4.16.33

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.16.33-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial Succeeded (3 retries) periodic-ci-openshift-release-main-nightly-4.16-e2e-aws-ovn-serial
- aws-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-main-ci-4.16-e2e-aws-ovn-upgrade
- aws-sdn-upgrade-4.16-micro Succeeded periodic-ci-openshift-release-main-nightly-4.16-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.16-micro Succeeded (1 retry) periodic-ci-openshift-release-main-ci-4.16-e2e-azure-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.16-fips-payload-scan
- gcp-ovn-rt-upgrade-4.16-minor Succeeded periodic-ci-openshift-release-main-ci-4.16-upgrade-from-stable-4.15-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.16 Succeeded periodic-ci-openshift-hypershift-release-4.16-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-main-nightly-4.16-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.16-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Untested upgrades: 4.15.21, 4.15.22, 4.15.23, 4.15.24, 4.15.25, 4.15.27, 4.15.28, 4.15.29, 4.15.30, 4.15.31, 4.15.32, 4.15.34, 4.15.35, 4.15.36, 4.15.37, 4.15.38, 4.15.39, 4.15.41, 4.16.10, 4.16.11, 4.16.12, 4.16.14, 4.16.16, 4.16.17, 4.16.18, 4.16.19, 4.16.20, 4.16.21, 4.16.23, 4.16.24, 4.16.25, 4.16.26, 4.16.27, 4.16.28, 4.16.3, 4.16.4, 4.16.5, 4.16.6, 4.16.7, 4.16.8

4.16.32 (changes) - S F S S S S
4.16.30 (changes) - Failed
4.16.29 (changes) - Success
4.16.15 (changes) - Success
4.16.13 (changes) - Failed
4.16.9 - Success
4.16.2 (changes) - Failed
4.16.1 (changes) - Failed
4.16.0 (changes) - Success
4.15.44 (changes) - Success Success
4.15.43 (changes) - Failed
4.15.42 (changes) - Success
4.15.40 (changes) - Success
4.15.33 (changes) - Failed
4.15.26 (changes) - Success
4.15.20 (changes) - Success
4.15.19 (changes) - Failed
4.15.18 (changes) - Success
4.15.0-0.nightly-2025-01-29-180352 (changes) - Success

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.16.9

Created: 2025-01-30 10:09:53 +0000 UTC

Image Digest: sha256:0683aef9c0807b9821f7f286b4a3f71b5e358cf995522883f9478baaffe6aff9

Components

Kubectl 1.29.7
Kubernetes upgraded from 1.29.7 to 1.29.11
Kubernetes Tests 1.29.0
Red Hat Enterprise Linux CoreOS upgraded from 416.94.202408200132-0 to 416.94.202501270445-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
ExternalRouteCertificate (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)

Rebuilt images without code change

agent-installer-utils git 6e6bb40d sha256:c5317498744fb25916ef08fb653a5e00ab74c1ece17fea43ce169e0bdc00bd61
alibaba-cloud-controller-manager git 97e8335e sha256:93700e0414498564618053fcefa1b669c60e17ec49529117c9ea77696b123827
aws-cloud-controller-manager git a53e9def sha256:0cc45d40092122884ca4a8b967932f87ec58c7ac787ea5d7993f29e0d10fdb0c
aws-ebs-csi-driver git 1d29a74a sha256:0af74f4a02da624978d4b53bd898707bdea8bca2cf62ce98c5bb0a8dfd32ef97
aws-ebs-csi-driver-operator git ff69cd03 sha256:b0aa3f517afdc6f072ad40cce529e89cc36aa95d1ced9876e17d35f2150d5e05
aws-pod-identity-webhook git 746491a6 sha256:63a6ad9b7b5fec9fc6e4a7e44b5d16b8cd908fbf452edc57a1bf2c2a53717b04
azure-cluster-api-controllers git a81e3b31 sha256:ca8c7f544298b77b995889657cc83ffba758f80ce9ec4294bd6c741ebea7f61e
azure-disk-csi-driver git 6b55f6fb sha256:8124a5553f351594383c0344e351c33ae180abfe4ab155fb729c1ab7c0d533aa
azure-disk-csi-driver-operator git ff69cd03 sha256:49340e7394e124088bba2d53a718206eaeaad9b5ac4854091393bba31da101af
azure-file-csi-driver-operator git ff69cd03 sha256:adfb7a79b89279109675b44880d8d20678a33ec0377d53f6fa62c09c7e41ebe0
azure-machine-controllers git e4e11505 sha256:8fc8568f7561ad451d72a3d7d5cdf9d88d8cd4f1cf1e1d73476c15211ef11802
azure-workload-identity-webhook git 4aca092a sha256:c29670d8f4f0bac7983209480479b24ac1d9f53c98e15215849476bb57beea1b
baremetal-runtimecfg git f55a330f sha256:f6dec6d2a36f98545821b5fee2ee6e8875383845c43eafd8612c214868bc0e28
cloud-network-config-controller git 8ceee788 sha256:e210f1b9669290efdd606e67eac474a7938defce34f80ecbd1a5620a9b773348
cluster-autoscaler-operator git 40cadf8a sha256:7e7af404196f6a0469432fdd2e8c0c81d2f6a63e5ea86e9e9d49d716e4f33e1e
cluster-bootstrap git 27bfb59f sha256:f3608da814c5d845555faec68b9ff7b84433302ebc7e235bfd07a186c65a4686
cluster-capi-controllers git 5830a10a sha256:1cda14f6e56e1a8f649472564e12c8e6d18509594af19d906059cd3fedc8cf31
cluster-capi-operator git 3a2f98fb sha256:294d2eab6e9c69de415bd682b1f62fccc6e28d1e94ceb3ad1f6e9b9611534df5
cluster-config-operator git 441d29c9 sha256:1f0734f77cc943685587aaee2e8cd997af6fcf09dae1936d85f7941cb855c10a
cluster-csi-snapshot-controller-operator git 439826e1 sha256:c16fb9865f7af2d20ee051559306f127350bd97c8351c52496cc0fd13966c036
cluster-dns-operator git 8ddf28f9 sha256:594ea18ff7d260c73d5de371dc8b6bdc7917d941f61a53240030c1f8512edd02
cluster-kube-apiserver-operator git de2f2ac2 sha256:c40e8ccef51bcf687d3317f355c016d66353da319ea8964bc0f01f67b9e0a439
cluster-kube-cluster-api-operator git 95ceaa9e sha256:4ad59aac87985defeedeb162a57ac40c549b266d1d82970500bf976663c21374
cluster-kube-controller-manager-operator git 0338b3be sha256:58459d044955bd9eb7a9673e10670f27ec4e223261f27ff07e2624c25a9aae94
cluster-kube-scheduler-operator git 630f63bc sha256:e04066288b53c00afc9eb17adbc3d2e61b897a0ece7dbff117f59d3be0238ec8
cluster-olm-operator git 27bf70dd sha256:b7e4c73be4c8fac713cd8c4fcd30ef34c484d9875e2e15f2fa982f2c33e1ac37
cluster-openshift-apiserver-operator git d26f3002 sha256:0e5aa6f731e323fe56acb0692cc6bb2b5cab809fcf5da462ef0647e3790c0d36
cluster-policy-controller git eaea543f sha256:3bc5e531709064295a90d46235997b68a6e2300f0878129121c6069f918ad699
configmap-reloader git dc91ddc4 sha256:f679416b1d53a0d17b71a6894d11099aef7c60a5fa75053836b559aad5b8670d
container-networking-plugins git 73b4123c sha256:f2cbdec42d2e88f280970db59dc095ae783ab2c72e54bff8c0b6469e9ba03bc6
containernetworking-plugins-microshift git 73b4123c sha256:cfb41b9109877b0d93fbab9ae237ae0b8936240c9e2f2ef05ed8a22cf7713191
coredns git 1e417656 sha256:9369e778dda4192a08d8e0534a25d44af2c235ce74748a30cfe06b7efe6f4173
csi-driver-nfs git 406cec72 sha256:19fb32e8829190a594948455db164b8529e261267a793b52bc85c129b54de92d
csi-driver-shared-resource git bc125def sha256:7457232d1ee9c177375590687d33f44df91a8ac0cf41bffdf1be1c543e384a53
csi-driver-shared-resource-operator git 1e1194bc sha256:4d4646b855623b022f1fc8bcb9e34e3aed9421f5b0941ed8f9c08284bc051ac1
csi-driver-shared-resource-webhook git bc125def sha256:1e94a9ed2ae52f6e6b7c0d4f8ab3cb68447276629be94692b459272f00d44e43
csi-external-attacher git 7da80aab sha256:89792bebdce2f82df930857bcd7ec5968a003d75f2869ee44060de10233a1f45
csi-external-provisioner git 9e8af011 sha256:fa2bd3a67704580a9646ae2113988097aaeb07436c8a47a7c9c26a2f04dca948
csi-external-resizer git bdf5bfb4 sha256:91c8146390ff15221c7ab456d9b45775601a2fcf1a098dfcebbb512a7a63dc34
csi-external-snapshotter git 5315d37a sha256:f41a96ade16fc34e2ff4bbe94939e23aadbee33d6dfac2d00d439e8377fc6a40
csi-livenessprobe git f5e3ff55 sha256:512408cf449d6266aee5318c88d431a7669a0e95784c5659f0f2652227cde3b1
csi-node-driver-registrar git 8930c368 sha256:f28e4517438c89ca5ba5278368e37d15a94873a0aaa479d361660db37b9de443
csi-snapshot-controller git 5315d37a sha256:4b1c6df18efe6f3872b73f3f3f5ec59a21f4909a71d973d5898ac0d308343ae2
csi-snapshot-validation-webhook git 5315d37a sha256:c1a110e6f586a710c2763d3938b9dc1ddb50ed5738f4273b1e1973b057379cba
driver-toolkit git 1d5732f0 sha256:01e0e07cc6c41638f8e9022fb9aa36a7984efcde2166d8158fb59a6c9f7dbbdf
egress-router-cni git 7089efe6 sha256:5b996b0ee1a072110b8968b0e4771abce9b11d110aaa3d3a0a5ff9862a65d14b
gcp-cloud-controller-manager git 26b43dfc sha256:d3b01714fc71205c64c469732543751e0881e71578d8bfcf72ebcaa3fbd82226
gcp-cluster-api-controllers git 02432df8 sha256:2625410b35f76e34d5ce9bb895b9d5467b1b503ce02b8960f9f1d8e03f54680a
gcp-pd-csi-driver git 5ed71c64 sha256:2251aecd5ea2b64745b16b5a75393f8f850d247363333e7bea9b3e5b2287ea5b
gcp-pd-csi-driver-operator git 799327f7 sha256:150779c086d3d05cd613a02ab7c4f79ada4861c93899f5a6eb79a591f9e0633d
haproxy-router git 4d9b8c4a sha256:e77309570f0a8716292a8466e445fe720f50ec0714782bf75826361d88c2fa83
ibm-cloud-controller-manager git f961f16d sha256:338d0e59fbf65cb40610155c22fc7b922d7f7c15b587a1cc228ba78b015ffe37
ibm-vpc-block-csi-driver git 95719738 sha256:b06a6b58423f2d0735613486296e8c732c318734b7415e89ecc8e9973d23d69a
ironic-machine-os-downloader git 93b8b5fa sha256:dfd2a035b87813e1d587a9069cc9714ee8426a15479df7a91cea6e4c6caafb13
ironic-static-ip-manager git e78e4c3e sha256:a90dde8640559255f2db33bdfabe124b3eb867deb26f12ed48ccfc524981d4ac
k8s-prometheus-adapter git e4f859be sha256:e60b772b8de31bde9dad101ab4ce6cdb808bbe67fea620ce912e1b995d75a2b9
keepalived-ipfailover git b58673a3 sha256:9263e71c2c55592f67283ae899eea579ce435e99458fd0ea1aad992ce0aba0b8
kube-state-metrics git 9b67b8d1 sha256:580b63227f50c8122e8e48df6fb8cc485e39245823b6917ab5360fd2e4998948
kube-storage-version-migrator git 969a60e9 sha256:fcaf442417a6028d77743df01291c34708590044eabaa960e41b4cf2af796c31
kubevirt-cloud-controller-manager git 3db76104 sha256:8531105fc4680f6c72427848f4c6f040a46e804e172a5f01d746156159501d30
kubevirt-csi-driver git 0693093f sha256:68f30aeaa0216d0805dd3d1bc54fc10c2aabbd47693ab07d260e54074b94c068
libvirt-machine-controllers git a336f0b5 sha256:e6ea1a0109ed8987614c5934110a902b9eed3a393deead6f314e120dbef851bd
machine-image-customization-controller git 39480963 sha256:43624f6a4d75515cb71ce60e7cc6e6f3a30b89ee955d93e7aa648dfe002dd138
machine-os-images git 3cc97098 sha256:a667a69bbc88fc3d3da0aabbc0927432b78db79114dc06c99a58f2b05efdb464
multus-admission-controller git 88c596ed sha256:ce601e0c336b87754d2a7296699716133710ac6e361465bab920d10380e78ddc
multus-cni git c4aa21b9 sha256:cb8ad5c196f9378977b3e8ce50a8910ad8c221de5e620b51998a83b6e0fae689
multus-cni-microshift git c4aa21b9 sha256:733362b95b97f1d40bb24f1395f49342d8afdd8890e734b5759081267ed1f689
multus-networkpolicy git f988f894 sha256:ed022c812d4770fb02d383237708df39f1c7d1973b5bf1be49baac0c30300ebb
multus-route-override-cni git 73594f77 sha256:4ccffcba7db823d8d0b45e19306a385d8a524a299538319d85c807ded6ebd1d7
multus-whereabouts-ipam-cni git dab1dd29 sha256:73d967b52581bfecab189eb449057a168d9f17ea285cacfef21df3a85f8078e9
network-interface-bond-cni git bb911451 sha256:a7a62ff1e185d045342ab0f214eafeb8b5b2dd347282657d731928e0994d8a5a
network-metrics-daemon git 48059263 sha256:e51b32090fd911eba1430021ca0bfb78a41c92eec90930f525341011f12b7f4b
network-tools git 39eca100 sha256:8a19fc47d622cbe485c29bf49ded8793b4ec8076071b611dd4e2b9168bcb59db
nutanix-machine-controllers git f053e5a0 sha256:7fbcac7e093a52e021e321997d7fdd7700cae40c023411f1937418c546a99660
oauth-apiserver git fa1f097c sha256:1bfbc1a6384c43337e0ea8a6d477137dc7a2ded0d2ca5ce2aba0395690dcf849
oauth-proxy git 30f80124 sha256:e17f2f76c30eaf9c4f2c5ce3d59e962cc12c3d90afe7cc4791ce7de320152f04
oauth-server git 3739138c sha256:a98de018b89e24b615c848983e788ac38130fc78bcf426d775b0c97670e8da21
olm-catalogd git 79975a51 sha256:17bfa7781363bb4e1da82a2197e12d26c423e6f85f2078b920ea2d8f2d2c28bc
olm-operator-controller git 80b8649c sha256:c832f0b6d6db6d041fedbe35bf6fcd1559a7660ae1e74a8485d314657f094840
olm-rukpak git 282cc84c sha256:5b622948ab7ffa7c37c6b195a3982b474064e60dca05060ce40fc7b9e01872eb
openshift-state-metrics git 59b8a0ff sha256:d48d47299ee568f1e9f0dfc48db95e90b5e6f40f1f3b46aed8cf66dc6c451f40
openstack-cinder-csi-driver-operator git 85b52097 sha256:32cf1de1715d63726352cbc97107e5bcd33572795e8f176b6c5084ce9639d409
operator-marketplace git 7db179fb sha256:41f684e9874c27dc8976bfac889e7ddca7cde7a6fa0cc21b88e64d54023e7b6a
ovirt-csi-driver git 1db726a9 sha256:d98567bde54c297a36846812b212bb0278b5e8b910412e32b935f2dda580037f
ovirt-csi-driver-operator git ac852f3e sha256:5a0f2a9cc777945fa238875ecbf9711f51706413834992fdcfc4979cf5924230
ovirt-machine-controllers git abb91c84 sha256:a2201cc93fc5beb01c673609b6c5c7c3667710bf4bef531a721b8aea90103a1f
powervs-block-csi-driver git 26162bad sha256:2f9c2e713c5a6f0fbeaa1e7b36fb857bf0b98ae006406279dc5c5d93fe8f1366
powervs-block-csi-driver-operator git 9c5dd8d1 sha256:484d2239fe5a6067033e7afc0ab17e5681191b08df87fa589aedb9bd2cad09a1
powervs-cloud-controller-manager git 20e6dc70 sha256:f7b3fad4ef310ffed8127211ebcdf009755a6304cee384f982f7de1a4cb66137
prom-label-proxy git 5e14722e sha256:9e846a80d87c3aaeba425e2b0f3b265fa46b6ba4c8f0191ed98169c0d839a97a
prometheus-alertmanager git e9aea929 sha256:eb834728beac9a825facf29f77e30b160698e6b7eb6684f404a47dd2a7809343
prometheus-node-exporter git 29ba26d1 sha256:b4391dc39d17c4ad5eddafc85af6abec1d74fead47679add664bf5fe43be26ce
rhel-coreos sha256:8760100875c277e738110ed634a008f798f05c6e287bdf2619b5edcc3d01d3fd
rhel-coreos-extensions sha256:241e901c5e434fbe8a315ac884ae2f1105207ae39aa39f63cf4d4e2496437c93
route-controller-manager git 3112b458 sha256:1a8dfa9c618e3d320b8ead98fb471e9fd63c6b5d5bfe11f823be0ebc2063d27a
service-ca-operator git 538c7b98 sha256:c26bc0695bc3ae142abb84de5fcb2fa483a80b0ae7824e88a6af8181aaf5f62d
telemeter git c1ecd105 sha256:fb2a4201a2569ae83ff26dcb3b22a6cb90c34cfc89befc2a2ce23d289112c109
thanos git 85eee25c sha256:3b52e5b3cc4696f35a217d3a51a8df20b19ac02d508e9274f15467ebdb8093f6
vsphere-cluster-api-controllers git be22f10a sha256:b5d794e7aef51d6e96afc9db4d5a8e527ee77e66c2c7fdc61fb4c088f80a9f8e
vsphere-csi-driver-operator git 483de9c5 sha256:a3b29009e3285c9b39ec805826bc320768d4188024124ef0fb3535a75ce98ee7
vsphere-problem-detector git 3683c120 sha256:472ac65b1945e1f992ca1fd83edb94c2c25583aa7e2a323de062863a2889670b

