4.14.66

Manual Override Applied

This release was manually Accepted.

Reason: Manually accepted by ART

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.14.66-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Failed (2 retries) periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial Succeeded (2 retries) periodic-ci-openshift-release-main-nightly-4.14-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded (1 retry) periodic-ci-openshift-release-main-ci-4.14-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- aws-sdn-upgrade-4.14-micro Succeeded periodic-ci-openshift-release-main-nightly-4.14-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.14-micro Succeeded periodic-ci-openshift-release-main-ci-4.14-e2e-azure-ovn-upgrade
- driver-toolkit Succeeded (2 retries) periodic-ci-openshift-release-main-nightly-4.14-e2e-aws-driver-toolkit
- fips-scan Failed (2 retries) periodic-ci-openshift-release-main-nightly-4.14-fips-payload-scan
- gcp-ovn-rt-upgrade-4.14-minor Pending (2 retries) periodic-ci-openshift-release-main-ci-4.14-upgrade-from-stable-4.13-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance Failed (1 retry) periodic-ci-openshift-hypershift-release-4.14-periodics-e2e-aws-ovn-conformance
  - Attempt 1 Failed
  - Attempt 2 Failed
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.14-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-bm Succeeded periodic-ci-openshift-release-main-nightly-4.14-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.13.23, 4.13.24, 4.13.25, 4.13.26, 4.13.27, 4.13.28, 4.13.29, 4.13.30, 4.13.32, 4.13.33, 4.13.34, 4.13.35, 4.13.37, 4.13.38, 4.13.39, 4.13.40, 4.13.41, 4.13.42, 4.13.43, 4.13.44, 4.13.46, 4.13.48, 4.13.49, 4.13.50, 4.13.51, 4.13.52, 4.13.53, 4.13.54, 4.13.55, 4.13.56, 4.13.57, 4.13.58, 4.13.59, 4.13.60, 4.13.61, 4.13.62, 4.13.63, 4.14.10, 4.14.11, 4.14.12, 4.14.13, 4.14.14, 4.14.15, 4.14.17, 4.14.18, 4.14.19, 4.14.20, 4.14.21, 4.14.22, 4.14.23, 4.14.24, 4.14.25, 4.14.26, 4.14.27, 4.14.28, 4.14.29, 4.14.3, 4.14.30, 4.14.31, 4.14.32, 4.14.33, 4.14.34, 4.14.35, 4.14.36, 4.14.37, 4.14.38, 4.14.39, 4.14.4, 4.14.40, 4.14.41, 4.14.42, 4.14.43, 4.14.44, 4.14.45, 4.14.46, 4.14.49, 4.14.5, 4.14.51, 4.14.52, 4.14.53, 4.14.54, 4.14.55, 4.14.56, 4.14.57, 4.14.58, 4.14.59, 4.14.6, 4.14.60, 4.14.61, 4.14.7, 4.14.8, 4.14.9

Upgrades to:

4.15.65 (changes) - Success Success
4.15.64 (changes) - Failed

Loading changelog, this may take a while ...

Changes from 4.14.48

Created: 2026-05-13 02:17:13 +0000 UTC

Image Digest: sha256:c9bc45c6fb3523a9ae5122bd5fad8e08f0ea4db3011c4358f74724a491262271

Components

Kubernetes 1.27.16
Red Hat Enterprise Linux CoreOS upgraded from 414.92.202502111902-0 to 414.92.202605111427-0 (diff)

