4.17.60

PullSpec:

quay.io/openshift-release-dev/ocp-release:4.17.60-multi

Qualifiers (status api): None

Tests:

Informing jobs
- e2e-aws-ovn-multi-x-ax Succeeded periodic-ci-openshift-multiarch-main-nightly-4.17-ocp-e2e-aws-ovn-multi-x-ax

Upgrades from:

Untested upgrades: 4.16.10, 4.16.11, 4.16.12, 4.16.13, 4.16.14, 4.16.15, 4.16.16, 4.16.17, 4.16.18, 4.16.19, 4.16.20, 4.16.21, 4.16.22, 4.16.23, 4.16.24, 4.16.25, 4.16.26, 4.16.27, 4.16.28, 4.16.29, 4.16.30, 4.16.31, 4.16.32, 4.16.33, 4.16.34, 4.16.35, 4.16.36, 4.16.37, 4.16.38, 4.16.39, 4.16.40, 4.16.41, 4.16.42, 4.16.43, 4.16.44, 4.16.45, 4.16.46, 4.16.47, 4.16.48, 4.16.49, 4.16.50, 4.16.51, 4.16.52, 4.16.53, 4.16.54, 4.16.55, 4.16.56, 4.16.57, 4.16.58, 4.16.59, 4.16.60, 4.16.61, 4.16.62, 4.16.63, 4.16.64, 4.16.65, 4.16.66, 4.16.67, 4.16.68, 4.16.69, 4.16.70, 4.16.71, 4.16.72, 4.16.73, 4.16.74, 4.16.75, 4.16.8, 4.16.9, 4.17.0, 4.17.1, 4.17.10, 4.17.11, 4.17.12, 4.17.13, 4.17.14, 4.17.15, 4.17.16, 4.17.17, 4.17.18, 4.17.19, 4.17.2, 4.17.20, 4.17.21, 4.17.22, 4.17.23, 4.17.24, 4.17.25, 4.17.26, 4.17.27, 4.17.28, 4.17.29, 4.17.3, 4.17.30, 4.17.31, 4.17.32, 4.17.33, 4.17.34, 4.17.35, 4.17.36, 4.17.37, 4.17.38, 4.17.39, 4.17.4, 4.17.40, 4.17.41, 4.17.42, 4.17.43, 4.17.44, 4.17.45, 4.17.46, 4.17.47, 4.17.48, 4.17.49, 4.17.5, 4.17.50, 4.17.51, 4.17.52, 4.17.53, 4.17.54, 4.17.55, 4.17.56, 4.17.57, 4.17.58, 4.17.59, 4.17.6, 4.17.7, 4.17.8, 4.17.9

Loading changelog, this may take a while ...

Changes from 4.17.59

Created: 2026-11-09 16:53:22 +0000 UTC

Image Digest: sha256:fb954f5bbe1032207e69904838aa0c54da1f69cced69c9c2ac7f6ea9913bd44f

Release 4.17.60 was created from quay.io/openshift-release-dev/ocp-release-nightly@sha256:8508c2ebbd47e554780279ec1b97236e3ab50165c3ab99903bfee8c52af4d86d

Components

Kubectl 1.30.5
Kubernetes 1.30.14
Kubernetes Tests 1.30.14
Red Hat Enterprise Linux CoreOS upgraded from 417.94.202610010234-0 to 417.94.202611061051-0 (diff)