agent-installer-api-server

MGMT-19537: Bump golang.org/x/net to 0.33.0 (#7130) #7130
OCPBUGS-43021: Update go-jose to v2.6.3 to mitigate CVE-2024-28180 (#6893) #6893
OCPBUGS-42570: Libraries bump to mitigate CVE-2024-27289 (#6833) #6833
OCPBUGS-36577: Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#6752) #6752
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-47494: MGMT-19537: Bump golang.org/x/net to 0.33.0 (#990) #990
OCPBUGS-38466: Allow controller to continue when assisted-service (#914) #914
OCPBUGS-43025: Pick up latest CVE changes by bumping service (#920) #920
OCPBUGS-36577: Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#906) #906
Full changelog

agent-installer-node-agent

MGMT-19537: Bump golang.org/x/net to 0.33.0 (#874) #874
OCPBUGS-43028: Pick up latest CVE changes by bumping service (#804) #804
OCPBUGS-42300: Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#785) #785
Full changelog

alibaba-machine-controllers

OCPBUGS-44242: change the VERSION makefile variable to use OS_GIT_VERSION #58
Full changelog

apiserver-network-proxy

OCPBUGS-38062: Revert “Agent: Respect HTTPS_PROXY env vars for proxied connections” #59
Full changelog

aws-cluster-api-controllers

OCPBUGS-44234: [release-4.16] OSD-25934: Only tag NetworkInterfaces in RunInstances if IAM Allows It #531
Full changelog

aws-kms-encryption-provider

OCPBUGS-33693: Updating aws-kms-encryption-provider-container image to be consistent with ART for 4.16 #18
hack: display diff on verify-mod-tidy failure #26
Full changelog

aws-machine-controllers

OCPBUGS-46508: fix Associate*IpAddress flag on launch EC2 #121
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-47645: Prevent panic when informer receives cache.DeletedFinalStateUnknown #133
Full changelog

azure-file-csi-driver

OCPBUGS-39145: bump mount-utils to treat ENODEV error as corrupted mount #76
Full changelog

azure-kms-encryption-provider

OCPBUGS-33692: Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.16 #4
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-47663: [release-4.16] Power VS: Create region-zone-sysType hierarchy #9338
OCPBUGS-48442: Ensure rendezvousIP is checked against host IP #9369
OCPBUGS-45999: Always set cross_tenant_replication_enabled parameter to false #9321
OCPBUGS-45669: aws: fix Node Port Service rule removal #9312
OCPBUGS-45669: [release-4.16] capi/aws: remove allow-all Node Port Service #9281
OCPBUGS-39434: dropping this warning as the move from terraform is transparent to the end user #8951
OCPBUGS-45852: Update upi references to api-internal #9290
OCPBUGS-41813: Validate MTU for custom network #9104
ARO-12457: Include bootstrap docker config file in go module #9259
OCPBUGS-45181: add chrony.conf file when additional NTP sources are configured #9247
CORS-3753: Allow mocking of the Azure client everywhere #9220
OCPBUGS-44348: Cherrypick oci ccm fix to 4.16 #9188
OCPBUGS-43967: Revendor assisted service external platform oci #9150
OCPBUGS-38930: import failure when esxi config is not the same in the cluster #8898
OCPBUGS-36290: IBMCloud: Ignore failed VPC regions #8674
OCPBUGS-41885: vSphere - If template is defined skip downloading #8999
OCPBUGS-41490: Update RHCOS 4.16 bootimage metadata to 416.94.202410211619-0 #9158
OCPBUGS-43476: IBMCloud: Handle pagination for subnets #9102
OCPBUGS-41490: Update RHCOS 4.16 bootimage metadata to 416.94.202410172137-0 #9132
OCPBUGS-42014: Update terraform provider for google #9077
OCPBUGS-38732: vsphere, if secureboot is enabled, disable it in the template #8904
OCPBUGS-39415: OpenStack: Install CI dependencies from rpm #8995
OCPBUGS-41334: Fix IPv6 security group rule for schedulable master #8971
OCPBUGS-38687: only allow a single network in failure domain topology #8875
OCPBUGS-42062: OCPBUGS-41865: [release-4.16] vault version updated to 1.13.10 #9036
OCPBUGS-42012: Systemd Fails to Parse Multiline EC Keys #9037
OCPBUGS-41845: Bump extract-machine-os timout to 20m #8997
OCPBUGS-38964: IngressController subnet selection in AWS #8910
OCPBUGS-42138: add tested instance type for IBMCloud #9031
OCPBUGS-39287: Fix var_files syntax to work on older version of ansible #8936
OCPBUGS-41929: Add AWS c7g,m7g,r8g to tested instance types #9009
OCPBUGS-36855: Openstack UPI - Reintroduce unique resource names. #8724
OCPBUGS-39082: incorrect folder gen, workaround govmomi vm folder path bug #8912
OCPBUGS-39496: capi/aws/byo-vpc/multi-cidr: fix group rules #8953
OCPBUGS-36861: Updates GCP terraform worker role #8939
OCPBUGS-38956: failed to install Nutanix OCP 4.16 cluster with DHCP #8905
OCPBUGS-38822: upstream capv bug causes session timeout #8891
OCPBUGS-39468: Enable TLS for virtual media in initial ironic deployment #8955
OCPBUGS-37606: vSphere validation fails if dc is in a folder #8777
OCPBUGS-39206: Update GCP Disk Types 4.16 #8920
OCPBUGS-39087: aws: validate public-only subnets configs #8913
OCPBUGS-38821: [release-4.16] Azure: Disable shared key access when using a managed identity #8855
OCPBUGS-38302: upi/aws: update lambda runtime python version #8897
OCPBUGS-38826: aws: add support for clusters with public-only subnets #8892
OCPBUGS-38517: [release-4.16] capi/aws: bump provider for instance register fix #8848
OCPBUGS-38196: Remove timed context for gcp client #8818
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

