #13008
OCPBUGS-16434: Fix stop PLR option #13031
OCPBUGS-14265: Regression: OpenShift Console no-longer filters SecretList when displaying ServiceAccount #12865
OCPBUGS-13641: Do not fetch catalog sources on CSV or Subscription details pages. #12811
OCPBUGS-16421: When removing the project owner from the project in GUI, instead of that user, the group (the default group added as project admin through the project template) will be removed. #13030
OCPBUGS-15998: Upload JAR file does not work if the Cluster Samples Operator is disabled #12992
OCPBUGS-15810: only show pipelines doc link for downstream #12981
OCPBUGS-15982: get Kamelets from the camel-k-operator namespace as well #12988
OCPBUGS-16244: Fix operator backed catalog page when copied CSVs disabled #13019
OCPBUGS-15194: Remove tech preview badge from Pipeline repository pages #12916
OCPBUGS-10326: re-enable operator-install-single-namespace.spec.ts test #12653
OCPBUGS-15848: The upgrade Helm Release tab in OpenShift GUI Developer console is not refreshing with updated values. #12976
OCPBUGS-15890: Use proxy with web socket connection and monitoring dashboard #12978
OCPBUGS-15720, OCPBUGS-15721, OCPBUGS-15722: Helm Chart installation form hangs on create if JSON-schema is using 2019-09 or 2020-20 standard revisions #12963
OCPBUGS-14426: account for single object in status.conditions instead… #12875
OCPBUGS-14267: Add Pipeline metrics unsupported empty page #12864
OCPBUGS-15410: Add Git Repository (PAC) doesn’t setup GitLab and Bitbucket configuration correct #12936
OCPBUGS-15787: Remove access review check for PipelineResource from Pipeline section #12967
OCPBUGS-15228: Create helm release page doesn’t show a YAML editor when schema isn’t available (httpd-imagestreams chart) #12937
[release 4.13] OCPBUGS-15360: Serverless functions UI warning is misleading #12931
OCPBUGS-14166: Fixed Make Serverless Form Error #12857
OCPBUGS-14336: use service port name instead targetPort in the Pipeline Event listener route #12870
OCPBUGS-14310: Could not import multiple resources via JSON (while YAML supports this) #12868
OCPBUGS-15335: Delete annotation ‘tekton.dev/v1beta1TaskRuns’ when rerun the PLR #12927
OCPBUGS-15130: Helm Repository “Edit” button results in 404 #12909
OCPBUGS-14189: Corrected Labels for resolving the bug related to the Create Route Checkbox #12858
OCPBUGS-13642: Fix OLM k8sResourcePrefix descriptor dropdown behavior #12812
OCPBUGS-11974: Add page title to Devconsole pages #12844
OCPBUGS-15465, OCPBUGS-15481: Remove PipelineResource CRD check because it’s not installed with PO 1.11 anymore and disable operator-uninstall test #12949
OCPBUGS-14943: visiting Configurations page returns error Cannot read… #12897
OCPBUGS-12785: Project admin can update and view subscription from operator details page #12780
OCPBUGS-14574: only copy workload annotations to debug pod #12879
OCPBUGS-14258: Add vSphere cluster field. #12862
OCPBUGS-14195: Topology UI doesn’t recognize Serverless Rust function for proper UI icon #12860
OCPBUGS-10527: When there are 2 pipelines displayed in the dropdown menu, selecting one, unchecks the Add Pipeline checkbox #12658
OCPBUGS-14165: propagate labels to pipeline resources #12856
Full changelog

console-operator

OCPBUGS-77995: [release-4.13] NO-JIRA: update go mod dependency for konflux #1118
OCPBUGS-18674: Reset console operator’s conditions #894
OCPBUGS-30599: Disable HTTP/2 for webhook #875
OCPBUGS-21008: [release-4.13] Bump library-go and golang.org/x/net #866
OCPBUGS-6208: Updating openshift-enterprise-console-operator images to be consistent with ART #872
OCPBUGS-24591: ConsolePlugin metrics must no longer be grouped by the vendor #821
OCPBUGS-22333: Make enabled plugins unique #805
OCPBUGS-18972: Manual backport of #761 #793
OCPBUGS-18192: Add haproxy timeout annotation to console routes #787
OCPBUGS-16241: Add missing watch permission for helm-chartrepos-viewers #778
OCPBUGS-14039: Backport #774 and #763 #779
Full changelog

container-networking-plugins

ART-13080: Fix Hermeto build issues #197
OCPBUGS-20594: build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 [backport 4.13] #130
OCPBUGS-17728: Default CNI binaries to RHEL 8 #117
Add rhel9 binary #102
Full changelog

coredns

OCPBUGS-60804: Bump github.com/golang/glog to v1.2.4 #150
OCPBUGS-38431: UPSTREAM: 6354: openshift: key cache on Checking Disabled (CD) bit #129
OCPBUGS-28205: UPSTREAM: 6277: openshift: Fix OCPBUGS-28205 #113
OCPBUGS-21046: UPSTREAM: <carry>: openshift: Address CVE-2023-39325 #102
OCPBUGS-19985: UPSTREAM: <carry>: openshift: Fix OCPBUGS-19985 #97
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-58888: CARRY: don’t ignore json files #344
OCPBUGS-52414: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.26 into release-4.13 #313
Switch to a new CI #2444
update tags to v1.26.1 #2119
update tags to v1.26.0 release #2070
And 31 elided commits (e.g. from squash or rebase merges)
Full changelog

csi-driver-manila-operator

OCPBUGS-67629: Bump logrus #254
OCPBUGS-26224: Fix selector for manila-csi-driver-controller-metrics service #224
OCPBUGS-16250: Add management workloads annotations #195
OCPBUGS-17160: Don’t cache OpenStack client #196
Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

OCPBUGS-28953: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #168
OCPBUGS-23116: Should reference configmaps instead of secrets #153
OCPBUGS-20719: bump golang.org/x/net to v0.17.0 #147
OCPBUGS-12484, OCPBUGS-12527, OCPBUGS-14505: Mitigating CVE-2022-41723 #140
Full changelog

csi-driver-shared-resource-operator

OCPBUGS-28958: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #104
OCPBUGS-20806: bump golang.org/x/net to v0.17.0 #87
Full changelog

csi-external-attacher

OCPBUGS-21161: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #61
OCPBUGS-16637: [release-4.13] UPSTREAM: 415: fix: CVE-2022-41723 #56
Full changelog

csi-external-provisioner

OCPBUGS-20759: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #73
OCPBUGS-16609: [release-4.13] UPSTREAM: 880: Bump golang.org/x/net #67
Full changelog

csi-external-resizer

OCPBUGS-20908: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #148
OCPBUGS-16639: [release-4.13] UPSTREAM: 268: Bump golang.org/x/net #143
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-29728: cherry-pick:release-4.13: OCPBUGS-29244 Update VolumeSnapshot and VolumeSnapshotContent using JSON patch #141
OCPBUGS-21011: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #110
OCPBUGS-16638: [release-4.13] UPSTREAM: 815: updated go module files #103
Full changelog

csi-livenessprobe

OCPBUGS-20636: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #51
OCPBUGS-16600: [release-4.13] UPSTREAM: 179: fix: CVE-2022-41723 #46
Full changelog

csi-node-driver-registrar

OCPBUGS-20686: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #53
OCPBUGS-16608: [release-4.13] UPSTREAM: 284: Bump golang.org/x/net #48
Full changelog

docker-builder

OCPBUGS-43295: Buildah dependency bump to 1.29.5 #460
OCPBUGS-43191: runc library bump to 1.1.12 #439
OCPBUGS-48836: skipping some unit tests to avoid failures as they are duplicate #434
OCPBUGS-48655: Add new team members to the OWNERS file #431
Replace ‘coreydaley’ with ‘sayan-biswas’ #407
BUILD-854: Add adambkaplan as approver #405
OCPBUGS-22468: [release-4.13] Bump github.com/sigstore/rekor #374
OCPBUGS-23021: Add -p flag to cp command to preserve timestamps #371
OCPBUGS-20709: [release-4.13] Bump golang.org/x/net #363
OCPBUGS-15606: Add the git-lfs package #352
OCPBUGS-10002, OCPBUGS-8159, OCPBUGS-8191: Mitigate CVE-2023-26054 #348
Full changelog

docker-registry

OCPBUGS-53653: bump jwt and oauth dependencies #436
OCPBUGS-19655: increase rest.Config QPS and Burst #383
OCPBUGS-18321: bump docker-distribution #376
Full changelog

egress-router-cni

OCPBUGS-11648: update go-yaml to v2.4.0 #68
Add rhel9 binary #71
Full changelog

etcd

OCPBUGS-32920: Revert “Merge pull request #262 from Elbehery/rebase-etcd-3.5.13-open… #266
OCPBUGS-31653: Rebase etcd 3.5.13 openshift 4.13 #262
ETCD-537: Revert “bump build root go1.20” #263
OCPBUGS-28734: Rebase etcd 3.5.12 openshift 4.13 #245
ETCD-537: bump build root go1.20 #252
OCPBUGS-26925: Rebase etcd 3.5.11 openshift 4.13 #239
OCPBUGS-22697: [4.13] Carrying fixes for CVE-2023-44487 #225
OCPBUGS-18497: Updating ose-etcd images to be consistent with ART #214
OCPBUGS-18398: UPSTREAM <carry>: update build images to rhel9 #212
OCPBUGS-15859: [4.13] Rebase openshift/etcd to 3.5.9 #204
Full changelog

gcp-cloud-controller-manager

OCPBUGS-21303: Bump golang.org/x/net to v0.18.0 #43
OCPBUGS-12603: Bump x/net package to v0.10.0 #32
Full changelog

gcp-cluster-api-controllers

OCPBUGS-21398: Bump golang.org/x/net to v0.17.0 #204
OCPBUGS-12604: Bump x/net package to v0.10.0 #196
Full changelog

gcp-machine-controllers

OCPBUGS-78182: hermetic 4.13 #142
OCPBUGS-56916: Disable shielded VMs for non-UEFI disks #120
OCPBUGS-24563: Reduce metrics cardinality. #74
OCPBUGS-20851: Bump x/net package to v0.18.0 #68
Full changelog

gcp-pd-csi-driver

OCPBUGS-20735: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #46
OCPBUGS-16331: 4.13: UPSTREAM: 1169: Fix CVE-2022-41723 #38
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-20827: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #88
OCPBUGS-16250: Add management workloads annotations #80
Full changelog

haproxy-router

OCPBUGS-43095: add duplicate_te_header_total metric #626
OCPBUGS-34673: Properly handle rewrite-target annotation #608
OCPBUGS-33911: Reject routes with MD5 certs #600
OCPBUGS-33448: Count active services before setting weight to 1 #594
OCPBUGS-33280: Route ‘haproxy.router.openshift.io/timeout’ value is not validated #591
OCPBUGS-21117: Bump golang.org/x/net to v0.17.0 to address CVE-2023-39325 #531
OCPBUGS-17762: haproxy/template: mitigate CVE-2023-40225 #506
OCPBUGS-17107: properly handle weight=0 #501
OCPBUGS-13964, OCPBUGS-13967: Handle mTLS CRLs, and fix accidental CRL duplication #485
Full changelog