Rebuilt images without code change

agent-installer-utils git b3fa10c2 sha256:d3f3c62ba451c69aad1fcb4fadecf57b165889b0e506956764f8b47462616e0f
alibaba-cloud-controller-manager git 8ba0b37a sha256:f662fb427f18159300aa413755c856c7a09c5849fb8867e57cea7f087ad75a1f
alibaba-cloud-csi-driver git 3dc363d3 sha256:f0687f6ef2adbc99b5b95bf960ec6e9b9dc70cd42037e200b412c360b699f374
alibaba-disk-csi-driver-operator git 8853e6ef sha256:73176e9956ce7722de3457295c1054467af69731a5e8e712066e2164461c5622
alibaba-machine-controllers git 27f105d3 sha256:4e3a8e6757d7a4650a48466c947123adfa21209788cb021f08e1d7656325149d
apiserver-network-proxy git f56c606a sha256:aeb86a2bb9eb414a15899b9a37a07e306a6b852f08a06efa9cdd9d10e5527f07
aws-cloud-controller-manager git 9a7820e8 sha256:38dfde989b33068a4611ec4805fbb45683b91dedb021d62dd60f9834665fe3c9
aws-ebs-csi-driver git 4622deec sha256:1134b809c32543ab62c1bf3a0c60f1a30914f6e163baa484603a67194d3c2838
aws-pod-identity-webhook git 2c864ca0 sha256:39d110bcfc8c48c7fc1b0d423caad0a022f0a2c8863fd88ec803c46932002ede
azure-disk-csi-driver git 6d3558a3 sha256:6ea987d0460815e371baffed3b9a49bfb4c5e97ee3007cb2ff65c0cd9f97b24d
azure-disk-csi-driver-operator git 91893576 sha256:2cb5eaefbdb94d6cdc6721cea7697e0f5d42362abf5c7b03bcca25f2400e18d1
azure-machine-controllers git d526284e sha256:7efee714d1b9df11ee7c13ababdf9c311ed49d7cb44718235271f94611733d61
baremetal-runtimecfg git 0ba9e555 sha256:293f99971635ea30ab34da82ddb787280ec36e0d0485cb576a93a71c7d3fefd9
cli git 44b3ac26 sha256:452fff7869b1504db7c35516ea994937eabe14e7559aad042f8b09592e82f04b
cli-artifacts git 44b3ac26 sha256:07d98ac07cc8abb6b459f755ba547d0bb87d5a70d91ea20856bd5dcdf321027a
cloud-network-config-controller git 1bd04641 sha256:913b7b63802b9de50f57fe4952bcd9938e48236afb8cbc19c7dceea15ced6503
cluster-authentication-operator git 9203d4d5 sha256:0b3202624259b9e570a3892814128ad2db86ecfbf0ddc2b545475be41f9cfea6
cluster-autoscaler git d030dbaa sha256:15e55b106528218216ac6c0183e9185f2b262944d94f77ba9993cff60769b140
cluster-autoscaler-operator git 32854baa sha256:15feef386f58d982806ab435c7453b5d959dd16cc5c09b89d8f5278dd347b8a2
cluster-bootstrap git 93fba13f sha256:46304abe7d2493113a6b3947fdb44163c00a50a262a4fa257ea5191c44d1c99b
cluster-capi-operator git 60cc3e65 sha256:d65dbea78e50ab0e5ea3a3e3db9becaf76c48b2209d1e67be32a180796b35777
cluster-config-operator git 2378670a sha256:bc7c76327bf4a77aa632cb82fdf959b74d62de85aebca0d83f83b3ee2fee9ce0
cluster-control-plane-machine-set-operator git 783d9dd1 sha256:dd950759a77fe96123acf972f8c54780081fca6d8fe18805656f87964c2027cf
cluster-csi-snapshot-controller-operator git d4a11625 sha256:b3c269b051ef540d787f67ec5eb4887e570aeb8c85994e49b6226e9a4a2792cf
cluster-ingress-operator git e302d856 sha256:e19c1e2d2408d5d863f7f27901020ad2ee41f3c63092702c9b0810fb798f82c0
cluster-kube-cluster-api-operator git b287d08b sha256:7a4676e925e84f654aa9a45bed0b7a78aefd964e87fcbca19f678979a6b41313
cluster-kube-controller-manager-operator git 4e059638 sha256:bc356aa3a871a5b582a542b34ad5a158329f66d4f52cb12bd225707af62cfb13
cluster-machine-approver git 38a758d0 sha256:9554b7f37b6c5e2db6dc0c9a2c85b37cd1ceb8d7203849f4c6146c160fa6330e
cluster-node-tuning-operator git 5511c8df sha256:fde190f22beb133edecce0bee877e39a8d4c96dcf2b32f4e4c96cbee813040fc
cluster-olm-operator git 0dbbb613 sha256:f7d266aa9f4a5f7afe8361b557fe71535e93e8e925104ce7a9867ca394848379
cluster-openshift-controller-manager-operator git 09d62091 sha256:16eb8f040981d471e2a7f77adb112ce138dcb1f4bcd59263a8478c94a21b595b