baremetal-machine-controllers

OCPBUGS-46645: Bump x/net to 0.33.0 #226
Full changelog

baremetal-operator

OCPBUGS-39490: Disallow fetching secrets from namespaces different from the host’s one #378
OCPBUGS-38938: [OCP] Ability to disable agent power off after deployment #372
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-42720: Check cast result in adm prune deployments to prevent panic #1891
OCPBUGS-39341: Ignore pruning when deployment points to replicationcontroller #1862
Full changelog

cloud-credential-operator

OCPBUGS-47070: golang.org/x/net v0.33.0 #805
OCPBUGS-45939: Add AWS region to aws-pod-identity-webhook #800
OCPBUGS-45007: Add retry to ccoctl gcp create functions #794
OCPBUGS-45002: github.com/golang-jwt/jwt/v4 v4.5.1 #788
OCPBUGS-43645: Only attempt timed token credentials on supported platforms. #772
OCPBUGS-43337: Update github.com/sirupsen/logrus v1.9.3 #767
OCPBUGS-41234: List secrets in batches to avoid api timeout #757
OCPBUGS-38376: Update google.golang.org/grpc v1.65.0 #748
Full changelog

cluster-authentication-operator

OCPBUGS-43367: manifests should not use APIs that are removed in upcoming releases #717
Full changelog

cluster-autoscaler

OCPBUGS-48732: UPSTREAM: <carry>: 🐛(metrics) Initialize metrics for autoscaler errors, scale events, and pod evictions #339
OCPBUGS-45148: [release-4.16] VPA: Update OWNERS file #325
Full changelog

cluster-baremetal-operator

OCPBUGS-43556: SCC-pinning for metal3-baremetal-operator #453
OCPBUGS-31961: bump x/net to 0.23.0 #431
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-42125: IBMCloud: Modify liveness probe for IBM Cloud CCM to use loopback address #366
OCPBUGS-43473: update goimports targets #372
Full changelog

cluster-config-api

OCPBUGS-38773: remove duplicate featuregate ‘ExternalRouteCertificate’ #2007
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-44179: relax validation on delete and if failureDomains not configured #331
Full changelog

cluster-etcd-operator

OCPBUGS-33673: rename flowschema to avoid log noise in CVO #1348
Full changelog

cluster-image-registry-operator

OCPBUGS-43797: fix proxy config and leader election test flakes #1148
OCPBUGS-43555: pkg/storage/azure: also check for auth failure error code on deletion #1143
OCPBUGS-42933: azureclient: stop validating credentials when creating the client #1134
OCPBUGS-42420: Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) #1126
Revert “[release-4.16] OCPBUGS-41903: pkg/operator/azurepathfixcontroller: do not sync on non-azure storage” #1119
OCPBUGS-41903: pkg/operator/azurepathfixcontroller: do not sync on non-azure storage #1115
OCPBUGS-39098: Avoid Shared Access Key usage for Azure Storage Account when using Managed Identity based auth #1104
OCPBUGS-38894: pkg/resource/azurepathfixjob: invoke update-ca-trust extract with –output #1102
OCPBUGS-38894: pkg/resource: invoke update-ca-trust extract with –output #1098
Full changelog

cluster-ingress-operator

OCPBUGS-39324: Refine logging for accurate infra CR status updates #1139
OCPBUGS-39323: Ingress operator status not degraded when canary route fails #1138
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-38269: bump protobuf #115
Full changelog

cluster-machine-approver

OCPBUGS-48258: Fix race condition in CO status controller test #267
OCPBUGS-47704: Filter CSRs by signerName #263
OCPBUGS-45974: Ensure trailing dots on DNS names do not block serving cert auth #257
OCPBUGS-45974: Client internal DNS checks should ignore trailing dot #251
OCPBUGS-44629: Client internal DNS checks should be case insensitive #244
Full changelog

cluster-monitoring-operator

OCPBUGS-46066: Add new metrics for OpenShift logging telemetry #2537
OCPBUGS-44005: fix(monitoring-plugin): disable emitting nginx version on error pages #2521
OCPBUGS-43826: Add runbook url for TelemeterClientFailures #2508
OCPBUGS-41967: disable user-defined monitoring per object #2474
OCPBUGS-42067: Reapply “chore: poll immediately in the e2e tests” #2476
OCPBUGS-41717: Configure graceful shutdown for metrics-server (4.16 backport) #2467
OCPBUGS-41910: filter alerts sent to Telemeter #2471
OCPBUGS-39170: Backport #2441 for 4.16 #2447
Full changelog

cluster-network-operator

OCPBUGS-43803: Start feature migration when the cluster CNI is changed to the target type #2552
OCPBUGS-43715: Skip including default crypto policies to avoid authby issue #2598
OCPBUGS-44338: Prevent live migration process from flapping between step-2 and step-3 #2565
OCPBUGS-46148: Remove ip xfrm state when IPsec is disabled #2595
OCPBUGS-45593: Pass transit_switch_subnet options in ovnkube-node pod #2584
OCPBUGS-44846, SDN-5436: Provide support for user owned IPsec machine configs #2571
OCPBUGS-42727: Live migration: report network overlap via live_migration_blocked metric #2519
OCPBUGS-43604: OCPBUGS-42244: Exporting environment varialbe NODE_CNI for live migration #2538
OCPBUGS-36210: Set global IP forwarding sysctl parameters while starting ovnkube-node #2422
OCPBUGS-43544: Use CNIConfDir for mounting directory to ovn-ipsec-host pod #2537
OCPBUGS-43035: Configure narrowing=yes for IPsec connections #2528
OCPBUGS-36594: Set mount propagation to HostToContainer for /var/lib/kubelet #2430
OCPBUGS-41840: Add configurable subnets while running hybrid-overlay-node binary #2502
OCPBUGS-37763: Handle random crictl errors in iptables-alerter #2452
OCPBUGS-41555: HyperShift: do not use antiaffinity on single replica control planes #2494
OCPBUGS-37937: Add proxy env vars to onvkube-node #2457
OCPBUGS-41607: set required-scc for openshift workloads #2496
Full changelog

cluster-node-tuning-operator

use ROLE_WORKER_CNF environment variable to determine mcp name (#1292) #1292
e2e: tuned degraded test fix (#1282) #1282
Adjust Workload Hints test cases based on Intel or AMD (#1277) (#1281) #1277
e2e:performance: decode to valid kubeletconfig object (#1273) #1273
cmd: PPC: support tolerating heterogeneous core IDs (#1252) (#1268) #1252
e2e: add irdma to module_blacklist kernel args (#1267) #1267
OCPBUGS-47678: performanceprofile cpuset input validation (#1264) #1264
Fix context deadlines in ExecCommandOnPod() (#1263) #1263
OCPBUGS-46496: [release-4.16] Add vendor and architecture specific tuning options (#1254) #1254
OCPBUGS-45264: Normalize cpu sets when rendering to Tuned profiles (#1238) (#1251) #1238
E2E: fix modify node selector to use lowercase (#1209) #1209
Fixing empty tuned submodule when using Dockerfile (#1212) #1212
OCPBUGS-38900: Drop sched_migration_cost_ns setting (#1203) #1203
Make ocp-tuned-one-shot.service restart on-failure (#1202) #1202
Unblock 4.16 CI (#1204) #1204
e2e: performance: verify tuned one-shot service vs kubelet (#1192) #1192
E2E: Add test to verify cpuset.cpus.exclusive is writeable (#1153) #1153
OCPBUGS-39005: Add cluster-wide proxy env file (#1166) #1166
OCPBUGS-36431 Fix generated cpu mask for 512+ cpus (#1152) #1152
E2E: Remove checking of reserved cpus in irqbalance file (#1156) #1156
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-48657: Add new team members to owners file #378
OCPBUGS-38269: CVE-2024-24786 infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON #363
Full changelog

cluster-samples-operator

OCPBUGS-48848: add shannon and aroyoredhat as owners #596
OKD-225: remove only the EOL CentOS 7 images #576
Full changelog

cluster-storage-operator

OCPBUGS-46077: Fix PodStartupStorageOperationsFailing alert #548
OCPBUGS-43315: assets: shared-resource: hypershift: add pull-secret to operator SA #521
NO-JIRA: release-4.16: Run make update #512
Full changelog

cluster-update-keys

OCPBUGS-43467: keys: Update Red Hat keys to use SHA256 signatures #64
Full changelog

cluster-version-operator

OCPBUGS-46408: Filter out shallowly UpdateEffectNone errors from a MultipleErrors message in the Failing condition #1128
OCPBUGS-45329: deps: bump golang.org/x/net to 0.31.0 #1118
OCPBUGS-43964: Fix desired before sync_worker’s work is initialized #1097
Full changelog