hyperkube, pod

OCPBUGS-67556, OCPBUGS-67652: CVE-2025-65637 - bump github.com/sirupsen/logrus to v1.9.3 [4.13] #2626
OCPBUGS-77800: UPSTREAM: 133262: Remove permafailing tests using an expired GCP project #2611
OCPBUGS-41678: mount-utils: treat syscall.ENODEV as corrupted mount #2083
OCPBUGS-37280: UPSTREAM: 126104: Add funcs in pkg/filesystem/util that can actually … #2045
OCPBUGS-28660: UPSTREAM: <carry>: kubelet/cm: use MkdirAll when creating cpuset to ignore file exists error #1875
UPSTREAM: <drop>: Bump golang.org/x/net to v0.23.0 #1938
OCPBUGS-31505: Update to kubernetes 1.26.15 #1930
Address CVE #14
OCPBUGS-29663: Update to kubernetes 1.26.14 #1889
OCPBUGS-12210: Prevent partially filled HPA behaviors from crashing kube-controller-manager #1876
OCPBUGS-27370: Update to kubernetes 1.26.13 #1859
OCPBUGS-25814: Fix device uncertain errors on reboot - 4.13 #1831
OCPBUGS-25988: Update to kubernetes 1.26.12 #1839
OCPBUGS-25767: legacy-cloud-providers: prevent index out-of-range in getNextUnitNumber #1834
OCPBUGS-23521: UPSTREAM: <carry>: support for both icsp and idms objects #1798
OCPBUGS-23567: Update to kubernetes 1.26.11 #1809
OCPBUGS-18829: cm: reorder setting of sched_load_balance for sandbox slice #1696
OCPBUGS-23287: UPSTREAM: 121881: Use golang library instead of mklink #1802
openshift-hack: Fix sporadic 141 errors in build-rpms #1773
OCPBUGS-20114: UPSTREAM: <carry>: Do not allow nodes to set forbidden openshift labels #1746
OCPBUGS-21063: [release-4.13] UPSTREAM: 121126: [1.26][CVE-2023-39325] .: bump golang.org/x/net to v0.17.0 #1759
OCPBUGS-19885: UPSTREAM: 120789: change rolling update logic to exclude sunsetting nodes #1725
OCPBUGS-18287, OCPBUGS-19480: Update to Kubernetes 1.26.9 #1715
OCPBUGS-18677: UPSTREAM: <carry>: Force using host go always and use host libriaries #1689
OCPBUGS-17187: Update to Kubernetes 1.26.7 #1649
OCPBUGS-17145: Increase service idle max timeout to 100 minutes #1657
OCPBUGS-15866: remove readiness check for cache exclusion #1625
OCPBUGS-15866: UPSTREAM: <drop>: hack/update-vendor.sh #1637
OCPBUGS-15246: Bump to k8s 1.26.6 #1610
OCPBUGS-8738: bump apiserver-lib-go #1611
OCPBUGS-14589: [release-4.13] UPSTREAM: 118383: bump cadvisor for upstream patch 3301 #1596
OCPBUGS-13747: 4.13: kubelet/cm: disable cpu load balancing on slices when using static cpu manager policy #1580
OCPBUGS-14048: Bump to k8s 1.26.5 #1586
Full changelog

hypershift

OCPBUGS-77756: fix vendor for hermetic 4.13 #7822
OCPBUGS-53901: bump golang-jwt v4 #5948
OCPBUGS-39184: fix: bump github.com/IBM/go-sdk-core/v5 #4627
OCPBUGS-41515: set Konnectivity cipher suites #4284
NO-JIRA: hack: make the e2e script generic #4202
HOSTEDCP-1146: cpo: use CPO spec container image if it is a sha256 reference #3296
OCPBUGS-22971: Add konnectivity-proxy container to CNO #3167
OCPBUGS-23455: Use the same etcd snapshot for all replicas during etcd restore #3205
NO-JIRA: Red Hat Trusted App Pipeline purge hypershift-operator-release-413 #3217
chore(deps): update rhtap references (release-4.13) #3043
Update RHTAP references (release-4.13) #2996
OCPBUGS-17182: add need-management-kas-access label to olm-collect-profiles pods #2871
OCPBUGS-16225: Add missing probes to two services #2821
fix(olm): Use 4.13 catalog source images #2978
Updated secret permissions for openshift-route-controller-manager #2923
HOSTEDCP-1121: Ensure SG reconciliation for aws endpoint #2885
chore(deps): update rhtap references (release-4.13) #2921
Revert “HOSTEDCP-1110: [backport-4.13] Allow HCP Specification to Support ICSP & IDMS” #2931
chore(deps): update rhtap references (release-4.13) #2904
Update RHTAP references (release-4.13) #2866
HOSTEDCP-1046: Add ImageDigestMirrorSet to Config API comment #2870
HOSTEDCP-1046: Add IDMS to the list of valid config manifests #2863
Update RHTAP references (release-4.13) #2833
HOSTEDCP-1110: [backport-4.13] Allow HCP Specification to Support ICSP & IDMS #2839
OCPBUGS-15743: Let getMachinesForNodePool return machines ordered by creation Timestamp #2767
4.13: Add management cluster KAS network policy #2786
Leader election config update. #2801
OCPBUGS-16160: fix deletion bug when hostedzone is already deleted #2813
HOSTEDCP-1061: [release-4.13] Implement dedicated request serving nodes for HostedClusters #2809
Update RHTAP references (release-4.13) #2816
OCPBUGS-16057: use ignition-proxy Service to populate ignitionEndpoint with strategy NodePort #2798
OCPBUGS-14862 Improve clarity around hypershift operator permissions #2810
HOSTEDCP-1101: Add snyk-secret HO RHTAP scripts #2799
OCPBUGS-16125: [release-4.13] Update vendored dependencies #2797
OCPBUGS-15774: autoscaling balance similar groups #2805
OCPBUGS-15965: Reject VPCE Connections during VPCE Service cleanup #2789
Update RHTAP references (release-4.13) #2751
OCPBUGS-15171: Skip AWS resource deletion for ‘Unknown’ OIDC state #2701
HOSTEDCP-1008: Add NodePoolTransitionSeconds metric #2758
OCPBUGS-15281: Check OwningIngressController also in Labels #2715
HOSTEDCP-1060: refactor ignition-server reconcilation and add ignition-server proxy #2748
HOSTEDCP-1073: enforce blocked rollout of HCP #2735
HOSTEDCP-1003: Set AWS conditions only for AWS platform #2670
OCPBUGS-15268 properly handle user CA bundle not existing #2710
OCPBUGS-15301: [release-4.13] fix(oauth): Do not proxy IBM Cloud IAM endpoints #2696
OCPBUGS-14030: Include default ingress CA in root CA bundle #2599
OCPBUGS-14490: Enable HCCO to reconcile over the OperatorHub’s disableAllDefaultSources object #2645
OCPBUGS-14801: Set DisableStrictZoneCheck = true in the AWS Cloud Provider config #2666
HOSTEDCP-1048: Add impersonate feature to the CLI and document HC dump procedure #2681
OCPBUGS-14872: Honor global ingress configuration LoadBalancer type on AWS #2677
OCPBUGS-14436: Add ClusterUpgradeDuration metric #2637
HOSTEDCP-1009: Allow external-dns image to be set in install cli #2652
Red Hat Trusted App Pipeline update hypershift-operator-release-413 #2641
Red Hat Trusted App Pipeline purge hypershift #2640
OCPBUGS-13735: Cluster-api SA can’t create events and fix permissions wrongly included #2610
OCPBUGS-14242: Remove external-dns –events flag #2621
OCPBUGS-14155: Reconcile oauthDeployment annotations even if kubeadmin secret is not found #2613
OCPBUGS-13399: Fix errors from HCP controller removeServiceCAAnnotationAndSecret() #2552
HOSTEDCP-1010: Set ETCD Storage Size as immutable field and equalised the default size among both api versions #2611
HOSTEDCP-947: Increases default etcd PV size to 8Gi #2569
HOSTEDCP-926: Send metric when HO/CPO decide to skip cloud resource deletion #2594
HOSTEDCP-975: Backport nodepools metrics #2601
Red Hat Trusted App Pipeline update hypershift #2603
Full changelog

ibm-cloud-controller-manager

OCPBUGS-24999: Add Snyk file to exclude vendor directory on scan #66
OCPBUGS-21137: Bump golang.org/x/net to v0.18.0 #56
OCPBUGS-12612: Update x/net to v0.7.0 #52
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-77213: [release-4.13] standardize build paths #127
OCPBUGS-59124: bump github.com/golang/glog to v1.2.4 #110
OCPBUGS-56066: tech debt: rework vendor patches #94
OCPBUGS-53909: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #87
OCPBUGS-36064: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #74
OCPBUGS-18143: [IBM VPC] failed provisioning volume in proxy cluster #47
OCPBUGS-21230: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #51
OCPBUGS-16378: 4.13: UPSTREAM: 157: K8S and grpc package upgrade #40
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-67656, OCPBUGS-67657: bump github.com/sirupsen/logrus to v1.8.3 #164
OCPBUGS-59874: [IBM VPC] set offlineExpansion to false in e2e test manifest #152
OCPBUGS-36070: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #123
OCPBUGS-21319: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #82
OCPBUGS-18143: [IBM VPC] failed provisioning volume in proxy cluster #76
OCPBUGS-16250: Add management workloads annotations #73
Full changelog

ibm-vpc-node-label-updater

OCPBUGS-56066: tech debt: rework vendor patches #51
OCPBUGS-53541: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #47
OCPBUGS-36010: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #43
OCPBUGS-21432: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #28
OCPBUGS-14073: UPSTREAM: 20: Bump (golang.org/x/net): to address CVE-2022-41723 #24
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-67291: [release-4.13] Fix incomplete vendor/ #135
OCPBUGS-36076: UPSTREAM: <carry>: Fix go-retryablehttp CVE - 4.13 #90
OCPBUGS-21418: UPSTREAM: <carry>: bump golang.org/x/net to v0.18.0 #66
Full changelog

ibmcloud-machine-controllers

OCPBUGS-78275: hermetic 4.13 #78
OCPBUGS-36082: Bump dependency for CVE #56
OCPBUGS-12616: Bump x/net to v0.7.0 #23
Full changelog

insights-operator

OCPBUGS-36475: properly encode the URL for the advisor links (#962) (#965) #962
OCPBUGS-33449: anonymization - externalIP can be nil (#931) (#933) (#935) #931
OCPBUGS-31991: bump golang.org/x/net version (#927) #927
OCPBUGS-28157: Add extra check in ids to bypass validations (#905) #905
gather etcd_server_slow metrics (#902) (#909) #902
OCPBUGS-23962: adds helm information gather (#868) (#883) #868
OCPBUGS-22958: adds cluster storageclasses gather (#858) (#875) #858
OCPBUGS-22953: create Prometheus rules programmatically according the… (#860) #860
OCPBUGS-22914: remove username & password config options (#859) #859
OCPBUGS-20750: update dependencies (#840) #840
Add cherry-pick from 4.14 (#848) #848
OCPBUGS-19476: update Insights report config logging (#828) #828
OCPBUGS-17661: workload info gatherer, add external image repo (#816) #816
OCPBUGS-14773: extend configmap gatherer to get gateway-mode-config (#788) (#791) #788
[release-4.13 ]OCPBUGS-15031: fix the config serialization & add test (#794) (#796) #794
OCPBUGS-14318: gather PDBs only from openshift namespaces (#786) #786
Full changelog

ironic

OCPBUGS-69791: Bump eventlet version to 0.33.1-7 #766
OCPBUGS-48146, OCPBUGS-48595: Bump jinja2 to 3.0.1-6.el9.2 #626
OCPBUGS-43952, OCPBUGS-43960: Bump python-waitress [4.13] #608
OCPBUGS-37764, OCPBUGS-39384: Include fixes for CVE-2024-44082 #585
OCPBUGS-38509: set min version for python3-webob #557
OCPBUGS-33374: bump werkzeug #543
OCPBUGS-34898: bump jinja2 #538
OCPBUGS-37116: Update eventlet version #525
OCPBUGS-32363: [4.13] remove unused prometheus-exporter #488
OCPBUGS-32387: Use unix sockets by default for reverse proxy communication #476
OCPBUGS-29190: Fix Inspector iPXE config for IPv6 addresses #453
OCPBUGS-23978: Ironic side of external_http_url (METAL-163) is not wired in correctly #430
OCPBUGS-23506: Uplift eventlet version #427
OCPBUGS-23356: Upgrade werkzeug dependency #422
OCPBUGS-19078: Handle Eject DVD 4.13 #416
OCPBUGS-23072: Use bash process substitution instead of pipe #413
OCPBUGS-17837: Fix PROVISIONING_MACS unbound #393
OCPBUGS-17158: [4.13] Update packages with latest bugfix #388
OCPBUGS-17551: Expand regex for fcos/okd packages list #390
Bug OCPBUGS-15235: Incrementing Ironic versions to include backported SNMPv3 FIPS fix. #383
OCPBUGS-13587: Add python-flask dependency #372
OCPBUGS-14135: ironic.conf.j2: Bump min_command_interval to 30 on SCOS #378
Bug OCPBUGS-13334: Bump ironic version to include fix to OCPBUGS-13334. #366
Full changelog