Rebuilt images without code change

agent-installer-api-server git 11f678ed sha256:e448466519bafe6611148df7903ff319540fabe2205288d8bf2b40bfb8128fa4
agent-installer-csr-approver git e755d585 sha256:8aecf056157b822414f162b6c79472f737ba0d21aeef954a1ea08a9235a43544
agent-installer-node-agent git aee1535a sha256:ec3a949cd6aa7a1267ce3cd2a79573cbd02f719d482c3cc1f34b0e602b08aa8d
agent-installer-orchestrator git e755d585 sha256:8011598e48b05a9c06a6b58ce2c34fb9b8c885edf1045402f3186493a9bb1f87
agent-installer-utils git b3595281 sha256:c5e74c5d787fda68aa8cf6a4d864986992fa18a1438261f8f0f71d49eda982a6
apiserver-network-proxy git ea660559 sha256:1f5a8fa16a156f4ecd6cf71699a425d74954791c92e3ef0f11d27bc773bd65d2
aws-cloud-controller-manager git 300430d9 sha256:f897de116ac1449986ff097e42267078b8e8ba7d73a6a411139ec541689e222d
aws-kms-encryption-provider git 9b1719e3 sha256:be2b648746a30936ea1042f782df7a5e9896e1371e1e684ad0d9d5f6f96a4b50
aws-machine-controllers git 2b53de06 sha256:6845cd2c926ac11f35f1f4a6ba42ad14ba2cf0dc00625baae46419a44f6ce878
aws-pod-identity-webhook git 80efc4ea sha256:fca03773e2a1ed7f1f61230af3d4a6095a240cf4fc7a49db5b958d0591cc2e7f
azure-cluster-api-controllers git 08c5419a sha256:89893d4c05daf4e31a0e8a41c401617aa2d6f9b736af5e9aaa31e9a572acb4a1
azure-file-csi-driver git 2201d80e sha256:4335789b2f5bb905706fa9e8e09290b4dcc69dee1f1771aa33f8ae7ab2553a41
azure-kms-encryption-provider git cc562120 sha256:d719ec49b64ef7568b02b6b850a44c2c2c4cfd0572acdb86a8e74c1435dfcc8e
azure-machine-controllers git ba741f7b sha256:95ce69dbcd83d04b6edfc92427478174d21d64a5661081b5d6fe93a6cbfdd85e
baremetal-cluster-api-controllers git 41b34248 sha256:1d549122a261e9afea7b0d7d16ebb1adcc377be03f56e7e09b1c80d053356945
baremetal-machine-controllers git ae674d78 sha256:97cce9f434acaffca394a84218a35878bc5e37edb5377d4b95a869436360e699
baremetal-operator git 087a24f2 sha256:c6505545d8b8b527e015c75093f9ed95f3db5e910c68d90ff567245f107a4edf
cloud-credential-operator git 6a11cde3 sha256:904efbbea6be1d1eb0471746a1ea00898105da0ac55a8a16ac284275b7fac231
cloud-network-config-controller git 241af368 sha256:a43d3bed143252840f609f8bc2e17493e2b3fb9512217e16d00370d54fb28bda
cluster-autoscaler git efa6fd9b sha256:6b68929aa39e409e888607c4c22ac59a6fc902292488694200a646eb74a9381d
cluster-autoscaler-operator git bb407dd1 sha256:b74ebab6839bf0ffb6a1ab3ad1d6b9e3fa847550833de2edf23d1f3f7591451b
cluster-bootstrap git 95dd9129 sha256:10a804bd1a1e55fe3af9492d6f83fb029bbb4b9abbdd3c2124a463a6e01d1ef9
cluster-capi-controllers git 3b417931 sha256:cd4ad5dd0b99f07000fa7caa2d4d945ccb31a53f13427544bf4817e2aa3703e8
cluster-capi-operator git 17abd1d9 sha256:27768411758ec5c5ecc1c8bb94c8b627f26103411da785152c11ca862ca972bd
cluster-config-api git 92c55bf0 sha256:0fec81c13411e63e5e3d914a591a086695e52e3b1cb58bbf8f65ba471a33322f
cluster-config-operator git cfd318de sha256:e6d04e3f5a8e28563aa2ac44af207b981305f90b5a04db4f4c42eef36c7e5a83