console

OCPBUGS-46602: ReRun of Resolver based PipelineRuns fails from UI #14641
OCPBUGS-46567: ImagePullSecret getting duplicated when editing DeploymentConfig in Form View #14636
OCPBUGS-48162: OCP web console show pod status as Init:0/1 after using Native sidecars #14668
OCPBUGS-43672: Disable GQL introspection #14638
OCPBUGS-45334: fix table combination #14576
OCPBUGS-41342: fix namespace for networkpolicy #14244
OCPBUGS-46022: Plugins that use very old PF4 dropdown or menu components with grouped items have bullets and padding that needs to be removed. #14612
OCPBUGS-45229: Unable to remove finally tasks in pipeline builder mode #14558
OCPBUGS-45245: use TaskRuns results.tekton.dev/record annotation to get the logs #14563
OCPBUGS-41523: i18n upload/download routine task - Sprint 254 #14258
OCPBUGS-45015: Remove ClusterTask dependency in console from Pipelines 1.17 #14537
OCPBUGS-44792: Collapse/Expand Feature Added, Removal Option Removed in Version 4.16 #14519
OCPBUGS-44875: Start last run do not work in buildConfig details page #14529
OCPBUGS-44874: Telemetry userPreference results in empty nodes output to the DOM #14528
OCPBUGS-45124: Add multiline support to template instantiation #14545
OCPBUGS-44885: include external labels so silenced alerts not displayed in notifications #14530
OCPBUGS-44932: Add IBM Block Storage CSI driver support for RWX #14533
OCPBUGS-43447: Ensure envs are initted upon first load #14405
OCPBUGS-44806: Don’t request user settings configmap if no user has been loaded. #14522
OCPBUGS-44207: Create RoleBinding will trigger Admission Webhook Warning #14465
OCPBUGS-44219: Add flag to hide the pipelines-plugin pipeline builder extensions #14466
OCPBUGS-41673: Update vendor imports to include all PatternFly components #14273
OCPBUGS-43834: Enabling topology e2e tests on CI #14438
OCPBUGS-35204: replace global refresh sync lock in OIDC provider with per-refresh-token one #13950
OCPBUGS-36556: Increase login flow state paramater length/entropy #14354
OCPBUGS-42369: Console crashes when ssh is selected in add secret for starting a pipeline run #14320
OCPBUGS-41904: fix annotation for ovn localnet #14366
OCPBUGS-37615: Include PatternFly-4 chart styles so they are available for dynamic plugins that still use PF4 react-charts #14091
OCPBUGS-37689: Switch to use annotations as labels from PipelineRuns created through Pipelines as Code is deprecated #14094
OCPBUGS-42015: Topology screen crashes when completed pod is selected #14298
OCPBUGS-35850: Fix: Quick Start “next” button requires double click to move to next step #13989
OCPBUGS-42382: Allow operators to enable monitoring by default #14317
OCPBUGS-41905: List of default Camel K event sources disappears when adding a custom event source #14290
OCPBUGS-41709: Need to allow blank for Project/namespace when setting SA Subject in ‘Project access tab’ #14278
OCPBUGS-42069: add Create button to Console plugins tab #14302
OCPBUGS-41996: Fix updating the “Until” field on the Silence > Edit page #14296
OCPBUGS-38112: do not directly mutate links in useMemo #14117
OCPBUGS-34518: Restore user toggle when authentification is disabled #13902
OCPBUGS-41619: Use vCenterCluster value from CM as primary resource #14268
OCPBUGS-37046: Fix TypeError: Cannot read properties of null (reading ‘metadata’) in Topology view #14059
OCPBUGS-38911: Values entered into the Instantiate Template form are automatically cleared #14187
OCPBUGS-38914: Unrelated readme opened when opening CodeReady workspaces from Quarkus using s2i quickstart #14188
OCPBUGS-38968: A value submitted in From view is wrapped with single quotation after switching to Yaml view. #14193
OCPBUGS-38424: fix bug where cluster version text appears black in da… #14144
OCPBUGS-38464: correct casing in “Lightspeed” #14148
OCPBUGS-37430: Fix utilization card limits/total display #14082
OCPBUGS-36510: DeploymentConfigs deprecation info alert should not present on the Edit deployment page #14031
OCPBUGS-37954: No access to list pipelines.tekton.dev prevents from using Delete application form #14107
OCPBUGS-36601: Tooltip on Pipeline when expression is not shows #14033
OCPBUGS-38803: CONSOLE-4108 [4.16 backport] Show deprecated operators in OperatorHub #14095
Full changelog

console-operator

OCPBUGS-46481: Dont disable console when authConfig type is set to None #952
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-43426: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.29 into release-4.16 #303
Full changelog

csi-driver-manila-operator

OCPBUGS-38458: Add missing healthchecks #241
OCPBUGS-30438: Bump protobuf dependency #237
Full changelog

docker-builder

OCPBUGS-43186: runc library bump to 1.1.12 #420
OCPBUGS-47775: skipping some unit tests to avoid failures as they are duplicate #424
OCPBUGS-48159: Add team members to the OWNERS file #426
OCPBUGS-30455: bump google.golang.org/protobuf to 1.33.0 #402
Full changelog

docker-registry

OCPBUGS-39412: pull upstream distribution changes to use a consistent multipart chunk size #410
Full changelog

etcd

NO-ISSUE: Add support for cachi2 based deps #298
Full changelog

gcp-machine-controllers

OCPBUGS-48484: Refactor exists() to handle gcp API change #106
Full changelog

hyperkube, pod

OCPBUGS-46003: Bump k8s api to 1.29.11 #2161
OCPBUGS-44513: Bump k8s api to 1.29.10 #2133
OCPBUGS-42555: Allow pod to be scheduled if node’s name and hostname mismatch #2099
OCPBUGS-42168: Bump k8s api to 1.29.9 #2090
release-4.16] OCPBUGS-42057: UPSTREAM: <drop>: bump(github.com/openshift/apiserver-library-go) #2096
OCPBUGS-39015: Bump k8s api to 1.29.8 #2066
OCPBUGS-36773: UPSTREAM: <carry>: Disable vSphere tests with pre-provisioned volumes #2021
Full changelog

hypershift

NO-JIRA: chore(deps): chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v9.5-1737480393 - abandoned #5484
NO-JIRA: chore(deps): update konflux references (release-4.16) #5477
NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.50 (release-4.16) #5437
NO-JIRA: Update Konflux references (release-4.16) #5431
NO-JIRA: chore(deps): update konflux references (release-4.16) #5384
NO-JIRA: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v9 (release-4.16) #5298
NO-JIRA: [release-4.16] Bump golang.org/x/crypto and golang.org/x/net #5370
NO-JIRA: Update Konflux references (release-4.16) #5328
NO-JIRA: Red Hat Konflux update control-plane-operator-4-16 #5337
OCPBUGS-47539: Separate CPO containerfiles #5333
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.22.7-1733160835 (release-4.16) #5295
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.49 (release-4.16) #5297
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.48 (release-4.16) #5294
NO-JIRA: Update Konflux References and Perform Migration for Release-4.16 #5261
OCPBUGS-39372: Fixed NodePool version validation #5219
NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.47 (release-4.16) #5209
NO-JIRA: chore(deps): update konflux references (release-4.16) #5207
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.46 (release-4.16) #5189
OCPBUGS-43930: Return the right tagReference on Catalogs ImageStream #5133
NO-JIRA: chore(deps): update konflux references (release-4.16) #5161
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.45 (release-4.16) #5163
chore(deps): update konflux references (release-4.16) #5135
OCPBUGS-44277: Configure OAuth https proxy to dial cloud endpoints directly #5069
chore(deps): update konflux references (release-4.16) #5119
OCPBUGS-43973: Add network policies for konnectivity server and ignition server proxy #4998
NO-JIRA: Update Konflux references (release-4.16) #5112
NO-JIRA: Update Konflux references (release-4.16) #5099
chore(deps): update konflux references (release-4.16) #5078
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.44 (release-4.16) #5059
NO-JIRA: chore(deps): update konflux references (release-4.16) #5058
NO-JIRA: Update Konflux references (release-4.16) #5042
chore(deps): update konflux references (release-4.16) #5024
chore(deps): update konflux references (release-4.16) #5019
NO-JIRA: Update squidfunk/mkdocs-material Docker tag to v9.5.43 (release-4.16) #5017
NO-JIRA: Update Konflux references (release-4.16) #5012
OCPBUGS-43840: add ValidIDPConfiguration condition to report IDP config issues #4985
NO-JIRA: chore(deps): update konflux references (release-4.16) #4971
OCPBUGS-43046: Do not send traffic to local audit-webhook through konnectivity #4883
NO-JIRA: chore(deps): update konflux references (release-4.16) #4954
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.42 (release-4.16) #4947
NO-JIRA: chore(deps): update konflux references (release-4.16) #4933
OCPBUGS-43104: label routes only when HCP router used #4899
OCPBUGS-43308: Use guest DNS resolution in Konnectivity HTTPS proxy by default #4905
NO-JIRA: chore(deps): update konflux references (release-4.16) #4923
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.41 (release-4.16) #4919
NO-JIRA: chore(deps): update konflux references to 674e70f (release-4.16) #4908
NO-JIRA: chore(deps): update konflux references (release-4.16) #4896
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.40 (release-4.16) #4880
OCPBUGS-42432: Use KubeClientCABundle for HostedClusterConfigOperator cluster-signer-ca #4799
OCPBUGS-42342: Let payload generation pick the release for the NodePool #4787
OCPBUGS-42431: Conditionally manage kubeconfig secrets for DNS and Ingress operators #4798
NO-JIRA: chore(deps): update konflux references (release-4.16) #4853
OCPBUGS-42608: Add Annotation to skip deleting hcp namespace #4830
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.39 (release-4.16) #4827
chore(deps): update konflux references (release-4.16) #4816
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.38 (release-4.16) #4806
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.37 (release-4.16) #4796
chore(deps): update konflux references (release-4.16) #4781
NO-JIRA: chore(deps): update konflux references (release-4.16) #4760
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.36 (release-4.16) #4759
NO-JIRA: Security fixes for openshift-ci-security job #4750
OCPBUGS-41372: CPO oauth idp converter: resolve names before dialing #4689
NO-JIRA: chore(deps): update golang docker tag to v1.23 (release-4.16) #4729
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.34 (release-4.16) #4728
NO-JIRA: chore(deps): update konflux references (release-4.16) #4727
OCPBUGS-38058: Add HTTP konnectivity proxy to OAuth server #4496
HOSTEDCP-1955: bump CCO version #4696
OCPBUGS-34803: cmd: report server version, supported OCP #4141
OCPBUGS-39293: copy image-registry AdditionalTrustedCA configmap into HC openshift-config #4647
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-9 (release-4.16) #4685
OCPBUGS-38062: [release-4.16] Use HTTP proxy for ingress controller #4688
NO-JIRA: chore(deps): update konflux references (release-4.16) #4684
OCPBUGS-39447: handle version skewed NodePools that do not have rhel9 binaries #4664
HOSTEDCP-1895: [release-4.16] Allow setting Kube APIServer maximum requests in flight #4551
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-7.1724661022 (release-4.16) #4600
chore(deps): update squidfunk/mkdocs-material docker tag to v9.5.33 (release-4.16) #4602
chore(deps): update konflux references (release-4.16) #4599
OCPBUGS-38942: copy oapi ca-trust recursively when building trust anchor #4615
NO-JIRA: Flaky cert validation test #4622
OCPBUGS-38259: Set KCM node monitor grace period #4520
OCPBUGS-38726: fix: bump github.com/IBM/go-sdk-core/v5 #4611
HOSTEDCP-1764: retrieve registryOverrides when ImageStream is not ava… #4541
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-7 (release-4.16) #4525
OCPBUGS-36781: Set Azure VM identity if user assigned identity set #4341
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-42286: Reorder static resources to create RBAC first #129
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-43686: UPSTREAM: <carry>: Fix go-retryablehttp CVE - 4.16 #89
Full changelog

ibmcloud-machine-controllers

OCPBUGS-44870: Bump dependency for CVE #53
OCPBUGS-36698: IBMCloud: Handle pagination for subnets #42
Full changelog

insights-operator

Ignore previous status when disabling alerts (#1061) #1061
OCPBUGS-45203: LokiStack gatherer (#1051) #1051
OCPBUGS-45044: insightsoperator.operator.openshift.io resource is create-only (#1054) #1054
gather selected clusterroles (#1023) #1023
OCPBUGS-39564: Not able to enable repositories during entitled build in OCP Cluster on IBM-Z (#1013) #1013
OCPBUGS-39394: collect some nmstate customresources (#986) (#989) (#995) #986
OCPBUGS-38021: Integration of the OpenStack CRs into the insights-operator (#974) #974
Full changelog

ironic

OCPBUGS-48151, OCPBUGS-48598: Bump jinja2 to 3.0.1-6.el9.2 #623
OCPBUGS-44895: Bump Ironic #610
OCPBUGS-43950, OCPBUGS-43958: Bump python-waitress [4.16] #604
OCPBUGS-43438: Include fixes for CVE-2024-5569 #599
OCPBUGS-42511: Include fix for CVE-2024-47211 #594
OCPBUGS-39017: Bump ironic-lib to fix utf8 decoding issue #569
OCPBUGS-38797: redfish-virtualmedia fails on XFusion nodes #564
OCPBUGS-42113: Update ironic-inspector to fix the memory leak #587
OCPBUGS-37758, OCPBUGS-39383: Include fixes for CVE-2024-44082 #579
OCPBUGS-38510: set min version for python3-webob #553
Full changelog

