4.15.67

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.15.67-x86_64

Qualifiers (status api): None

Tests:

Blocking jobs
- upgrade Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.15-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Failed (1 retry) periodic-ci-openshift-release-main-ci-4.15-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Failed
- aws-sdn-upgrade-4.15-micro Succeeded (1 retry) periodic-ci-openshift-release-main-nightly-4.15-e2e-aws-sdn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- azure-ovn-upgrade-4.15-micro Failed (1 retry) periodic-ci-openshift-release-main-ci-4.15-e2e-azure-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Failed
- driver-toolkit Succeeded periodic-ci-openshift-release-main-nightly-4.15-e2e-aws-driver-toolkit
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.15-fips-payload-scan
- gcp-ovn-rt-upgrade-4.15-minor Succeeded (1 retry) periodic-ci-openshift-release-main-ci-4.15-upgrade-from-stable-4.14-e2e-gcp-ovn-rt-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- hypershift-ovn-conformance-4.15 Succeeded periodic-ci-openshift-hypershift-release-4.15-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-dualstack Succeeded periodic-ci-openshift-release-main-nightly-4.15-e2e-metal-ipi-ovn-dualstack
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.15-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-ipv4 Succeeded periodic-ci-openshift-release-main-nightly-4.15-e2e-metal-ipi-sdn-ipv4

Upgrades from:

Untested upgrades: 4.14.19, 4.14.20, 4.14.22, 4.14.23, 4.14.24, 4.14.25, 4.14.26, 4.14.27, 4.14.28, 4.14.29, 4.14.30, 4.14.31, 4.14.32, 4.14.33, 4.14.34, 4.14.35, 4.14.36, 4.14.37, 4.14.38, 4.14.41, 4.14.42, 4.14.43, 4.14.44, 4.14.45, 4.14.46, 4.14.47, 4.14.48, 4.14.49, 4.14.50, 4.14.51, 4.14.52, 4.14.53, 4.14.54, 4.14.55, 4.14.56, 4.14.57, 4.14.58, 4.14.59, 4.14.60, 4.14.61, 4.14.62, 4.14.63, 4.14.64, 4.14.65, 4.14.66, 4.14.67, 4.15.10, 4.15.12, 4.15.13, 4.15.14, 4.15.15, 4.15.16, 4.15.17, 4.15.18, 4.15.19, 4.15.20, 4.15.22, 4.15.23, 4.15.24, 4.15.25, 4.15.26, 4.15.27, 4.15.28, 4.15.29, 4.15.3, 4.15.30, 4.15.31, 4.15.32, 4.15.33, 4.15.34, 4.15.35, 4.15.36, 4.15.37, 4.15.38, 4.15.39, 4.15.4, 4.15.40, 4.15.41, 4.15.42, 4.15.43, 4.15.44, 4.15.45, 4.15.46, 4.15.47, 4.15.48, 4.15.49, 4.15.5, 4.15.50, 4.15.52, 4.15.53, 4.15.54, 4.15.55, 4.15.56, 4.15.57, 4.15.58, 4.15.59, 4.15.6, 4.15.60, 4.15.61, 4.15.62, 4.15.63, 4.15.7, 4.15.8, 4.15.9

4.15.66 (changes) - F F F F F S S F
4.15.65 (changes) - Failed
4.15.64 (changes) - Failed
4.15.51 - Failed
4.15.21 (changes) - Success
4.15.11 (changes) - Failed
4.15.2 (changes) - Failed
4.15.1 (changes) - Failed
4.15.0 (changes) - Success
4.14.70 (changes) - Failed
4.14.69 (changes) - Success Success
4.14.68 (changes) - Failed
4.14.40 (changes) - Failed
4.14.39 (changes) - Failed
4.14.21 (changes) - Failed
4.14.18 (changes) - Failed
4.14.17 (changes) - Failed
4.14.16 (changes) - Failed
4.14.0-0.nightly-2026-07-21-164845 (changes) - Failed Success

Upgrades to:

4.16.67 (changes) - F F F F F F F

Loading changelog, this may take a while ...