cluster-control-plane-machine-set-operator git f7e01c2f sha256:0a4d66e48034530e32463883aedcb2b10555cb1d84711a688db83620838be562
cluster-csi-snapshot-controller-operator git a07cc2b5 sha256:ffef9a9aa488374ca6e3e53c0aa342ebb3b7fe9453ae6ff68871676b9cf83a43
cluster-image-registry-operator git 1a0cea11 sha256:2e823cd5d5cb4da6627d1bc0072cd3aa6755dadb1998adb639e948ceea269027
cluster-ingress-operator git 17253375 sha256:88da766ee74d25a0252e83683061013daded77e141a73f0bdaf5e2f1853ff298
cluster-kube-cluster-api-operator git c1947350 sha256:620e772ae26211343a51e55551c5f5a90b90e6f9a5364e92391eb8a4cc943959
cluster-kube-storage-version-migrator-operator git 0097f210 sha256:0727985e783a70f367bb355e8987883c5115b58b547a20acdd5cb9cb588dc8a9
cluster-machine-approver git acc2380e sha256:b2d79eb5bf593d7e2fc8ee400f29a0c4afb2080321ddc582ec83e928a668bd8b
cluster-network-operator git dc98c59e sha256:0ba1d17f809b103698cf72ceaf82599a2dfad728fd375379fddd0a9a99f03db9
cluster-node-tuning-operator git fe37d7cf sha256:8255d81f3409f6b0e0ec715914e0d329aa115bc6ceabdb47592a5ffd35c9989e
cluster-openshift-apiserver-operator git 8c61cd4b sha256:eed9cb8a5c6960b35f3b9529e2277ae330c935570c1d4be2fb85536ec2ddf16f
cluster-openshift-controller-manager-operator git b05a249d sha256:3dd8c9a155da92b1208c2716879b9acf6607952f7c21227ba139013deebbd7d0
cluster-policy-controller git 7209e90d sha256:01060d964929009bc1ea83697afb2f2a6ccf7ea106d1340595b292e41e6556c0
cluster-update-keys git 63022033 sha256:48110ddac68daf6074b8510f88ef2177825bd2a886bc983e248c8b6c6a1fd5af
configmap-reloader git 62d56d6a sha256:57fde8b58cc3ad179046f243bb2102c9fc54407ede7f3e936093d8d28b5acdc3
container-networking-plugins git 621348df sha256:5acaae366bebd666c423b79c97d0cf10c4242995901f851e55b8e3906162f9c1
containernetworking-plugins-microshift git 621348df sha256:11d4e2499f65460118562da9fdb85bbec3de8e6dd4be135438390771a3dccca2
csi-driver-nfs git a56e0cba sha256:fc62e345a95d2e88069b7d2435b1dd379753cb31234757bb839bf2c358d6e877
csi-driver-shared-resource git 66aee5b0 sha256:ed1e85f18576f7ee83d924c52e7e3a87a60cb88b254bc05d040706798b2f97c5
csi-driver-shared-resource-operator git 95be6bdf sha256:9e4845c6c0bdf79d4c56378c6bd4912061638607376dc3ed5154db1696c4300a
csi-driver-shared-resource-webhook git 66aee5b0 sha256:add2ff9190e65542c9a6016da53bffa78d728395fba497878b3c58529d96b8ec
csi-node-driver-registrar git 3dd2253e sha256:dde8a3f7452092a6c6b58c947b9dc95f1021d06758c1aa505622b285f4d3a17e
docker-builder git 865c7982 sha256:8fa28ac3f521147a1acdb0d8abe65a971e5c3d576e4299a07e2873e640e6c970
driver-toolkit git 859518f6 sha256:21904305899d00f8c5cd35bf6cd853e5d20bbfd3da3d5f1f66fc7a4e70974411
egress-router-cni git 3193a756 sha256:877db91676e59715488b3bbb01e437ae4a7f6f2f5eb0c710cfa22498eec4277e
etcd git 0d9e0a90 sha256:464b50d7693a673b1c34f27b447b6ea1496d96d75dc75df0ebd2a5d85740cd54
gcp-cloud-controller-manager git 8ce997d7 sha256:bf510685d86ec18611e1a61ffe55ca3eb2257b078b273c1b3ec59e2cb5a4687e
