4.21.41

PullSpec:

quay.io/openshift-release-dev/ocp-release:4.21.41-multi

Qualifiers (status api): None

Tests:

Informing jobs
- e2e-aws-ovn-multi-a-a Succeeded periodic-ci-openshift-multiarch-main-nightly-4.21-ocp-e2e-aws-ovn-multi-a-a
- e2e-aws-ovn-multi-x-x Succeeded (1 retry) periodic-ci-openshift-multiarch-main-nightly-4.21-ocp-e2e-aws-ovn-multi-x-x
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- hypershift-e2e-aks-multi-x-ax Failed (1 retry) periodic-ci-openshift-hypershift-release-4.21-periodics-e2e-aks-multi-x-ax
  - Attempt 1 Failed
  - Attempt 2 Failed

Upgrades from:

Untested upgrades: 4.20.15, 4.20.16, 4.20.17, 4.20.18, 4.20.19, 4.20.20, 4.20.21, 4.20.22, 4.20.23, 4.20.24, 4.20.25, 4.20.26, 4.20.27, 4.20.28, 4.20.29, 4.20.30, 4.20.31, 4.20.32, 4.20.33, 4.20.34, 4.20.35, 4.20.36, 4.20.37, 4.20.38, 4.20.39, 4.20.40, 4.20.41, 4.20.42, 4.20.43, 4.20.44, 4.20.45, 4.21.0, 4.21.1, 4.21.10, 4.21.11, 4.21.12, 4.21.13, 4.21.14, 4.21.15, 4.21.16, 4.21.17, 4.21.18, 4.21.19, 4.21.2, 4.21.20, 4.21.21, 4.21.22, 4.21.23, 4.21.24, 4.21.25, 4.21.26, 4.21.27, 4.21.28, 4.21.29, 4.21.3, 4.21.30, 4.21.31, 4.21.32, 4.21.33, 4.21.34, 4.21.35, 4.21.36, 4.21.37, 4.21.38, 4.21.39, 4.21.4, 4.21.40, 4.21.5, 4.21.6, 4.21.7, 4.21.8, 4.21.9

4.22.21 - Failed Failed

Loading changelog, this may take a while ...

Changes from 4.22.21

Created: 2026-10-30 16:09:57 +0000 UTC

Image Digest: sha256:dd5e86c3759449bde6887bf09254b80193547dde6d4ab1b5b0a4f02040c986ef

Release 4.21.41 was created from quay.io/openshift-release-dev/ocp-release-nightly@sha256:f32932d87ca68736942e92fc5a8d9abd1d8dea078ba0c5dec8f7fc4063aa8989

Components

Kubectl upgraded from 1.35.2 to 1.34.1
Kubernetes upgraded from 1.35.9 to 1.34.9
Kubernetes Tests upgraded from 1.35.1 to 1.34.1
Red Hat Enterprise Linux CoreOS upgraded from 10.2.20261027-0 to 10.2.20260521-0

The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	OKD Hypershift	OKD SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
AWSEuropeanSovereignCloudInstall (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AdditionalStorageConfig (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
CRIOCredentialProviderConfig (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIComputeInstall (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIControlPlaneInstall (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIMachineManagementAWS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIMachineManagementAzure (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIMachineManagementBareMetal (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIMachineManagementGCP (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIMachineManagementOpenStack (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIMachineManagementPowerVS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterUpdateAcceptRisks (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterUpdatePreflight (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ConfidentialCluster (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ConfigurablePKI (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
DRAPartitionableDevices (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
EVPN (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ExternalOIDCExternalClaimsSourcing (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ExternalOIDCWithUpstreamParity (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
GCPSovereignCloudInstall (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MachineAPIMigrationAWS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MachineAPIMigrationOpenStack (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MachineAPIMigrationVSphere (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NetworkConnect (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NewOLMConfigAPI (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NoOverlayMode (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
TLSAdherence (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AzureClusterHostedDNSInstall (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
BootImageSkewEnforcement (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
DualReplica (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
IngressControllerDynamicConfigurationManager (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
InsightsConfig (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
InsightsOnDemandDataGather (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
ManagedBootImagesCPMS (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
MutableCSINodeAllocatableCount (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
VSphereHostVMGroupZonal (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
VSphereMixedNodeEnv (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
AWSServiceLBNetworkSecurityGroup (0 tests)	Disabled	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
NoRegistryClusterInstall (0 tests)	Disabled	Disabled (Changed)	Disabled	Enabled	Not Available (Changed)	Not Available (Changed)	Disabled	Enabled
AdditionalRoutingCapabilities (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
AdminNetworkPolicy (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
AlibabaPlatform (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
CPMSMachineNamePrefix (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
GCPClusterHostedDNSInstall (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
GatewayAPI (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
GatewayAPIController (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
HighlyAvailableArbiter (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
ImageVolume (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
MachineConfigNodes (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
ManagedBootImages (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
ManagedBootImagesAWS (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
ManagedBootImagesAzure (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
ManagedBootImagesvSphere (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
NetworkDiagnosticsConfig (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
NetworkLiveMigration (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
NetworkSegmentation (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
PinnedImages (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
PreconfiguredUDNAddresses (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
ProcMountType (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
RouteAdvertisements (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
VolumeAttributesClass (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
ClusterAPIMachineManagementVSphere (0 tests)	Disabled	Disabled	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Disabled (Changed)	Disabled (Changed)
NewOLMBoxCutterRuntime (0 tests)	Disabled	Disabled	Disabled	Disabled (Changed)	Not Available (Changed)	Not Available (Changed)	Disabled	Disabled (Changed)
GCPClusterHostedDNS (0 tests)			Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
TranslateStreamCloseWebsocketRequests (0 tests)			Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)

Removed images

aws-node-termination-handler

agent-installer-api-server

OCPBUGS-89984: patching golang.org/x/crypto with sustaining/crypto@v0.48.0-sec.2 #10793
OCPBUGS-105879: manifest_generator add a label to LUKS root #10797
OCPBUGS-92012: Add sourcedir /run/chrony-dhcp to generated chrony.conf #10510
OCPBUGS-86856: Fix loki and logging #10425
OCPBUGS-81843: Mark raw FC/iSCSI multipath members as ineligible #10148
OCPBUGS-81843: Prefer multipath disk in ABI disk selection #10112
OCPBUGS-79580: Fix multi-document YAML parsing for NMStateConfig #10058
AGENT-1431: Backport feature NoRegistryClusterInstall to 4.21 #8806
OCPBUGS-72519: Fix YAML marshaling for Kubernetes types in disconnected ignition #8736
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-104025: Bump x/net to v0.35.0-sec.4 #2298
OCPBUGS-81642: fix: allow workers to join TNA cluster when 1 master + arbiter are ready #2066
OCPBUGS-77536: Fix root partition before copying IRI registry data #2038
Full changelog

agent-installer-node-agent

OCPBUGS-104032: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #1621
OCPBUGS-85041: add –copy-network when manual network config is detected #1446
Full changelog

agent-installer-ui

OCPBUGS-113553: Bump nanoid to >=3.3.17 in 4.21 (#4065) #4065
OCPBUGS-119963: Bump qs to >=6.16.0 in release-4.21 (#4044) #4044
OCPBUGS-123207: Remove stale OCM_REFRESH_TOKEN code (#4026) #4026
OCPBUGS-104546: Bump tmp to ^0.2.6 to address CVE-2026-44705 (#4015) #4015
Update OWNERS file (#3991) #3991
Bug OCPBUGS-100525,OCPBUGS-103013: Bump ip-address to 10.5.0 to fix CVE-2026-54272 and CVE-2026-69192 (#3986) #3986
OCPBUGS-109782: Bump tar pkg to ^7.5.21 to address CVE-2026-73566 (#3971) #3971
OCPBUGS-104484: Pin minimatch to ^10.2.6 and brace-expansion to ^5.0.9 (CVE-2026-14257) (#3960) #3960
move @types/react-dom to dependencies to fix Hermeto (#3956) #3956
OCPBUGS-99307: 4.21 agent-installer OVE installation fails due to custom-manifests (#3914) #3914
OCPBUGS-91632: Bump ws to 8.21.0 for CVE-2026-45736 (#3905) #3905
OCPBUGS-98269: Bump tar to 7.5.19 in 4.21 (#3893) #3893
OCPBUGS-98435: Bump js-yaml to 4.3.0 in 4.21 (#3877) #3877
OCPBUGS-89700: bump form-data to 2.5.6 and 4.0.6 via scoped resolutions to address CVE-2026-12143 (#3878) #3878
Update OWNERS file (#3882) #3882
Apply patches (#3875) #3875
patch CVE-2026-9277 and CVE-2026-42338 via yarn resolutions (#3853) #3853
OCPBUGS-88390, OCPBUGS-88411: Bump axios to 1.18.1 (#3858) #3858
prefill staticip on ove below the sea (#3769) #3769
Custom manifests are broken in local Assisted UI (#3770) #3770
Operators section should not be displayed on review and installation progress pages when no operators are selected (#3751) #3751
Remove Arbiter button (#3749) #3749
OCPBUGS-85541: Bump msw pkg version to 2.13.5 (#3729) #3729
fix monted pull secret parsing (#3727) #3727
OCPBUGS-84235: add pull secret auto populate logic to ABI local UI (#3509) #3509
Allow to install SNO topology (#3722) #3722
OCPBUGS-85261: [release-4.21] OCPBUGS-84147 | [Below the sea UI] Leaky Abstraction: Transient 500 errors exposed during host binding process (#3684) #3684
Remove 2 node arbiter option from the control plane dropdown option (#3680) #3680
OCPBUGS-84608, OCPBUGS-84830, OCPBUGS-84993, OCPBUGS-85009, OCPBUGS-85039: Bump axios to ^1.15.1 (#3690) #3690
MGMT-24152: UI allows editing pull secret in draft cluster (#3674) #3674
Update OWNERS file (#3654) #3654
Bump happy-dom from 20.0.2 to 20.8.9 (#3525) #3525
fix operators list in ABI below the sea (#3599) #3599
OCPBUGS-81589: bump react-router-dom-v5-compat to ^6.30.3 to address CVE-2026-22029 (#3581) #3581
OCPBUGS-83303: bump axios to ^1.15.0 for fixing CVE-2026-40175 (#3583) #3583
OCPBUGS-81587: upgrade lodash and lodash-es to 4.17.23 to address CVE-2025-13465 (#3535) #3535
Add support for release branches in PR workflow (#3528) #3528
populate default values in local ui from infraEnv (#3503) #3503
Assisted Installer OVE UI shows transient blank page with Technology Preview spinner (#3349) #3349
API/Ingress IP fields lack character limit (#3347) #3347
remove external platforms field from below sea level UI (#3317) #3317
Full changelog