Changes from 4.15.51

Created: 2026-07-22 09:13:07 +0000 UTC

Image Digest: sha256:2f76605ac71fd30ffe0f017cbff0c01a24dd2649002b397ba17b010f49c77884

Components

Kubernetes 1.28.15
Red Hat Enterprise Linux CoreOS upgraded from 415.92.202505141451-0 to 415.92.202607210244-0 (diff)

Removed images

ovirt-csi-driver
ovirt-csi-driver-operator

Rebuilt images without code change

agent-installer-utils git 33b7d855 sha256:a54bedba73c98f5ae6b0513347e148436247591bc58d4dac2923876ec13b4d01
alibaba-cloud-controller-manager git abf4fa96 sha256:8c10c8b6efa5f8e8431c9886352107ceaa15568bd1bd40c536a017351b1fc101
alibaba-disk-csi-driver-operator git 41b367ae sha256:462c928f8818e4d15c24c2b9ac4ebfc57d61fc8fe6ff22aa76f39cf0da57e004
alibaba-machine-controllers git f7f5eed8 sha256:7159beed1a04df392c800e7382dc620ed7c1659da032e1a0499c4cd95ec1a79c
apiserver-network-proxy git adccbd5c sha256:e8c554cfa2bfa9a8a292361e78cb7a37ad519441b8785b95305ea87963908b33
aws-cloud-controller-manager git fd77d92c sha256:9f887a6ce1fab727afc8b1160b1046daeabdcad1c1ee6e5b51e02493e28da2c3
aws-ebs-csi-driver git 7043c1cc sha256:0832eba7050cbd3dcb6132fd0773c5242ff3511c7cb2e6cf8069ae143f82151e
aws-pod-identity-webhook git 13385034 sha256:9e5730ab940353ba872532deda7a2f48c75135409969018e460948b206bcd378
azure-disk-csi-driver git dcb7e1c7 sha256:c3dec965beeb88070c90b0f426f96eefb892ba570de97cc7de178f026318c15c
azure-disk-csi-driver-operator git 160cf624 sha256:d8cc5e90934d14ff2ef602776d1551fb71ca54c291036efe0a7f5d06c1c07a00
azure-workload-identity-webhook git 5db478a9 sha256:531adb501cf0cff6bc2a6402aa4adc374066efe8c47edb496302095d3b40aa6f
baremetal-operator git 880ee050 sha256:da1b224e3cf30855dcbb96c1f0d8d89961e48e61127b12572d98f1fb47166a74
baremetal-runtimecfg git 1fbb2c0c sha256:ff404e9216330517af00941cda39eaee8d692715751b366c3d6c2d79dad9a252
cli git 82316376 sha256:76849790d94b0cc073ea60d85c164b57cd6b58707b7091bf8c9314a4abe565e2
cli-artifacts git 82316376 sha256:0fdbbbd859fbdf5faba53f3f77d985d88864e45352fc41fb9091dc9ab226ea55
cloud-network-config-controller git 6864da06 sha256:536da0880d7ebab32cb931e6842a7955563ecb3aaae4ac3760433625ac2a75f2
cluster-authentication-operator git 7aaa40eb sha256:9faa8a88a7c968150743d12315a6ca176ac914718b6255f9cefc7a23798fbf98
cluster-autoscaler git 89149896 sha256:d4a451e145d4b4fc80eb853ae0ae7416757b7fed6c455a8aada152e601f2732e
cluster-autoscaler-operator git 8425d88b sha256:9cbfba4755383025bdec361cafdd8183500c5a220e4264334e0dad1d66518f3a
cluster-bootstrap git 0849c462 sha256:3acce4f0e7c77f86d03f9bf34a51bafd5f1924be1e7a0df3227671e696a01c18
cluster-capi-controllers git 2053e13c sha256:5275cad01aca6075d92f652c0378ac2ed3ccd6ce21adb03bad5e7d50206c8cf9
cluster-config-api git 0a58f8c3 sha256:05d701c12f4f72e48e9a78012bdcef6f29bd855e91ec1fc9a46882a47b9de474
cluster-config-operator git 0b4c69fd sha256:7e8e9e47f6da200e6e70aa88c5ed986657b74be1ea2322450796e5adf6a20934
cluster-control-plane-machine-set-operator git e1b692b1 sha256:61950ecef38bf1812cfa1549be799bda131547970f6854943c6e6f963c788856
cluster-csi-snapshot-controller-operator git 65dbb12b sha256:77fd365637ebe7f6ebf4a1e3c9cb2596778bfead80099c85658992ed7254eef9
cluster-dns-operator git 73aa60d1 sha256:628d95aa6655c24120357ac31b642fb8f1e1c9f7d5d0efd8ec06af884568c397