gcp-cluster-api-controllers git f2203376 sha256:5a0cba337e62bdbd028ea0e28f09ad59700ea8665ae801590b4de3545a1581ae
gcp-machine-controllers git 96fa4696 sha256:201f54735fb506548c420f7a61c6d7fe2a1c1663f564994784145bf69ef8a78e
ibm-vpc-block-csi-driver git 9c043915 sha256:02291cd9f862c87e1cd7eb72cc001945f3cad3e6cacd10e8bc05782ff7be9a2e
ibmcloud-cluster-api-controllers git a6cc81b5 sha256:f22d49228026d8c5a4bad1f7fef5566ca62a3078194e7ae79c70fe2fb42ab457
ibmcloud-machine-controllers git 89fbc4e8 sha256:7e03de5a162ec82f65a0edf9e9e8081c8e5dc836ea728344b9dfe3699b44005b
ironic git 005cfdf5 sha256:ade8f131b71fee876289c1e855dd96f73721fc0e9e22b2dba2ef5e2e52669de8
ironic-agent git 3e4fd09f sha256:720ad3b0a4cc67e7f5ccbff5c9abba34fc8049f12d4ac2f552dab0feb0eb5bf4
ironic-machine-os-downloader git 9e6596c3 sha256:40dc8c63ffc6fd78bdeeb02c4ad83010019f22315f1c3e07fcba693726f0ec45
ironic-static-ip-manager git bc5b8a2c sha256:173321a03d25638791335d16a7b401b8c10c177936f338ded1e431112db37c46
keepalived-ipfailover git e3879e9e sha256:9c5875c3e9b94c0ac8bb1b019b887399e811533254ca1ab93dfe656a916ff226
kube-metrics-server git df9ac952 sha256:85e46ee9e10083f6324ede2e2ec3f649f1ae240953131600f1b0d5bd2ce578f1
kube-proxy git fd50551b sha256:0a0bbdd98da19e5996223ee3a59cc58b088a82d063dc3a20cda120f553575358
kube-rbac-proxy git f708b5ec sha256:b81ec2a19c241032242f4faf37fd103607c1742bcce5bf481df5591cd85f1b88
kube-storage-version-migrator git 69b07ae0 sha256:f9d96ea393392b6cce9f138f8ed43b0207102d46ff4e1955af0a8f9830cea587
kubevirt-cloud-controller-manager git d7d7a591 sha256:bf780e287c961dad6367ffa26bccc5f3cb7ee5d1b5ff22ad0ddf11f6f21013ef
kubevirt-csi-driver git b4ad2d68 sha256:ceb263173742d21f842d74ddbc46e54a7067f34dfb4bd486980d50eee0fd614a
libvirt-machine-controllers git 931afe11 sha256:6c704d3beb5bdc98aa53b527291f56bc8f43e70c40cdf540c16d0f9e18b0e8ca
machine-api-operator git d3564c17 sha256:2849e56540f41a68c9a80e70b528ba3e34eb62f1eebb7534a9995b65277528a6
machine-os-images git cc250001 sha256:2dab869c0ee5001857b70f725a1e7c50a17e40b9790e8ed37f76d90ba3bc8891
metallb-frr git b575d5df sha256:dd28c16b1b3de382e3309aa170f25902c2850a480da401e8e40fab0fbc62ac3b
multus-networkpolicy git 4d0b1703 sha256:e26841a4c034b49c79d314711583a4ba8efdbff56394e3f5ce42d482cbf496e4
multus-route-override-cni git 391c1b03 sha256:1a6bef01a73b59ce44970934ce6139be52cfe21113ca532dfb832e015c5a671c
multus-whereabouts-ipam-cni git 40cfb3dc sha256:1b6fb4cd29330c9cbc1b0b125ee493332a9b1417731fd656509ededdb6e09a7c
must-gather git ea72c2eb sha256:0ec6564d2249a7a2de6da4b6e9e15c068b382fc7750b059226b12213acf19277
network-interface-bond-cni git 8f7cc925 sha256:c57cf2663dbff1ee919ee4072d92687265051fc322d52652d471b519c6c3718f
network-tools git e59e7b25 sha256:d15d3593d657953f829b10bff88609aecb62632b2084a5e520da5561776cfa49
nutanix-cloud-controller-manager git c9f6cd1f sha256:6a6c92ec2eb3618e283e0de1c348491e7c200881904cb2c97f298c833690138f