agent-installer-utils

OCPBUGS-105452: Update Konflux references #335
OCPBUGS-101761: Update Konflux references #330
OCPBUGS-100311: Update Konflux release version to 4.21.27 #326
OCPBUGS-99907: Update Konflux references #304
OCPBUGS-99647: Use agent-preinstall-image-builder from quay-proxy #322
OCPBUGS-98628: Increase time for Konflux on-push job #318
OCPBUGS-98628: Increase resources for syft #317
OCPBUGS-98628: Update Konflux version to 4.21.24 #314
OCPBUGS-84120: Update OCP version for Konflux #301
OCPBUGS-85526: update konflux references #287
OCPBUGS-83852: Pass environment through to podman #292
OCPBUGS-82588: Update OCP version in Konflux #285
OCPBUGS-82539: Update Konflux references #265
OCPBUGS-81645: Update operator versions #282
OCPBUGS-78393: Update Konflux release version to 4.21.5 #270
OCPBUGS-78188: Add a flag to provide a custom appliance image #273
OCPBUGS-78144: Update to use the 4.21 Catalog #271
OCPBUGS-77538: (Backport) Override prefilled rendezvousIP #263
OCPBUGS-77302: Remove multiple redhat-operator-index catalogs #262
OCPBUGS-77236: Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 2f3015a #222
OCPBUGS-77220: Update Konflux references #251
OCPBUGS-76590: Update Konflux files to build 4.21.1 #254
OCPBUGS-76411: Include additional operators in OVE config #253
AGENT-1431: Backport feature NoRegistryClusterInstall to 4.21 #248
OCPBUGS-74935: Update Konflux references #220
OCPBUGS-74304: Increase Konflux build pipeline memory #243
OCPBUGS-71230: bump github.com/sirupsen/logrus to v1.9.3 #234
OCPBUGS-73671: Increase capabilities passed via buildah #231
OCPBUGS-69877: Update Konflux files to build for 4.21 #217
OCPBUGS-69841: Red Hat Konflux kflux-prd-rh02 update ove-ui-iso-4-21 #215
OCPBUGS-69443: Remove operator manifests; now applied by assisted-installer #214
Full changelog

aws-cloud-controller-manager

OCPCLOUD-3341: Updates ecr-credential-provider make target #134
Full changelog

aws-cluster-api-controllers

OCPBUGS-104023: replace golang.org/x/net with openshift-sustaining/net v0.50.0-sec.4 for CVE-2026-33814 #649
🐛 [release-4.21] OCPBUGS-81976: Bump go-jose/go-jose/v4@v4.1.4 #609
🐛 OCPBUGS-112498: UPSTREAM: 6132: Persist ProviderID immediately after instance creation #627
🐛 OCPBUGS-121766: UPSTREAM: <carry>: Fix unit tests for OpenShift CI environment #628
🌱 [release-4.21] OCPBUGS-120321: UPSTREAM: <carry>: Remove upstream .github files unused in OpenShift CI #635
Full changelog

aws-ebs-csi-driver

OCPBUGS-80734: Bump google.golang.org/grpc to v1.79.3 #310
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-104051: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #613
OCPBUGS-109655: csi-driver-smb: DeleteVolume call fails to mkdir under /tmp #598
OCPBUGS-85572: Add init container for Manila node daemonset #554
OCPBUGS-85234: Mount writable /tmp in SMB CSI driver #551
OCPBUGS-80844: Bump google.golang.org/grpc to v1.79.3 #539
OCPBUGS-78779: Fix readonly root fs in Azure init containers #528
OCPBUGS-78155: Add only to tags to volume object, if volume is not already tagged #521
OCPBUGS-74215: [release-4.21] Add VAC manifest for tests in AWS EBS #485
OCPBUGS-72509: deploy prometheus role and binding on hypershift guest #489
OCPBUGS-72527: Add SupportedSizeRange for azurefile-nfs #490
Full changelog

aws-karpenter-provider-aws

OCPBUGS-104008: Fix CVE-2026-33814 #36
Full changelog

aws-kms-encryption-provider

OCPBUGS-80711: Bump google.golang.org/grpc to v1.79.3 #40
Full changelog

aws-machine-controllers

OCPBUGS-104122: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.4 to address CVE-2026-33814 #206
OCPBUGS-127563: Add opt-in pprof endpoint to machine-controller-manager #221
OCPBUGS-127563: Cache region validation response and close AWS sessions #220
OCPBUGS-72523: Fix reconciler consistency checks in Update and Exists #163
Full changelog

aws-pod-identity-webhook

OCPBUGS-104021: Bump golang.org/x/net to v0.50.0-sec.3 #222
OCPBUGS-74170: Fix GOTOOLCHAIN env var #213
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-104016, OCPBUGS-104207: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.3 to address CVE-2026-33814 #205
OCPBUGS-80738, OCPBUGS-80739: Bump google.golang.org/grpc to v1.79.3 #178
OCPBUGS-69804: Merge https://github.com/kubernetes-sigs/cloud-provider-azure:765f4352a0be4a8f1160e83293fa8668a5f349b1 (765f435) into release-4.21 #154
Full changelog

azure-cluster-api-controllers

OCPBUGS-133099: Carry VM Reapply recovery #422
OCPBUGS-104017: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.3 to address CVE-2026-33814 #402
OCPBUGS-89991: Address CVE-2026-39829 #398
OCPBUGS-80740: Bump google.golang.org/grpc to v1.79.3 #383
OCPBUGS-74398, OCPCLOUD-3101: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.22.0 (4523016) into release-4.21 #361
Full changelog

azure-disk-csi-driver

OCPBUGS-89972: golang.org/x/crypto bump to v0.52.0 #160
OCPBUGS-96484: Bump golang.org/x/net to v0.55.0 #166
OCPBUGS-85285: check for node name in waitForDiskManagedByTobeRemoved #147
UPSTREAM: 3569: OCPBUGS-80741: Bump grpc to v1.79.3 #137
OCPBUGS-78012: 4.21 rebase v1.34.2 #126
OCPBUGS-69655: fix ASH static provision segmentation fault #118
OCPBUGS-67305: fix: disk creation failure in AzureStack env #116
Full changelog

azure-file-csi-driver

OCPBUGS-104045: Bump golang.org/x/net to v0.50.0-sec.4 #155
OCPBUGS-111837: fix failing unit tests in azure-file-csi-driver #152
OCPBUGS-92988: Bump golang.org/x/crypto to v0.48.0-sec.1 #145
UPSTREAM: 3023: OCPBUGS-80744: Bump grpc to v1.79.3 #125
Full changelog

azure-kms-encryption-provider

OCPBUGS-104007: [release-4.21] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #58
OCPBUGS-80712: Bump google.golang.org/grpc to 1.64.1-sec.1 patch #34
Full changelog

azure-machine-controllers

OCPBUGS-104120: replace golang.org/x/net with openshift-sustaining/net@v0.50.0-sec.4 #210
PIXAA-7: Leverage SpotRebalanceRecommendation for instance termination when available #199
Full changelog

azure-service-operator

OCPBUGS-80713: Bump google.golang.org/grpc to v1.79.3 #28
OCPBUGS-83864: UPSTREAM: <carry>: add openshift/e2e-tests.sh #24
Full changelog