cluster-kube-cluster-api-operator git 128d8e08 sha256:c533799761fc949c33d9300b65f876cd0c70f6bb9bae265d9a1109dc41282ab3
cluster-machine-approver git 863813ec sha256:ad54a21f792e382414f503b484b4946813b81fdfad1f79bf8194a73540f56ad0
cluster-node-tuning-operator git e828bd93 sha256:81923a14bbe8c5e5c959ddf6136126706b17464baa41f23409e91544552d6a5f
cluster-openshift-controller-manager-operator git 1ae0ba75 sha256:81a3a9c2a4cc43f3cc7eb2667545c980651db803e42db9af4c067a8918bc8aa3
cluster-platform-operators-manager git 37a0a919 sha256:320f28405ce178833c0dff63da58d8979ddf9fb506154efd251d008765fa6132
cluster-policy-controller git cc48f315 sha256:4d5564f813706cdaeece463de717140980e67e0cd80ca65c995103f3019891d8
cluster-update-keys git 802233d8 sha256:d051d381155f6e94450fbb6b26fae338cc840183b02f67ea9b37f0cc21e852d3
cluster-version-operator git 2cb8ce9e sha256:1850ba5985f18112801959239c61938c23ccf7d21a996f69f0ad2989806e37a6
configmap-reloader git 617398f5 sha256:dbb92bc7f610bf2455a5d808f75afc6485fa37aa1ddb9f141068eb3329860601
csi-driver-shared-resource git 260a085a sha256:0b218caa9e6d35f420eedcdb24bcf334da461d2003ada7af44ed9992c7a21f0c
csi-driver-shared-resource-operator git 8d017b7f sha256:4a668140089fe85b41c301871df09c1e50c71fa4f30bddd6461d8fa255728df5
csi-driver-shared-resource-webhook git 260a085a sha256:babff5804f10c9bfc876755873ed635a6de30f15e75c619a7fa37e598547a814
csi-external-attacher git f806f266 sha256:56d40db1e244ebc92e5576a6ed34ff56a790d9a8aa621220333332323f42c50d
csi-external-provisioner git ce5a1a33 sha256:8ae9c0e904429b05d2a0c8e2639c4e332d414144bc66d9ce4de11e17b78b2b7e
csi-external-resizer git 3b4236d3 sha256:de9fe27c63f19aadd2d586fbefff8527a0f66cec609c3ee29df76f9943603c73
csi-external-snapshotter git 4f2955c7 sha256:f48e018c913feb983fcad1b3cac31668f915a884d6c3c5eef4a722a6f2ac0bbe
csi-livenessprobe git 240bb8c0 sha256:57a9c75efaacfaf0bf647811a318dc079bc41500585b0dfe263531ab735903e4
csi-node-driver-registrar git 9005584e sha256:af0c34c2d84d8ba1b58ca39944947ebf900e2101112312164cdd67a526d361a1
csi-snapshot-controller git 4f2955c7 sha256:413fb8531df86d721f14369df78d481d0de56b369c2e91769da852de243d7ba3
csi-snapshot-validation-webhook git 4f2955c7 sha256:2f0f0f6ff16eadee69bb8e0bc9a394b5d7677ab6e8b280c8f551b4709ad0dd94
deployer git 82316376 sha256:0163a6a0a607a4276c17e9cfe11390895dde52f2edb3612a16190eb66de34eec
driver-toolkit git 7a448c2e sha256:4629d200a6cc65571017820a610c64eab6e8f65be5ff5570443d1e4769997b2c
egress-router-cni git f8ec690b sha256:0b76c5d1666395255bd56082d5b18ea9bbfd0591f94fe29ea98bf48f067dcaf8
etcd git a7005ef1 sha256:9853fc28f0b24fddf960f035b18eff8454a815ad10b22a2ee051af6ffefc1742
gcp-cloud-controller-manager git fc50272a sha256:e75a14bc10c9aff4f515231ebd6d3d890a7f3681fc3f47994433eb0c03516c69
ibm-cloud-controller-manager git cc0d5415 sha256:8f594a69219b3df233db9441e1be2ad9b668ab85d4db6ba55fec7e2ed6f3b58f
ibmcloud-machine-controllers git 6846b9a7 sha256:dcd2eb014951ce8196bd0150cae48648b1f67fb5e522eac98cb8e341ca36f602
insights-operator git 975bba98 sha256:b7c7629ea6e4e77d704a14fb8483f3399b19832468d088a7d111e28bfbbad6d5
ironic-static-ip-manager git 989bcb4f sha256:bf365d0bd2e835664b33fe3680f613ef1bbbd4132bc231f01b9f3f1e09fc4573
k8s-prometheus-adapter git 34e20193 sha256:b49e8274188204a5bab720a30c3ad1829c989753fed84a1a16535eaa9010b038