ironic-agent

OCPBUGS-69776: adding eventlet-0.33.1-7 #235
OCPBUGS-39384: Include fixes for CVE-2024-44082 #164
OCPBUGS-38509: set webob and bump werkzeug #152
OCPBUGS-29725: Always add ignition to set hostname on /etc/hostname #111
OCPBUGS-19006: backport hostname fixes #89
Switch to udevadm command install instead of package [OKD] #83
“Bug OCPBUGS-15777: Switch to udevadm command install instead of package” #81
Full changelog

ironic-machine-os-downloader

OCPBUGS-15734: Binary should be compiled on rhel9 #91
Full changelog

ironic-static-ip-manager

OCPBUGS-14315: Flush addresses on provisioning interface with global scope only #36
Full changelog

k8s-prometheus-adapter

OCPBUGS-21457: upgrade golang.org/x/net to 0.17.0 to address CVE #90
OCPBUGS-20405: limit number of simultaneous client requests #78
Full changelog

keepalived-ipfailover

OCPBUGS-6236: Updating openshift-enterprise-egress-router images to be consistent with ART #121
Full changelog

kube-proxy, sdn

OCPBUGS-55758: Handle openshift-host-network namespace as special when it modifies #656
OCPBUGS-20771: update x/net to v0.17.0 #590
OCPBUGS-22932: Change the permission of 80-openshift-network.conf to 600 #582
OCPBUGS-14504: Use the ovsver build arg to infer the openvswitch short version number #572
OCPBUGS-15977: Dockerfile: keep a RHEL-8 CNI shim binary in the default /opt/cni/bin dir #558
OCPBUGS-15977: Dockerfile changes to build both rhel8 and rhel9 binaries #557
OCPBUGS-14278: fix possible concurrent map read/write #550
Full changelog

kube-rbac-proxy

OCPBUGS-31987: CVE-2023-45288 [4.13] #107
OCPBUGS-20702: v0.15.0 downstream release 4.13 #84
OCPBUGS-12513: go.mod: update golang.org/x/net to v0.7.0 #68
Full changelog

kube-state-metrics

OCPBUGS-20778: bump x/net to v0.17.0 #102
Full changelog

kube-storage-version-migrator

NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-13). #230
Full changelog

kubevirt-csi-driver

“OCPBUGS-29791: [release-4.13] Address CVE-2024-1725: Restrict access to infrastructure PVCs by requiring matching infraClusterLabels on tenant PVCs” #35
Full changelog

kuryr-cni, kuryr-controller

Bug OCPBUGS-16340: Fix np retry #738
OCPBUGS-15457: Remove unneeded grpcio dependencies from RPM #735
Full changelog

libvirt-machine-controllers

OCPBUGS-77199: Fix incomplete vendor #305
“OCPBUGS-19927: libvirt: Don’t force use of virtio console” #268
Full changelog

machine-api-operator

OCPBUGS-78270: hermetic 4.13 #1469
OCPBUGS-67672: bumped logrus to v1.9.3 #1461
OCPBUGS-43856: install/0000_30_machine-api-operator_00_credentials-request: Set skipServiceCheck again for GCP #1304
OCPBUGS-32015: Fix zone tag value reconciliation for vSphere machines #1225
OCPBUGS-31994: Update x/net to v0.25.0 #1245
NO-JIRA: [release-4.13] Fix data race conditions in unit tests #1254
OCPBUGS-25165: Add Snyk file to exclude vendor directory on scan #1194
OCPBUGS-24277: Update reference URL #1188
OCPBUGS-24277: Use docs URL instead of KCS article #1181
OCPBUGS-21513: Bump golang.org/x/net to v0.18.0 #1175
OCPBUGS-12626: Update golang.org/x/net dependency #1148
Full changelog

machine-config-operator

OCPBUGS-61234: Trigger a new build #5278
OCPBUGS-59125: [release-4.13] Bump golang/glog to fix CVE-2024-45339 #5175
OCPBUGS-44206: Panic seen in CI job for MCC pod #4680
OCPBUGS-38372: Revert “MCD-pull: run after network-online.target in Azure” #4527
OCPBUGS-38295: daemon/update: disable systemd unit before overwriting #4522
OCPBUGS-37783: Openshift uncordoned compute-node that was intentionally cordoned #4507
OCPBUGS-37160: MCD-pull: run after network-online.target in Azure #4474
OCPBUGS-36782: daemon: Handle correctly OS Version for 4.1 and 4.2 bootimages #4464
OCPBUGS-32208: Run resolv-prepender entirely async #4314
OCPBUGS-33327: make verify should use MCO’s kube version #4352
OCPBUGS-29721: Add existing kubeletconfig/ctrcfg mc-name-suffix annotation #4206
OCPBUGS-30285: set nodeStatusReportFrequency #4243
OCPBUGS-28740: crio: drop automatic image cleanup on upgrades #4154
OCPBUGS-29151: fix nodeStatusUpdateFrequency #4170
OCPBUGS-24661: daemon: Add support for new nmstate logic #4036
OCPBUGS-27816: use *resource.Quantity to not automatically set 0 #4141
OCPBUGS-22272, OCPBUGS-27172: kubelet: fix kubelet labels #4120
OCPBUGS-27096: Azure Run ovs-configuration.service before dnsmasq.service #4115
OCPBUGS-19658: After dual-stack conversion reconcile IPFamilies #3935
OCPBUGS-23468: support icsp and idms objects #4027
OCPBUGS-23536: Introduce kubelet-dependencies.target and firstboot-osupdate.target #4043
OCPBUGS-21052: Update library-go and kube deps to latest version #4011
OCPBUGS-22205: Consider ingress VIPs when selecting node IP #3991
OCPBUGS-18031: on-prem: run resolv-prepender on NM reapply event #3880
OCPBUGS-22412: bootstrap_test: always set APIVersion and Kind for DNS #4002
OCPBUGS-21721: install/0000_90_machine-config-operator_90_deletion: Drop this file #3983
OCPBUGS-20333: resolv-prepender: avoid pulling baremetalRuntimeCfgImage again if it … #3962
OCPBUGS-18803: Soften grep pattern for ingress default router #3908
OCPBUGS-19958: [release-4.13] Backport logspam PRs #3950
OCPBUGS-19675: daemon: always use podman cp to copy extensions container content #3938
OCPBUGS-19400: install: Recreate and delayed default ServiceAccount deletion #3923
OCPBUGS-19509: Ignore invoking nbctl calls if its SDN #3929
OCPBUGS-19414: The kubeconfig copied on to each node has 644 permissions #3924
OCPBUGS-18159: Ensure azure-routes hack for internalLB hairpin traffic works for SGW #3904
OCPBUGS-16218: Prevent NM from unsetting the hostname #3805
OCPBUGS-17997: SSHkeys fails to write on upgrade to 4.13.rc3 #3879
OCPBUGS-18076: daemon: create /etc/systemd/network directory on node #3888
OCPBUGS-17769: Agent-based install process the container machine-config-controller will be oom #3868
OKD-174: Dockerfile: OKD: Reenable extensions image on SCOS #3845
OCPBUGS-17430: The machine-config-controller pod restart in SNO+1 causing daemonsets to restart #3841
OCPBUGS-17163: daemon: Always replace binary #3833
OCPBUGS-16888: daemon: Make binary writing idempotent #3826
OCPBUGS-16888: daemon: no need to reexec when target and source rhel version is same #3824
OCPBUGS-16622: daemon: Copy matching binary to host, re-exec with it #3812
OCPNODE-1717: Update config node spec while explicitly updating the cgroups mode #3793
4.13: Revert rhel9 binaries builds #3802
OCPBUGS-14459: daemon: Remove noisy log message #3723
OCPBUGS-15580: 4.13: Dockerfile: update rhel7 nmstate pin #3764
OCPBUGS-15463: Minor fix to support protectKernelDefaults field in Kubelet Config #3757
4.13: Dockerfile: use proper rhel9 image #3771
4.13: use rhel9 builder for daemon binary #3760
OCPBUGS-13311: daemon: write certs in firstboot-complete path #3702
OCPBUGS-13404, OCPBUGS-14298: Dockerfile: pin to nmstate-2.2.9-6.rhaos4.13.el8 #3716
OCPBUGS-14850: Allow userfaultfd syscall to be used by unprivileged users #3743
OCPBUGS-13974: MCO-496: Support ignition versions 3.3 + 3.4 but keep version 3.2 as default #3714
Full changelog

machine-image-customization-controller

OCPBUGS-67658: bumped logrus to v1.9.3 #160
OCPBUGS-27089: configurable ironic agent vlan creation #117
OCPBUGS-21549: Uplift x/net to v0.17.0 #105
OCPBUGS-19006: Pass BareMetalHost name to IPA (take 2) #98
OCPBUGS-14250: Watch networkData Secrets for changes #95
Full changelog

machine-os-images

OCPBUGS-54172: Change rhcos release browser url #60
Full changelog

multus-admission-controller

OCPBUGS-60293: Bump github.com/golang/glog to v1.2.4 #106
OCPBUGS-60841: Update owners #108
OCPBUGS-21353: Update go.mod for CVE-2023-39325 [Release-4.13] #72
OCPBUGS-13709: Bump golang.org/x/net from 0.0.0-20211209124913-491a49abca63 to 0.7.0 #68
Full changelog

multus-cni

OCPBUGS-28020: Fix SAST scan issues for multus-cni-container [4.13] #224
OCPBUGS-21076: Update go.mod for CVE-2023-39325 [Release-4.13] #195
Add rhel9 binary for multus #169
OCPBUGS-8398: Multus entrypoint should regenerate kubeconfig if secret changes [backport 4.13] #154
OCPBUGS-13759: Bump golang.org/x/net from 0.1.0 to 0.7.0 (#1039) #161
Full changelog

multus-networkpolicy

OCPBUGS-12641: CVE-2022-41723: Update vendors to fix dependabot alerts #28
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

multus-route-override-cni

Add rhel9 binary #37
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-37941, OCPBUGS-37944: [release-4.13] Stateful fixes #306
OCPBUGS-27958: Enable reconciler configuration #241
OCPBUGS-27367: [release-4.13] Backport fix assignment #236
OCPBUGS-21512: update golang.org/x/net to v0.17.0 #208
OCPBUGS-4417: Denormalize IP name before checking if pod is alive [Backport 4.13] #168
OCPBUGS-15956: Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #138
Bug 16002: Change default binary to RHEL8 image #144
Restores RHEL specific binary build in dockerfile and updates to rhel9/8 #139
Full changelog

must-gather

OCPBUGS-48085: Update owners #476
OCPBUGS-19928: [release-4.13] Add csi-proxy logs collection in must-gather for Windows nodes #383
Full changelog

network-interface-bond-cni

Add rhel9 binary #56
Full changelog

network-metrics-daemon

OCPBUGS-59699: Bump github.com/golang/glog to v1.2.4 (#117) #117
[release 4.13] OCPBUGS-60541: Replace e2e test image (#132) #132
swtich golint install method (#129) #129
Correct 4.16 owners file (#130) #130
Added METRIC_TEST_IMAGE var (#90) #90
Update the k8s dependencies to 1.26.10 (#83) #83
Full changelog