cluster-platform-operators-manager git 08fb27e7 sha256:f8eddc57f9b664179c82002c75d955a73b499bc0c1f5e99ee717cb80473ab295
cluster-policy-controller git 219f6f6f sha256:8726f1864b6e7853d110723372a70ed2a483bf7ee49b03f361348d91163d9df4
cluster-update-keys git 1a7a6e22 sha256:d9c3cce6844d95fb01282c3bd98d4deb118eb890838553b21b326458b5024c21
configmap-reloader git 716a0c33 sha256:87e170f4c2afacf200e63e9a3d90379f32e2eebf14de1ae663d06351f07f1f1e
csi-driver-nfs git e1dd4537 sha256:461168a7bac765fb1d5ed5219e312f655d4dede8ea11ede8f46c45758eed35de
csi-driver-shared-resource git 9232c1ff sha256:cc569bc2fb76425615cd07efc5633865667ee68a43f0f0f11054fccfd82175bb
csi-driver-shared-resource-operator git c273cd52 sha256:9ec0ee4c75b33e8ba623d202fccb69739c4a697084d8116d568b9b5602b6009e
csi-driver-shared-resource-webhook git 9232c1ff sha256:891b68fb3785d6b4764899aae9b0924744b18d9f8e9fd28a77903a352d838ce4
csi-external-attacher git 06e8ce0d sha256:386d7dcc13e8bf556befd28670f57e54e38bdcdab9ba56933e7fe700f6c44467
csi-external-provisioner git e18ed7f0 sha256:6a8d14ef46f97345e6e3023aab145379223244f264c31266ad8a824736be975a
csi-external-resizer git 59a701a4 sha256:a69c577baa700d1d0f796cbdd11f1852109fc7dee344e034c3a8fbd1de237ba5
csi-external-snapshotter git a6834536 sha256:1732d16bc1a93625dc5ea3d3a0b7b041613b9f2a21924aeb6e2ee257d80d7a24
csi-livenessprobe git a9bcbde1 sha256:8fe322494d341ae4288b52c1f7c6b851e81de8057f1623270836c74b5abf03df
csi-node-driver-registrar git 9dcaa7f5 sha256:e4673a283f9fcd60f8530fa65e115663b6e3ce7fe59e19efe1a80151fb49a3dc
csi-snapshot-controller git a6834536 sha256:74a333f95dc91f82617a6ff3078fe44ce4014ff1f3828d57ecfcb739afa30ff6
csi-snapshot-validation-webhook git a6834536 sha256:4f1b8adc76047cd2d9f66a887e2c7952163513f69b0f63059fe145412ac9fe4f
deployer git 44b3ac26 sha256:8055f212a41ee42f77cd2b9ac409ab7d9acbf561ccbc4de78619c5a2f9f892e0
driver-toolkit git cafed17b sha256:fad85517856a14d2b8f94fa171d9496071d0eaf6284b0e696867c8de1e0588ab
egress-router-cni git 96f2f54f sha256:464b3e05c4dadd23de0f89db8449dd76be6c42f345ce523fc74baa545c1607a9
etcd git 5ed5044c sha256:5dfef5a4275809c45961026caa8fa0cefaa84c5f1cff31568fa793cb086eb029
gcp-cloud-controller-manager git 09e96a91 sha256:2169c417794867d7b59def3f60f35da32819b37330ccc328781e78ca6c05387a
gcp-pd-csi-driver git 8a626fe5 sha256:b413f4d7cb9c390436a07775c2840cf941ca2d4401300f94e62d1a24a4648e7b
gcp-pd-csi-driver-operator git 95d55a04 sha256:425ec7b742ce53a1393075bbd6fb1fcdd886ca2b96417f9ae1e018fe367b4aa6
haproxy-router git c3a2430c sha256:e01d05989c97279f8fcdf5763dd9b0513be0d154f3fa047786bebb1c6b43bb4a
ibm-cloud-controller-manager git f39488c5 sha256:f758e9bcab523b663293886f63053b1e2e61ce2a54c87aecf13b4fef387a1af4
ibmcloud-machine-controllers git a63c6aab sha256:2cd7144867678e44e24b751248a02ea0557e05c011f9464d97a9aea7bfe3e0f6
insights-operator git acc99f55 sha256:acb5744c520ac83651a2ba363d0ef2331a2048d393f6fe8f09a31ae128785728
ironic-machine-os-downloader git 7b56c306 sha256:f1a7f15073d13ec43de8b35b48e3fc48a8b032d911808e4a7c932a18b94bf4ca
ironic-static-ip-manager git 1b194fd1 sha256:a95add26fed72308679b4a71691ab4546c85bf24b7ffb7b06f4d091ae8e0220e
k8s-prometheus-adapter git 801a912b sha256:dd645deee1e7122a2e5edc4ed68c692cedcd6ce581dbd44a2e5dfa6cf7db9ad8
keepalived-ipfailover git 03e5f407 sha256:d267d75231dea9fc537ac21b2fb7c76291a908671b01630ebd8bfa90f584244d
kube-rbac-proxy git b8b82595 sha256:f5694cc936031cbaf4481ac544bb993f410494c3ed4107117a410f9131d4317c