azure-workload-identity-webhook

OCPBUGS-104050: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.4 to address CVE-2026-33814 #60
OCPBUGS-81978: Bump go-jose/go-jose/v4@v4.1.4 #50
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-133839: Update RHCOS-release-4.21 bootimage metadata to 9.6.20261027-0 #11032
OCPBUGS-130638: Warn about ignored install-config fields in ABI #10976
SPLAT-2866: Add vSphere multi vCenter Day 2 support #10874
OCPBUGS-90031, OCPBUGS-92990: Replace golang.org/x/crypto with github.com/openshift-sustaining/crypto v0.48.0-sec.2 #10820
OCPBUGS-100062: openstack: Reserve addresses for load balancer #10724
OCPBUGS-112472: Update timeout in GetMarketplaceImage to 5 minutes #10785
OCPBUGS-104042: Bump golang.org/x/net to v0.50.0-sec.4 #10806
OCPBUGS-113535: Update RHCOS-release-4.21 bootimage metadata to 9.6.20260815-0 #10792
OCPBUGS-87813: [release-4.21] fix: reset associatedVCenter in failure domain validation loop #10605
OCPBUGS-112029: Bump google-cloud-cli to 563.0.0-1 #10769
OCPBUGS-76552: Revert storage account API version for client #10296
OCPBUGS-87815: [release-4.21] Add omitempty to vSphere and Nutanix MachinePool slice fields #10607
OCPBUGS-88740: Update RHCOS-release-4.21 data/data/coreos/rhcos.json to 9.6.20260616-0 #10651
OCPBUGS-81986: Bump go-jose/v4 to 4.1.4 #10598
OCPBUGS-77049: Update RHCOS-release-4.21 bootimage metadata to 9.6.20260520-0 #10579
OCPBUGS-82068: Azure: Sign blob container using user delegated creds #10465
OCPBUGS-84225: ibmcloud: bump vpc-go-sdk and capibm #10514
OCPBUGS-82439: [release-4.21] Mount pullsecret manifest to UI container #10489
OCPBUGS-79074: [release 4.21] - Allow all instance types in the install config for GCP #10417
OCPBUGS-79378: Use correct Project ID with GCP Shared VPC #10423
OCPBUGS-79424: Do not discard NMStateConfig when agent-config is on disk for unconfigured-ignition #10428
OCPBUGS-79421: Fix race condition: wait for agent-register-infraenv before showing UI URL #10425
no-jira: fix SC2328 shellcheck errors #10424
OCPBUGS-77900: Add c8g* to tested_instance_types_aarch64 #10366
OCPBUGS-79375: Don’t auto-calculate RendezvousIP in unconfigured-ignition #10410
OCPBUGS-78696: [release-4.21] : Disable LoadBalancer in cloud config when Octavia is unavailable #10399
OCPBUGS-78241: Increase timeout for waiting control plane #10383
OCPBUGS-77504: fix wavelength zone name regex #10343
OCPBUGS-77551: Increase size of /var/ostreecontainer mount #10346
OCPBUGS-73878: handle SSH rule deletion for Azure private #10225
OCPBUGS-76358: [release-4.21] Fix destroy bootstrap command for Azure #10293
AGENT-1431: Backport feature NoRegistryClusterInstall to 4.21 #10250
OCPBUGS-74672: [release-4.21] GCP: skip AI zones #10272
OSDOCS-17769: [release-4.21] Add AWS m7 instance types #10266
OCPBUGS-74493: add support for NVIDIA H100 and H200 enabled machine series #10259
OCPBUGS-74414: Remove region option for the GCP Private Service Connect Endpoint #10253
OCPBUGS-73891: add newly detected instance types for Azure during 4.21 regression test #10227
OCPBUGS-73773: ensure deterministic zone ordering for control plane machines #10214
OCPBUGS-72521: Fix nil pointer exception in azure mapiImage #10201
OCPBUGS-72578: CORS-4108: bump default channel to stable-4.21 #10204
OCPBUGS-69685, SPLAT-2584: Added ability to install different IPAM version when in TP. #10174
OCPBUGS-66355: Update the RHCOS 4.21 bootimage metadata to 9.6.20251212-1 #10191
OCPBUGS-69752: installing into GCP Shared VPC with minimal permissions #10173
OCPBUGS-69927: PowerVC: fix PostProvision #10180
OCPBUGS-69876: rename “var-ostree\x2dcontainer.mount” to something more computer-friendly #10178
OCPBUGS-69722: use CAPZ to provision ssh rule #10172
OCPBUGS-68363: azure: allow hive to pass empty rhcos image string #10163
OCPBUGS-67314: AGENT-1357 remove AgentWorkflowTypeInstallInteractiveDisconnected workflow #10161
OCPBUGS-68372: Fix ignition warning about agent-extract-tui.service #10164
Full changelog

baremetal-machine-controllers

OCPBUGS-104034: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 #265
Full changelog

baremetal-operator

OCPBUGS-97982: Add BMH finalizer on PreprovisioningImage #506
OCPBUGS-87964: Fix preprovisioning network Secret lifecycle during BMH deletion #492
OCPBUGS-82141: Fix PPI for ACM #476
OCPBUGS-65683: OCPBUGS-78835: PR2774 and PR2793 backports [release-4.21] #469
Bug OCPBUGS-76492: BMO fails to start servicing despite updates to HFC spec #459
OCPBUGS-68369: Abort inspection/cleaning before powering off during deletion #449
OCPBUGS-74365: Fix invalidDNSNameinvalidipv6 test for Go 1.24+ #450
OCPBUGS-67294: Require PreprovisioningImage for deprovisioning when cleaning is enabled #443
Full changelog

baremetal-runtimecfg

OCPBUGS-104053: Fix CVE-2026-33814 by adding patch for golang.org/x/net package #405
OCPBUGS-77168: Install dbus-tools, needed in pkg/monitor/dnsmasqmonitor.go #383
OCPBUGS-72566: Fix TNA and TNF dummy ip for ipv6 #378
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-104179: [release-4.21] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #2379
Fix for OCPBUGS-88239: CVE-2026-39821 #2361
OCPBUGS-98550: Revert pull request 2310 #2348
OCPBUGS-98550: bump x/crypto to the latest version #2310
OCPBUGS-81981: Bump go-jose/go-jose/v4 to v4.1.4 #2271
MCO-1961: Allow multiple machine-os versions #2244
COS-4005: Allow periods in display name labels for version validation #2243
OCPBUGS-77486: Makefile: Strip debugging symbols by default #2211
OCPBUGS-77168: Install subscription-manager in required images #2208
OCPBUGS-73911: Fix unit test failure by updating ruby version to 3.3 #2186
Full changelog

cloud-credential-operator

OCPBUGS-104052: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.4 to address CVE-2026-33814 #1097
NO-JIRA: Revert “OCPBUGS-87110 Scope minted AWS IAM policies to cluster-owned resources” #1060
OCPBUGS-87110: Scope minted AWS IAM policies to cluster-owned resources #1046
OCPBUGS-81982: Bump go-jose/go-jose/v4@v4.1.4 #1027
OCPBUGS-79367: google.golang.org/grpc v1.79.3 #993
OCPBUGS-78199: Fix infrastructure resource name filtering in watch predicate #988
OCPBUGS-71222: test-ext: remove kubernetes module dependency #958
OCPBUGS-74545: Resolve nil pointer exception in hasResourceTags #969
Full changelog

cloud-network-config-controller

OCPBUGS-104000: Fix CVE-2026-33814 by adding patch for golang.org/x/net package #268
OCPBUGS-77154: Refrain from adding Egress IP to public LB backend pool #205
Full changelog

cluster-authentication-operator

OCPBUGS-104035: Bump golang.org/x/net from v0.43.0 to v0.50.0-sec.4 #980
OCPBUGS-81677: Do not return error when an IdP returns 500 during a grant check #868
OCPBUGS-74418: Bump library-go to get KMS #847
OCPBUGS-74418: carry test assertion #848
OCPBUGS-74418: Conditionally add the KMS plugin volume mount to the oauth-apiserver container #846
OCPBUGS-74418: Add KMS test scenarios #844
Full changelog

cluster-autoscaler

OCPBUGS-104191: Replace golang.org/x/net with openshift-sustaining/net v0.50.0-sec.4 for CVE-2026-33814 #439
OCPBUGS-109654: UPSTREAM: 9458: fix(clusterapi): use kind-aware version discovery for infra references #436
OCPBUGS-78684: allow clusterapi provider to skip paused resources #410
OCPBUGS-76296: Pick upstream commits to Fix VPA recommender concurrent access panic #404
Full changelog

cluster-autoscaler-operator

OCPBUGS-104038: Bump x/net package in release-4.21 #386
Full changelog

cluster-baremetal-operator

OCPBUGS-88481: Fix empty IRONIC_BASE_URL #614
OCPBUGS-78580: Allow ProvisioningCIDR for unmanaged network #576
OCPBUGS-77418: Fix ironic-proxy service routing for port 6385 #560
OCPBUGS-77035: Update kubebuilder tools to more latest version #558
OCPBUGS-74204: Fix libguestfs /tmp access in machine-os-downloader init container #551
OCPBUGS-70163: Remove the writable ironic CA cert volume mount at /certs/ca/ironic path, ironic will use the writable /conf mount if needed #541
OCPBUGS-70218: Add sharedVolumeMount to machine-os-downloader init container #542
Full changelog

cluster-capi-controllers

OCPBUGS-80749: Bump google.golang.org/grpc to v1.79.3 #293
OCPBUGS-69685: openshift: CAPI IPAM TechPreviewNoUpgrade: set webhooks failurepolicy: Ignore #257
Full changelog

cluster-capi-operator

OCPBUGS-104049: Bump golang.org/x/net to v0.50.0-sec.3 #662
NO-JIRA: Allow sustaining engineering to self serve dependency updates #554
OCPBUGS-80753: Bump google.golang.org/grpc to v1.79.3 #550
OCPBUGS-74650: fix: e2e: workaround for flakes caused by OCPBUGS-74571, until it is fixed #450
OCPBUGS-73908: Remove references to cluster-api-operator image #445
OCPBUGS-69772, OCPCLOUD-3105: make use of sigs.k8s.io/cluster-api’s v1beta2 #435
OCPBUGS-69417: fix: e2e: CAPI creation issue/scale-down wait issue/machine nodeRef comparison issue #433
Full changelog

cluster-cloud-controller-manager-operator

SPLAT-2866: Added support to manage kube-cloud-config for vSphere in openshift-config-managed #520
OCPBUGS-104043: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.4 to address CVE-2026-33814 #510
OCPBUGS-82034: Add delete permission for Azure load balancers in credentials request #441
Full changelog