network-tools

Dockerfile: move to RHEL9 base image #83
Full changelog

nutanix-cloud-controller-manager

OCPBUGS-12645, OCPBUGS-20879: bump golang.org/x/net to v0.17.0 #36
Full changelog

nutanix-machine-controllers

OCPBUGS-78157: hermetic 4.13 #131
OCPBUGS-51856: Fixing CVE-2025-22868 #119
OCPBUGS-47262: fixing CVE-2024-45338 #115
OCPBUGS-20976: bump golang.org/x/net to v0.17.0 #86
OCPBUGS-24563: Reduce metrics cardinality #59
OCPBUGS-25459: Fix CI by running tests natively by default #60
Full changelog

oauth-apiserver

OCPBUGS-31996: bump x/net to 0.24.0 #112
OCPBUGS-28674: Fix HTTP/2 deps for release-4.13 #102
Full changelog

oauth-proxy

OCPBUGS-16805: Updating golang-github-openshift-oauth-proxy images to be consistent with ART #261
Full changelog

oauth-server

AUTH-443: update osin to latest version #139
Full changelog

oc-mirror

changes the owners file (#1012) #1012
OCPBUGS-48513: e2e: use same version of crane as in go.mod (#1025) #1025
Bump version to include v5.11.0 of go-git (#823) #823
OCPBUGS-385: Capability to override default channel (#749) (#791) #749
OCPBUGS-19429: Fix cross EUS channel upgrade path calculation (#775) #775
OCPBUGS-21460: Fix CVE-2023-44487 and CVE-2023-39325 (#714) #714
Fix OCPBUGS-17546: pod catalogsource generated by oc-mirror will crashloopBackOff randomly (#700) #700
Fix OCPBUGS-14402 (#675) #675
OCPBUGS-18556: operator catalogs from oc-mirror fail to deploy because of invalid caches (#691) #691
OCPBUGS-18106: manual cherrypick (#684) #684
OCPBUGS-17998: fix: ICSP with incorrect mirror path (#685) #685
OCPBUGS-17453: Fix “ OCI index found, but accept header does not support OCI indexes (#677) #677
OCPBUGS-16372: A variety of changes needed for correct operation with multi… (#661) #661
OCPBUGS-13871: fix: changes on help info content (#654) #654
Fix OCPBUGS-11840: ParseImageReference supports cases where both tag and digest are present in a ref (#637) #637
Removes Ross and adds Jeremy in the OWNER file (#645) #645
Full changelog

olm-rukpak

: OCPBUGS-27594,OCPBUGS-27679: Update go-git to v5.11.0 #75
OCPBUGS-23403: [release-4.13] Address http2 vulnerability #58
OCPBUGS-21363: [release-4.13] Bump golang.org/x/net to v0.17.0 #40
UPSTREAM: <carry>: add downstream owners #42
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

openshift-apiserver

OCPBUGS-78596: Fix image reference in TestImageStreamImportQuayIO [release-4.13] #622
OCPBUGS-76482: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.13] #613
OCPBUGS-32446: bump(x/net) to v0.23.0 #430
: OCPBUGS-21449: Enable HTTP/2 CVE mitigation #398
Full changelog

openshift-controller-manager

OCPBUGS-58035: Set node-pullsecrets volume to read-only to protect image pull credentials #402
OCPBUGS-57051: Empty proxy variables are causing issues during the build #388
OCPBUGS-48656: Add new team members to the OWNERS file #362
[release 4.13] OCPBUGS-38407, OCPBUGS-38408: Update opentelemetry dependency #326
OCPBUGS-41952: Add adambkaplan as approver #335
OCPBUGS-11091: mount build.Spec.Source.ConfigMaps for custom builder images #257
Full changelog

openshift-state-metrics

OCPBUGS-20723: bump x/net to v0.17.0 #108
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-67685: Bump logrus #190
OCPBUGS-21565: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #136
OCPBUGS-16250: Add management workloads annotations #125
OCPBUGS-17071: Fix SCC admission failure race during initial deployment #124
Full changelog

openstack-machine-api-provider

OCPBUGS-78174: hermetic 4.13 #166
OCPBUGS-34422: Ensure portSecurity is correctly set in the Instance Ports #119
Bug OCPBUGS-19460: Set controller’s SyncPeriod to 1 hour #85
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-61470: [release-4.13] Add NetworkPolicy as a supported kind #1053
OCPBUGS-61391: [4.13] e2e stability fixes #1086
OCPBUGS-46924, OCPBUGS-46931, OCPBUGS-47311: x/net bump to v0.34.0 [release-4.13] #942
OCPBUGS-47507: CRD upgrade existing CR validation fix (#3442) #924
NO-ISSUE: [release-4.13] Backport e2e fixes #876
OCPBUGS-42146: adds paginating lister for evaluating CRs’ upgrade fitness versus new CRDs. #871
OCPBUGS-38254: [CARRY] perform operator apiService certificate validity checks directly #836
OCPBUGS-38608: (fix) Resolver: list CatSrc using client, instead of referring to registry-server cache (#3349) #843
OCPBUGS-32856: bump go-jose to v2.6.3 #780
OCPBUGS-35241: Unblock CI #772
OCPBUGS-27564, OCPBUGS-27569, OCPBUGS-27649, OCPBUGS-27654: bump go-git/v5 to 5.11.0 #682
OCPBUGS-28228: Registry Pod Controller Flag #672
OCPBUGS-27891: [CARRY] SSC RBAC #669
OCPBUGS-8653: bump golang-migrate to v4.16.1 (#1107) #649
OCPBUGS-20815: [release-4.13] fix apiserver vulnerability #616
OCPBUGS-22133: [release-4.13] Bump golang.org/x/net to v0.17.0 #589
OCPBUGS-18305, RHIBMCS-151: Copied csv listing backport #548
OCPBUGS-17791: opm: always serve pprof endpoints, improve server allocations (#1129) #540
Introduce DOWNSTREAM_OWNERS file #538
Allow cpb to be statically compiled / exempt from FIPS compliance #519
OCPBUGS-15589: fix dynamic conversion webhook #499
Full changelog

operator-marketplace

OCPBUGS-49430: Upgrade golang.org/x/net [release-4.13] #590
OCPBUGS-32074: update golang.org/x/net for CVE-2023-45288 #566
OCPBUGS-20977: [release-4.13] bump golang.org/x/net to 0.17.0 #549
OCPBUGS-19085: Updating marketplace-operator images to be consistent with ART #538
OCPBUGS-18502: remove a race condition #532
Full changelog

ovirt-csi-driver

OCPBUGS-23155: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #130
Full changelog

ovirt-csi-driver-operator

OCPBUGS-67725: Bump github.com/sirupsen/logrus to v1.8.3 #147
OCPBUGS-23241: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #127
OCPBUGS-16250: Add management workloads annotations #120
OCPBUGS-14653: set upgrade condition of operator to false #118
Full changelog

ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9

OCPBUGS-59934: Dockerfile: Remove ovs version pinning #2697
OCPBUGS-55950: Bump ovs and ovn to latest patch releases #2553
OCPBUGS-38264: [release-4.13] Bump OVSDBTimeout and make it configurable #2289
OCPBUGS-37119: EgressIP: Reload certificates for the grpc heatlhcheck server #2226
OCPBUGS-35100: [release-4.13] ipv6+all protocols conntrack flush #2200
OCPBUGS-34669, SDN-4186: Introduce a validating webhook for ovnkube-node #2053
OCPBUGS-29865: CVE-2022-41723: net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding #2095
OCPBUGS-33730: Improves service iptables efficiency on start up #2172
OCPBUGS-32988: Bumping OVS #2143
OCPBUGS-33421: [release-4.13] Full implementation of KEP-1669 ProxyTerminatingEndpoints + ETP=local fix #2130
OCPBUGS-33218: [release-4.13] OVN bump to 23.06.1-112 #2153
OCPBUGS-28983, OCPBUGS-30920: Update netpol namespace address sets usage to the old ways #2097
OCPBUGS-29851: Egress IP, Services: use all node IP addresses #2090
OCPBUGS-28630: Synchronize node primary address update #2036
OCPBUGS-25611: Avoid panic due to stale ACLs with 1013 priority #1987
OCPBUGS-27257: Ensure session affinity cleanup on backend removal #2022
OCPBUGS-27736: CARRY: Updates owners and adds Surya #2024
OCPBUGS-24419: OVNK/GW: Ignore headless services in syncServices #1971
OCPBUGS-23258: Update leaderelection config to allow retries #1992
OCPBUGS-26242: Fix Egress IP Deletion Handler to Prevent OVN Policy Leaks #2011
OCPBUGS-25923: Forward ICMP packets to OVN loadbalancer #2004
OCPBUGS-25224: [release-4.13] fixes MTU configuration on gateway router #1988
OCPBUGS-14799: Updating endpoints when using allocateLBNP=0, lgw mode fails #1940
OCPBUGS-25095: Fragment oversized reply packets in LGW mode #1983
OCPBUGS-24391: Limit OVN-Kubernetes RBAC permissions #1950
OCPBUGS-23014: Netpol retryFramework cleanup #1957
OCPBUGS-24263: Bump OVN to 23.06.1-39.el9fdp #1966
OCPBUGS-14314: Fix compilation error in e2e.go tests due to missing int32 parameter #1682
OCPBUGS-20047: Adjust python ssl library dependency check #1924
OCPBUGS-18976: Update bridge flow cache when the host address changes #1873
OCPBUGS-18791, OCPBUGS-18792, OCPBUGS-19088, OCPBUGS-7406: Dockerfile: bump OVN to ovn23.06-23.06.1-8.el9fdp #1880
OCPBUGS-18672: Check libovsdbclient.ErrNotFound on wrapped errors #1861
OCPBUGS-19449: Do not return error if pod IP cannot be retrieved for podSelectorPodNeedsDelete and perf improvements #1893
OCPBUGS-18585: Fix OVN SNATing on GR by enabling gateway_mtu on rtoe port of GR #1855
OCPBUGS-17123: Remove stale egressip status entry #1793
OCPBUGS-18057: [release-4.13] Create egress firewall with one db transaction #1834
OCPBUGS-17910: Emit node events only when retry failure #1825
OCPBUGS-17503: [release-4.13] libovsdb: give monitor setup time to process than normal transactions #1807
OCPBUGS-13175: Check the status of a pod before trying to get its ip #1724
OCPBUGS-15496: Fix default GW IPs retrieval #1738
OCPBUGS-17001: Inactivity probe for ovndb connection #1796
OCPBUGS-17120: Bump OVN to 23.06-23.06.0-51 #1790
OCPBUGS-16121: [release-4.13]: Delete address sets after acls that reference them #1762
OCPBUGS-15368: [release-4.13]: initial pods are not wired for hybrid overlay #1721
OCPBUGS-15651: Improve syncNodes to remove stale data #1731
OCPBUGS-15586: [release-4.13]: Allow hostNetwork ingress for network policies with empty namespace selector #1745
Dockerfile: build both RHEL8 and RHEL9 shims #1748
OCPBUGS-15585: [release-4.13] Fix egressFirewall create error handling #1733
OCPBUGS-14492: Backport OVN component templates for NodePort services. #1709
OCPBUGS-15608: Nuke old .rhel9 Dockerfiles #1711
OCPBUGS-13745: [release-4.13] ovnkube-master pod failed to reconnect to ovn db due to ssl expire #1675
OCPBUGS-15372: [release-4.13] Fix network policy to work with long namespace names #1722
OCPBUGS-14979: Validate port before deleting conntrack flow #1712
OCPBUGS-15140: Fix stale SNAT entries for completed pods #1715
OCPBUGS-14482: Dockerfiles: sync RHEL9 dockerfiles to regular unused ones #1695
OCPBUGS-12864: Drop packets were not properly SNATed #1662
Full changelog