kube-state-metrics git db0c5499 sha256:c4cc68aecc805e20b89fa86479d88a9c958b7f9d9546d07ffc6e4eba6efd4b87
kubevirt-cloud-controller-manager git 7d96f56d sha256:2a4423f18d412b05f56d62513138b39983d30369005496aca845ceff2032353b
kubevirt-csi-driver git 48fafc4a sha256:5117604fb6e7f8314410bd382f6e87295b54df003173cfd87b369e804aef2150
kuryr-cni git 8926a294 sha256:183fa03625337fb9bb50b9669be2105856c50e89b18488a5303bb5a4f1f0bbbf
kuryr-controller git 8926a294 sha256:a739df4949a9656d5db26a2f7c4b21e2e45519b497c94b7d078d3c102a0ea451
machine-os-content sha256:15a20639f227a3048fdeefe725bdbc4167250366020dacd53f32e37ea4e51731
multus-networkpolicy git f670647c sha256:c619ade0444bd3b43277d544ddf6181c1e3a4807542f93f581fed126ee157168
multus-route-override-cni git 5965fed6 sha256:59fff3f694fa33234b388fc28b03954774ccd65bea9461569d5b2fc5684aa4b0
network-interface-bond-cni git 29f61f6b sha256:218982b6d3ede552dd3d1c7cbb938a7191bf5ec6a054d3223d0290299cc55269
network-tools git e79d8173 sha256:b9ab07cda816660acdb114ac36938d42b703c201206e521e23d2f709f56532eb
nutanix-cloud-controller-manager git 8930f295 sha256:e8b71d4d7d8b828757af7d39a87cc2b03e4e80b73918474d16833e3230c0310e
oauth-proxy git a4a2f270 sha256:2042e7b1a59c292f15f35f18ccc135f8eb1665c2f0c82e01c95a810b34841896
oauth-server git 35f4739f sha256:479f2316b7e633b67dc042c87c5024208965dfe1623f5815d0be652337901c06
oc-mirror git 056043d1 sha256:d1eb621321ea067f24fcfd640c99d4898d4f0c0d5f90a563924af2bb358b33f7
olm-catalogd git a333cb0b sha256:d3c0a5ddcf2929cadb254387afca000be2be8964494644668b46388385fbf033
olm-operator-controller git fb6fb278 sha256:629352ae020c499848b712791fe6e2f8032dee8d05ce0157572e46a8edd7bfb3
olm-rukpak git c9409c62 sha256:9977af040c25598efad3e7897c9d1485691af634bfa656c43922b36993595559
openshift-state-metrics git dff4b0f4 sha256:a9e54e5696e7f53818e1d19e9697bac146c6afff8d1689d261f04eb73d0b37ae
ovirt-csi-driver git f21b470f sha256:c01a87664d0c5995f5bb501fd71205d6a1942696d725239015cb35c992194120
ovirt-machine-controllers git 5d708631 sha256:a1bb8ccdfb981601359d91ee9f34e9b0fc4856513989261c155b317445fa2e9d
powervs-block-csi-driver git 988f7109 sha256:fee590baa0156e8ef49c257f01c22a8a5d9c1c558cdf70e3dd16c7c3804371ef
powervs-cloud-controller-manager git 19cf1d3f sha256:b602500c15bc030f9b84afa0b5468534403a67c09317dfb7a5cf9cf84b45357a
prom-label-proxy git af40ed09 sha256:5e27d2d53cf201dd999eac991752365d2a5ca94786a0e1304f96e1278d3848c8
prometheus git 3aff0d1e sha256:a566ca146b51929a3b3e40bf9a183bccae5b063ac6cb5db43b05bc455cf4445a
prometheus-config-reloader git a4b845a7 sha256:4446501364a91c8e99be62ece46d8a5d151ceed5f27251fe93ffb3b8fcb9b381
prometheus-node-exporter git 5ee0a9d9 sha256:e3577e84d3c8c0e2d67d67e9b447e68f115cd9636b43a9f48ed14ce3024c367d
prometheus-operator git a4b845a7 sha256:ab51208d2c0d41926569607c3c99a45cc136a7716fe99a5a834a11dda4def964
prometheus-operator-admission-webhook git a4b845a7 sha256:c89bad0c0c037facd43edc4a7237e425dbdc1d07e054c3751a94eb9d9acc1164
rhel-coreos sha256:f894e271bd6b3987b5bd1f75d8c99677471acbdd709581658ca1daa89d2e1830
rhel-coreos-extensions sha256:ff2a4a047ac54a5f7fcda1db56ce855db32730946a9412c4876a2c0c3024f721
route-controller-manager git 1a5e72f4 sha256:e7a3cd565767a74e85891d493c398ac910dafb6dbd57eeb73ddcc6f34a736c96
service-ca-operator git 3c3f82f7 sha256:0962fa00358f84a2255c6b856a05425402e6a4ff08e84613800b8a374b74fbc8
telemeter git 1f726816 sha256:c5f9dd1fb77321b103069a602515144f3ec387c5c4b864adc5fe0576c82f0101
tools git 44b3ac26 sha256:ec50a45a9c9553cdaf3b79d0c7543e6c29bef305addf0263e36ba27baa3dc794

