4.17.0-0.ci-2026-10-06-231229

Download the installer for your operating system or run

oc adm release extract --tools quay-proxy.ci.openshift.org/openshift/ci:rc_payload__4.17.0-0.ci-2026-10-06-231229

Qualifiers (status api): None

Tests:

Blocking jobs
- aws-ovn-upgrade-4.17-minor Succeeded periodic-ci-openshift-release-main-ci-4.17-upgrade-from-stable-4.16-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.17-minor Pending periodic-ci-openshift-release-main-ci-4.17-upgrade-from-stable-4.16-e2e-azure-ovn-upgrade
- gcp-ovn-upgrade-4.17-micro Pending (1 retry) periodic-ci-openshift-release-main-ci-4.17-e2e-gcp-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Pending
- hypershift-e2e Succeeded (1 retry) periodic-ci-openshift-hypershift-release-4.17-periodics-e2e-aws-ovn
  - Attempt 1 Failed
  - Attempt 2 Succeeded

Upgrades from:

Loading changelog, this may take a while ...

Changes from 4.17.0-0.ci-2026-10-05-111229

Created: 2026-10-06 23:14:21 +0000 UTC

Image Digest: sha256:1e26a278921f3ddeb83ae44de92857ff2b018eaa2e4320dc99c325a4d6fd8c45

Components

Kubectl 1.30.5
Kubernetes 1.30.14
Kubernetes Tests 1.30.14
Red Hat Enterprise Linux CoreOS 417.94.202610010234-0

cli, cli-artifacts, deployer, tools

OCPBUGS-102061, OCPBUGS-103161: Use patched x/net fork v0.35.0-sec.4 #2417
Full changelog

haproxy-router

OCPBUGS-103220: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 to address CVE-2026-33814 #845
Full changelog

oauth-proxy

OCPBUGS-112108: bugfix: rewrite open redirect strings to ‘/’ #385
Full changelog

oauth-server

OCPBUGS-87070: bugfix: default to english when Accept-Language header contains more than 1000 underscores #273
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-128826: node: fix serviceUpdateNotNeeded nil pointer comparison #3496
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github