powervs-block-csi-driver

OCPBUGS-36094: Fix CVE-2024-6104 by updating http-retryable to 0.7.7 #91
OCPBUGS-33638: Fix CVE2023-45288 by bumping x/net to v0.24.0 -4.13 #82
OCPBUGS-24728: synk: ignore vendor dir #61
OCPBUGS-21089: CVE-2023-39325 - Update net dependencies - 4.13 #52
Update OWNERS add yussufsh #54
Updated golang.org/x/net/html dependency. #44
Openshiftrelease 4.13 #41
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-67694: Fix CVE-2025-65637 by bumping logrus to v1.8.3 #101
OCPBUGS-25716: snyk: ignore vendor dir #61
OCPBUGS-21186: CVE-2023-39325 - Update net dependencies - 4.13 #41
Update OWNERS add yussufsh #45
OCPBUGS-16250: Add management workloads annotations #34
Full changelog

powervs-cloud-controller-manager

OCPBUGS-36104: UPSTREAM: <carry>: Fix go-retryablehttp CVE 4.13 #76
OCPBUGS-24731: UPSTREAM: <carry>: snyk code scan exclude vendor directory #53
OCPBUGS-21280: CVE-2023-39325 - Update net dependencies - 4.13 #46
Full changelog

powervs-machine-controllers

OCPBUGS-78041: hermetic 4.13 #137
OCPBUGS-54013: Fix for CVE-2025-30204 & CVE-2024-51744 in github.com/golang-jwt/jwt/v4 in release-4.13 #122
OCPBUGS-41980: Update go.mod to fix CVE - 4.13 #87
OCPBUGS-24563: Reduce metrics cardinality #69
OCPBUGS-24741: snyk code scan exclude vendor directory #64
OCPBUGS-21880: CVE-2023-39325 - Bump golang.org/x/net to v0.17.0 - 4.13 #55
Full changelog

prometheus

OCPBUGS-67695: chore: CVE-2025-65637: bump sirupsen/logrus to 1.9.3 #290
OCPBUGS-26423: Add Exemplars support for all time series #191
OCPBUGS-21240: update golang.org/x/net to v0.17.0 [4.13] #174
Full changelog

prometheus-alertmanager

OCPBUGS-77849: Include go-verify-deps expected files in gitignore #122
OCPBUGS-21043: Bump golang.org/x/net to v0.17.0 #81
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-20861: Bump golang.org/x/net to v0.17.0 #248
OCPBUGS-12672: update golang.org/x/net #237
Full changelog

prometheus-node-exporter

OCPBUGS-21143: upgrade golang.org/x/net to v0.17.0 #135
OCPBUGS-14274: Upgrade golang.org/x/net to v0.10.0 to fix the CVE #127
Full changelog

route-controller-manager

OCPBUGS-14276: Bump k8s to 1.26.5 #26
Full changelog

service-ca-operator

OCPBUGS-28759: Fix HTTP/2 (4.13) #232
OCPBUGS-16806: Updating ose-service-ca-operator images to be consistent with ART #214
Full changelog

telemeter

OCPBUGS-34829: fix issuer check during JWT authentication 4.13 #540
OCPBUGS-21327: [release-4.13]: Bump golang.org/x/net to v0.17.0 #485
OCPBUGS-14418: Update golang.org/x/net to lastest version #463
Full changelog

tests

OCPBUGS-55954: [build] Ensure Git Clone Does Not Run Privileged #29769
OCPBUGS-54771: Component Readiness: [Networking / ovn-kubernetes] [EgressFirewall] test regressed #29661
OCPBUGS-53285: Add/remove team members to the OWNERS file for Builds #29608
OCPBUGS-53297: Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token #29610
OCPBUGS-52584: Use payload pullspec for image info test #29592
OCPBUGS-37921: Removes dependency on samples operator images #29007
OCPBUGS-35053: updated timeout to 3 seconds to account for network timing issues #28862
OCPBUGS-36501: test/extended: skip etcd leader change check on hypershift #28922
OCPBUGS-35857: Use centos7 tag instead of latest for cmd images tests #28895
OCPBUGS-33985: Provide SCC access via RBAC #28835
AUTH-443: Add oauth-server redirect URI validation e2e tests #28396
OCPBUGS-19378: [4.13] backport etcd restore tests #28267
Bug OCPBUGS-17469: Correct condition for rejecting connection #28151
OCPBUGS-20361: Update image stream test to create a manifest list image by default #28318
OCPBUGS-16241: Update permission to incl. watch for helmchartrepositories for console users #28054
OCPBUGS-16164: allow cluster-config-operator to manage featuregate upgrade block #28050
OCPBUGS-15892: remove references to registry.centos.org #28031
OCPBUGS-15746: Skip CCM upgradable condition on AlibabaCloud #28025
OCPBUGS-7762: Bump with latest openshift/kubernetes at 4.13 #27973
OCPBUGS-5029: [release-4.13] OpenStack: Restore in-tree cinder provisioner tests #27827
OCPBUGS-14342: Increase timeout in sysctl allowlist test #27956
OCPBUGS-13840: Add missing error check in sysctl allowlist test #27929
OCPBUGS-14127: Move from registry.centos.org to quay.io #27948
OCPBUGS-12700: update-etcd-scaling-test #27892
Full changelog

thanos

OCPBUGS-76959: CVE-2025-65637 Update sirupsen/logrus to 1.9.3 #168
OCPBUGS-27206: Bump otel/http to 0.44.0 [openshift-4.13.z] #138
OCPBUGS-21157: Bump golang.org/x/net to v0.17.0 #125
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-78032: hermetic migration 4.13 #110
OCPBUGS-21506: Bump golang.org/x/net to v0.18.0 #55
OCPBUGS-17103: update x/net dependency to 0.7.0 #46
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-78024: hermetic migration 4.13 #89
OCPBUGS-21556: bump golang.org/x/net to v0.17.0 #23
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-67712: CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.8.3 #161
OCPBUGS-21561: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #91
OCPBUGS-16398: Rebase v3.0.2 #83
Full changelog

vsphere-csi-driver-operator

OCPBUGS-67711, OCPBUGS-67717: CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.8.3 #326
OCPBUGS-21434: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #174
OCPBUGS-18132: Block 4.14 upgrades with admin ack #169
OCPBUGS-18332: disable controller hostNetwork #166
Full changelog

vsphere-problem-detector

OCPBUGS-67723: bump github.com/sirupsen/logrus to v1.9.3 #203
OCPBUGS-57511: Ported VPD changes for permission check #184
OCPBUGS-21577: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #130
OCPBUGS-14571: Check all storage classes including CSI storageclasses #120
OCPBUGS-14098: In UPI clusters VSphere platform could be nil #118
OCPBUGS-14085: Log vcenter version information #117
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Red Hat Enterprise Linux CoreOS (`rhel-coreos`)

Package List

cri-o-1.26.5-29.rhaos4.13.gita7644e5.el9
kernel-5.14.0-284.165.1.el9_2
openshift-kubelet-
systemd-252-14.el9_2.10

Full list (512 packages)