keepalived-ipfailover git 87c23b5a sha256:2c718d5a4acd9a1f0c9086896897c6c5d649f70c538d5f6e3f8cc821aab98d7e
kube-metrics-server git bcbf241c sha256:4a2be30dc0a1ebe61274ffe6a6729ffc7560f4943370deb26cc16d0e7e050254
kube-proxy git 53680a50 sha256:548a58e025c8872283caacfe1cc2d66198120fc717d08edf71795c84c772ee00
kube-rbac-proxy git 9308e7f2 sha256:ade5746176096ceee8cd2accd4173bdc13d36e14381cc546ff7f3558ca0887e9
kube-state-metrics git 037b59c2 sha256:f403730347931db5cb6f8560ef40483ac0160af7cde127d6fe769d49f383dceb
machine-os-content sha256:ad9a6054c1fa7d82b96bc2b77544d4746b37f6e810959af031bf849758e6ceab
multus-networkpolicy git b377b4b5 sha256:1543befaf282ae533690c264b5485f5db50ca70c84077e07f5ae115e9520f24d
multus-route-override-cni git 1ccafc34 sha256:0f714e04930ca470658526fbee330227043d0ef6b590125a59caf4cfe46a617d
multus-whereabouts-ipam-cni git cfa4f975 sha256:ed1483f2f2b1c70686679db2d1daba77ea4d6176906203e468140092474e0f2c
network-interface-bond-cni git f91decaa sha256:2d0d29e1abfa0f69c1c384930f920e06efb4c828966b8b9b7dd954fbfa927222
network-tools git 17536c8d sha256:182409749ef9e643963e444ee25ff1d1652432eb63120c9b647e9ddd46b137ed
nutanix-cloud-controller-manager git 040d4e01 sha256:a4ef502e45ebb508aa7d03d164cec3f147ccfe5c221f07e429aaffa2d485c6f6
oauth-server git c055dbb9 sha256:2fe93888390f57293637e359c7e2380f61134dc7fae2de1d3b10150f70b0ccc6
olm-catalogd git 035d3835 sha256:2197a6d4b4c3997f61100a8fb06f029c272d9d0b480299bd6d78b4153652a2b3
olm-operator-controller git 303b954f sha256:fe177c583d064a496e08e8d823271085ae8ceb296f4c439d592f1f8bdde2aeeb
olm-rukpak git 5b09cd44 sha256:cdaed54c697cf525be8b19b6bd9aa2403c18423749b65bc863dd28b1cbf3e64c
openshift-state-metrics git 1915f645 sha256:d8856c05929f2173397848f746550d55010beb917c109cea575bcc61b62dff33
openstack-cluster-api-controllers git 232472ea sha256:62a589dd16fc839dd81833824dbd5eae788598f9fa61a5e2ad3e88d383294c52
powervs-block-csi-driver git 38bee567 sha256:f8e98419678d8760082daad5916bd049689c95b0181b7f3d32b650798a633fb3
powervs-cloud-controller-manager git 1d6a7ed9 sha256:f1d095a5bf984ba19eebb7824bdc2629e2e230ca2962ad5bed6b04d0c504cefb
prom-label-proxy git f3f1f5d1 sha256:5e112a827860584d14ba40583bf7f6d121f0d04d081d85b13f3ed8febaac2b7e
prometheus-config-reloader git 902436ac sha256:e80991e7a7e15412b20ddd41b671be8d7da8011da52368ac84cdd06afda8ecb2
prometheus-node-exporter git aed837c3 sha256:140e006659416fb71ef2f3a2a9fcaccce952e26500e53326870b414a5b372b1b
prometheus-operator git 902436ac sha256:5953295ba9f7e59e75ca12e06715be42ade2dca09757ebecbfc857bc1685b2ba
prometheus-operator-admission-webhook git 902436ac sha256:1ad38d66475a8de74ba43ca3c9e53920fa68541bf4589ee041c609d0f6011846
rhel-coreos sha256:e6b9719c0069a18ae8d545a5b5f2f906288df9da53bf11f057f6f149e5feafdb
rhel-coreos-extensions sha256:bb54e74cd63d6b6cd4029a86ff3450f00e8b1caeffef364ed49c8c7de3dccb08
sdn git 53680a50 sha256:b87baaa5d786ead97bfe2e52832aa80f54d19a8cd2c445a9bbad618e14197e24
telemeter git 14489f7d sha256:760456e56584c67ef3bf65586980da2309936bbc29d2d34a07ce40406ca215aa
thanos git 66161ad4 sha256:b67f5ce7409627690a03d15ad3c6fbc6ece1c6606d6cc277ed361f65cbcca57c
tools git 82316376 sha256:99685ac120177a32991e748e7cfb4910dbe5bbd34572d726f45be19a4794e101