ironic-agent

OCPBUGS-39017: Bump ironic-lib to fix utf8 decoding issue #156
OCPBUGS-39383: Include fixes for CVE-2024-44082 #161
OCPBUGS-38510: set webob and bump werkzeug #149
Full changelog

kube-metrics-server

: OCPBUGS-46663: Disable HTTP2 #41
OCPBUGS-41717: Wire server run options to flags. ([release-4.16] backport) #37
Full changelog

kube-proxy, sdn

OCPBUGS-46048: clean up containernetworking/plugins vendoring in sdn #645
OCPBUGS-45806: Stop checking ruleVersion [4.16] #643
OCPBUGS-44301: Use copy() to duplicate a net.IP #641
OCPBUGS-43344: OCPBUGS-42244: Implement namespaceSelectors on ingress with all pods IPs #635
OCPBUGS-42203: fix UDP conntrack cleanup #636
OCPBUGS-42159: fix redundant router-default iptables rule #633
Full changelog

kube-rbac-proxy

OCPBUGS-30447: protobuf bump [4.16] #111
Full changelog

machine-api-operator

OCPBUGS-45947: vSphere klog initialization preventing verbose log messages #1312
OCPBUGS-45998: Ensure deletion annotation takes priority and oldestPolicy can distinguish longer ages #1313
OCPBUGS-39028: Updates message verbs to use %q where appropriate #1282
OCPBUGS-43433: Vsphere: Handle cloned instance with lost taskID #1298
CORS-3648: Add the hyperdisk-balanced disk type #1279
Full changelog

machine-config-operator

OCPBUGS-39224: Do not enable on-prem-resolv-prepender.path for UPI #4573
OCPBUGS-48290: Pausing Master MCP results in Alerts #4786
OCPBUGS-43765: openstack: fix non-old systemd compatible unit #4660
OCPBUGS-43741: Soften haproxy timeout for kubeapi probe #4662
OCPBUGS-48116: OCPBUGS-47801: trying to wait for sub-controllers #4777
OCPBUGS-45974: Remove trailing periods from AWS provided hostnames #4744
OCPBUGS-44337: Removal of additionalTrustBundle CA does not remove certificate from node backport #4688
MCO-1342: Backport Telemetry to 4.16 #4649
OCPBUGS-44043: Disable ESP offload for OVS attached interfaces #4676
OCPBUGS-42109: Do not use ‘restart’ for ‘oneshot’ service #4616
OCPBUGS-42744: Check for kernel arg diff in updateOnClusterBuild #4628
OCPBUGS-42722: Panic seen in CI job for MCC pod #4626
OCPBUGS-42719: MCPs report wrong number of nodes when we move nodes from one custom MCP to another custom MCP #4625
OCPBUGS-41293: Enable the use of Linux Bridge as the ovs default port connection #4563
OCPBUGS-41256: Set ESP offloads off in bonds if slaves don’t support them #4627
OCPBUGS-41806: When newly built images rolled out, the update progress is not displaying correctly (went 0 –> 3) #4584
OCPBUGS-41518: CVE-2024-3727 ose-machine-config-operator-container: containers/image: digest type does not guarantee valid type #4569
OCPBUGS-38997: Machine-config daemon ListPools panic during tech-preview CI runs #4550
OCPBUGS-38711: SCC-pinning for openshift workloads #4539
OCPBUGS-36850: Port number 22623 exposing weak ciphers to external client from master node IP #4556
Full changelog

monitoring-plugin

OU-559: fix log based alerts namespace for dev console #320
OCPBUGS-44395: remove unused package and upgrade vulnerable dependency #272
OCPBUGS-43239: upgrade dynamic plugin sdk to remove vulnerable dependencies 4.16 #217
OCPBUGS-42424: fix path-to-regexp dependency #197
Full changelog

must-gather

OCPBUGS-46407: Support gathering IPsec data #469
OCPBUGS-42969: Collect etcd object count #454
OCPBUGS-43056: Open [Release-4.16] Multus is now a Pod and will be captured by normal #449
Full changelog

nutanix-cloud-controller-manager

OCPBUGS-30524: bump google.golang.org/protobuf to v1.33.0 #38
Full changelog

oc-mirror

changes the owners file (#1015) #1015
OCPBUGS-48513: e2e: use same version of crane as in go.mod (#1021) #1021
Full changelog

openshift-apiserver

OCPBUGS-45010: Pass expected type to deploymentconfig/scale object validation. #461
OCPBUGS-42724: fail image import when both image and error are nil #455
Full changelog

openshift-controller-manager

OCPBUGS-44186: user system:serviceaccount:openshift-infra:serviceaccount-pull-secrets-controller in ns/openshift-infra must not produce too many applies #351
OCPBUGS-48202: Add team members to the OWNERS file #358
NO-JIRA: cleanup root and app OWNERS #347
OCPBUGS-42420: Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) #343
OCPBUGS-39191: replaces deprecated square/go-jose wtih go-jose/go-jose #329
OCPBUGS-37526: Race condition when deleting ServiceAccount #324
Full changelog

openstack-cluster-api-controllers

OCPBUGS-44456: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.16 #328
OCPBUGS-44990: Makefile changes for merge-bot #341
OCPBUGS-34931: rebase on release-0.10 (to fix trunks deletion) #321
Full changelog

openstack-machine-api-provider

OCPBUGS-34931: bump CAPO to v0.9.2 #124
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-48696: Fix excessive catalog source snapshots cause severe performance regression #957
OCPBUGS-48661: Fix concurrent namespace resolution #947
OCPBUGS-46928, OCPBUGS-46935, OCPBUGS-47315: x/net bump to v0.34.0 [release-4.16] #939
OCPBUGS-47738: catalog-operator: Delete Pods that were evicted (#3459) #925
OCPBUGS-46434: CRD upgrade existing CR validation fix #916
OCPBUGS-44802: fix: call TokenRequest API when service account token secret is missing #900
OCPBUGS-41540: [4.16] add optional schema migrations; default to olm.bundle.object instead of olm.csv.metadata (#1384) #859
OCPBUGS-41677: [4.17] adds paginating lister for evaluating CRs’ upgrade fitness versus new CRDs. #863
OCPBUGS-41557: Fix e2e flake: upgrade CRD with deprecated version #861
OCPBUGS-41217: (fix) registry pods do not come up again after node failure (#3366) #854
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-47634: Let OVN-northd bind remote ports #2406
OCPBUGS-45958: bump OVS to 3.3.0-62.el9fdp for OCP 4.16 #2388
OCPBUGS-44457: Add static route to the hairpin masquerade IPs to pod #2346
OCPBUGS-45942: pin libreswan to 4.6-3.el9_0.3 #2386
OCPBUGS-45343: Dockerfile: Update OVN to the 24.03.2-32.el9fdp minor release. #2377
OCPBUGS-42244: Add hybird overlay pod IPs to the namespace address_set #2352
OCPBUGS-43344: Add SDN node subnet gateway IP to host-network address_set #2328
OCPBUGS-42942: Fix egress gateway pod cleanup for remote zone pods. #2341
OCPBUGS-36210: Implementation required to enable Forwarding if it is already disabled #2212
OCPBUGS-41551: Add subnet overlap check for transit switch subnet #2306
OCPBUGS-38697: Use more exact name match when deleting static routes to HO nodes. #2282
OCPBUGS-24386: [release-4.16] EgressService: Fix ETP=Local ingress reply for LGW #2278
OCPBUGS-38705: Delete EgressIP LRP stale nexthops when node is not found #2271
OCPBUGS-38054: Fix per-pod MCS/metadata blocking #2248
OCPBUGS-38699, OCPBUGS-38704: EgressIP VRF support & ignore localnet patch ports when bootstrapping #2267
Full changelog

powervs-machine-controllers

OCPBUGS-41976: Update go.mod to fix CVE - 4.16 #84
Full changelog

prometheus

OCPBUGS-43668: fix(discovery): Handle cache.DeletedFinalStateUnknown in node informers’ DeleteFunc #231
OCPBUGS-39179: Restore Prometheus functionality to accept samples with different timestamps from the same series in a single scrape. #224
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-38399: feat: sync proxy settings in Alertmanager configuration #299
Full changelog

tests

OCPBUGS-48448: Add team members to the OWNERS file for PR approvals #29443
OCPBUGS-48348: Fixing build s2i ruby test data inline with latest ruby version(>=3.0) #29431
OCPBUGS-44105: Adjust createDNSPod() to support hypershift dual-stack test #29258
OCPBUGS-39135: Bump timeout for the pod-network-service endpoints check #29052
OCPBUGS-41611: Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token [apigroup:build.openshift.io] #29079
OCPBUGS-38707: run vsphere driver config test on non techpreview clusters #28992
OCPBUGS-38788: [4.16] egressfirewall: skip ping tests in case of hypershift kubevirt on Azure infra #28938
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-46341: update check-fmt goimports command #83
OCPBUGS-37660: Bump otelgrpc to v0.53.0 #72
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-43881: redact sensitive information when logging VCenter config #134
OCPBUGS-42878: Add compute resource entity to consider a standalone cluster for volu… #131
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Red Hat Enterprise Linux CoreOS (`rhel-coreos`)

Package List

cri-o-1.29.12-4.rhaos4.16.gitadc9401.el9
kernel-5.14.0-427.50.1.el9_4
openshift-kubelet-4.16.0-202501220505.p0.gef2a55c.assembly.stream.el9
systemd-252-32.el9_4.7

Full list (542 packages)