NetworkManager-1:1.42.2-32.el9_2
NetworkManager-cloud-setup-1:1.42.2-32.el9_2
NetworkManager-libnm-1:1.42.2-32.el9_2
NetworkManager-ovs-1:1.42.2-32.el9_2
NetworkManager-team-1:1.42.2-32.el9_2
NetworkManager-tui-1:1.42.2-32.el9_2
WALinuxAgent-udev-2.7.0.6-9.el9_2.1
aardvark-dns-2:1.5.0-2.el9
acl-2.3.1-3.el9
adcli-0.9.2-1.el9
afterburn-5.4.1-1.el9
afterburn-dracut-5.4.1-1.el9
alternatives-1.20-2.el9
attr-2.5.1-3.el9
audit-3.0.7-103.el9
audit-libs-3.0.7-103.el9
authselect-1.2.6-1.el9
authselect-libs-1.2.6-1.el9
avahi-libs-0.8-12.el9_2.1
basesystem-11-13.el9
bash-5.1.8-6.el9_1
bash-completion-1:2.11-4.el9
bind-libs-32:9.16.23-11.el9_2.9
bind-license-32:9.16.23-11.el9_2.9
bind-utils-32:9.16.23-11.el9_2.9
bootupd-0.2.7-2.el9
bsdtar-3.5.3-5.el9_2.1
bubblewrap-0.4.1-7.el9_2
bzip2-1.0.8-8.el9
bzip2-libs-1.0.8-8.el9
c-ares-1.17.1-5.el9_2.2
ca-certificates-2025.2.80_v9.0.305-91.el9
checkpolicy-3.5-1.el9
chrony-4.3-1.el9
cifs-utils-7.0-1.el9
clevis-18-110.el9
clevis-dracut-18-110.el9
clevis-luks-18-110.el9
clevis-systemd-18-110.el9
cloud-utils-growpart-0.33-1.el9
conmon-3:2.1.7-5.rhaos4.13.el9
conmon-rs-0.5.1-6.rhaos4.13.el9
conntrack-tools-1.4.7-2.el9
console-login-helper-messages-0.21.3-1.el9
console-login-helper-messages-issuegen-0.21.3-1.el9
console-login-helper-messages-profile-0.21.3-1.el9
container-selinux-3:2.229.0-1.el9_2
containernetworking-plugins-1:1.2.0-3.el9_2.2
containers-common-3:1-37.rhaos4.13.el9
coreos-installer-0.17.0-3.el9_2
coreos-installer-bootinfra-0.17.0-3.el9_2
coreutils-8.32-34.el9
coreutils-common-8.32-34.el9
cpio-2.13-16.el9
cracklib-2.9.6-27.el9
cracklib-dicts-2.9.6-27.el9
cri-o-1.26.5-29.rhaos4.13.gita7644e5.el9
cri-tools-1.26.0-8.el9
criu-3.17-5.el9_2
criu-libs-3.17-5.el9_2
crun-1.14.3-1.el9_2
crypto-policies-20221215-1.git9a18988.el9_2.2
crypto-policies-scripts-20221215-1.git9a18988.el9_2.2
cryptsetup-2.6.0-2.el9
cryptsetup-libs-2.6.0-2.el9
curl-7.76.1-23.el9_2.8
cyrus-sasl-gssapi-2.1.27-21.el9
cyrus-sasl-lib-2.1.27-21.el9
dbus-1:1.12.20-7.el9_2.1
dbus-broker-28-7.el9
dbus-common-1:1.12.20-7.el9_2.1
dbus-libs-1:1.12.20-7.el9_2.1
device-mapper-9:1.02.187-7.el9_2.2
device-mapper-event-9:1.02.187-7.el9_2.2
device-mapper-event-libs-9:1.02.187-7.el9_2.2
device-mapper-libs-9:1.02.187-7.el9_2.2
device-mapper-multipath-0.8.7-20.el9
device-mapper-multipath-libs-0.8.7-20.el9
device-mapper-persistent-data-0.9.0-13.el9
diffutils-3.7-12.el9
dmidecode-1:3.3-7.el9_2.1
dnsmasq-2.85-6.el9_2.4
dosfstools-4.2-3.el9
dracut-057-25.git20250717.el9_2.1
dracut-network-057-25.git20250717.el9_2.1
dracut-squash-057-25.git20250717.el9_2.1
e2fsprogs-1.46.5-3.el9
e2fsprogs-libs-1.46.5-3.el9
efi-filesystem-6-2.el9_0
efibootmgr-16-12.el9
efivar-libs-38-3.el9
elfutils-default-yama-scope-0.188-3.el9
elfutils-libelf-0.188-3.el9
elfutils-libs-0.188-3.el9
ethtool-2:5.16-3.el9_2
expat-2.5.0-1.el9_2.3
file-5.39-12.1.el9_2
file-libs-5.39-12.1.el9_2
filesystem-3.16-2.el9
findutils-1:4.8.0-5.el9
firewalld-filesystem-1.2.1-1.el9
flashrom-1.2-10.el9
fstrm-0.6.1-3.el9
fuse-2.9.9-15.el9
fuse-common-3.10.2-5.el9
fuse-libs-2.9.9-15.el9
fuse-overlayfs-1.11-1.el9_2
fuse3-3.10.2-5.el9
fuse3-libs-3.10.2-5.el9
fwupd-1.8.10-2.el9
fwupd-plugin-flashrom-1.8.10-2.el9
gawk-5.1.0-6.el9
gawk-all-langpacks-5.1.0-6.el9
gdbm-libs-1:1.19-4.el9
gdisk-1.0.7-5.el9
gettext-0.21-7.el9
gettext-libs-0.21-7.el9
git-core-2.39.5-1.el9_2.2
glib2-2.68.4-7.el9_2.4
glibc-2.34-60.el9_2.17
glibc-common-2.34-60.el9_2.17
glibc-gconv-extra-2.34-60.el9_2.17
glibc-minimal-langpack-2.34-60.el9_2.17
glusterfs-6.0-57.4.el9
glusterfs-client-xlators-6.0-57.4.el9
glusterfs-fuse-6.0-57.4.el9
glusterfs-libs-6.0-57.4.el9
gmp-1:6.2.0-10.el9
gnupg2-2.3.3-2.el9_2.1
gnutls-3.7.6-21.el9_2.5
gpgme-1.15.1-6.el9
grep-3.6-5.el9
groff-base-1.22.4-10.el9
grub2-common-1:2.06-61.el9_2.11
grub2-efi-x64-1:2.06-61.el9_2.11
grub2-pc-1:2.06-61.el9_2.11
grub2-pc-modules-1:2.06-61.el9_2.11
grub2-tools-1:2.06-61.el9_2.11
grub2-tools-minimal-1:2.06-61.el9_2.11
gssproxy-0.8.4-5.el9_2
gzip-1.12-1.el9
hostname-3.23-6.el9
hwdata-0.348-9.7.el9
ignition-2.15.0-11.rhaos4.13.el9
info-6.7-15.el9
inih-49-6.el9
initscripts-service-10.11.5-1.el9
iproute-6.1.0-1.el9
iproute-tc-6.1.0-1.el9
iptables-libs-1.8.8-6.el9_2.3
iptables-nft-1.8.8-6.el9_2.3
iputils-20210202-8.el9_2.4
irqbalance-2:1.9.0-3.el9_2.1
iscsi-initiator-utils-6.2.1.4-3.git2a8f9d8.el9
iscsi-initiator-utils-iscsiuio-6.2.1.4-3.git2a8f9d8.el9
isns-utils-libs-0.101-4.el9
jansson-2.14-1.el9
jose-11-3.el9
jq-1.6-15.el9_2.2
json-c-0.14-11.el9
json-glib-1.6.6-1.el9
kbd-2.4.0-8.el9
kbd-misc-2.4.0-8.el9
kernel-5.14.0-284.165.1.el9_2
kernel-core-5.14.0-284.165.1.el9_2
kernel-modules-5.14.0-284.165.1.el9_2
kernel-modules-core-5.14.0-284.165.1.el9_2
kernel-modules-extra-5.14.0-284.165.1.el9_2
kexec-tools-2.0.25-13.el9_2.4
keyutils-1.6.3-1.el9
keyutils-libs-1.6.3-1.el9
kmod-28-7.el9
kmod-libs-28-7.el9
kpartx-0.8.7-20.el9
krb5-libs-1.20.1-9.el9_2.3
less-590-3.el9_2
libacl-2.3.1-3.el9
libaio-0.3.111-13.el9
libarchive-3.5.3-5.el9_2.1
libassuan-2.5.5-3.el9
libattr-2.5.1-3.el9
libbasicobjects-0.1.1-53.el9
libblkid-2.37.4-11.el9_2
libbpf-2:1.0.0-2.el9
libbrotli-1.0.9-6.el9_2.1
libcap-2.48-9.el9_2
libcap-ng-0.8.2-7.el9
libcbor-0.7.0-5.el9
libcollection-0.7.0-53.el9
libcom_err-1.46.5-3.el9
libcurl-7.76.1-23.el9_2.8
libdaemon-0.14-23.el9
libdb-5.3.28-53.el9
libdhash-0.5.0-53.el9
libdrm-2.4.114-1.el9
libeconf-0.4.1-3.el9_2
libedit-3.1-37.20210216cvs.el9
libev-4.33-5.el9
libevent-2.1.12-6.el9
libfdisk-2.37.4-11.el9_2
libffi-3.4.2-7.el9
libfido2-1.6.0-7.el9
libgcab1-1.4-6.el9
libgcc-11.3.1-4.4.el9_2
libgcrypt-1.10.0-10.el9_2.1
libgomp-11.3.1-4.4.el9_2
libgpg-error-1.42-5.el9
libgudev-237-1.el9
libgusb-0.3.8-1.el9
libibverbs-44.0-2.el9
libicu-67.1-10.el9_2
libidn2-2.3.0-7.el9
libini_config-1.3.1-53.el9
libipa_hbac-2.8.2-5.el9_2.6
libjcat-0.1.6-3.el9
libjose-11-3.el9
libkcapi-1.3.1-3.el9
libkcapi-hmaccalc-1.3.1-3.el9
libksba-1.5.1-6.el9_1
libldb-2.6.1-1.el9
libluksmeta-9-12.el9
libmaxminddb-1.5.2-3.el9
libmicrohttpd-1:0.9.72-4.el9
libmnl-1.0.4-15.el9
libmodulemd-2.13.0-2.el9
libmount-2.37.4-11.el9_2
libmspack-0.10.1-0.7.alpha.el9
libndp-1.8-5.el9_2
libnet-1.2-6.el9
libnetfilter_conntrack-1.0.9-1.el9
libnetfilter_cthelper-1.0.0-22.el9
libnetfilter_cttimeout-1.0.0-19.el9
libnetfilter_queue-1.0.5-1.el9
libnfnetlink-1.0.1-21.el9
libnfsidmap-1:2.5.4-18.el9
libnftnl-1.2.2-1.el9
libnghttp2-1.43.0-5.el9_2.3
libnl3-3.7.0-1.el9
libnl3-cli-3.7.0-1.el9
libnvme-1.2-3.el9_2
libpath_utils-0.2.1-53.el9
libpcap-14:1.10.0-4.el9
libpciaccess-0.16-6.el9
libpkgconf-1.7.3-10.el9
libpsl-0.21.1-5.el9
libpwquality-1.4.4-8.el9
libref_array-0.1.5-53.el9
librepo-1.14.5-1.el9
libreport-filesystem-2.15.2-6.el9
librhsm-0.0.3-7.el9_2.1
libseccomp-2.5.2-2.el9
libselinux-3.5-1.el9
libselinux-utils-3.5-1.el9
libsemanage-3.5-1.el9
libsepol-3.5-1.el9
libsigsegv-2.13-4.el9
libslirp-4.4.0-7.el9
libsmartcols-2.37.4-11.el9_2
libsmbclient-4.17.5-105.el9_2.4