cluster-config-api

SPLAT-2866: Add vSphere multi vCenter Day 2 #3036
OCPBUGS-98251: add new serviceAccountToken fs type #2924
OCPBUGS-78330, OCPBUGS-82146, OCPBUGS-85550, OCPBUGS-88295, OCPBUGS-88297: NE-2480: Promote GatewayAPIWithoutOLM feature gate to Default #2865
OCPBUGS-78330, OCPBUGS-82146, OCPBUGS-85550, OCPBUGS-88295, OCPBUGS-88297: Promote GatewayAPIWithoutOLM feature gate to TechPreview #2873
OCPBUGS-85149: Backport GatewayAPIWithoutOLM feature gate as disabled #2864
OCPBUGS-86493: Add labelSelector to MachineSet status for scale subresource #2857
OCPBUGS-83756: fix(config/v1): define constants for authentication types as typed constants #2815
CNTRLPLANE-2796: promote the event-ttl feature #2809
OCPBUGS-82578: [release-4.21] postpone the removal of the DeploymentConfig API #2801
OCPBUGS-74418: Introduce KMSEncryption feature gate #2670
OCPBUGS-76408: Move DynamicConfigurationManager back to TPNU #2703
OCPBUGS-61678: Disable PSA for 4.21 #2623
Full changelog

cluster-config-operator

SPLAT-2866: Migrate vSphere sync of kube-cloud-config to 3CMO #505
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-90510: Fixed issue where nameserver is not set when recreating cpms #411
OCPBUGS-74588: Bump openshift/api to get latest AWSMachineProviderConfig type #386
OCPBUGS-69921: Fix Makefile to use vendor mode #380
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-104057: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #296
OCPBUGS-82971: Fix PDB unhealthyPodEvictionPolicy field name #272
OCPBUGS-74301: Re-add serving cert volume mount to hypershift guest cluster manifest #267
OCPBUGS-72391: Set client throttling parameters #263
Full changelog

cluster-dns-operator

OCPBUGS-104067: Use patched x/net fork v0.50.0-sec.4 #498
Full changelog

cluster-etcd-operator

OCPBUGS-104066: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.43.0-sec.4 to address CVE-2026-33814 #1692
OCPBUGS-100121: Revert ‘OCPBUGS-88490: fix etcd operator deadlock when etcd-endpoints configmap is stale’ #1662
OCPBUGS-90543: fix etcd operator deadlock when etcd-endpoints configmap is stale #1637
OCPBUGS-84336: fix(tnf): gate dual-replica setup and keep retrying #1620
OCPBUGS-84336: fix(tnf): align Pacemaker kubelet and etcd retry pacing #1604
OCPBUGS-77921: Prefer to remove members where they have another healthy machine in the same failure domain index #1563
OCPBUGS-77097: Wait for revision stability before removing etcd members #1555
OCPBUGS-74489: configure inertia for all controllers, bump to 10m #1535
Full changelog

cluster-image-registry-operator

OCPBUGS-75001: Backport Azure ARM SDK migration and Azure Stack Hub compatibility #1303
Full changelog

cluster-ingress-operator

OCPBUGS-98582: Detect orphaned OSSM subscription after noOLM migration #1504
OCPBUGS-93736: Guard OLM subscription lookup with capability check #1490
OCPBUGS-104065: Replace golang.org/x/net with github.com/openshift-sustaining/net v0.50.0-sec.3 to mitigate CVE-2026-33814 #1554
OCPBUGS-99453: Respect proxy configuration on gwapi provisioning #1518
OCPBUGS-99909: E2E test for internal LoadBalancer Annotations #1525
OCPBUGS-99483: Add e2e test for Gateway API infrastructure annotations #1520
OCPBUGS-94189: Add INFO logs alongside event recorder calls #1489
OCPBUGS-98966: Bump Istio version from v1.27.3 to v1.27.8 #1509
OCPBUGS-78330, OCPBUGS-82146, OCPBUGS-85550, OCPBUGS-88295, OCPBUGS-88297: Remove feature-set annotations from Sail Library RBAC Manifests #1462
OCPBUGS-78330, OCPBUGS-82146, OCPBUGS-85550, OCPBUGS-88295, OCPBUGS-88297: Replace OLM-based Istio install with Sail Library #1442
OCPBUGS-86718: Add configuration override for X-SSL strip #1471
OCPBUGS-85149: Fix e2e tests to work on platforms with unmanaged DNS #1437
OCPBUGS-74373: Remove restriction of unmanaged x-k8s.io #1446
OCPBUGS-86027: Fix logging for unmanaged controllers #1448
OCPBUGS-80759: Authorization bypass due to improper HTTP/2 path validation #1441
OCPBUGS-82544: set trustBundleName in Istio global values #1418
OCPBUGS-77432, OCPBUGS-77433: Ensure canary cert matches the default ingress controller’s cert #1367
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-104074: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.4 to address CVE-2026-33814 #2296
OCPBUGS-127407: Bump of library-go #2326
OCPBUGS-88326: Fix kube-apiserver-to-kubelet-signer refresh interval #2192
OCPBUGS-81747: scc: fix uid{Min,Max}Range for nested-container #2092
OCPBUGS-85563: [4.21] operator should not override authentication config serviceAccountIssuer with the default one during the operator initialization #2151
OCPBUGS-85270: fsync static pod cert and manifest writes for crash durability #2144
OCPBUGS-83855: Allow setting the oauthMetadata when auth type is None #2116
OCPBUGS-78548: [release-4.21] : Always set service-account-jwks-uri to LB URL even with custom issuer #2071
OCPBUGS-78784: [4.21] move event-ttl test to its own suite #2073
OCPBUGS-74418: Bump library-go to get KMS #2063
OCPBUGS-77969: Add support for event-ttl cases and go test cases in Kube API Server Operator #2066
OCPBUGS-74418: Carry test assertion #2064
OCPBUGS-74418: Conditionally add the KMS plugin volume mount to the kube-apiserver container #2061
OCPBUGS-74418: Add KMS test scenarios #2054
OCPBUGS-74181: SCC: allow image volume type for all SCCs #2007
OCPBUGS-73561: Update openshift/library-go to get new default TLS configuration #1999
OCPBUGS-61297: revert dev cert rotation #1984
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-104058: Fix CVE-2026-33814 by adding patch for golang.org/x/net package #958
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-104070: [release-4.21] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #666
OCPBUGS-83737: add /var/run/kubernetes as emptyDir #641
CNTRLPLANE-2843: chore: update OWNERS #619
OCPBUGS-74592: [release-4.21] NO-JIRA: pkg/operator: Fix wrong ClusterOperator name #605
[release 4.21] OCPBUGS-74265: Add OPERATOR_IMAGE_VERSION to recovery container #603
Full changelog

cluster-monitoring-operator

OCPBUGS-129137: don’t delete admin-owned Alertmanager secrets on destroy #3139
NO-ISSUE: synchronize OWNERS from main branch [release-4.21] #3114
OCPBUGS-112573: [release-4.21] Makefile: version-stamp golangci-lint binary to prevent stale linter #3065
OCPBUGS-104068: [release-4.21] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #3070
OCPBUGS-105305: [release-4.21] wrap library-go resourceCache with mutex for thread safety #3044
OCPBUGS-104537: Backport e2e stabilization 4.21 #3027
OCPBUGS-100369: [release-4.21] fix: watch cluster wide proxy changes and apply changes accordingly #3021
OCPBUGS-99763: fall back to kube-system/global-pull-secret for telemeter-client token #3002
OCPBUGS-92194: set Prometheus shards value explicitly #2975
OCPBUGS-94077: ship collector:node_scrape_collector_success:avg to Telemetry #2978
OCPBUGS-88323: [release-4.21] fix(TestDocExamples) flake: use internal registry for test pods #2980
OCPBUGS-86806: jsonnet: exclude ReplicationController from catch-all … #2939
OCPBUGS-86991: increase lookup interval #2946
OCPBUGS-80765: bump 4.21 grpc to v1.79.3 #2875
OCPBUGS-74425: Include kube_pod_labels in minimal profile #2797
OCPBUGS-77908: [release-4.21] add app.kubernetes.io/part-of=openshift-monitoring label to thanos-ruler pod #2840
OCPBUGS-76541: Fix NodeRAIDDegraded & NodeRAIDDiskFailure alerts #2815
OCPBUGS-77271: AlertingRule: fix duplicate PrometheusRules after MD5->SHA-224 naming change #2829
OCPBUGS-74622: update expr for AlertmanagerClusterFailedToSendAlerts to exclude value 0 #2804
OCPBUGS-74202: move endpointslice RBAC to Role #2795
Full changelog

cluster-network-operator

OCPBUGS-104069: [release-4.21] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #3156
OCPBUGS-130583: Added global overrides for OVN-Kubernetes #3192
OCPBUGS-127442: [release-4.21] Allow per-node OVN encap IP override via env-overrides #3177
OCPBUGS-126704: Restart pods when rendering egressIP settings #3168
OCPBUGS-112789: [4.21] frr-k8s: use Recreate strategy for statuscleaner deployment #3135
OCPBUGS-105600: Remove version-specific CNI binary copy logic #3117
OCPBUGS-99747: Bump frr-k8s MAX_FDS from 1024 to 65536 #3092
OCPBUGS-98747: Remove –enable-interconnect flag from OVN-K manifests #3055
OCPBUGS-98548: Bump github.com/containernetworking/cni v0.8.0 -> v1.3.0 #3049
OCPBUGS-84169: Handle zero-worker HyperShift clusters in daemonset rollout [4.21 backport] #2972
OCPBUGS-83422: wait for patch port to apply drop garp flows #2946
OCPBUGS-76333: Silence ovnkube-lib.sh to avoid mass of logs to collectors #2900
OCPBUGS-77147: Add config override for openflow-probe #2917
OCPBUGS-76285: Remove duplicated openssl parameter #2899
OCPBUGS-69941: Add kubevirt platform to dual-stack supported platforms #2861
OCPBUGS-72556: fix(hypershift): use net.JoinHostPort for URL construction #2873
Full changelog