agent-installer-api-server

OCPBUGS-58633, OCPBUGS-58638: Bump glog to v1.2.5 in release-4.15 (#7905) #7905
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-58643: Bump github.com/golang/glog pkg version to 1.2.4 (#1189) #1189
Full changelog

agent-installer-node-agent

run go mod tidy / vendor #1020
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

alibaba-cloud-csi-driver

OCPBUGS-67910: Bump github.com/sirupsen/logrus to v1.8.3 #47
Full changelog

aws-cluster-api-controllers

OCPBUGS-78228: [release-4.15] hermetic 4.15 #592
OCPBUGS-61943: UPSTREAM <carry>: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It #573
OCPBUGS-58668, OCPBUGS-58673: bump github.com/golang/glog to v1.2.5 #562
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-67913: Bumped logrus to 1.9.3 #492
Full changelog

aws-machine-controllers

OCPBUGS-63141: client: re-use a single file for building the session instead of randomly named files #153
OCPBUGS-63141: revert: client: re-use a single file for building the session instead of randomly named files #150
OCPBUGS-63141: client: re-use a single file for building the session instead of randomly named files #143
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-79916, OCPBUGS-85634, OCPBUGS-85637: Bump google.golang.org/grpc to v1.79.3 #187
Full changelog

azure-cluster-api-controllers

OCPBUGS-78177: [release-4.15] update go mod dependency for konflux #365
Full changelog

azure-file-csi-driver

OCPBUGS-79874: Bump google.golang.org/grpc to v1.79.3 #131
ART-13080: Regenerate go.mod to fix build failure #94
Full changelog

azure-file-csi-driver-operator

OCPBUGS-67918: Bump github.com/sirupsen/logrus to v1.9.3 #113
OCPBUGS-60544: add tag matching to Azure File storage class #110
Full changelog

azure-machine-controllers

OCPBUGS-56657: Fix failure when attempting to modify immutable availabilitySet #150
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-79036: Azure UPI ARM template: use storageAccountId #10418
OCPBUGS-76929: terraform/provider/google: Fixing GCP inconsistencies present with the service account creation #10316
OCPBUGS-42554: only allow a single network in failure domain topology #9060
OCPBUGS-62849: Release 4.15 bump terraform provider azurerm #10007
OCPBUGS-62410: Make swift containers removal not fatal for UPI. #9978
OCPBUGS-60497: update resolv.conf every time on bootstrap node #9885
OCPBUGS-39416: OpenStack: Install CI dependencies from rpm #9103
Full changelog

baremetal-machine-controllers

OCPBUGS-78100: [release-4.15] fix vendor/ for hermetic migration #244
Full changelog

cloud-credential-operator

OCPBUGS-60974: ccoctl: aws to use proper issuer url on subsequent runs #910
OCPBUGS-58678: github.com/golang/glog v1.2.5 #894
Full changelog

cluster-baremetal-operator

OCPBUGS-77448: Bump github.com/go-errors/errors to v1.5.1 #563
Full changelog

cluster-capi-operator

NO-JIRA: Allow sustaining engineering to self serve dependency updates #561
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-63169: ccm: disable unused secure-serving port and webhook #424
Full changelog

cluster-etcd-operator

OCPBUGS-67931: Update logrus to 1.9.3 to address CVE-2025-65637 #1547
Full changelog

cluster-image-registry-operator

OCPBUGS-67932: Bump logrus to 1.9.1 #1289
OCPBUGS-53866: bump github.com/golang-jwt/jwt #1220
OCPBUGS-51596: bump golang.org/x/oauth2 #1211
Full changelog

cluster-ingress-operator

OCPBUGS-86712: Add configuration override for X-SSL strip #1491
OCPBUGS-49392: Block Upgrades in release 4.15 for CA-Signed Certs Using SHA1 #1172
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-67937: CVE-2025-65637 openshift4/ose-cluster-kube-apiserver-rhel9-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.15.z] #2044
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-67987: CVE-2025-65637 openshift4/ose-kube-proxy-rhel9: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.15.z] #910
Full changelog

cluster-kube-scheduler-operator

CNTRLPLANE-2843: chore: update OWNERS #625
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-67942: Bump github.com/sirupsen/logrus to v1.9.1 #145
Full changelog

cluster-monitoring-operator

OCPBUGS-66047: test: remove image registry e2e tests #2757
Full changelog

cluster-network-operator

OCPBUGS-84183: fix(hypershift): use net.JoinHostPort for URL construction #2995
OCPBUGS-62980: Update CNO reviewers/approvers #2817
OCPBUGS-56649: Fix live migration with feature migration configured explicitly #2715
Full changelog

cluster-olm-operator

OCPBUGS-86345: Update grpc-go to v1.64.1-sec.1 to fix CVE-2026-33186 #208
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-67946: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.15] #655
Full changelog