libsmbios-2.4.3-4.el9
libsolv-0.7.22-4.el9
libss-1.46.5-3.el9
libssh-0.10.4-9.el9_2.2
libssh-config-0.10.4-9.el9_2.2
libsss_certmap-2.8.2-5.el9_2.6
libsss_idmap-2.8.2-5.el9_2.6
libsss_nss_idmap-2.8.2-5.el9_2.6
libsss_sudo-2.8.2-5.el9_2.6
libstdc++-11.3.1-4.4.el9_2
libtalloc-2.3.4-1.el9
libtasn1-4.16.0-8.el9_2.1
libtdb-1.4.7-1.el9
libteam-1.31-16.el9_1
libtevent-0.13.0-1.el9
libtirpc-1.3.3-1.el9
libtool-ltdl-2.4.6-45.el9
libunistring-0.9.10-15.el9
libusbx-1.0.26-1.el9
libuser-0.63-12.el9
libutempter-1.2.1-6.el9
libuuid-2.37.4-11.el9_2
libuv-1:1.42.0-1.el9
libverto-0.3.2-3.el9
libverto-libev-0.3.2-3.el9
libwbclient-4.17.5-105.el9_2.4
libxcrypt-4.4.18-3.el9
libxcrypt-compat-4.4.18-3.el9
libxml2-2.9.13-3.el9_2.10
libxmlb-0.3.10-1.el9
libxslt-1.1.34-11.el9_2
libyaml-0.2.5-7.el9
libzstd-1.5.1-2.el9
linux-firmware-20250212-138.7.el9_2
linux-firmware-whence-20250212-138.7.el9_2
lmdb-libs-0.9.29-3.el9
logrotate-3.18.0-8.el9
lsof-4.94.0-3.el9
lua-libs-5.4.4-3.el9
luksmeta-9-12.el9
lvm2-9:2.03.17-7.el9_2.2
lvm2-libs-9:2.03.17-7.el9_2.2
lz4-libs-1.9.3-5.el9
lzo-2.10-7.el9
mdadm-4.2-9.el9_2
microcode_ctl-4:20220809-2.20250512.1.el9_2
mokutil-2:0.6.0-4.el9
mpfr-4.1.0-7.el9
nano-5.6.1-5.el9
ncurses-6.2-8.20210508.el9_2.2
ncurses-base-6.2-8.20210508.el9_2.2
ncurses-libs-6.2-8.20210508.el9_2.2
net-tools-2.0-0.62.20160912git.el9
netavark-2:1.5.1-3.el9_2
nettle-3.8-3.el9_0
newt-0.52.21-11.el9
nfs-utils-1:2.5.4-18.el9
nftables-1:1.0.4-11.el9_2.2
nmap-ncat-3:7.91-12.el9
npth-1.6-8.el9
nss-altfiles-2.18.1-20.el9
numactl-libs-2.0.14-9.el9
nvme-cli-2.2.1-4.el9_2
oniguruma-6.9.6-1.el9.5
open-vm-tools-12.1.5-1.el9_2.5
openldap-2.6.2-3.el9_2.1
openshift-clients-4.13.0-202507050028.p0.gd192e90.assembly.stream.el9
openshift-hyperkube-4.13.0-202603240119.p2.g7aa9360.assembly.stream.el9
openssh-8.7p1-30.el9_2.9
openssh-clients-8.7p1-30.el9_2.9
openssh-server-8.7p1-30.el9_2.9
openssl-1:3.0.7-18.el9_2.3
openssl-fips-provider-3.0.7-1.el9_2.1
openssl-fips-provider-so-3.0.7-1.el9_2.1
openssl-libs-1:3.0.7-18.el9_2.3
openvswitch-selinux-extra-policy-1.0-39.el9fdp
openvswitch3.1-3.1.7-164.el9fdp
os-prober-1.77-10.el9
ostree-2023.1-9.el9_2
ostree-grub2-2023.1-9.el9_2
ostree-libs-2023.1-9.el9_2
p11-kit-0.24.1-2.el9
p11-kit-trust-0.24.1-2.el9
pam-1.5.1-15.el9_2.2
passwd-0.80-12.el9
pciutils-3.7.0-5.el9
pciutils-libs-3.7.0-5.el9
pcre-8.44-3.el9.3
pcre2-10.40-2.el9
pcre2-syntax-10.40-2.el9
perl-AutoLoader-5.74-480.el9
perl-B-1.80-480.el9
perl-Carp-1.50-460.el9
perl-Class-Struct-0.66-480.el9
perl-Data-Dumper-2.174-462.el9
perl-Digest-1.19-4.el9
perl-Digest-MD5-2.58-4.el9
perl-Encode-4:3.08-462.el9
perl-Errno-1.30-480.el9
perl-Exporter-5.74-461.el9
perl-Fcntl-1.13-480.el9
perl-File-Basename-2.85-480.el9
perl-File-Path-2.18-4.el9
perl-File-Temp-1:0.231.100-4.el9
perl-File-stat-1.09-480.el9
perl-FileHandle-2.03-480.el9
perl-Getopt-Long-1:2.52-4.el9
perl-Getopt-Std-1.12-480.el9
perl-HTTP-Tiny-0.076-461.el9_2
perl-IO-1.43-480.el9
perl-IO-Socket-IP-0.41-5.el9
perl-IO-Socket-SSL-2.073-1.el9
perl-IPC-Open3-1.21-480.el9
perl-MIME-Base64-3.16-4.el9
perl-Mozilla-CA-20200520-6.el9
perl-NDBM_File-1.15-480.el9
perl-Net-SSLeay-1.92-2.el9
perl-POSIX-1.94-480.el9
perl-PathTools-3.78-461.el9
perl-Pod-Escapes-1:1.07-460.el9
perl-Pod-Perldoc-3.28.01-461.el9
perl-Pod-Simple-1:3.42-4.el9
perl-Pod-Usage-4:2.01-4.el9
perl-Scalar-List-Utils-4:1.56-461.el9
perl-SelectSaver-1.02-480.el9
perl-Socket-4:2.031-4.el9
perl-Storable-1:3.21-460.el9
perl-Symbol-1.08-480.el9
perl-Term-ANSIColor-5.01-461.el9
perl-Term-Cap-1.17-460.el9
perl-Text-ParseWords-3.30-460.el9
perl-Text-Tabs+Wrap-2013.0523-460.el9
perl-Time-Local-2:1.300-7.el9
perl-URI-5.09-3.el9
perl-base-2.27-480.el9
perl-constant-1.33-461.el9
perl-if-0.60.800-480.el9
perl-interpreter-4:5.32.1-480.el9
perl-libnet-3.13-4.el9
perl-libs-4:5.32.1-480.el9
perl-mro-1.23-480.el9
perl-overload-1.31-480.el9
perl-overloading-0.02-480.el9
perl-parent-1:0.238-460.el9
perl-podlators-1:4.14-460.el9
perl-subs-1.03-480.el9
perl-vars-1.05-480.el9
pigz-2.5-4.el9
pkgconf-1.7.3-10.el9
pkgconf-m4-1.7.3-10.el9
pkgconf-pkg-config-1.7.3-10.el9
podman-3:4.4.1-19.rhaos4.13.el9
policycoreutils-3.5-1.el9
policycoreutils-python-utils-3.5-1.el9
polkit-0.117-11.el9_2.1
polkit-libs-0.117-11.el9_2.1
polkit-pkla-compat-0.1-21.el9
popt-1.18-8.el9
procps-ng-3.3.17-11.el9
protobuf-c-1.3.3-12.el9
psmisc-23.4-3.el9
publicsuffix-list-dafsa-20210518-3.el9
python-unversioned-command-3.9.16-1.el9_2.12
python3-3.9.16-1.el9_2.12
python3-audit-3.0.7-103.el9
python3-distro-1.5.0-7.el9
python3-libs-3.9.16-1.el9_2.12
python3-libselinux-3.5-1.el9
python3-libsemanage-3.5-1.el9
python3-pip-wheel-21.2.3-6.el9
python3-policycoreutils-3.5-1.el9
python3-pyyaml-5.4.1-6.el9
python3-setools-4.4.1-1.el9
python3-setuptools-53.0.0-12.el9_2.3
python3-setuptools-wheel-53.0.0-12.el9_2.3
qemu-guest-agent-17:7.2.0-14.el9_2.25
quota-1:4.06-6.el9
quota-nls-1:4.06-6.el9
rdma-core-44.0-2.el9
readline-8.1-4.el9
redhat-release-9.2-0.15.el9
redhat-release-eula-9.2-0.15.el9
rpcbind-1.2.6-5.el9
rpm-4.16.1.3-24.el9_2
rpm-libs-4.16.1.3-24.el9_2
rpm-ostree-2023.3-2.el9_2
rpm-ostree-libs-2023.3-2.el9_2
rpm-plugin-selinux-4.16.1.3-24.el9_2
rsync-3.2.3-19.el9_2.2
runc-4:1.2.9-1.rhaos4.16.el9
samba-client-libs-4.17.5-105.el9_2.4
samba-common-4.17.5-105.el9_2.4
samba-common-libs-4.17.5-105.el9_2.4
sed-4.8-9.el9
selinux-policy-38.1.11-2.el9_2.10
selinux-policy-targeted-38.1.11-2.el9_2.10
setup-2.13.7-9.el9
sg3_utils-1.47-9.el9
sg3_utils-libs-1.47-9.el9
shadow-utils-2:4.9-6.el9
shadow-utils-subid-2:4.9-6.el9
shared-mime-info-2.1-5.el9
shim-x64-15.8-3.el9_2
skopeo-2:1.11.3-5.rhaos4.13.el9
slang-2.3.2-11.el9
slirp4netns-1.2.0-3.el9
snappy-1.1.8-8.el9
socat-1.7.4.1-5.el9_2.2
sqlite-libs-3.34.1-6.el9_2.2
squashfs-tools-4.4-8.git1.el9
ssh-key-dir-0.1.4-1.el9
sssd-2.8.2-5.el9_2.6
sssd-ad-2.8.2-5.el9_2.6
sssd-client-2.8.2-5.el9_2.6
sssd-common-2.8.2-5.el9_2.6
sssd-common-pac-2.8.2-5.el9_2.6
sssd-ipa-2.8.2-5.el9_2.6
sssd-krb5-2.8.2-5.el9_2.6
sssd-krb5-common-2.8.2-5.el9_2.6
sssd-ldap-2.8.2-5.el9_2.6
sssd-nfs-idmap-2.8.2-5.el9_2.6
sssd-proxy-2.8.2-5.el9_2.6
stalld-1.17.1-1.el9_1
strace-5.18-2.el9
subscription-manager-rhsm-certificates-20220623-1.el9
sudo-1.9.5p2-9.el9_2.3
systemd-252-14.el9_2.10
systemd-journal-remote-252-14.el9_2.10
systemd-libs-252-14.el9_2.10
systemd-pam-252-14.el9_2.10
systemd-rpm-macros-252-14.el9_2.10
systemd-udev-252-14.el9_2.10
tar-2:1.34-6.el9_2.1
teamd-1.31-16.el9_1
tmux-3.2a-4.el9
toolbox-0.1.2-1.rhaos4.13.el9
tpm2-tools-5.2-2.el9_1
tpm2-tss-3.0.3-8.el9
tzdata-2026a-1.el9_0
unbound-libs-1.16.2-3.el9_2.5
userspace-rcu-0.12.1-6.el9
util-linux-2.37.4-11.el9_2
util-linux-core-2.37.4-11.el9_2
vim-minimal-2:8.2.2637-20.el9_2.1
which-2.21-28.el9
xfsprogs-5.14.2-2.el9_2
xmlsec1-1.2.29-9.el9
xmlsec1-openssl-1.2.29-9.el9
xz-5.2.5-8.el9_0
xz-libs-5.2.5-8.el9_0
yajl-2.1.0-21.el9_0
zlib-1.2.11-39.el9
zstd-1.5.1-2.el9