nutanix-machine-controllers git a4fadcbc sha256:c30134c1b481c1ff65ce481a39798e0ecd6472c9904afbda308a1901d2d6974b
olm-catalogd git c740e056 sha256:9ebba547ab19808375e56e5804eb92cd780dd0a4761dd7dd0f3be6022370ee62
olm-operator-controller git fa8d10c5 sha256:7b3579c0bd9759d74f879c602dbd7e9271b2ec3ded5b45a397fd161bc926fd5e
openshift-apiserver git 79a42c56 sha256:acb21ef6e944e03c8a7837ee931f397258d6c2b40bac2523dba14138f78905e9
openstack-cluster-api-controllers git 5593c5f7 sha256:cfaafb567a059a39f78892fd21db7adf9fdd91f71d7510ef286f8899fbec62cf
openstack-machine-api-provider git 3b926d20 sha256:8dd76d9f9eef31d1b3458f206b62ea3c5a59e9059ff385f9a3c49e34ddf22127
operator-framework-tools git c9ad6fd8 sha256:599760044f5574f1081ce8889fd174fff66c518402f645151d5a62a7246f726e
operator-lifecycle-manager git c9ad6fd8 sha256:9eb0e1f2d19c21f3c9d9f8ac9f993b1f9f9fd5d2d5e00ae87b2171b002b146ac
operator-marketplace git 5cf36fde sha256:2b20c94959d0d233d9961d8c459401636d4fecba3414d8335241249517d67070
operator-registry git c9ad6fd8 sha256:f6e9a797fac2ec74af375aab576b2b5fa7a336b14ac3dfc5cc7d8b75fe8e99e5
ovn-kubernetes git 12f4e7e1 sha256:e5a029d54283ef4147bb00bd24ca09e61603cbfa8a1c82c512aeff4c465cf7ea
ovn-kubernetes-microshift git 12f4e7e1 sha256:4b06ae21b4d1a8f41427f54e0085dd4c5810eadb8c3232aa2cf404116e0ec32b
powervs-block-csi-driver git f67fdda4 sha256:b58c528a046f72e71642c40234344089638b508b1c9e173fcdaaf7202d89520e
powervs-block-csi-driver-operator git aa1b744e sha256:65c454dd7e091d7c732801f114730cecab6ded4bb5942b8e1c3f249c4b71e485
powervs-cloud-controller-manager git 9f61dc19 sha256:8a59bd497abfec0d5eea7ffd8ca7a7df59e2996ec9c717e06739cd73395caceb
powervs-machine-controllers git b7478d7e sha256:16f6606191e903297b727f6872182cfaf9c747f9c2b5836dde1ead00d148fec0
prom-label-proxy git 06ec4e3a sha256:fe9ce5c6cb3f0b19988f05b1b1aa8f8f943997a66a1e34cf400ae7a07a802d4e
prometheus git 8b2b7087 sha256:39bb212fa82a2e4d50df9f14a997c44cb52ab3371e960bf98f36b06784b0adcd
prometheus-alertmanager git bed9c9bd sha256:7eace5c4f594916a9b2cca25b9d8b4baf9de116f15eb91f4d0aed957ccec8778
rhel-coreos sha256:69c03b2b4662eed5d11ad3af4bdb4500c20610c7011e3e78730d3fb6291ae5c5
rhel-coreos-extensions sha256:b4a22b76fb2b9f78e229812006dbdd8a7b54456d6a44da9a3b0b4326f4eb6a21
service-ca-operator git 2cb0a44d sha256:f300d6895e041d9721320ad05e4647694cf5d78ec08d2b50ce052785131aecee
telemeter git 15895a06 sha256:292a058be8f9b0e40a1afcedba63e0532a53ef8c48aa2e345699ed2b15a92f56
thanos git 51fe5fa4 sha256:7d39aa6ed15c96e849b00881cf189ff37038e8a99e2c393a14a121b3dbf4907c
vsphere-cluster-api-controllers git 8d6ea11a sha256:4c9c604a66a219084b9ea110911ce4c6df4cf92e1d155949a5841968917e68af
vsphere-csi-driver-operator git a852a536 sha256:01532eb5488a294a4afa7b6ce38902c841e1e2421c19d3c652ee2774010015b0
vsphere-problem-detector git fca89d46 sha256:6f395c4b30a1ee02b3122b6107de3483b61d379defb086d7e5cdbae4ff0e6917