cluster-node-tuning-operator

OCPBUGS-114931: Update PPC help description #1623
OCPBUGS-112011: BUG-FIX Latency Test #1592
OCPBUGS-114013: Use Add() instead of AddRateLimited() for routine Profile enqueues #1616
OCPBUGS-104586: e2e: fix: clear hugepages before switching kernelPageSize to 4k #1576
OCPBUGS-100540: e2e: fix broken checks and rework netqueue tests to avoid ARM ethtool blackout flakes #1573
OCPBUGS-90529: perf: latency: compute memory resources dynamically #1521
OCPBUGS-82896: Bump github.com/moby/spdystream from v0.5.0 to v0.5.1 #1531
OCPBUGS-86809: Requeue PerformanceStatus update when status write fails #1524
OCPBUGS-85016: e2e: Add irqbalance StartLimitBurst >= 100 config test #1505
OCPBUGS-81122: CNF-21333: [4.21]:perfprof: enable exec-cpu-affinity by default #1484
OCPBUGS-76375: AA: E2E: LLC: Add tests related to odd cpus #1467
OCPBUGS-77464: E2E: Add test case to check Infrastructure pods affinity #1476
OCPBUGS-78173: workloadhints: use IsVM to skip BM-only tests #1480
NO-JIRA: Make changes for migrating to OTE in Dockerfile #1454
OCPBUGS-69757: E2E: Granular IRQ functional test cases #1449
Full changelog

cluster-olm-operator

OCPBUGS-104056: bump golang.org/x/net to v0.50.0-sec.3 to fix CVE-2026-33814 #242
OCPBUGS-80769: Bump google.golang.org/grpc to v1.79.3 #197
OCPBUGS-76269: add resources to clusterOperator relatedObjects #170
OCPBUGS-81311: Fix golangci-lint timeout in CI #189
OCPBUGS-77826: cluster-olm-operator sets Progressing=True during upgrade #177
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-105475: Add HostToContainer mountPropagation to node-pullsecrets volume mount #750
OCPBUGS-74418: Bump library-go to get KMS #666
OCPBUGS-74418: Conditionally add the KMS plugin volume mount to the openshift-apiserver container #664
OCPBUGS-74418: Add KMS test scenarios #656
Full changelog

cluster-policy-controller

OCPBUGS-104061: Bump golang.org/x/net to v0.50.0-sec.3 #199
OCPBUGS-98251: [4.21] add serviceAccountToken volume type to psalabelsyncer #193
Full changelog

cluster-samples-operator

OCPBUGS-129483: Restrict samples operator access to the global pull-secret #728
Full changelog

cluster-storage-operator

OCPBUGS-104089: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #738
OCPBUGS-79531: volume-data-source-validator should run on master nodes #687
OCPBUGS-74569: add vsphere permissions for checking if users is authorized to see metrics #660
OCPBUGS-70318: volume-data-source-validator must use IfNotPresent image pull policy #652
Full changelog

cluster-version-operator

OCPBUGS-104076: Bump golang.org/x/net to v0.50.0-sec.3 #1456
OCPBUGS-77256: Implement mTLS authentication and authorization for CVO metrics endpoint #1326
OCPBUGS-74009: lib/resourcemerge/core: Reconcile ConfigMap binaryData too #1295
OCPBUGS-73601: vendor: Update openshift/library-go to get new default TLS configuration #1290
Full changelog

console

OCPBUGS-133424: Restore ConfigMap and BuildConfig form view edit actions #17426
OCPBUGS-132569: Fix Namespace column hidden on Node Pods tab with active namespace #17405
OCPBUGS-122212: Wait for demo plugin deployment readiness #17160
OCPBUGS-116250: Validate chart URL in /api/helm/verify #17136
OCPBUGS-113468: Remove unscoped CSV watch from ClusterNotUpgradeableAlert #17079
Fix for OCPBUGS-92072: CVE-2026-44990 #16714
OCPBUGS-113732: make cloud provider fields optional during operator install #17091
OCPBUGS-100518, OCPBUGS-101793: Fix CVE-2026-69153 and CVE-2026-45623 - Bump postcss #17055
Fix OCPBUGS-99410: CVE-2026-59877 #16835
OCPBUGS-112273: Fix flaky TestAsyncCache backend test #17046
Fix for OCPBUGS-101827: CVE-2026-69152 #16931
Fix for OCPBUGS-105892: CVE-2026-73086 #16966
OCPBUGS-105864: Fix leading whitespace in Quick Start execute code snippets #16961
Fix for OCPBUGS-89706: CVE-2026-12143 #16645
OCPBUGS-98434: CVE-2026-59869 bump js-yaml #16772
OCPBUGS-100058: quickstart page i18n misses (Fix Quick Starts i18n bundle lookup for zh-CN) #16868
OCPBUGS-100377: Re-enable Knative Cypress e2e tests #16896
OCPBUGS-99544: ‘0 B’ is shown on details page when create pvc with ‘EiB’ unit #16806
OCPBUGS-99546: Incorrect translations for ‘CatalogSources’ and ‘OperatorGroups’ in l… #16808
OCPBUGS-99311: Disable Knative e2e Cypress tests in CI #16794
OCPBUGS-99163: fixing severity not showing number of issues #16618
OCPBUGS-84287: Bump follow-redirects to 1.16.0 to fix CVE-2026-40895 #16670
OCPBUGS-81618: CVE-2026-4800 #16572
OCPBUGS-90498: Projects cannot be filtered by display name in the console list view #16653
OCPBUGS-95544: Fix RoleBindings tab error for non-cluster-admin users #16695
OCPBUGS-86743, OCPBUGS-87090, OCPBUGS-88749: [release-4.21] bump package: webpack-dev-server, protobufjs, fast-uri #16654
OCPBUGS-90553: Backport inventory card filter link fix to release-4.21 #16678
OCPBUGS-86456: [release-4.21] shell-quote: Arbitrary code execution via command injection due to unescaped line terminators #16536
OCPBUGS-88358: Allow VolumeSnapshot restore when parent PVC is deleted #16602
OCPBUGS-86581: Fix macOS Option key in pod terminal #16505
OCPBUGS-85674: Prevent binary secret data corruption when editing #16448
OCPBUGS-79459: CVE-2026-29063 Immutable.js: Improperly Controlled Mod… #16503
OCPBUGS-86427: Fix Shipwright detail pages crashing with React error #310 #16487
OCPBUGS-86314: Show empty state instead of 403 error for users without projects #16478
OCPBUGS-84967: Remove DataViewToolbar wrapper from bottom pagination #16484
OCPBUGS-83287: [release-4.21] CVE-2026-26996 Bump minimatch library #16276
OCPBUGS-85520: Fix create visual connector in Topology #16439
NO-JIRA: enable multi-architecture yarn builds #16420
OCPBUGS-85040: Remove PII from events #16401
OCPBUGS-84967: Add bottom pagination to ConsoleDataView for mobile responsiveness #16396
OCPBUGS-84858: Fix ConsoleDataView filter order: Name and Label shoul… #16386
OCPBUGS-83494: remove dev to admin links as dev monitoring views are enabled #16164
OCPBUGS-83572: fix Developer Sandbox telemetry #16286
OCPBUGS-83418: Fix resource log dropdown TypeError #16281
OCPBUGS-81517: Follow up on fixing the remaining issues in the multi-group impersonation feature #16236
OCPBUGS-81714: Add missing i18n translations for Pagination component #16255
OCPBUGS-79351: Make folder field optional for vsphere #16189
OCPBUGS-79040: Fix incorrect OLMv1 documentation URL #16186
OCPBUGS-81308: Fix VolumeSnapshot and VolumeSnapshotContent tables sorting #16216
OCPBUGS-79037: Fix useOperatorCatalogCategories hook. #16185
OCPBUGS-81330: Fix entire app suspending to load perspective switcher icon #16226
OCPBUGS-81488: Add robots.txt policy to console #16227
OCPBUGS-80931: Hide filter category selector when only one filter exists #16199
OCPBUGS-77246: AsyncComponent type improvements #16058
OCPBUGS-79035: Fix TypeError in OLS code import to console #16184
OCPBUGS-78799: Fix search component to not pass ALL_NAMESPACES_KEY to… #16170
OCPBUGS-79533: enable keyboard shortcut for DataViewTextFilter #16195
OCPBUGS-78927, OCPBUGS-78928: OLM prompts for GCP Workload Identity parameters during Kiali Operato… #16176
OCPBUGS-78308: “Import from Git” should not force HTTPS/443 for Git providers (GitHub/GitLab/Bitbucket) #16050
OCPBUGS-78599: Migrate InstallPlan components table to PatternFly Table #16159
OCPBUGS-78599: Reset pagination page when changing namespace #16158
OCPBUGS-77029: Fixed Metrics page React error #306 by exporting QueryBrowser component #16038
OCPBUGS-77251: Fix editing secrets with mixed text and binary data #16060
OCPBUGS-77561: Fix ConsolePluginStatus icon #16090
OCPBUGS-75000: Clean up old session cookies to prevent accumulation #15985
OCPBUGS-77957: [CI] Fix the VolumeSnapshot CRUD flaky test failures #16118
OCPBUGS-77882: Fix infinite recursion in project access form #16112
OCPBUGS-65948: prep for 4.21 GA SDK publish #16116
OCPBUGS-76385: Workloads - Edit pod count and Edit parallelism : Content is in English #16005
OCPBUGS-76387: DataView Pagination page menus : i18n misses #16007
OCPBUGS-76386: i18n upload/download routine task - 4.21 / 281 (Latest) #16006
OCPBUGS-77430: run and enforce yarn dedupe #16075
CONSOLE-5011: migrate to yarn berry #16059
OCPBUGS-76389: Use Actions button instead of kebab menu on Subscription details page #16008
OCPBUGS-74998: Fix referenceFor parameter in SubscriptionDetailsPage #15984
OCPBUGS-74887: Add null checks to CRB subject #15974
OCPBUGS-74587: ‘0 of pods’ are shown in Status column on DaemonSets list page. #15953
OCPBUGS-74695: Bump lodash to latest #15962
OCPBUGS-74157: Do not resolve disabled catalog type extensions #15930
OCPBUGS-73870: Update the perspective name in dev-console guided tour #15922
OCPBUGS-73770: update operator details when changing channels #15917
OCPBUGS-73871: i18n upload/download routine task - 4.21 / 281 #15923
OCPBUGS-69931, OCPBUGS-69932: apiVersion is empty on YAML creation page - Runtime error occurs when create MachineConfig with default yaml from… #15871
OCPBUGS-73620: Improve VAC field on PVC details page #15907
OCPBUGS-73727: change OperatorHub strings to Software Catalog #15913
OCPBUGS-72416: make cloudCredentials optional so operators load when … #15900
OCPBUGS-69919: There should be no role ARN field as token-auth-aws/azure/gcp=false in csv annotations #15870
OCPBUGS-73097: Revert the console-shared.json to console-shared directory #15906
OCPBUGS-70266: Fix edit application via Deploy image internal registry doesn’t select correct image stream #15879
OCPBUGS-69388: Prevent application filter in Topology view from resetting to all applications unexpectedly #15848
OCPBUGS-69886: Prevent the display of events from projects other than the currently selected project #15867
OCPBUGS-70132: show DASH to routing labels column when receiver doesn’t have routing labels #15876
OCPBUGS-71200: Remove asterisk from Routing label field in alertManager receiver form #15894
OCPBUGS-69995: fix routing issues on packageserver PackageManifest de… #15873
OCPBUGS-69433: fix bug where Installed badge is not fully visible #15851
OCPBUGS-69376: disable guided tour when cypress is running #15845
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