NetworkManager-1:1.46.0-21.el9_4
NetworkManager-cloud-setup-1:1.46.0-21.el9_4
NetworkManager-libnm-1:1.46.0-21.el9_4
NetworkManager-ovs-1:1.46.0-21.el9_4
NetworkManager-team-1:1.46.0-21.el9_4
NetworkManager-tui-1:1.46.0-21.el9_4
WALinuxAgent-udev-2.7.0.6-9.el9_2.1
aardvark-dns-2:1.10.0-3.el9_4
acl-2.3.1-4.el9
adcli-0.9.2-1.el9
afterburn-5.5.1-2.el9
afterburn-dracut-5.5.1-2.el9
alternatives-1.24-1.el9_4.1
attr-2.5.1-3.el9
audit-3.1.2-2.el9
audit-libs-3.1.2-2.el9
authselect-1.2.6-2.el9
authselect-libs-1.2.6-2.el9
avahi-libs-0.8-20.el9
basesystem-11-13.el9
bash-5.1.8-9.el9
bash-completion-1:2.11-5.el9
bind-libs-32:9.16.23-18.el9_4.7
bind-license-32:9.16.23-18.el9_4.7
bind-utils-32:9.16.23-18.el9_4.7
binutils-2.35.2-43.el9
binutils-gold-2.35.2-43.el9
bootc-0.1.14-1.el9_4
bootupd-0.2.18-1.el9
bsdtar-3.5.3-4.el9
bubblewrap-0.4.1-7.el9_4
bzip2-1.0.8-8.el9_4.1
bzip2-libs-1.0.8-8.el9_4.1
c-ares-1.19.1-2.el9_4
ca-certificates-2024.2.69_v8.0.303-91.4.el9_4
checkpolicy-3.6-1.el9
chrony-4.5-1.el9
cifs-utils-7.0-1.el9
clevis-18-112.el9
clevis-dracut-18-112.el9
clevis-luks-18-112.el9
clevis-systemd-18-112.el9
cloud-utils-growpart-0.33-1.el9
composefs-1.0.3-2.el9
composefs-libs-1.0.3-2.el9
conmon-3:2.1.10-5.rhaos4.16.el9
conmon-rs-0.6.3-1.rhaos4.16.el9
conntrack-tools-1.4.7-2.el9
console-login-helper-messages-0.21.3-1.el9
console-login-helper-messages-issuegen-0.21.3-1.el9
console-login-helper-messages-profile-0.21.3-1.el9
container-selinux-4:2.234.2-2.rhaos4.16.el9
containernetworking-plugins-1:1.4.0-6.el9_4
containers-common-3:1-78.rhaos4.16.el9
coreos-installer-0.21.0-2.el9_4
coreos-installer-bootinfra-0.21.0-2.el9_4
coreutils-8.32-35.el9
coreutils-common-8.32-35.el9
cpio-2.13-16.el9
cracklib-2.9.6-27.el9
cracklib-dicts-2.9.6-27.el9
cri-o-1.29.12-4.rhaos4.16.gitadc9401.el9
cri-tools-1.29.0-6.el9
criu-3.19-1.el9
criu-libs-3.19-1.el9
crun-1.17-2.rhaos4.16.el9
crypto-policies-20240202-1.git283706d.el9
crypto-policies-scripts-20240202-1.git283706d.el9
cryptsetup-2.6.0-3.el9
cryptsetup-libs-2.6.0-3.el9
curl-7.76.1-29.el9_4.1
cyrus-sasl-gssapi-2.1.27-21.el9
cyrus-sasl-lib-2.1.27-21.el9
dbus-1:1.12.20-8.el9
dbus-broker-28-7.el9
dbus-common-1:1.12.20-8.el9
dbus-libs-1:1.12.20-8.el9
device-mapper-9:1.02.197-2.el9
device-mapper-event-9:1.02.197-2.el9
device-mapper-event-libs-9:1.02.197-2.el9
device-mapper-libs-9:1.02.197-2.el9
device-mapper-multipath-0.8.7-27.el9
device-mapper-multipath-libs-0.8.7-27.el9
device-mapper-persistent-data-1.0.9-3.el9_4
diffutils-3.7-12.el9
dmidecode-1:3.5-3.el9
dnf-4.14.0-9.el9
dnf-data-4.14.0-9.el9
dnsmasq-2.85-16.el9_4
dosfstools-4.2-3.el9
dracut-057-53.git20240104.el9
dracut-network-057-53.git20240104.el9
dracut-squash-057-53.git20240104.el9
e2fsprogs-1.46.5-5.el9
e2fsprogs-libs-1.46.5-5.el9
efi-filesystem-6-2.el9_0
efibootmgr-16-12.el9
efivar-libs-38-3.el9
elfutils-debuginfod-client-0.190-2.el9
elfutils-default-yama-scope-0.190-2.el9
elfutils-libelf-0.190-2.el9
elfutils-libs-0.190-2.el9
ethtool-2:6.2-1.el9
expat-2.5.0-2.el9_4.2
file-5.39-16.el9
file-libs-5.39-16.el9
filesystem-3.16-2.el9
findutils-1:4.8.0-6.el9
firewalld-filesystem-1.3.4-1.el9
flashrom-1.2-10.el9
fstrm-0.6.1-3.el9
fuse-2.9.9-15.el9
fuse-common-3.10.2-8.el9
fuse-libs-2.9.9-15.el9
fuse-overlayfs-1.13-1.el9
fuse3-3.10.2-8.el9
fuse3-libs-3.10.2-8.el9
fwupd-1.9.13-2.el9
fwupd-plugin-flashrom-1.9.13-2.el9
gawk-5.1.0-6.el9
gawk-all-langpacks-5.1.0-6.el9
gdbm-libs-1:1.19-4.el9
gdisk-1.0.7-5.el9
geolite2-city-20191217-6.el9
geolite2-country-20191217-6.el9
gettext-0.21-8.el9
gettext-libs-0.21-8.el9
git-core-2.43.5-1.el9_4
glib2-2.68.4-14.el9_4.1
glibc-2.34-100.el9_4.4
glibc-common-2.34-100.el9_4.4
glibc-gconv-extra-2.34-100.el9_4.4
glibc-minimal-langpack-2.34-100.el9_4.4
glusterfs-6.0-57.4.el9
glusterfs-client-xlators-6.0-57.4.el9
glusterfs-fuse-6.0-57.4.el9
glusterfs-libs-6.0-57.4.el9
gmp-1:6.2.0-13.el9
gnupg2-2.3.3-4.el9
gnutls-3.8.3-4.el9_4
gpgme-1.15.1-6.el9
grep-3.6-5.el9
groff-base-1.22.4-10.el9
grub2-common-1:2.06-86.el9_4.1
grub2-efi-x64-1:2.06-86.el9_4.1
grub2-pc-1:2.06-86.el9_4.1
grub2-pc-modules-1:2.06-86.el9_4.1
grub2-tools-1:2.06-86.el9_4.1
grub2-tools-minimal-1:2.06-86.el9_4.1
gssproxy-0.8.4-6.el9
gzip-1.12-1.el9
hostname-3.23-6.el9
hwdata-0.348-9.13.el9
ignition-2.18.0-6.rhaos4.16.el9
ima-evm-utils-1.4-4.el9
info-6.7-15.el9
inih-49-6.el9
initscripts-service-10.11.6-1.el9
ipcalc-1.0.0-5.el9
iproute-6.2.0-6.el9_4
iproute-tc-6.2.0-6.el9_4
iptables-libs-1.8.10-5.el9_4
iptables-nft-1.8.10-5.el9_4
iputils-20210202-9.el9_4.1
irqbalance-2:1.9.2-3.el9
iscsi-initiator-utils-6.2.1.9-1.gita65a472.el9
iscsi-initiator-utils-iscsiuio-6.2.1.9-1.gita65a472.el9
isns-utils-libs-0.101-4.el9
jansson-2.14-1.el9
jose-11-3.el9
jq-1.6-16.el9
json-c-0.14-11.el9
json-glib-1.6.6-1.el9
kbd-2.4.0-9.el9
kbd-legacy-2.4.0-9.el9
kbd-misc-2.4.0-9.el9
kernel-5.14.0-427.50.1.el9_4
kernel-core-5.14.0-427.50.1.el9_4
kernel-modules-5.14.0-427.50.1.el9_4
kernel-modules-core-5.14.0-427.50.1.el9_4
kernel-modules-extra-5.14.0-427.50.1.el9_4
kexec-tools-2.0.27-8.el9_4.3
keyutils-1.6.3-1.el9
keyutils-libs-1.6.3-1.el9
kmod-28-9.el9
kmod-libs-28-9.el9
kpartx-0.8.7-27.el9
krb5-libs-1.21.1-2.el9_4.1
less-590-4.el9_4
libacl-2.3.1-4.el9
libaio-0.3.111-13.el9
libarchive-3.5.3-4.el9
libassuan-2.5.5-3.el9
libattr-2.5.1-3.el9
libbasicobjects-0.1.1-53.el9
libblkid-2.37.4-18.el9
libbpf-2:1.3.0-2.el9
libbrotli-1.0.9-6.el9
libcap-2.48-9.el9_2
libcap-ng-0.8.2-7.el9
libcbor-0.7.0-5.el9
libcollection-0.7.0-53.el9
libcom_err-1.46.5-5.el9
libcomps-0.1.18-1.el9
libcurl-7.76.1-29.el9_4.1
libdaemon-0.14-23.el9
libdb-5.3.28-53.el9
libdhash-0.5.0-53.el9
libdnf-0.69.0-8.el9_4.1
libdrm-2.4.117-1.el9
libeconf-0.4.1-3.el9_2
libedit-3.1-38.20210216cvs.el9
libev-4.33-5.el9
libevent-2.1.12-8.el9_4
libfdisk-2.37.4-18.el9
libffi-3.4.2-8.el9
libfido2-1.13.0-2.el9
libgcc-11.4.1-3.el9
libgcrypt-1.10.0-10.el9_2
libgomp-11.4.1-3.el9
libgpg-error-1.42-5.el9
libgudev-237-1.el9
libgusb-0.3.8-2.el9
libibverbs-48.0-1.el9
libicu-67.1-9.el9
libidn2-2.3.0-7.el9
libini_config-1.3.1-53.el9
libipa_hbac-2.9.4-6.el9_4.3
libjcat-0.1.6-3.el9
libjose-11-3.el9
libkcapi-1.4.0-2.el9
libkcapi-hmaccalc-1.4.0-2.el9
libksba-1.5.1-6.el9_1
libldb-2.8.0-2.el9_4
libluksmeta-9-12.el9
libmaxminddb-1.5.2-3.el9
libmicrohttpd-1:0.9.72-5.el9
libmnl-1.0.4-16.el9_4
libmodulemd-2.13.0-2.el9
libmount-2.37.4-18.el9
libmspack-0.10.1-0.7.alpha.el9
libndp-1.8-6.el9_4
libnet-1.2-6.el9
libnetfilter_conntrack-1.0.9-1.el9
libnetfilter_cthelper-1.0.0-22.el9
libnetfilter_cttimeout-1.0.0-19.el9
libnetfilter_queue-1.0.5-1.el9
libnfnetlink-1.0.1-21.el9
libnfsidmap-1:2.5.4-26.el9_4
libnftnl-1.2.6-4.el9_4
libnghttp2-1.43.0-5.el9_4.3
libnl3-3.9.0-1.el9
libnl3-cli-3.9.0-1.el9
libnvme-1.6-1.el9
libpath_utils-0.2.1-53.el9
libpcap-14:1.10.0-4.el9
libpciaccess-0.16-6.el9
libpkgconf-1.7.3-10.el9
libpsl-0.21.1-5.el9
libpwquality-1.4.4-8.el9
libref_array-0.1.5-53.el9
librepo-1.14.5-2.el9
libreport-filesystem-2.15.2-6.el9
librhsm-0.0.3-7.el9_3.1
libseccomp-2.5.2-2.el9
libselinux-3.6-1.el9
libselinux-utils-3.6-1.el9
libsemanage-3.6-2.1.el9_4
libsepol-3.6-1.el9
libsigsegv-2.13-4.el9
libslirp-4.4.0-7.el9
libsmartcols-2.37.4-18.el9
libsmbclient-4.19.4-105.el9_4.1
libsolv-0.7.24-2.el9
libss-1.46.5-5.el9
libssh-0.10.4-13.el9
libssh-config-0.10.4-13.el9
libsss_certmap-2.9.4-6.el9_4.3
libsss_idmap-2.9.4-6.el9_4.3