aws-cluster-api-controllers

OCPBUGS-103142: replace golang.org/x/net with openshift-sustaining/net v0.35.0-sec.4 for CVE-2026-33814 #653
OCPBUGS-130953: Fix OIDC test certificate thumbprint #663
Full changelog

aws-ebs-csi-driver

OCPBUGS-90292: patching golang.org/x/crypto with sustaining/crypto@v0.33.0-sec.6 #353
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator

OCPBUGS-103305: Use patched x/net fork v0.35.0-sec.4 #631
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-103148, OCPBUGS-103330: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 #209
Full changelog

azure-disk-csi-driver

OCPBUGS-103158: Bump golang.org/x/net to v0.35.0-sec.4 #173
Full changelog

azure-workload-identity-webhook

OCPBUGS-103156: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 #64
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-103154: Bump golang.org/x/net to v0.35.0-sec.4 #10972
Full changelog

baremetal-runtimecfg

OCPBUGS-103159: Fix CVE-2026-33814 by adding patch for golang.org/x/net package #409
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-102061, OCPBUGS-103161: Use patched x/net fork v0.35.0-sec.4 #2417
Full changelog

cluster-authentication-operator

OCPBUGS-103168: replace golang.org/x/net with openshift-sustaining/net@v0.35.0-sec.4 #989
Full changelog

cluster-baremetal-operator

OCPBUGS-103170: Use patched x/net fork v0.35.0-sec.4 #672
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-103176: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 #514
Full changelog

cluster-dns-operator

OCPBUGS-103178: Use patched x/net fork v0.35.0-sec.4 #494
Full changelog

cluster-etcd-operator

OCPBUGS-103181: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 #1696
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-103173: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 #2300
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-103172: Fix CVE-2026-33814 by adding patch for golang.org/x/net package #962
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-103171: [release-4.17] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #670
Full changelog

cluster-monitoring-operator

OCPBUGS-129160: don’t delete admin-owned Alertmanager secrets on destroy #3143
Full changelog

cluster-olm-operator

OCPBUGS-103193: bump golang.org/x/net to v0.35.0-sec.3 to fix CVE-2026-33814 #246
Full changelog

cluster-samples-operator

OCPBUGS-129480: Restrict samples operator access to the global pull-secret #733
Full changelog

cluster-storage-operator

OCPBUGS-103187: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #734
Full changelog

cluster-version-operator

OCPBUGS-103186: Bump golang.org/x/net to v0.35.0-sec.3 #1460
Full changelog

console

OCPBUGS-127155: [release-4.17] inkify-it: Denial of Service via crafted mailto: links #17382
Full changelog

console-operator

OCPBUGS-103205: Use github.com/openshift-sustaining/net patch to fix CVE-2026-33814 #1224
Full changelog

coredns

OCPBUGS-103200: Fix CVE-2026-33814 by adding patch for golang.org/x/net package #206
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-103277, OCPBUGS-103279: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork- #421 #421
Full changelog

csi-driver-manila-operator

OCPBUGS-103201: Use patched x/net fork v0.35.0-sec.4 #263
Full changelog

csi-external-attacher

OCPBUGS-103210: Bump golang.org/x/net to v0.35.0-sec.4 #116
Full changelog

csi-external-provisioner

OCPBUGS-92864: Replace golang.org/x/crypto with github.com/openshift-sustaining/crypto@v0.33.0-sec.5 to address CVE-2026-46597 #162
Full changelog

csi-external-resizer

OCPBUGS-80084: Patching openshift-sustaining/grpc-go v1.71.3-sec.1 #204
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-103212, OCPBUGS-103215: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 #229
Full changelog