cluster-samples-operator

OCPBUGS-63517: references to github.com/sclorg/django-ex.git now also refer to the branch #660
Full changelog

cluster-storage-operator

OCPBUGS-87726: remove oVirt code from CSO 4.15 #710
OCPBUGS-67955: bump github.com/sirupsen/logrus to v1.9.3 #654
Full changelog

console

OCPBUGS-88366, OCPBUGS-88379, OCPBUGS-88395, OCPBUGS-88402, OCPBUGS-88415, OCPBUGS-88427, OCPBUGS-88445: CVE-2026-44495 #16611
OCPBUGS-79436: CVE-2026-29063 Bump immutable #16328
NO-JIRA: enable multi-architecture yarn builds #16425
OCPBUGS-83298: [release-4.15] openshift4/ose-console: Axios: Remote Code Execution via Prototype Pollution escalation #16302
OCPBUGS-76575: Bump axios #16033
CONSOLE-5011: migrate to yarn berry #16081
NO-JIRA: Bump builder image to v29 #15992
OCPBUGS-74443: Bump lodash to latest #15970
OCPBUGS-69767: Disallowed Pipelines-plugin Pipelines navigation section #15864
OCPBUGS-65822: Remove required flag from ‘console.flag/model’ pipelines-plugin extension #15749
OCPBUGS-65601: /auth/error?error=missing_state&error_type=auth is showing blank page #15727
OCPBUGS-44159: bump dompurify to latest #15592
OCPBUGS-60672: Secret key with binary file changes when edited via Console #15422
OCPBUGS-59997: Remove the devconsole backend common internet proxy and replace it with dedicated ones #15359
OCPBUGS-59564: Add flags in console static plugin for all the components of this epic #15306
OCPBUGS-60029: fix bug where / in console.tab/horizontalNav href brea… #15353
OCPBUGS-57521: Debug pod logs are not accessible when debugging a node via OpenShift Console #15181
OCPBUGS-58223: Fix TypeError Cannot read properties of null (reading ‘metadata’) #15221
OCPBUGS-57097: Add all files to vendor regardless of gitignore #15134
Full changelog

console-operator

OCPBUGS-77993: [release-4.15] hermetic 4.15 #1130
OCPBUGS-77993: [release-4.15] NO-JIRA: update go mod dependency for konflux #1116
Full changelog

container-networking-plugins

OCPBUGS-85668: CI Build root image tag sync with ART #233
Full changelog

coredns

OCPBUGS-77512: Modify .gitignore to not exclude vendor build folders #169
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-79905: Bump google.golang.org/grpc #398
OCPBUGS-67958: fix CVE-2025-65637 #362
OCPBUGS-58885: CARRY: don’t ignore json files #342
Full changelog

csi-driver-manila-operator

OCPBUGS-67959: Bump logrus #252
Full changelog

csi-driver-nfs

OCPBUGS-84930: Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.64.1-sec.1 to avoid go version bump and fix CVE-2026-33186 #183
Full changelog

docker-builder

OCPBUGS-65960: BuildConfig inline Dockerfile fails with heredoc syntax #491
OCPBUGS-58141: S2I build cpu limits observed by assemble are limited to 1 cpu #477
Full changelog

docker-registry

OCPBUGS-53650: bump jwt and oauth dependencies #433
Full changelog

gcp-cluster-api-controllers

OCPBUGS-78281: [release-4.15] update go mod dependency for konflux #268
Full changelog

gcp-machine-controllers

OCPBUGS-79899: Address CVE-2026-33186 #175
OCPBUGS-79899: Fix setup-envtest GCS 401 by downloading binaries directly #177
Full changelog

gcp-pd-csi-driver

OCPBUGS-67973: Update logrus to v1.9.3 #93
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-67971: bump github.com/sirupsen/logrus to v1.9.3 #161
Full changelog

haproxy-router

OCPBUGS-86712: Strip X-SSL-* headers for plain HTTP #806
OCPBUGS-49392: Block Upgrades for CA-Signed Certs Using SHA1 #641
Full changelog

hyperkube, pod

OCPBUGS-67902, OCPBUGS-67977: CVE-2025-65637 - bump github.com/sirupsen/logrus to v1.9.3 [4.15] #2583
OCPBUGS-74300: Skip E2e: attach on previously attached volumes should work #2569
OCPBUGS-59147: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2358
OCPBUGS-59147: UPSTREAM: <carry>: disable some legacy cloud provider Azure tests #2359
Full changelog