Changed:

NetworkManager 1:1.42.2-1.el9 → 1:1.42.2-32.el9_2
NetworkManager-cloud-setup 1:1.42.2-1.el9 → 1:1.42.2-32.el9_2
NetworkManager-libnm 1:1.42.2-1.el9 → 1:1.42.2-32.el9_2
NetworkManager-ovs 1:1.42.2-1.el9 → 1:1.42.2-32.el9_2
NetworkManager-team 1:1.42.2-1.el9 → 1:1.42.2-32.el9_2
NetworkManager-tui 1:1.42.2-1.el9 → 1:1.42.2-32.el9_2
WALinuxAgent-udev 2.7.0.6-9.el9 → 2.7.0.6-9.el9_2.1
avahi-libs 0.8-12.el9 → 0.8-12.el9_2.1
bind-libs 32:9.16.23-11.el9 → 32:9.16.23-11.el9_2.9
bind-license 32:9.16.23-11.el9 → 32:9.16.23-11.el9_2.9
bind-utils 32:9.16.23-11.el9 → 32:9.16.23-11.el9_2.9
bsdtar 3.5.3-4.el9 → 3.5.3-5.el9_2.1
bubblewrap 0.4.1-6.el9 → 0.4.1-7.el9_2
c-ares 1.17.1-5.el9 → 1.17.1-5.el9_2.2
ca-certificates 2022.2.54-90.2.el9_0 → 2025.2.80_v9.0.305-91.el9
conmon 3:2.1.7-1.rhaos4.13.el9 → 3:2.1.7-5.rhaos4.13.el9
conmon-rs 0.5.1-5.rhaos4.13.git.el9 → 0.5.1-6.rhaos4.13.el9
container-selinux 3:2.208.0-2.rhaos4.13.el9 → 3:2.229.0-1.el9_2
containernetworking-plugins 1:1.2.0-1.el9 → 1:1.2.0-3.el9_2.2
containers-common 3:1-35.rhaos4.13.el9 → 3:1-37.rhaos4.13.el9
coreos-installer 0.17.0-1.rhaos4.13.el9 → 0.17.0-3.el9_2
coreos-installer-bootinfra 0.17.0-1.rhaos4.13.el9 → 0.17.0-3.el9_2
cri-o 1.26.3-7.rhaos4.13.gitb3475fb.el9 → 1.26.5-29.rhaos4.13.gita7644e5.el9
cri-tools 1.26.0-1.el9 → 1.26.0-8.el9
criu 3.17-4.el9 → 3.17-5.el9_2
criu-libs 3.17-4.el9 → 3.17-5.el9_2
crun 1.8.4-1.rhaos4.13.el9 → 1.14.3-1.el9_2
crypto-policies 20221215-1.git9a18988.el9 → 20221215-1.git9a18988.el9_2.2
crypto-policies-scripts 20221215-1.git9a18988.el9 → 20221215-1.git9a18988.el9_2.2
curl 7.76.1-23.el9_2.1 → 7.76.1-23.el9_2.8
dbus 1:1.12.20-7.el9_1 → 1:1.12.20-7.el9_2.1
dbus-common 1:1.12.20-7.el9_1 → 1:1.12.20-7.el9_2.1
dbus-libs 1:1.12.20-7.el9_1 → 1:1.12.20-7.el9_2.1
device-mapper 9:1.02.187-7.el9 → 9:1.02.187-7.el9_2.2
device-mapper-event 9:1.02.187-7.el9 → 9:1.02.187-7.el9_2.2
device-mapper-event-libs 9:1.02.187-7.el9 → 9:1.02.187-7.el9_2.2
device-mapper-libs 9:1.02.187-7.el9 → 9:1.02.187-7.el9_2.2
dmidecode 1:3.3-7.el9 → 1:3.3-7.el9_2.1
dnsmasq 2.85-6.el9 → 2.85-6.el9_2.4
dracut 057-21.git20230214.el9 → 057-25.git20250717.el9_2.1
dracut-network 057-21.git20230214.el9 → 057-25.git20250717.el9_2.1
dracut-squash 057-21.git20230214.el9 → 057-25.git20250717.el9_2.1
ethtool 2:5.16-1.el9 → 2:5.16-3.el9_2
expat 2.5.0-1.el9 → 2.5.0-1.el9_2.3
file 5.39-12.el9 → 5.39-12.1.el9_2
file-libs 5.39-12.el9 → 5.39-12.1.el9_2
git-core 2.39.3-1.el9_2 → 2.39.5-1.el9_2.2
glib2 2.68.4-6.el9 → 2.68.4-7.el9_2.4
glibc 2.34-60.el9 → 2.34-60.el9_2.17
glibc-common 2.34-60.el9 → 2.34-60.el9_2.17
glibc-gconv-extra 2.34-60.el9 → 2.34-60.el9_2.17
glibc-minimal-langpack 2.34-60.el9 → 2.34-60.el9_2.17
gnupg2 2.3.3-2.el9_0 → 2.3.3-2.el9_2.1
gnutls 3.7.6-20.el9_2 → 3.7.6-21.el9_2.5
grub2-common 1:2.06-61.el9 → 1:2.06-61.el9_2.11
grub2-efi-x64 1:2.06-61.el9 → 1:2.06-61.el9_2.11
grub2-pc 1:2.06-61.el9 → 1:2.06-61.el9_2.11
grub2-pc-modules 1:2.06-61.el9 → 1:2.06-61.el9_2.11
grub2-tools 1:2.06-61.el9 → 1:2.06-61.el9_2.11
grub2-tools-minimal 1:2.06-61.el9 → 1:2.06-61.el9_2.11
ignition 2.15.0-1.el9 → 2.15.0-11.rhaos4.13.el9
iptables-libs 1.8.8-6.el9_1 → 1.8.8-6.el9_2.3
iptables-nft 1.8.8-6.el9_1 → 1.8.8-6.el9_2.3
iputils 20210202-8.el9_1.1 → 20210202-8.el9_2.4
irqbalance 2:1.9.0-3.el9 → 2:1.9.0-3.el9_2.1
jq 1.6-14.el9 → 1.6-15.el9_2.2
kernel 5.14.0-284.13.1.el9_2 → 5.14.0-284.165.1.el9_2
kernel-core 5.14.0-284.13.1.el9_2 → 5.14.0-284.165.1.el9_2
kernel-modules 5.14.0-284.13.1.el9_2 → 5.14.0-284.165.1.el9_2
kernel-modules-core 5.14.0-284.13.1.el9_2 → 5.14.0-284.165.1.el9_2
kernel-modules-extra 5.14.0-284.13.1.el9_2 → 5.14.0-284.165.1.el9_2
kexec-tools 2.0.25-13.el9_2 → 2.0.25-13.el9_2.4
krb5-libs 1.20.1-8.el9 → 1.20.1-9.el9_2.3
less 590-1.el9_0 → 590-3.el9_2
libarchive 3.5.3-4.el9 → 3.5.3-5.el9_2.1
libbrotli 1.0.9-6.el9 → 1.0.9-6.el9_2.1
libcap 2.48-8.el9 → 2.48-9.el9_2
libcurl 7.76.1-23.el9_2.1 → 7.76.1-23.el9_2.8
libeconf 0.4.1-2.el9 → 0.4.1-3.el9_2
libgcc 11.3.1-4.3.el9 → 11.3.1-4.4.el9_2
libgcrypt 1.10.0-10.el9_2 → 1.10.0-10.el9_2.1
libgomp 11.3.1-4.3.el9 → 11.3.1-4.4.el9_2
libicu 67.1-9.el9 → 67.1-10.el9_2
libipa_hbac 2.8.2-2.el9 → 2.8.2-5.el9_2.6
libndp 1.8-4.el9 → 1.8-5.el9_2
libnghttp2 1.43.0-5.el9 → 1.43.0-5.el9_2.3
libnvme 1.2-2.el9 → 1.2-3.el9_2
librhsm 0.0.3-7.el9 → 0.0.3-7.el9_2.1
libsmbclient 4.17.5-102.el9 → 4.17.5-105.el9_2.4
libssh 0.10.4-8.el9 → 0.10.4-9.el9_2.2
libssh-config 0.10.4-8.el9 → 0.10.4-9.el9_2.2
libsss_certmap 2.8.2-2.el9 → 2.8.2-5.el9_2.6
libsss_idmap 2.8.2-2.el9 → 2.8.2-5.el9_2.6
libsss_nss_idmap 2.8.2-2.el9 → 2.8.2-5.el9_2.6
libsss_sudo 2.8.2-2.el9 → 2.8.2-5.el9_2.6
libstdc++ 11.3.1-4.3.el9 → 11.3.1-4.4.el9_2
libtasn1 4.16.0-8.el9_1 → 4.16.0-8.el9_2.1
libwbclient 4.17.5-102.el9 → 4.17.5-105.el9_2.4
libxml2 2.9.13-3.el9_1 → 2.9.13-3.el9_2.10
libxslt 1.1.34-9.el9 → 1.1.34-11.el9_2
linux-firmware 20230310-134.el9_2 → 20250212-138.7.el9_2
linux-firmware-whence 20230310-134.el9_2 → 20250212-138.7.el9_2
lvm2 9:2.03.17-7.el9 → 9:2.03.17-7.el9_2.2
lvm2-libs 9:2.03.17-7.el9 → 9:2.03.17-7.el9_2.2
mdadm 4.2-8.el9 → 4.2-9.el9_2
microcode_ctl 4:20220809-2.el9 → 4:20220809-2.20250512.1.el9_2
ncurses 6.2-8.20210508.el9 → 6.2-8.20210508.el9_2.2
ncurses-base 6.2-8.20210508.el9 → 6.2-8.20210508.el9_2.2
ncurses-libs 6.2-8.20210508.el9 → 6.2-8.20210508.el9_2.2
netavark 2:1.5.0-3.el9_2 → 2:1.5.1-3.el9_2
nftables 1:1.0.4-10.el9_1 → 1:1.0.4-11.el9_2.2
nvme-cli 2.2.1-2.el9 → 2.2.1-4.el9_2
open-vm-tools 12.1.5-1.el9 → 12.1.5-1.el9_2.5
openldap 2.6.2-3.el9 → 2.6.2-3.el9_2.1
openshift-clients 4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el9 → 4.13.0-202507050028.p0.gd192e90.assembly.stream.el9
openshift-hyperkube 4.13.0-202304211155.p0.gb404935.assembly.stream.el9 → 4.13.0-202603240119.p2.g7aa9360.assembly.stream.el9
openssh 8.7p1-29.el9_2 → 8.7p1-30.el9_2.9
openssh-clients 8.7p1-29.el9_2 → 8.7p1-30.el9_2.9
openssh-server 8.7p1-29.el9_2 → 8.7p1-30.el9_2.9
openssl 1:3.0.7-6.el9_2 → 1:3.0.7-18.el9_2.3
openssl-libs 1:3.0.7-6.el9_2 → 1:3.0.7-18.el9_2.3
openvswitch-selinux-extra-policy 1.0-31.el9fdp → 1.0-39.el9fdp
openvswitch3.1 3.1.0-14.el9fdp → 3.1.7-164.el9fdp
ostree 2022.6-3.el9 → 2023.1-9.el9_2
ostree-grub2 2022.6-3.el9 → 2023.1-9.el9_2
ostree-libs 2022.6-3.el9 → 2023.1-9.el9_2
pam 1.5.1-14.el9 → 1.5.1-15.el9_2.2
perl-HTTP-Tiny 0.076-460.el9 → 0.076-461.el9_2
podman 3:4.4.1-4.rhaos4.13.el9 → 3:4.4.1-19.rhaos4.13.el9
polkit 0.117-11.el9 → 0.117-11.el9_2.1
polkit-libs 0.117-11.el9 → 0.117-11.el9_2.1
python-unversioned-command 3.9.16-1.el9 → 3.9.16-1.el9_2.12
python3 3.9.16-1.el9 → 3.9.16-1.el9_2.12
python3-libs 3.9.16-1.el9 → 3.9.16-1.el9_2.12
python3-setuptools 53.0.0-12.el9 → 53.0.0-12.el9_2.3
python3-setuptools-wheel 53.0.0-12.el9 → 53.0.0-12.el9_2.3
qemu-guest-agent 17:7.2.0-14.el9_2 → 17:7.2.0-14.el9_2.25
redhat-release 9.2-0.13.el9 → 9.2-0.15.el9
redhat-release-eula 9.2-0.13.el9 → 9.2-0.15.el9
rpm 4.16.1.3-22.el9 → 4.16.1.3-24.el9_2
rpm-libs 4.16.1.3-22.el9 → 4.16.1.3-24.el9_2
rpm-ostree 2023.3-1.el9_2 → 2023.3-2.el9_2
rpm-ostree-libs 2023.3-1.el9_2 → 2023.3-2.el9_2
rpm-plugin-selinux 4.16.1.3-22.el9 → 4.16.1.3-24.el9_2
rsync 3.2.3-19.el9 → 3.2.3-19.el9_2.2
runc 4:1.1.6-3.rhaos4.13.el9 → 4:1.2.9-1.rhaos4.16.el9
samba-client-libs 4.17.5-102.el9 → 4.17.5-105.el9_2.4
samba-common 4.17.5-102.el9 → 4.17.5-105.el9_2.4
samba-common-libs 4.17.5-102.el9 → 4.17.5-105.el9_2.4
selinux-policy 38.1.11-2.el9_2.2 → 38.1.11-2.el9_2.10
selinux-policy-targeted 38.1.11-2.el9_2.2 → 38.1.11-2.el9_2.10
shim-x64 15.6-1.el9 → 15.8-3.el9_2
skopeo 2:1.11.2-0.1.el9 → 2:1.11.3-5.rhaos4.13.el9
socat 1.7.4.1-5.el9 → 1.7.4.1-5.el9_2.2
sqlite-libs 3.34.1-6.el9_1 → 3.34.1-6.el9_2.2
sssd 2.8.2-2.el9 → 2.8.2-5.el9_2.6
sssd-ad 2.8.2-2.el9 → 2.8.2-5.el9_2.6
sssd-client 2.8.2-2.el9 → 2.8.2-5.el9_2.6
sssd-common 2.8.2-2.el9 → 2.8.2-5.el9_2.6
sssd-common-pac 2.8.2-2.el9 → 2.8.2-5.el9_2.6
sssd-ipa 2.8.2-2.el9 → 2.8.2-5.el9_2.6
sssd-krb5 2.8.2-2.el9 → 2.8.2-5.el9_2.6
sssd-krb5-common 2.8.2-2.el9 → 2.8.2-5.el9_2.6
sssd-ldap 2.8.2-2.el9 → 2.8.2-5.el9_2.6
sssd-nfs-idmap 2.8.2-2.el9 → 2.8.2-5.el9_2.6
sssd-proxy 2.8.2-2.el9 → 2.8.2-5.el9_2.6
sudo 1.9.5p2-9.el9 → 1.9.5p2-9.el9_2.3
systemd 252-14.el9.rhaos4.13 → 252-14.el9_2.10
systemd-journal-remote 252-14.el9.rhaos4.13 → 252-14.el9_2.10
systemd-libs 252-14.el9.rhaos4.13 → 252-14.el9_2.10
systemd-pam 252-14.el9.rhaos4.13 → 252-14.el9_2.10
systemd-rpm-macros 252-14.el9.rhaos4.13 → 252-14.el9_2.10
systemd-udev 252-14.el9.rhaos4.13 → 252-14.el9_2.10
tar 2:1.34-6.el9_1 → 2:1.34-6.el9_2.1
tzdata 2023c-1.el9 → 2026a-1.el9_0
unbound-libs 1.16.2-3.el9 → 1.16.2-3.el9_2.5
vim-minimal 2:8.2.2637-20.el9_1 → 2:8.2.2637-20.el9_2.1
xfsprogs 5.14.2-1.el9 → 5.14.2-2.el9_2

Removed:

openldap-compat 2.6.2-3.el9

Added:

openssl-fips-provider 3.0.7-1.el9_2.1
openssl-fips-provider-so 3.0.7-1.el9_2.1

Extensions

Full list (0 packages)

Red Hat Enterprise Linux CoreOS base layer: 413.92.202604080111-0 (diff)

View changelog in Markdown or change previous release:

Source code for this page located on github