libsss_nss_idmap-2.9.4-6.el9_4.3
libsss_sudo-2.9.4-6.el9_4.3
libstdc++-11.4.1-3.el9
libtalloc-2.4.1-1.el9
libtasn1-4.16.0-8.el9_1
libtdb-1.4.9-1.el9
libteam-1.31-16.el9_1
libtevent-0.16.0-1.el9
libtirpc-1.3.3-8.el9_4
libtool-ltdl-2.4.6-45.el9
libunistring-0.9.10-15.el9
liburing-2.5-1.el9
libusbx-1.0.26-1.el9
libuser-0.63-13.el9
libutempter-1.2.1-6.el9
libuuid-2.37.4-18.el9
libuv-1:1.42.0-2.el9_4
libverto-0.3.2-3.el9
libverto-libev-0.3.2-3.el9
libwbclient-4.19.4-105.el9_4.1
libxcrypt-4.4.18-3.el9
libxcrypt-compat-4.4.18-3.el9
libxml2-2.9.13-6.el9_4
libxmlb-0.3.10-1.el9
libxslt-1.1.34-9.el9
libyaml-0.2.5-7.el9
libzstd-1.5.1-2.el9
linux-firmware-20241021-143.5.el9_4
linux-firmware-whence-20241021-143.5.el9_4
lmdb-libs-0.9.29-3.el9
logrotate-3.18.0-8.el9
lsof-4.94.0-3.el9
lua-libs-5.4.4-4.el9
luksmeta-9-12.el9
lvm2-9:2.03.23-2.el9
lvm2-libs-9:2.03.23-2.el9
lz4-libs-1.9.3-5.el9
lzo-2.10-7.el9
mdadm-4.2-14.el9_4
microcode_ctl-4:20230808-2.20240910.1.el9_4
mokutil-2:0.6.0-4.el9
mpfr-4.1.0-7.el9
nano-5.6.1-5.el9
ncurses-6.2-10.20210508.el9
ncurses-base-6.2-10.20210508.el9
ncurses-libs-6.2-10.20210508.el9
net-tools-2.0-0.62.20160912git.el9
netavark-2:1.10.3-1.el9
nettle-3.9.1-1.el9
newt-0.52.21-11.el9
nfs-utils-1:2.5.4-26.el9_4
nftables-1:1.0.9-1.el9
nmap-ncat-3:7.92-1.el9
nmstate-2.2.39-1.el9_4
npth-1.6-8.el9
nss-altfiles-2.18.1-20.el9
numactl-libs-2.0.16-3.el9
nvme-cli-2.6-5.el9
oniguruma-6.9.6-1.el9.5
open-vm-tools-12.3.5-2.el9
openldap-2.6.6-3.el9
openshift-clients-4.16.0-202410172045.p0.gcf533b5.assembly.stream.el9
openshift-kubelet-4.16.0-202501220505.p0.gef2a55c.assembly.stream.el9
openssh-8.7p1-38.el9_4.4
openssh-clients-8.7p1-38.el9_4.4
openssh-server-8.7p1-38.el9_4.4
openssl-1:3.0.7-28.el9_4
openssl-fips-provider-3.0.7-2.el9
openssl-libs-1:3.0.7-28.el9_4
openvswitch-selinux-extra-policy-1.0-36.el9fdp
openvswitch3.3-3.3.0-62.el9fdp
os-prober-1.77-10.el9
ose-aws-ecr-image-credential-provider-4.16.0-202410172045.p0.ga53e9de.assembly.stream.el9
ose-azure-acr-image-credential-provider-4.16.0-202501030206.p0.ge5bac33.assembly.stream.el9
ose-gcp-gcr-image-credential-provider-4.16.0-202410172045.p0.g26b43df.assembly.stream.el9
ostree-2024.6-3.el9_4
ostree-grub2-2024.6-3.el9_4
ostree-libs-2024.6-3.el9_4
p11-kit-0.25.3-2.el9
p11-kit-trust-0.25.3-2.el9
pam-1.5.1-23.el9_4
passt-0^20231204.gb86afe3-1.el9
passt-selinux-0^20231204.gb86afe3-1.el9
passwd-0.80-12.el9
pciutils-3.7.0-5.el9
pciutils-libs-3.7.0-5.el9
pcre-8.44-3.el9.3
pcre2-10.40-5.el9
pcre2-syntax-10.40-5.el9
perl-AutoLoader-5.74-481.el9
perl-B-1.80-481.el9
perl-Carp-1.50-460.el9
perl-Class-Struct-0.66-481.el9
perl-Data-Dumper-2.174-462.el9
perl-Digest-1.19-4.el9
perl-Digest-MD5-2.58-4.el9
perl-Encode-4:3.08-462.el9
perl-Errno-1.30-481.el9
perl-Exporter-5.74-461.el9
perl-Fcntl-1.13-481.el9
perl-File-Basename-2.85-481.el9
perl-File-Path-2.18-4.el9
perl-File-Temp-1:0.231.100-4.el9
perl-File-stat-1.09-481.el9
perl-FileHandle-2.03-481.el9
perl-Getopt-Long-1:2.52-4.el9
perl-Getopt-Std-1.12-481.el9
perl-HTTP-Tiny-0.076-462.el9
perl-IO-1.43-481.el9
perl-IO-Socket-IP-0.41-5.el9
perl-IO-Socket-SSL-2.073-1.el9
perl-IPC-Open3-1.21-481.el9
perl-MIME-Base64-3.16-4.el9
perl-Mozilla-CA-20200520-6.el9
perl-NDBM_File-1.15-481.el9
perl-Net-SSLeay-1.92-2.el9
perl-POSIX-1.94-481.el9
perl-PathTools-3.78-461.el9
perl-Pod-Escapes-1:1.07-460.el9
perl-Pod-Perldoc-3.28.01-461.el9
perl-Pod-Simple-1:3.42-4.el9
perl-Pod-Usage-4:2.01-4.el9
perl-Scalar-List-Utils-4:1.56-461.el9
perl-SelectSaver-1.02-481.el9
perl-Socket-4:2.031-4.el9
perl-Storable-1:3.21-460.el9
perl-Symbol-1.08-481.el9
perl-Term-ANSIColor-5.01-461.el9
perl-Term-Cap-1.17-460.el9
perl-Text-ParseWords-3.30-460.el9
perl-Text-Tabs+Wrap-2013.0523-460.el9
perl-Time-Local-2:1.300-7.el9
perl-URI-5.09-3.el9
perl-base-2.27-481.el9
perl-constant-1.33-461.el9
perl-if-0.60.800-481.el9
perl-interpreter-4:5.32.1-481.el9
perl-libnet-3.13-4.el9
perl-libs-4:5.32.1-481.el9
perl-mro-1.23-481.el9
perl-overload-1.31-481.el9
perl-overloading-0.02-481.el9
perl-parent-1:0.238-460.el9
perl-podlators-1:4.14-460.el9
perl-subs-1.03-481.el9
perl-vars-1.05-481.el9
pigz-2.5-4.el9
pkgconf-1.7.3-10.el9
pkgconf-m4-1.7.3-10.el9
pkgconf-pkg-config-1.7.3-10.el9
podman-4:4.9.4-16.el9_4
policycoreutils-3.6-2.1.el9
policycoreutils-python-utils-3.6-2.1.el9
polkit-0.117-11.el9_4.1
polkit-libs-0.117-11.el9_4.1
polkit-pkla-compat-0.1-21.el9
popt-1.18-8.el9
procps-ng-3.3.17-14.el9
protobuf-c-1.3.3-13.el9
psmisc-23.4-3.el9
publicsuffix-list-dafsa-20210518-3.el9
python-unversioned-command-3.9.18-3.el9_4.7
python3-3.9.18-3.el9_4.7
python3-audit-3.1.2-2.el9
python3-dbus-1.2.18-2.el9
python3-distro-1.5.0-7.el9
python3-dnf-4.14.0-9.el9
python3-gpg-1.15.1-6.el9
python3-hawkey-0.69.0-8.el9_4.1
python3-libcomps-0.1.18-1.el9
python3-libdnf-0.69.0-8.el9_4.1
python3-libs-3.9.18-3.el9_4.7
python3-libselinux-3.6-1.el9
python3-libsemanage-3.6-2.1.el9_4
python3-pip-wheel-21.2.3-8.el9
python3-policycoreutils-3.6-2.1.el9
python3-pyyaml-5.4.1-6.el9
python3-rpm-4.16.1.3-29.el9
python3-setools-4.4.4-1.el9
python3-setuptools-53.0.0-12.el9_4.1
python3-setuptools-wheel-53.0.0-12.el9_4.1
qemu-guest-agent-17:8.2.0-11.el9_4.9
quota-1:4.06-6.el9
quota-nls-1:4.06-6.el9
rdma-core-48.0-1.el9
readline-8.1-4.el9
redhat-release-9.4-0.5.el9
redhat-release-eula-9.4-0.5.el9
rpcbind-1.2.6-7.el9
rpm-4.16.1.3-29.el9
rpm-build-libs-4.16.1.3-29.el9
rpm-libs-4.16.1.3-29.el9
rpm-ostree-2024.3-6.el9_4
rpm-ostree-libs-2024.3-6.el9_4
rpm-plugin-selinux-4.16.1.3-29.el9
rpm-plugin-systemd-inhibit-4.16.1.3-29.el9
rpm-sign-libs-4.16.1.3-29.el9
rsync-3.2.3-19.el9_4.1
runc-4:1.1.14-3.rhaos4.16.el9
samba-client-libs-4.19.4-105.el9_4.1
samba-common-4.19.4-105.el9_4.1
samba-common-libs-4.19.4-105.el9_4.1
sed-4.8-9.el9
selinux-policy-38.1.35-2.el9_4.3
selinux-policy-targeted-38.1.35-2.el9_4.3
setup-2.13.7-10.el9
sg3_utils-1.47-9.el9
sg3_utils-libs-1.47-9.el9
shadow-utils-2:4.9-8.el9_4.1
shadow-utils-subid-2:4.9-8.el9_4.1
shared-mime-info-2.1-5.el9
shim-x64-15.8-4.el9_3
skopeo-2:1.14.5-3.rhaos4.16.el9
slang-2.3.2-11.el9
slirp4netns-1.2.3-1.el9
snappy-1.1.8-8.el9
socat-1.7.4.1-5.el9_4.2
sqlite-libs-3.34.1-7.el9_3
squashfs-tools-4.4-10.git1.el9
ssh-key-dir-0.1.4-1.el9
sssd-2.9.4-6.el9_4.3
sssd-ad-2.9.4-6.el9_4.3
sssd-client-2.9.4-6.el9_4.3
sssd-common-2.9.4-6.el9_4.3
sssd-common-pac-2.9.4-6.el9_4.3
sssd-ipa-2.9.4-6.el9_4.3
sssd-krb5-2.9.4-6.el9_4.3
sssd-krb5-common-2.9.4-6.el9_4.3
sssd-ldap-2.9.4-6.el9_4.3
sssd-nfs-idmap-2.9.4-6.el9_4.3
sssd-proxy-2.9.4-6.el9_4.3
stalld-1.19.1-2.el9
strace-5.18-2.el9
subscription-manager-rhsm-certificates-20220623-1.el9
sudo-1.9.5p2-10.el9_3
systemd-252-32.el9_4.7
systemd-journal-remote-252-32.el9_4.7
systemd-libs-252-32.el9_4.7
systemd-pam-252-32.el9_4.7
systemd-rpm-macros-252-32.el9_4.7
systemd-udev-252-32.el9_4.7
tar-2:1.34-6.el9_4.1
teamd-1.31-16.el9_1
tmux-3.2a-5.el9
toolbox-0.1.2-1.rhaos4.16.el9
tpm2-tools-5.2-3.el9
tpm2-tss-3.2.2-2.el9
tzdata-2024b-2.el9
unbound-libs-1.16.2-8.el9_4.1
userspace-rcu-0.12.1-6.el9
util-linux-2.37.4-18.el9
util-linux-core-2.37.4-18.el9
vim-minimal-2:8.2.2637-20.el9_1
which-2.21-29.el9
xfsprogs-6.3.0-1.el9
xmlsec1-1.2.29-9.el9
xmlsec1-openssl-1.2.29-9.el9
xz-5.2.5-8.el9_0
xz-libs-5.2.5-8.el9_0
yajl-2.1.0-22.el9
zlib-1.2.11-40.el9
zram-generator-0.3.2-7.el9
zstd-1.5.1-2.el9