agent-installer-api-server

MGMT-23439: Bump Go 1.18 to 1.20 and regenerate code #10042
OCPBUGS-78112: [release-4.14] NO-JIRA: hermetic 4.14 #9955
MGMT-23439: Use archived dnf repositories for CentOS Stream 8 #10018
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-58642: CVE-2024-45339: Bump glog pkg version to 1.2.4 (#1194) #1194
OCPBUGS-53715: Bump jwt to 4.5.2 in release-4.14 (#1093) #1093
Full changelog

agent-installer-node-agent

OCPBUGS-58652, OCPBUGS-58657: Bump glog to v1.2.5 in release-4.14 (#1073) #1073
OCPBUGS-53707: Bump golang-jwt/jwt/v4 to 4.5.2 in release-4.14 (#973) #973
OCPBUGS-46955: Bump golang.org/x/net to 0.33.0 (#885) #885
Full changelog

aws-cluster-api-controllers

OCPBUGS-78229: [release-4.14] hermetic 4.14 #593
OCPBUGS-61944: UPSTREAM <carry>: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It #574
OCPBUGS-58667, OCPBUGS-58672: bump github.com/golang/glog to v1.2.5 #563
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-67748: Updated logrus to v1.9.3 #313
Full changelog

aws-machine-controllers

OCPBUGS-63142: client: re-use a single file for building the session instead of randomly named files #154
OCPBUGS-63142: revert: client: re-use a single file for building the session instead of randomly named files #151
OCPBUGS-63142: client: re-use a single file for building the session instead of randomly named files #142
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-57111: Adds acr-credential-provider spec file and build script #144
Full changelog

azure-cluster-api-controllers

OCPBUGS-78178: [release-4.14] Hermetic 4.14 #366
Full changelog

azure-file-csi-driver

ART-13080: Regenerate go.mod to fix build failures #95
Full changelog

azure-file-csi-driver-operator

OCPBUGS-67753: Bump github.com/sirupsen/logrus to v1.9.3 #114
Full changelog

azure-workload-identity-webhook

OCPBUGS-53795: github.com/golang-jwt/jwt/v4 v4.5.2 #35
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-79654: Azure UPI ARM template: use storageAccountId #10435
OCPBUGS-76930: terraform/provider/google: Fixing inconsistencies with service account creation #10324
OCPBUGS-62601: update resolv.conf every time on bootstrap node #9985
OCPBUGS-62814: Release 4.14 bump terraform provider azurerm #10001
OCPBUGS-55193: data/manifests/bootkube/cvo-overrides: Default to eus-4.14 #9643
OCPBUGS-54323: Update upi references to api-internal #9609
OCPBUGS-54264: IBMCloud: Move to IBM TF openshift fork #9605
OCPBUGS-54260: vsphere-fix convert if only provided name #9602
OCPBUGS-52996: Bump terraform-provider-google version to v5.37.0 to fix consistent issues during cluster creation #9587
OCPBUGS-53210: PowerVS: remove system pools #9572
OCPBUGS-46606: Power VS: Create region-zone-sysType hierarchy #9331
Full changelog

baremetal-machine-controllers

OCPBUGS-78101: [release-4.14] fix vendor/ for hermetic migration #245
Full changelog

baremetal-operator

OCPBUGS-53337: BMO can expose any secret via BMCEventSubscription CRD #409
Full changelog

cloud-credential-operator

OCPBUGS-60975: ccoctl: aws to use proper issuer url on subsequent runs #911
OCPBUGS-58677: github.com/golang/glog v1.2.5 #895
OCPBUGS-53418: github.com/golang/glog v1.2.4 #845
OCPBUGS-53819: update github.com/golang-jwt/jwt #841
OCPBUGS-51542: Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected #830
Full changelog

cluster-baremetal-operator

OCPBUGS-77449: Bump github.com/go-errors/errors to v1.5.1 #564
Full changelog

cluster-capi-controllers

OCPBUGS-77974: [release-4.14] fix vendor for hermetic #265
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-63170: ccm: disable unused secure-serving port and webhook #425
Full changelog

cluster-dns-operator

OCPBUGS-52500: [release-4.14] Add runbook_url for CoreDNSErrorsHigh #433
Full changelog