hypershift

OCPBUGS-84183: fix(cno): use brackets only for IPv6 in server URL #8308
OCPBUGS-74670, OCPBUGS-74671: Support proxy authentication when user/pass is included in URL #7606
CNTRLPLANE-1266: Drop extinct mce-2.5 pipeline #6655
CNTRLPLANE-1232: Move CPO pipeline to hermetic builds #6601
OCPBUGS-58506: [release-4.15] Add missing service network DNS entries to KAS cert #6394
OCPBUGS-57553: Add proxy variables for the MCD Pod #6293
OCPBUGS-57121: Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs #6231
OCPBUGS-46467: Consistently look up and dial cloud API hostnames #5300
OCPBUGS-52590: Honor proxy vars in the util insecure http client #5791
CNTRLPLANE-920: Konflux build pipeline service account migration #6086
CNTRLPLANE-920: Konflux build pipeline service account migration #6081
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-79893: Bump google.golang.org/grpc to v1.79.3 #148
OCPBUGS-77211: [release-4.15] standardize build paths #125
OCPBUGS-58739: bump github.com/golang/glog to version v1.2.4 #107
OCPBUGS-56064: tech debt: rework vendor patches #92
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-67980, OCPBUGS-67981: bump github.com/sirupsen/logrus to v1.9.3 #165
OCPBUGS-59775: [IBM VPC] set offlineExpansion to false in e2e test manifest #150
Full changelog

ibm-vpc-node-label-updater

OCPBUGS-56064: tech debt: rework vendor patches #49
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-67289: [release-4.15] Fix incomplete vendor/ #137
OCPBUGS-51814: CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork #122
Full changelog

ironic

OCPBUGS-69784: Bump eventlet version to 0.33.1-7 #764
Full changelog

ironic-agent

OCPBUGS-95071: Replace individual package removal with a single rpm -e loop #289
OCPBUGS-95071: Replace dnf remove with rpm -e to prevent dependency removal #277
OCPBUGS-69782: Bump eventlet version to 0.33.1-7 #233
Full changelog

ironic-machine-os-downloader

OCPBUGS-87172: CI build root image tag and go version in go.mod sync with ART 4.15 #121
Full changelog

kube-storage-version-migrator

NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-15). #228
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-95081: OWNERS: Update component to Cloud Compute / KubeVirt Provider #83
Full changelog

kubevirt-csi-driver

fix for OCPBUGS-58587: CVE-2024-45339 openshift4/kubevirt-csi-driver #69
Full changelog

libvirt-machine-controllers

OCPBUGS-77197: Fix incomplete vendor #303
OCPBUGS-26506: Updating ose-libvirt-machine-controllers-container image to be consistent with ART for 4.15 #282
Full changelog

machine-api-operator

OCPBUGS-67989: bumped logrus to v1.9.3 #1460
OCPBUGS-59861: Updates GCP CredentialsRequest #1397
Full changelog

machine-config-operator

OCPBUGS-99046: Remove sensitive ControllerConfig logging #6318
OCPBUGS-77636: Machine-config controller should not log about non-existent pull-secret changes #5573
OCPBUGS-60214: [release-4.15] OCPBUGS-53248: Enforce VIPs to be collocated at the same host #4988
OCPBUGS-59737: Remove MachineConfigNode CRD from manifests #5188
OCPBUGS-48284: Do not run resolv-prepender from NM dispatcher #4783
OCPBUGS-57340: Do not enable on-prem-resolv-prepender.path for UPI #5115
Full changelog

machine-image-customization-controller

OCPBUGS-67983: [4.15] uplift logrus #154
Full changelog

machine-os-images

OCPBUGS-87879: Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs #103
Full changelog

monitoring-plugin

OCPBUGS-74446: [release-4.15] fix: upgrade lodash to remove vulnerable code #907
OCPBUGS-78493: fix for CVE-2025-69873 #850
Full changelog

multus-admission-controller

OCPBUGS-58769: Update the github.com/golang/glog module to v1.2.4 #104
Full changelog

multus-cni

OCPBUGS-85252: Fix server url in kubeconfig #301
no-issue: [release-4.15] Bump Go to 1.20 and fix CI build root image #294
Full changelog

must-gather

OCPBUGS-36371: Run ppc node collection in parallel #430
Full changelog

network-metrics-daemon

OCPBUGS-58779: Bump github.com/golang/glog to v1.2.4 (#114) #114
OCPBUGS-60374: Replace e2e test image (#126) #126
swtich golint install method (#124) #124
Full changelog

nutanix-machine-controllers

OCPBUGS-47264: fixing CVE-2024-45338 #117
OCPBUGS-51850: CVE-2025-22868 #109
Full changelog