csi-livenessprobe

OCPBUGS-103203: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 #110
Full changelog

docker-registry

OCPBUGS-103223: [release-4.17] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #481
Full changelog

gcp-pd-csi-driver

OCPBUGS-103235: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #144
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-103225: Use patched x/net fork v0.35.0-sec.4 #217
Full changelog

gcp-workload-identity-federation-webhook

OCPBUGS-103230: Replace golang.org/x/net with github.com/openshift-sustaining/net v0.35.0-sec.4 #27
Full changelog

haproxy-router

OCPBUGS-103220: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 to address CVE-2026-33814 #845
Full changelog

hyperkube, pod

OCPBUGS-136162: Fix kubeadm preflight host URL construction #2842
Full changelog

hypershift

Sync approver aliases with main for release-4.17 #10188
Full changelog

ibm-cloud-controller-manager

OCPBUGS-120696: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 #115
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-103222: Use patched x/net fork v0.35.0-sec.4 #188
Full changelog

insights-operator

OCPBUGS-103241: Bump golang.org/x/net to v0.35.0-sec.3 #1356
Full changelog

kube-state-metrics

OCPBUGS-103237: Use patched x/net fork v0.35.0-sec.4 #163
Full changelog

machine-config-operator

OCPBUGS-103252: Use patched x/net fork v0.35.0-sec.4 #6578
Full changelog

machine-image-customization-controller

OCPBUGS-103246: Use patched x/net fork v0.35.0-sec.4 #192
Full changelog

monitoring-plugin

OCPBUGS-118233: [release-4.17] Bump fast-uri to 3.1.7 to fix CVE-2026-84292 #1336
OCPBUGS-98777: [release-4.17] replace outdated react-linkify dependency #1343
Full changelog

multus-admission-controller

OCPBUGS-103264: bump golang.org/x/net to v0.35.0-sec.3 to fix CVE-2026-33814 #135
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-103255, OCPBUGS-103257: [release-4.17] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #358
Full changelog

network-metrics-daemon

OCPBUGS-103254: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 to address CVE-2026-33814 #154
OCPBUGS-130598: add ./bin to PATH in check_golint.sh #162
Full changelog

networking-console-plugin

OCPNETUI-168: Update Owners file #646
Full changelog

oauth-apiserver

OCPBUGS-103267: Replace golang.org/x/net with github.com/openshift-sustaining/net v0.35.0-sec.4 #225
Full changelog

oauth-proxy

OCPBUGS-136604: [release-4.17] Sync OWNERS and OWNERS_ALIASES with master #402
OCPBUGS-112108: bugfix: rewrite open redirect strings to ‘/’ #385
Full changelog

oauth-server

OCPBUGS-103265: Replace golang.org/x/net with openshift-sustaining/net v0.35.0-sec.4 for CVE-2026-33814 #280
OCPBUGS-87070: bugfix: default to english when Accept-Language header contains more than 1000 underscores #273
Full changelog

oc-mirror

OCPBUGS-130910: v1 accept catalog root entries and relative symlink targets #1595
Full changelog

openshift-controller-manager

OCPBUGS-103272: Use patched x/net fork v0.35.0-sec.4 #456
Full changelog

openshift-state-metrics

NO-ISSUE: synchronize OWNERS from main branch #150
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-103280: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #196
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

NO-ISSUE: synchronize OWNERS from main branch #416
Full changelog

prometheus-node-exporter

OCPBUGS-103292: Use patched x/net fork v0.35.0-sec.4 #195
Full changelog

route-controller-manager

OCPBUGS-103135: Fix CVE-2026-33814 by adding patch for golang.org/x/net package #111
Full changelog

tests

OCPBUGS-130857: stage the creation of test pods to minimize etcd impact #31741
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-103318: Replace golang.org/x/net with sustaining fork for CVE-2026-33814 in 4.17 #136
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-92391: patching golang.org/x/crypto with sustaining/crypto@v0.33.0-sec.6 #232
OCPBUGS-103314, OCPBUGS-103319: Use patched x/net fork v0.35.0-sec.4 #209
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github