Changed:

NetworkManager 1:1.46.0-16.el9_4 → 1:1.46.0-21.el9_4
NetworkManager-cloud-setup 1:1.46.0-16.el9_4 → 1:1.46.0-21.el9_4
NetworkManager-libnm 1:1.46.0-16.el9_4 → 1:1.46.0-21.el9_4
NetworkManager-ovs 1:1.46.0-16.el9_4 → 1:1.46.0-21.el9_4
NetworkManager-team 1:1.46.0-16.el9_4 → 1:1.46.0-21.el9_4
NetworkManager-tui 1:1.46.0-16.el9_4 → 1:1.46.0-21.el9_4
alternatives 1.24-1.el9 → 1.24-1.el9_4.1
bind-libs 32:9.16.23-18.el9_4.6 → 32:9.16.23-18.el9_4.7
bind-license 32:9.16.23-18.el9_4.6 → 32:9.16.23-18.el9_4.7
bind-utils 32:9.16.23-18.el9_4.6 → 32:9.16.23-18.el9_4.7
bubblewrap 0.4.1-6.el9 → 0.4.1-7.el9_4
bzip2 1.0.8-8.el9 → 1.0.8-8.el9_4.1
bzip2-libs 1.0.8-8.el9 → 1.0.8-8.el9_4.1
ca-certificates 2023.2.60_v7.0.306-90.1.el9_2 → 2024.2.69_v8.0.303-91.4.el9_4
conmon 3:2.1.10-3.rhaos4.16.el9 → 3:2.1.10-5.rhaos4.16.el9
container-selinux 3:2.231.0-1.rhaos4.16.el9 → 4:2.234.2-2.rhaos4.16.el9
containernetworking-plugins 1:1.4.0-4.el9_4 → 1:1.4.0-6.el9_4
coreos-installer 0.21.0-1.el9 → 0.21.0-2.el9_4
coreos-installer-bootinfra 0.21.0-1.el9 → 0.21.0-2.el9_4
cri-o 1.29.7-5.rhaos4.16.gitb130ec5.el9 → 1.29.12-4.rhaos4.16.gitadc9401.el9
cri-tools 1.29.0-4.el9 → 1.29.0-6.el9
crun 1.14.3-1.rhaos4.16.el9 → 1.17-2.rhaos4.16.el9
expat 2.5.0-2.el9_4 → 2.5.0-2.el9_4.2
glib2 2.68.4-14.el9 → 2.68.4-14.el9_4.1
glibc 2.34-100.el9_4.2 → 2.34-100.el9_4.4
glibc-common 2.34-100.el9_4.2 → 2.34-100.el9_4.4
glibc-gconv-extra 2.34-100.el9_4.2 → 2.34-100.el9_4.4
glibc-minimal-langpack 2.34-100.el9_4.2 → 2.34-100.el9_4.4
grub2-common 1:2.06-80.el9_4 → 1:2.06-86.el9_4.1
grub2-efi-x64 1:2.06-80.el9_4 → 1:2.06-86.el9_4.1
grub2-pc 1:2.06-80.el9_4 → 1:2.06-86.el9_4.1
grub2-pc-modules 1:2.06-80.el9_4 → 1:2.06-86.el9_4.1
grub2-tools 1:2.06-80.el9_4 → 1:2.06-86.el9_4.1
grub2-tools-minimal 1:2.06-80.el9_4 → 1:2.06-86.el9_4.1
ignition 2.18.0-3.rhaos4.16.el9 → 2.18.0-6.rhaos4.16.el9
iptables-libs 1.8.10-2.el9 → 1.8.10-5.el9_4
iptables-nft 1.8.10-2.el9 → 1.8.10-5.el9_4
iputils 20210202-9.el9 → 20210202-9.el9_4.1
kernel 5.14.0-427.33.1.el9_4 → 5.14.0-427.50.1.el9_4
kernel-core 5.14.0-427.33.1.el9_4 → 5.14.0-427.50.1.el9_4
kernel-modules 5.14.0-427.33.1.el9_4 → 5.14.0-427.50.1.el9_4
kernel-modules-core 5.14.0-427.33.1.el9_4 → 5.14.0-427.50.1.el9_4
kernel-modules-extra 5.14.0-427.33.1.el9_4 → 5.14.0-427.50.1.el9_4
krb5-libs 1.21.1-1.el9 → 1.21.1-2.el9_4.1
libdnf 0.69.0-8.el9 → 0.69.0-8.el9_4.1
libevent 2.1.12-6.el9 → 2.1.12-8.el9_4
libipa_hbac 2.9.4-6.el9_4.1 → 2.9.4-6.el9_4.3
libldb 2.8.0-1.el9 → 2.8.0-2.el9_4
libmnl 1.0.4-15.el9 → 1.0.4-16.el9_4
libnfsidmap 1:2.5.4-25.el9 → 1:2.5.4-26.el9_4
libnftnl 1.2.6-2.el9 → 1.2.6-4.el9_4
libsemanage 3.6-1.el9 → 3.6-2.1.el9_4
libsmbclient 4.19.4-105.el9_4 → 4.19.4-105.el9_4.1
libsss_certmap 2.9.4-6.el9_4.1 → 2.9.4-6.el9_4.3
libsss_idmap 2.9.4-6.el9_4.1 → 2.9.4-6.el9_4.3
libsss_nss_idmap 2.9.4-6.el9_4.1 → 2.9.4-6.el9_4.3
libsss_sudo 2.9.4-6.el9_4.1 → 2.9.4-6.el9_4.3
libwbclient 4.19.4-105.el9_4 → 4.19.4-105.el9_4.1
linux-firmware 20240603-143.1.el9_4 → 20241021-143.5.el9_4
linux-firmware-whence 20240603-143.1.el9_4 → 20241021-143.5.el9_4
mdadm 4.2-12.el9_4 → 4.2-14.el9_4
microcode_ctl 4:20230808-2.20231009.1.el9_3 → 4:20230808-2.20240910.1.el9_4
nfs-utils 1:2.5.4-25.el9 → 1:2.5.4-26.el9_4
nmstate 2.2.33-1.el9_4 → 2.2.39-1.el9_4
openshift-clients 4.16.0-202408021139.p0.ge8fb3c0.assembly.stream.el9 → 4.16.0-202410172045.p0.gcf533b5.assembly.stream.el9
openshift-kubelet 4.16.0-202408131811.p0.g4510e9c.assembly.stream.el9 → 4.16.0-202501220505.p0.gef2a55c.assembly.stream.el9
openssl 1:3.0.7-27.el9 → 1:3.0.7-28.el9_4
openssl-libs 1:3.0.7-27.el9 → 1:3.0.7-28.el9_4
openvswitch-selinux-extra-policy 1.0-34.el9fdp → 1.0-36.el9fdp
openvswitch3.3 3.3.0-30.el9fdp → 3.3.0-62.el9fdp
ose-aws-ecr-image-credential-provider 4.16.0-202407120242.p0.ga53e9de.assembly.stream.el9 → 4.16.0-202410172045.p0.ga53e9de.assembly.stream.el9
ose-azure-acr-image-credential-provider 4.16.0-202407120242.p0.g0e95532.assembly.stream.el9 → 4.16.0-202501030206.p0.ge5bac33.assembly.stream.el9
ose-gcp-gcr-image-credential-provider 4.16.0-202407120242.p0.g26b43df.assembly.stream.el9 → 4.16.0-202410172045.p0.g26b43df.assembly.stream.el9
ostree 2024.6-1.el9_4 → 2024.6-3.el9_4
ostree-grub2 2024.6-1.el9_4 → 2024.6-3.el9_4
ostree-libs 2024.6-1.el9_4 → 2024.6-3.el9_4
pam 1.5.1-19.el9 → 1.5.1-23.el9_4
podman 4:4.9.4-10.rhaos4.16.el9 → 4:4.9.4-16.el9_4
polkit 0.117-11.el9 → 0.117-11.el9_4.1
polkit-libs 0.117-11.el9 → 0.117-11.el9_4.1
python-unversioned-command 3.9.18-3.el9_4.3 → 3.9.18-3.el9_4.7
python3 3.9.18-3.el9_4.3 → 3.9.18-3.el9_4.7
python3-hawkey 0.69.0-8.el9 → 0.69.0-8.el9_4.1
python3-libdnf 0.69.0-8.el9 → 0.69.0-8.el9_4.1
python3-libs 3.9.18-3.el9_4.3 → 3.9.18-3.el9_4.7
python3-libsemanage 3.6-1.el9 → 3.6-2.1.el9_4
qemu-guest-agent 17:8.2.0-11.el9_4.4 → 17:8.2.0-11.el9_4.9
redhat-release 9.4-0.4.el9 → 9.4-0.5.el9
redhat-release-eula 9.4-0.4.el9 → 9.4-0.5.el9
rpm-ostree 2024.3-4.el9_4 → 2024.3-6.el9_4
rpm-ostree-libs 2024.3-4.el9_4 → 2024.3-6.el9_4
rsync 3.2.3-19.el9 → 3.2.3-19.el9_4.1
runc 4:1.1.13-1.rhaos4.16.el9 → 4:1.1.14-3.rhaos4.16.el9
samba-client-libs 4.19.4-105.el9_4 → 4.19.4-105.el9_4.1
samba-common 4.19.4-105.el9_4 → 4.19.4-105.el9_4.1
samba-common-libs 4.19.4-105.el9_4 → 4.19.4-105.el9_4.1
selinux-policy 38.1.35-2.el9_4.2 → 38.1.35-2.el9_4.3
selinux-policy-targeted 38.1.35-2.el9_4.2 → 38.1.35-2.el9_4.3
shadow-utils 2:4.9-8.el9 → 2:4.9-8.el9_4.1
shadow-utils-subid 2:4.9-8.el9 → 2:4.9-8.el9_4.1
skopeo 2:1.14.5-1.rhaos4.16.el9 → 2:1.14.5-3.rhaos4.16.el9
sssd 2.9.4-6.el9_4.1 → 2.9.4-6.el9_4.3
sssd-ad 2.9.4-6.el9_4.1 → 2.9.4-6.el9_4.3
sssd-client 2.9.4-6.el9_4.1 → 2.9.4-6.el9_4.3
sssd-common 2.9.4-6.el9_4.1 → 2.9.4-6.el9_4.3
sssd-common-pac 2.9.4-6.el9_4.1 → 2.9.4-6.el9_4.3
sssd-ipa 2.9.4-6.el9_4.1 → 2.9.4-6.el9_4.3
sssd-krb5 2.9.4-6.el9_4.1 → 2.9.4-6.el9_4.3
sssd-krb5-common 2.9.4-6.el9_4.1 → 2.9.4-6.el9_4.3
sssd-ldap 2.9.4-6.el9_4.1 → 2.9.4-6.el9_4.3
sssd-nfs-idmap 2.9.4-6.el9_4.1 → 2.9.4-6.el9_4.3
sssd-proxy 2.9.4-6.el9_4.1 → 2.9.4-6.el9_4.3
systemd 252-32.el9_4.6 → 252-32.el9_4.7
systemd-journal-remote 252-32.el9_4.6 → 252-32.el9_4.7
systemd-libs 252-32.el9_4.6 → 252-32.el9_4.7
systemd-pam 252-32.el9_4.6 → 252-32.el9_4.7
systemd-rpm-macros 252-32.el9_4.6 → 252-32.el9_4.7
systemd-udev 252-32.el9_4.6 → 252-32.el9_4.7
tar 2:1.34-6.el9_1 → 2:1.34-6.el9_4.1
tzdata 2024a-1.el9 → 2024b-2.el9
unbound-libs 1.16.2-3.el9_3.5 → 1.16.2-8.el9_4.1

Extensions

Full list (0 packages)

Red Hat Enterprise Linux CoreOS base layer: 416.94.202501270445-0 (diff)

View changelog in Markdown or change previous release:

Source code for this page located on github