cluster-etcd-operator

OCPBUGS-67770: Update logrus to 1.9.3 to address CVE-2025-65637 #1548
OCPBUGS-53507: fix CVE-2025-30204 #1405
Full changelog

cluster-image-registry-operator

OCPBUGS-67771: Bump logrus to 1.9.1 #1290
OCPBUGS-53867: Bump github.com/golang-jwt/jwt #1229
OCPBUGS-53867: Bump github.com/golang-jwt/jwt #1224
OCPBUGS-51598: bump golang.org/x/oauth2 #1213
OCPBUGS-51312: ensure that storage names don’t end in dashes #1185
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-67775: CVE-2025-65637 openshift4/ose-cluster-kube-apiserver-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.14.z] #2045
OCPBUGS-50662: Increase waitForFallbackDegradedConditionTimeout #1807
Full changelog

cluster-kube-scheduler-operator

CNTRLPLANE-2843: chore: update OWNERS #626
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-67780: Bump github.com/sirupsen/logrus to v1.9.1 #141
Full changelog

cluster-monitoring-operator

OCPBUGS-76415: test: remove image registry e2e tests #2811
Full changelog

cluster-network-operator

OCPBUGS-84184: fix(hypershift): use net.JoinHostPort for URL construction #2996
OCPBUGS-78105: fix vendor for hermetic 4.14 #2913
OCPBUGS-51170: Use applyconfigurations for updating network.oprerator status #2660
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-76593: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.14] #658
Full changelog

cluster-samples-operator

OCPBUGS-63518: references to github.com/sclorg/django-ex.git now also refer to the branch #661
OCPBUGS-55655: Adding mutex to func createSamples on handler.go #635
OCPBUGS-54537: add rhdmalone to owners #624
Full changelog

cluster-storage-operator

OCPBUGS-67795: Bump logrus to v1.9.3 #655
Full changelog

cluster-version-operator

OCPBUGS-50592: Set openshift.io/required-scc: privileged annotation in version pods #1151
Full changelog

console

OCPBUGS-83297: [release-4.14] openshift4/ose-console: Axios: Remote Code Execution via Prototype Pollution escalation #16311
NO-JIRA: Updating openshift-enterprise-console-container image to be consistent with ART for 4.14 #16168
CONSOLE-5011: migrate to yarn berry #16082
NO-JIRA: Bump builder image to v29 #15991
OCPBUGS-74439: Bump lodash to latest #15971
OCPBUGS-44158: bump dompurify to latest #15593
OCPBUGS-59998: Remove the devconsole backend common internet proxy and replace it with dedicated ones #15464
OCPBUGS-58274: Fix TypeError Cannot read properties of null (reading ‘metadata’) #15228
OCPBUGS-57099: Add all files to vendor regardless of gitignore #15135
OCPBUGS-55942: fix bug where operator appears twice #15033
OCPBUGS-55427: Add missing pipelines plugin name to known plugins #15005
OCPBUGS-39010: fix crash if helm chart metadata is nil #14198
OCPBUGS-53437: Show Observe section without PROMETHEUS and MONITORING flags #14892
OCPBUGS-54404: Update the monitoring topic used by the console team #14910
OCPBUGS-54167: fix run time error when no completed version exists #14899
OCPBUGS-51118: redirect to correct alert #14823
OCPBUGS-49753: ImagePullSecret getting duplicated when editing DeploymentConfig in Form View #14711
Full changelog

console-operator

OCPBUGS-77994: [release-4.14] hermetic 4.14 #1131
OCPBUGS-77994: [release-4.14] NO-JIRA: update go mod dependency for konflux #1117
Full changelog

container-networking-plugins

OCPBUGS-78286: fix vendor for hermetic 4.14 #225
OCPBUGS-56046: Check error returned by ipv6 SettleAddresses #193
Full changelog

coredns

OCPBUGS-58713: [release-4.14] Bump github.com/golang/glog to v1.2.4 #139
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-67800: fix CVE-2025-65637 #363
OCPBUGS-58887: CARRY: don’t ignore json files #343
OCPBUGS-52413: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.27 into release-4.14 #315
Full changelog

csi-driver-manila-operator

OCPBUGS-67801: Bump logrus #253
Full changelog

docker-builder

OCPBUGS-66112: BuildConfig inline Dockerfile fails with heredoc syntax #492
OCPBUGS-58140: S2I build cpu limits observed by assemble are limited to 1 cpu #476
OCPBUGS-42915, OCPBUGS-43297: Bump buildah to 1.33.12 #447
OCPBUGS-43190: runc library bump to 1.1.12 #438
Full changelog