oauth-apiserver

OCPBUGS-74925: bump kubernetes-apiserver to pick up loopback cert expiration update #173
NO-JIRA: (chore): update OWNERS #175
Full changelog

oauth-proxy

OCPBUGS-61447: Update x/crypto to v0.31.0 #336
Full changelog

oc-mirror

OCPBUGS-77858: fix vendor for hermetic 4.15 #1361
Full changelog

openshift-apiserver

OCPBUGS-82665: Address CVE-2026-35469 #648
OCPBUGS-67998: CVE-2025-65637 - Bump github.com/sirupsen/logrus from v1.9.0 to v1.9.3 [release-4.15] #611
OCPBUGS-74923: bump kubernetes-apiserver to pick up loopback cert expiration update #600
OCPBUGS-58822: Fix image reference in TestImageStreamImportQuayIO #517
Full changelog

openshift-controller-manager

OCPBUGS-57761: Set node-pullsecrets volume to read-only to protect image pull credentials #396
OCPBUGS-56474: Empty proxy variables are causing issues during the build #383
OCPBUGS-54344: Unable to look up the service account secrets for build #370
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-68000: CVE-2025-65637 openshift4/ose-openstack-cinder-csi-driver-rhel8-operator: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload [openshift-4.15.z] #192
Full changelog

openstack-machine-api-provider

OCPBUGS-78171: hermetic 4.15 #164
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-79906, OCPBUGS-87895: Fix CVE-2026-33186 with openshift-sustaining/grpc-go v1.64.1-sec.1 [release-4.15] #1325
OCPBUGS-82056: Drop github.com/distribution/distribution dep #1303
OCPBUGS-61466: [release-4.15] Add NetworkPolicy as a supported kind #1051
OCPBUGS-61389: [4.15] e2e stability fixes #1084
OCPBUGS-57430: reduce cache expiry frequency [release-4.19] #1023
OCPBUGS-56463: fix(olm): improve error logging for missing olm.managed label (#3558) #1010
Full changelog

operator-marketplace

OCPBUGS-68005: CVE-2025-65637 fixed in logrus v1.9.3+ #733
OCPBUGS-62221: Remove Expect func so that the test case can use the retry logic #672
OCPBUGS-62119: Update memoryTarget on catalog source pods #666
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

CORENET-6055, OCPBUGS-76403: [release-4.15] Dockerfile: Unpin OVN and consume the latest from FDP #2974
OCPBUGS-56660, OCPBUGS-58162: Unpin OVS patch versions #2649 #2649
OCPBUGS-56419: Update to FDP25.A.1 24.03.5-40. #2573
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-68006: Fix CVE-2025-65637 by bumping logrus to v1.9.1 #99
Full changelog

powervs-machine-controllers

OCPBUGS-61702: Use OS_GIT_VERSION in Makefile when found (for Konflux builds) #128
OCPBUGS-54753: Fix for CVE-2024-51744 in github.com/golang-jwt/jwt/v4 in release-4.15 #115
Full changelog

prometheus

OCPBUGS-79907: Bump google.golang.org/grpc #322
OCPBUGS-56740: BACKPORT: fix promtool analyze block shows metric name with 0 cardinality #256
Full changelog

prometheus-alertmanager

OCPBUGS-77058: Include go-verify-deps expected files in gitignore #117
Full changelog

route-controller-manager

OCPBUGS-86882: [release-4.15] bump google.golang.org/grpc to v1.64.1-sec.1 #93
Full changelog

service-ca-operator

OCPBUGS-68019: update logrus to v1.9.1 #321
Full changelog

tests

OCPBUGS-74300: Skip E2e: attach on previously attached volumes should work #30725
OCPBUGS-66329: Replace RunHostCmd with Exec function to censor bearer token being exposed #30528
OCPBUGS-57335: Fix regex parser for censoring private key #29913
OCPBUGS-61229: images/tests: Remove rteval #30207
OCPBUGS-57136: aws/edge: prevent test using unschedulable nodes #29897
OCPBUGS-55477: support provider type external #29739
NO-JIRA: Sync OWNERS from main branch #29856
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-78030: hermetic migration 4.15 #108
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-78021: hermetic migration 4.15 #87
OCPBUGS-61654: Fix unit tests #73
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-86873: Bump google.golang.org/grpc #183
OCPBUGS-68022: CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.8.3 #159
Full changelog

vsphere-csi-driver-operator

OCPBUGS-68020, OCPBUGS-68024: CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.9.3 #323
Full changelog

vsphere-problem-detector

OCPBUGS-68031: bump github.com/sirupsen/logrus to v1.9.3 #201
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github