console-operator

OCPBUGS-130936: Handle disabled Ingress capability in HyperShift #1244
OCPBUGS-104078: Use github.com/openshift-sustaining/net patch to fix CVE-2026-33814 #1220
OCPBUGS-100111: Sort plugin list to make them deterministic #1203
OCPBUGS-98987: [4.21] Stabilize telemetry config to prevent continuous console pod rollouts #1192
NETOBSERV-2296: add missing annotations on netobserv quickstart #1096
OCPBUGS-86119: Add unit and e2e test coverage for cert rotation redeployment #1162
OCPBUGS-82037: Redeploy console pods upon cert rotation #1139
OCPBUGS-78929: Remove orphaned console-conversion-webhook deployment and related resource #1128
Sync Dockerfile.ocp image #1126
OCPBUGS-72562: Add missing relatedObjects + small refactoring #1090
OCPBUGS-74686: Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads #1104
OCPBUGS-74152: Fix PDB blocking node drains during cluster upgrades + update donwloads deployment #1103
OCPBUGS-72550: Add missing console annotation to the quickstart #1089
CM-821, ESO-277, OCPBUGS-69766, SSCSI-235: Add quickstart guides for secrets management operators #1084
Full changelog

coredns

OCPBUGS-104084: Fix CVE-2026-33814 by adding patch for golang.org/x/net package #202
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-96550: Bump golang.org/x/net to v0.50.0-sec.4 #417
OCPBUGS-80845: bump google.golang.org/grpc@v1.79.3 #384
UPSTREAM-SYNC: Sync release-4.21 with upstream release-1.34 #371
Full changelog

csi-driver-nfs

OCPBUGS-82899: Bump github.com/moby/spdystream@v0.5.1 #191
OCPBUGS-80783: CVE-2026-33186: bump google.golang.org/grpc v1.79.3 #176
Full changelog

csi-external-attacher

UPSTREAM: 110: OCPBUGS-104081: Bump golang.org/x/net to v0.50.0-sec.4 #112
OCPBUGS-80784: Bump google.golang.org/grpc to v1.79.3 #102
Full changelog

csi-external-provisioner

OCPBUGS-93008: Replace golang.org/x/crypto with github.com/openshift-sustaining/crypto@v0.48.0-sec.3 to address CVE-2026-46597 #159
UPSTREAM: 1544: OCPBUGS-96508: Bump golang.org/x/net to v0.50.0-sec.4 #149
OCPBUGS-82900: Address CVE-2026-35469 #139
OCPBUGS-80785: Bump google.golang.org/grpc to v1.79.3 #132
Full changelog

csi-external-resizer

OCPBUGS-104092: Bump golang.org/x/net to v0.50.0-sec.4 #210
OCPBUGS-80786: Bump google.golang.org/grpc to v1.79.3 #200
Full changelog

csi-external-snapshot-metadata

OCPBUGS-104088: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.4 to address CVE-2026-33814 #32
OCPBUGS-80787: Bump google.golang.org/grpc to v1.79.3 [release-4.21] #20
Full changelog

csi-external-snapshotter, csi-snapshot-controller

OCPBUGS-104077: Replace golang.org/x/net with github.com/openshift-sustaining/net v0.50.0-sec.3 to mitigate CVE-2026-33814 (release-4.21) #235
OCPBUGS-89328: UPSTREAM: 1392: Fix VolumeSnapshotContent deletion #223
OCPBUGS-80788, OCPBUGS-80791: Bump google.golang.org/grpc to v1.79.3 #208
Full changelog

csi-livenessprobe

OCPBUGS-104079: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.4 to address CVE-2026-33814 #108
Full changelog

docker-builder

OCPBUGS-90033, OCPBUGS-90475, OCPBUGS-92525, OCPBUGS-92654, OCPBUGS-92992: Bump golang.org/x/crypto to fix CVE-2025-22869,CVE-2025-47913,CVE-2026-46597,CVE-2026-39829,CVE-2026-39832 #547
OCPBUGS-70149: bump buildah to 1.39.7 to fix CVE-2025-52881 #495
Full changelog

docker-registry

OCPBUGS-104087: [release-4.21] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #477
Full changelog

driver-toolkit

OCPBUGS-78535: Support ubi minimal base image #186
OCPBUGS-77887: Clean up cruft in /var/cache/dnf #183
Full changelog

egress-router-cni

OCPBUGS-98548: Bump containernetworking/cni to v1.3.0 github.com/containernetworking/plugins to 1.4.0 #106
Full changelog

etcd

OCPBUGS-100390: UPSTREAM: 21443: Revert “Reuse events between sync loops” #394
Full changelog

gcp-cloud-controller-manager

OCPBUGS-104106, OCPBUGS-104202, OCPBUGS-88266: Replace golang.org/x/net with sustaining fork for CVE-2026-33814 and CVE-2026-39821 #162
NO-JIRA: Update OWNERS #159
OCPBUGS-115261: Fix node.kubernetes.io/exclude-from-external-load-balancers on masters #142
OCPBUGS-83615: Fix OSD ILB bug #108
Full changelog

gcp-cluster-api-controllers

OCPBUGS-104098: Bump golang.org/x/net to github.com/openshift-sustaining/net v0.50.0-sec.4 CVE-2026-33814 [release-4.21] #317
OCPBUGS-80805: Bump google.golang.org/grpc to v1.79.3 #287
OCPBUGS-74915: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.11.0 (1cb204d) into release-4.21 #262
Full changelog

gcp-machine-controllers

OCPBUGS-104131: Bump golang.org/x/net to v0.50.0-sec.3 #186
OCPBUGS-105415: [release-4.21] Add the N4A machine type #179
OCPBUGS-80828: Bump gRPC-Go package for CVE fix #154
Full changelog

gcp-pd-csi-driver

OCPBUGS-104100: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #141
OCPBUGS-80809: Bump google.golang.org/grpc to v1.79.3 in release-4.21 #104
OCPBUGS-77716: Support Downward API node name #101
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-104100: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #211
OCPBUGS-97960: no-op OWNERS change to trigger postsubmit jobs #197
OCPBUGS-80808: Bump google.golang.org/grpc to v1.79.3 #184
OCPBUGS-77494: Pass node name to csi-driver container #173
OCPBUGS-77310: Add RBAC permission for node driver to get Node objects #171
OCPBUGS-74222: [release-4.21] Add VAC manifest to support tests on GCP PD #167
Full changelog

gcp-workload-identity-federation-webhook

OCPBUGS-104095: Replace golang.org/x/net with github.com/openshift-sustaining/net v0.35.0-sec.4 #23
Full changelog