docker-registry

OCPBUGS-53651: bump jwt and oauth dependencies #434
Full changelog

gcp-cluster-api-controllers

OCPBUGS-78282: [release-4.14] update go mod dependency for konflux #269
Full changelog

gcp-machine-controllers

OCPBUGS-56194: Disable shielded VMs for non-UEFI disks #118
Full changelog

hyperkube, pod

OCPBUGS-59473: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2364
OCPBUGS-67736, OCPBUGS-67822: CVE-2025-65637 - bump github.com/sirupsen/logrus to v1.9.3 [4.14] #2586
NO-JIRA: fix verify job failure #2584
OCPBUGS-74302: Skip E2e: attach on previously attached volumes should work #2570
OCPBUGS-59473: UPSTREAM: <carry>: disable some legacy cloud provider Azure tests #2579
Full changelog

hypershift

OCPBUGS-84184: fix(cno): use brackets only for IPv6 in server URL #8370
OCPBUGS-61176: Add missing service network DNS entries to KAS cert #6742
OCPBUGS-57321: Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs #6231 #6252
OCPBUGS-55936: [release-4.14] Add konnectivity-proxy sidecar to openshift-oauth… #6129
CNTRLPLANE-921: Konflux build pipeline service account migration #6080
CNTRLPLANE-921: Konflux build pipeline service account migration #6085
OCPBUGS-51802: Fix golang crypto dependency go.mod replacement #5996
OCPBUGS-53899: bump golang-jwt v4 #5909
OCPBUGS-53433: Prevent IgnitionServer from flooding the API server with patch requests #5878
OCPBUGS-51731, OCPBUGS-51802: Bump dependencies to OCP fork in backports #5899
Red Hat Konflux update control-plane-operator-4-14 #5953
ART-11792: update go mod dependency for konflux #5921
OCPBUGS-53314: Fix IsIPv4 function identifying also addresses instead of CIDRs #5867
OCPBUGS-45559: Add Network Policies for Konnectivity server and Ignition server proxy #5816
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.6 #5730
NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.6 #5725
chore(deps): update dependency mkdocs-mermaid2-plugin to v0.6.0 #5687
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.5 #5681
NO-JIRA: chore(deps): update dependency mkdocs-material to v9 #5688
OCPBUGS-50700: add region to AWS creds passed to operators managed by CPO #5668
NO-JIRA: Red Hat Konflux update control-plane-operator-4-14 #5339
OCPBUGS-47630: Separate CPO containerfiles #5619
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.6.4 #5538
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-77212: [release-4.14] standardize build paths #126
OCPBUGS-58738: bump github.com/golang/glog to v1.2.4 #109
OCPBUGS-56065: tech debt: rework vendor patches #93
OCPBUGS-53907: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #86
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-67825, OCPBUGS-67826: bump github.com/sirupsen/logrus to v1.9.3 #166
OCPBUGS-59791: [IBM VPC] set offlineExpansion to false in e2e test manifest #151
Full changelog

ibm-vpc-node-label-updater

OCPBUGS-56065: tech debt: rework vendor patches #50
OCPBUGS-53539: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #46
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-67290: [release-4.14] Fix incomplete vendor/ #136
OCPBUGS-51816: CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork #123
Full changelog

ironic

OCPBUGS-69788: Bump eventlet version to 0.33.1-7 #765
Full changelog

ironic-agent

OCPBUGS-69779: Bump eventlet version to 0.33.1-7 #234
Full changelog

kube-proxy, sdn

OCPBUGS-54991: Handle openshift-host-network namespace as special when it modifies #655
Full changelog

kube-storage-version-migrator

NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-14). #229
Full changelog

libvirt-machine-controllers

OCPBUGS-77198: Fix incomplete vendor #304
Full changelog

machine-api-operator

OCPBUGS-67840: bumped logrus to v1.9.3 #1459
OCPBUGS-53296: add image/read permissions #1350
Full changelog

machine-config-operator

OCPBUGS-57341: Do not enable on-prem-resolv-prepender.path for UPI #5114
OCPBUGS-43743: Soften haproxy timeout for kubeapi probe #4664
OCPBUGS-54228: Update ObservedGeneration in KubeletConfig #4950
OCPBUGS-50631: Add clarification to invalid maxUnavailable alert #4848
Full changelog

machine-image-customization-controller

OCPBUGS-67827: bumped logrus to v1.9.3 #159
Full changelog

machine-os-images

OCPBUGS-54171: Change rhcos release browser url #59
Full changelog

monitoring-plugin

OCPBUGS-74442: [release-4.14] fix: upgrade lodash to remove vulnerable code #906
OCPBUGS-78495: fix for CVE-2025-69873 #851
Full changelog