haproxy-router

OCPBUGS-86729: Prevent SSRF via FQDN-typed EndpointSlices #818
OCPBUGS-86718: Strip X-SSL-* headers for plain HTTP #795
OCPBUGS-87002: Replace HTTP backend liveness check with admin socket check #786
OCPBUGS-80810: Bump google.golang.org/grpc to v1.79.3 #770
OCPBUGS-79374: Lower verbosity for parseIPList empty list logging #752
Full changelog

hyperkube, kube-proxy, pod

UPSTREAM: <carry>: OCPBUGS-99230: Fix ClusterIsIPv6() detection for dual-stack v6-primary clusters #2722
OCPBUGS-87157: Fix performance related issues when selinux metrics are emitted #2678
NO-JIRA: Update openshift-hack/rebase.sh #2745
OCPBUGS-94059: backport kubernetes/conformance umbrella suite #2708
OCPBUGS-91759: Rebase v1.34.9 in release-4.21 #2702
OCPBUGS-87017: fix flake race in VAP e2e case #2677
OCPBUGS-85500: Bump Kubernetes v1.34.8 to release-4.21 #2665
“OCPBUGS-83608: Bump to k8s v1.34.7” #2647
NO-JIRA: UPSTREAM: <carry>: Add jacobsee and jubittajohn to DOWNSTREAM_OWNERS #2636
OCPBUGS-78991: Bump 1.34.6 to release-4.21 #2634
OCPBUGS-77475: Bump v1.34.5 to release-4.21 #2601
OCPBUGS-76516: Bump v1.34.4 #2590
OCPBUGS-74975: UPSTREAM: 136594: raise kubelet CSI init backoff to cover ~140s DNS delays #2580
OCPBUGS-73910: UPSTREAM: 135340: cbor: bump limits #2565
OCPBUGS-68375: enable InPlace resize test #2539
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

hypershift

OCPBUGS-132161: use in-cluster service for oauth-server #10028
CNTRLPLANE-3774: [release-4.21] fix: control-plane-operator: improve opaque conditions #9344
OCPBUGS-90007, OCPBUGS-98642: Fix CVE-2026-33814, CVE-2026-39830 and CVE-2026-39829 #9529
OCPBUGS-93030: CVE-2026-46597 openshift4/ose-hypershift-rhel9: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs [openshift-4.21] #9270
OCPBUGS-129535: filter AWS-reserved tag keys before calling DeleteTags #9964
OCPBUGS-129111: Count only successful upsert updates #9901
OCPBUGS-81489: Add MTU override for OVN-Kubernetes on hosted clusters #8136
CNTRLPLANE-4570: add kubeClientQPS and kubeClientBurst to ClusterAutoscaling #9888
OCPBUGS-128933: [release-4.21] fix: grant cluster-autoscaler watch access #9855
OCPBUGS-120681: Apply ingress load balancer scope to default IngressController #9541
OCPBUGS-112732: fix(certs): normalize IP SANs to stop dual-stack KAS cert churn #9497
OCPBUGS-128418: fix(konnectivity): enable –sync-forever to restore lost agent-server tunnels #9800
OCPBUGS-98327: fix(kubevirt): use only first MachineInternalIP per family in EndpointSlice endpoints #8978
CNTRLPLANE-4158: Maintain ingress serving cert for HostedCluster ingress #9744
ACM-46124: improve hypershift-rhel9-operator container grade on MCE 2.11 [release-4.21] #9739
OCPBUGS-120751: update Containerfile.cli runtime base image to floating tag [release-4.21] #9557
OCPBUGS-125792: hardcode ETCD_METRICS=extensive in etcd StatefulSet template #9696
OCPBUGS-82913: Address CVE-2026-35469 #9023
OCPBUGS-96712: Apply MetricsSet relabel configs to KAS ServiceMonitor #9294
OCPBUGS-105505: fix(upsert): add desired-state hash to detect spec field removals #9268
OCPBUGS-104592: Add proxy env vars to AWS cloud-controller-manager deployment #9224
OCPBUGS-105434: [release-4.21] fix router component ordering to prevent missing HAProxy backends #9263
OCPBUGS-94179: fix registry override matching and propagation to init containers #8879
OCPBUGS-100194: fix(cpo): set correct –advertise-client-url for etcd grpc-proxy #9184
CNTRLPLANE-3873: Backport controlPlaneVersion status to release-4.21 #9054
OCPBUGS-99646: OCPBUGS-86296: Propagate management cluster proxy env vars to konnectivity sidecar #9087
OCPBUGS-90087: [release-4.21] clear stale EtcdRecoveryActive failure condition when etcd is healthy #8807
OCPBUGS-97922: fix(nodepool): skip CNI-internal IPs in ClusterNetworkCIDRConflict check #8949
OCPBUGS-99100: fix(backport): konnectivity agent auth #9093
OCPBUGS-91671: [release-4.21] OCPBUGS-74960: prevent resource leak on deletion and handle DependencyViolation #8798
OCPBUGS-90084: Fix NodePool reconciliation failure when updating mirrored immutable ConfigMaps #8812
OCPBUGS-93927: fix(cpo): deduplicate VPC endpoint subnets by AZ to prevent DuplicateSubnetsInSameZone #8862
OCPBUGS-86295: CAPI image overrides aware of registry config #8559
OCPBUGS-83833: fix(deps): update dependencies to address CVE-2025-52881 #8748
OCPBUGS-92089: fix(cpo): prevent informer creation for inaccessible resource types #8833
OCPBUGS-89353: build(operator): drop hypershift-no-cgo from operator container images #8757
OCPBUGS-80813: Bump google.golang.org/grpc to v1.79.3 #8443
OCPBUGS-86040: [release-4.21] Verify cert revocation against all KAS pods #8539
NO-JIRA: fix(tekton): remove path filter from control-plane-operator pipelines #8667
OCPBUGS-86416: add Konflux pipeline definitions for CPO 4.21 #8607
OCPBUGS-86477: [release-4.21] add CP pull-secret watches for in-place propagation #8583
OCPBUGS-86416: set limits for aro.openshift.io/swift-nic in request overrides for ARO swift #8565
OCPBUGS-81671: Ignition generalize image download errors #8158
OCPBUGS-85781: Add AWS ISO domains to konnectivity IsCloudAPI #8531
OCPBUGS-85621: fix CVE-2026-33186 by updating grpc-go #8518
OCPBUGS-83710: fix(kubevirt): filter link-local addresses from EndpointSlice endpoints #8270
OCPBUGS-85538: [release-4.21] Set unhealthyPodEvictionPolicy to AlwaysAllow on all PDBs #8214
OCPBUGS-85538: [release-4.21] CNTRLPLANE-2740: Add KAS liveness readiness sidecar to OAS and OAuth API Server #8213
OCPBUGS-76447: Add UserAgent telemetry to CPO Azure SDK clients #7685
OCPBUGS-81745: [release-4.21] Honor AWS AMI override in NodePool token generation #8170
OCPBUGS-81836: OCPBUGS-81670: fix(cpo-v2): preserve HCCO modifications to OCM Controllers field #8157
OCPBUGS-81490: fix(cpo): skip router LB services for ARO HCP #8135
OCPBUGS-77966: fix: global-pull-secret-syncer pod ~15-minute delay scheduling on new nodes #8129
OCPBUGS-81287: fix(release): allow multiple machine-os component versions #8103
OCPBUGS-81285: fix(releaseinfo): allow periods in version display name regex #8102
OCPBUGS-78933: fix(cpo): Don’t remove HCP Ingress from routes when CapabilityRoute is disabled #8014
CNTRLPLANE-3006: Azure web identity webhook 4.21 #7997
OCPBUGS-78957: fix(hostedcluster): Remove referenced resource annotations regardless of hcp status #7975
OCPBUGS-78473: Fix deadlock when changing release image during initial provisioning #7954
OCPBUGS-78484: fix(catalogs): update catalog image version cap to 4.21 #7956
OCPBUGS-77456: Add dynamic NodePort range validation #7820
OCPBUGS-77647: remove resource limits from Agent CAPI provider #7844
OCPBUGS-78304: Fix context cancel accumulation in getMirrorFromICSPOrIDMS #7891
OCPBUGS-78196: fix(sync-global-pullsecret): compare content ignoring trailing newlines #7914
CNTRLPLANE-2812: feat(aro): Swift support #7826
OCPBUGS-77365: Fix ignition-server pod restarts due to MIRRORED_RELEASE_IMAGE flapping #7834
OCPBUGS-75930: [release-4.21] fix(cpo): Correct route labeling logic for HCP router infrastructure #7641
OCPBUGS-75884: feat(updates): enable CVO metrics access with RHOBS monitoring flag #7632
fix: OCPBUGS-74104: Fix CVE-2025-58183 #7545
OCPBUGS-71133: fix(ingress): clear LoadBalancerSourceRanges when AllowedCIDRBlocks is removed #7433
OCPBUGS-74893: fix: add hypershift.openshift.io/nodepool-globalps-enabled label to be ignored in cluster-autoscaler deployment #7618
OCPBUGS-74648: feat(cpo): check components have rolled out before setting available #7604
OCPBUGS-72556: fix(cno): use brackets only for IPv6 in server URL #7452
OCPBUGS-72400: Fix Konflux EC voilation, update deprecated base … #7443
OCPBUGS-70216: fix(Portieris): Fix Portieris by mounting emptyDir to ‘./.trust’ work dir #7422
OCPBUGS-69440: fix(vendor): bump openshift/api dependency to current master [release-4.21] #7398
OCPBUGS-68937: test: remove network-dependent unit tests for image metadata #7390
Full changelog