multus-admission-controller

OCPBUGS-58763: Bump github.com/golang/glog to v1.2.4 #105
Full changelog

multus-cni

OCPBUGS-85253: Fix server url in kubeconfig #287
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-55620: Fixes leftover podref issue #367
Full changelog

must-gather

OCPBUGS-42971: Collect etcd object count #457
OCPBUGS-48084: Update owners #475
Full changelog

network-metrics-daemon

OCPBUGS-58778: Bump github.com/golang/glog to v1.2.4 (#115) #115
OCPBUGS-60394: Replace e2e test image (#128) #128
swtich golint install method (#127) #127
Full changelog

nutanix-machine-controllers

OCPBUGS-47265: fixing CVE-2024-45338 #116
OCPBUGS-51852: Fixing CVE-2025-22868 #108
Full changelog

oauth-apiserver

OCPBUGS-74926: bump kubernetes-apiserver to pick up loopback cert expiration update #174
NO-JIRA: (chore): update OWNERS #176
Full changelog

openshift-apiserver

OCPBUGS-74924: bump kubernetes-apiserver to pick up loopback cert expiration update #602
OCPBUGS-76483: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.14] #612
OCPBUGS-56613: Fix image reference in TestImageStreamImportQuayIO #518
OCPBUGS-50477: Pass expected type to deploymentconfig/scale object validation. #497
Full changelog

openshift-controller-manager

OCPBUGS-57940: Set node-pullsecrets volume to read-only to protect image pull credentials #398
OCPBUGS-56951: Empty proxy variables are causing issues during the build #386
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-67853: Bump logrus #189
Full changelog

openstack-machine-api-provider

OCPBUGS-78172: hermetic 4.14 #165
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-61469: [release-4.14] Add NetworkPolicy as a supported kind #1052
OCPBUGS-61390: [4.14] e2e stability fixes #1085
Full changelog

operator-marketplace

OCPBUGS-62222: Remove Expect func so that the test case can use the retry logic #673
Full changelog

ovirt-csi-driver-operator

OCPBUGS-67893: Bump github.com/sirupsen/logrus to v1.8.3 #146
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

CORENET-6055, OCPBUGS-78982: [release-4.14] Dockerfile: Unpin OVN and consume the latest from FDP #3073
OCPBUGS-59872: Dockerfile: Remove ovs version pinning #2695
OCPBUGS-57102: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.14 #2590
OCPBUGS-56420: Update to FDP25.A.1 24.03.5-40. #2574
OCPBUGS-48522: Let OVN-northd bind remote ports #2418
OCPBUGS-54732: Dockerfile.base: bump OVS version to 3.3 #2511
OCPBUGS-50584: Bump OVN to 23.09.6-12 to consume fix for FDP-905 #2455
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-67860: Fix CVE-2025-65637 by bumping logrus to v1.9.1 #100
Full changelog

powervs-machine-controllers

OCPBUGS-78039: hermetic 4.14 #136
OCPBUGS-54754: Fix for CVE-2024-51744 in github.com/golang-jwt/jwt/v4 in release-4.14 #116
Full changelog

prometheus-alertmanager

OCPBUGS-77837: Include go-verify-deps expected files in gitignore #121
Full changelog

tests

OCPBUGS-74302: Skip E2e: attach on previously attached volumes should work #30727
OCPBUGS-63674: Fix regex parser #30391
OCPBUGS-61233: images/tests: Remove rteval #30208
OCPBUGS-55747: [build] Ensure Git Clone Does Not Run Privileged #29758
OCPBUGS-54770: Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com #29665
OCPBUGS-52583: Use payload pullspec for image info test #29591
OCPBUGS-51363: Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token #29567
OCPBUGS-51044: Add/remove team members to the OWNERS file for Builds #29554
Full changelog

thanos

OCPBUGS-67876: CVE-2025-65637 Update sirupsen/logrus to 1.9.3 #167
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-78031: hermetic migration 4.14 #109
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-78023: hermetic migration 4.14 #88
OCPBUGS-61655: Fix unit tests #74
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-67880: CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.8.3 #160
OCPBUGS-51045: Prevent node cache update during attach & detach #139
Full changelog

vsphere-csi-driver-operator

OCPBUGS-67879, OCPBUGS-67885: CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.9.3 #325
Full changelog

vsphere-problem-detector

OCPBUGS-67891: bump github.com/sirupsen/logrus to v1.9.3 #202
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Unable to show node image info: too many concurrent oc adm release info --rpmdb/--rpmdb-diff operations (limit 16)

View changelog in Markdown or change previous release:

Source code for this page located on github