ibm-cloud-controller-manager

OCPBUGS-120699: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.4 to address CVE-2026-33814 #111
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-80815: Bump google.golang.org/grpc to v1.79.3 #146
OCPBUGS-77203: [release-4.21] standardize build paths #121
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-104111: Use patched x/net fork v0.50.0-sec.4 #191
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-104105: Replace golang.org/x/net with openshift-sustaining/net #175
OCPBUGS-66393: Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART for 4.21 #133
Full changelog

ibmcloud-machine-controllers

OCPBUGS-104113: replace golang.org/x/net with openshift-sustaining/net v0.50.0-sec.4 #101
OCPBUGS-77445: [release-4.21] bump vpc go sdk #81
NO-JIRA: Modernize test infrastructure to align with other MAPI providers #84
Full changelog

insights-operator

OCPBUGS-133442: multiclusterhub gatherer #1405
OCPBUGS-129367: add insights-runtime-extractor-scc missing fields #1387
OCPBUGS-127485: Add multicluster gatherer #1374
OCPBUGS-123175: add custom proxy field to insights config #1365
OCPBUGS-104096: Bump golang.org/x/net to v0.50.0-sec.3 #1352
OCPBUGS-109390: secrets and configmap revisions count gathering #1342
OCPBUGS-100248: Fix indentation bug on livenessProbe #1333
OCPBUGS-99015: update HyperShift deployment manifest #1323
OCPBUGS-91985: fall back to kube-system/global-pull-secret for Insights token #1310
OCPBUGS-87191: extractro controller #1300
OCPBUGS-86805: add config option to disable runtime extractor #1295
OCPBUGS-80818: Bump google.golang.org/grpc to v1.79.3 #1285
OCPBUGS-81573: kubeletconfig gatherer #1266
OCPBUGS-79534: [release-4.21] Add OpenTelemetry CR Gatherer #1258
OCPBUGS-76960: Extends the time for the extractor liveness probe #1233
OCPBUGS-74479: set Progressing condition on cluster update #1217
OCPBUGS-74233: [bugfix] The ConfigMap value for StoragePath is ignored on basic routine #1214
Full changelog

insights-runtime-exporter, insights-runtime-extractor

Updating ose-insights-runtime-extractor-container image to be consistent with ART for 4.21 #78
Updating ose-insights-runtime-exporter-container image to be consistent with ART for 4.21 #77
Updating ose-insights-runtime-exporter-container image to be consistent with ART for 4.21 #75
Updating ose-insights-runtime-exporter-container image to be consistent with ART for 4.21 #71
Updating ose-insights-runtime-extractor-container image to be consistent with ART for 4.21 #72
Revert “Bump Go to 1.25” #73
Bump Go to 1.25 #70
OCPBUGS-77491: remove dnf cache from the container images #64
Fix EAP 8.1 e2e test #65
Full changelog

ironic

OCPBUGS-115166: ZTP deployment failed on an iDRAC10 cluster #919
OCPBUGS-105861: update ironic pin to include CVE-2026-54423 fix (release-4.21) #890
OCPBUGS-88473: Update openstack-ironic commit hash in requirements.cachito that addresses CVE-2026-43003 #885
OCPBUGS-97991: Update openstack-ironic commit hash for CVE-2026-44918 #876
OCPBUGS-90554: [4.21] Fix parallel power concurrency #856
OCPBUGS-82294, OCPBUGS-84370: Update sushy and Ironic to resolve Cisco vMedia Insert and BIOS Settings update issues. #829
OCPBUGS-84853: Bump pyasn to 0.5.1-5 #823
OCPBUGS-82298: Bump sushy hash to include Supermicro ARS-111GL-NHR fix #840
ART-14497: Fix ART builds with -minimal #809
OCPBUGS-76934: Bump keystonemiddleware version to 10.9.0-0.20260216145500.557d173 for CVE-2026-22797 fix #791
OCPBUGS-76474: Update requirements.cachito for 4.21 with heartbeat inspection fix commit #785
OCPBUGS-76282: Update ironic hash #780
OCPBUGS-74603: fix for minimal builds #774
OCPBUGS-74428: Bump eventlet version to latest bugfix #771
OCPBUGS-70156: Set the tls cacert path to writable mount when the IRONIC_CACERT_FILE is unset #753
Full changelog

ironic-agent

OCPBUGS-100051: Bump ironic-python-agent pinned commit for CVE-2026-66138 #296
OCPBUGS-88473: Update commit SHA in requirements.cachito to address CVE-2026-43003 #298
OCPBUGS-95062: Replace individual package removal with a single rpm -e loop #283
OCPBUGS-95062: Replace dnf remove with rpm -e to prevent dependency removal #271
OCPBUGS-74603: fixes for minimal builds #241
Full changelog

ironic-machine-os-downloader

OCPBUGS-74204: Export TMPDIR to be available to child processes #112
Full changelog

keepalived-ipfailover

OCPBUGS-99781: Reinstall tzdata if /usr/share/zoneinfo is missing #248
OCPBUGS-78048: openshift-enterprise-base: remove subscription-manager, dbus, systemd #226
Full changelog

kube-metrics-server

NO-ISSUE: synchronize OWNERS from main branch [release-4.21] #82
OCPBUGS-80716: Bump google.golang.org/grpc to v1.79.3 #61
Full changelog

kube-rbac-proxy

OCPBUGS-127955: Replace golang.org/x/net with sustaining_fork version to resolve CVE-2026-39821 (release-4.21) #166
Full changelog

kube-state-metrics

OCPBUGS-130778: backport kube-state-metrics 2.18 memory leak fix #199
OCPBUGS-104127: Use patched x/net fork v0.50.0-sec.4 #167
NO-ISSUE: synchronize OWNERS from main branch [release-4.21] #188
OCPBUGS-99400: fix CronJob timezone panic and embed tzdata in kube-state-metrics #151
Fix for OCPBUGS-81988: CVE-2026-34986 bump github.com/go-jose/go-jose #143
OCPBUGS-80823: Bump google.golang.org/grpc to v1.79.3 #138
OCPBUGS-71205: fix: only close existing channels #127
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-104141: Use patched x/net fork v0.50.0-sec.4 #97
OCPBUGS-76994: [release-4.21] Sync Upstream 2026-01-27 #61
Full changelog

kubevirt-csi-driver

OCPBUGS-80717: Bump google.golang.org/grpc to v1.79.3 #98
OCPBUGS-79038: Add annotation-based fallback for infra VM node ID resolution #83
Full changelog

machine-api-operator

OCPBUGS-130594: fix race in VAP MachineSet e2e test cleanup #1578
OCPBUGS-129659: [release-4.21] Reduce vCenter API load in the vSphere machine controller #1576
OCPBUGS-128567: vsphere - Cache REST API sessions to prevent excessive vCenter logouts #1567
SPLAT-2866: Added multi vCenter Day 2 Support #1554
OCPBUGS-127563: Add opt-in kube-rbac-proxy sidecar for pprof endpoint (AWS) #1561
OCPBUGS-104125: replace golang.org/x/net with openshift-sustaining/net@v0.50.0-sec.4 #1542
OCPBUGS-86493: Populate status label selector for scale subresource #1501
OCPBUGS-77943: Remove cluster-api-provider-libvirt references #1473
Full changelog

machine-config-operator

OCPBUGS-132861: Split wait-for-ipsec-connect into two services to avoid ipsec restart #6672
OCPBUGS-127129: Replace wildcard permissions with explicit verbs in MachineConfigServer ClusterRole #6570
OCPBUGS-129667: Boot image controller skips MachineSets that don’t match any failure domain #6642
OCPBUGS-128598: wrong early exit during kubelet MCs regeneration #6599
OCPBUGS-127254: Correctly handle MC deletion in image mode when no new build is required #6575
OCPBUGS-104144: Fix CVE-2026-33814 by adding patch for golang.org/x/net package #6504
OCPBUGS-123140: limit ContainerRuntimeConfig status condition to 3 #6539
OCPBUGS-120453: Update message for MachineOSBuildFailed condition #6493
OCPBUGS-116929: Update AMI Whitelist #6486
OCPBUGS-112469: Fix SHA idempotency test in nmstate-configuration.sh #6430
OCPBUGS-114391: Use kubernetes scheme in drain controller event recorder #6457
OCPBUGS-109656: Fix duplicate template error #6405
OCPBUGS-105303: Use providerSpec.Template in vSphere machineset reconciliation #6381
OCPBUGS-105214: Update AMI Whitelist #6376
OCPBUGS-93806: move cleanUpDuplicatedMC to avoid double reboot on first updated Master node #6241
OCPBUGS-97905: Inject proxy into MCC deployment #6276
OCPBUGS-88510: fix: update arbiter crio config #6189
[release:4.21] OCPBUGS-89234: In OCB to check when a image is removed the old build is triggered again and the MC should start updating directly and no new MOSB should be triggred #6196
OCPBUGS-95588: Remove sensitive ControllerConfig logging #6257
OCPBUGS-91971: Make vsphere template updates atomic #6229
OCPBUGS-94108: Fix kubelet certificate wait loop in criometricsproxy.yaml #6248
OCPBUGS-96153: Update AMI Whitelist #6261
OCPBUGS-93937: Bootstrap MCS logging entire ignition #6244
OCPBUGS-91734: Replace wildcard permissions with explicit verbs and resources in MCC ClusterRole #6208
OCPBUGS-89243: Process rebuild annotation on machine-os-builder restart #6197
OCPBUGS-88709: Update custom containerfile OCB test to work in a disconnected environment #6193
OCPBUGS-88340: vSphere boot image hot loop detection is non-functional due to stable template names #6180
OCPBUGS-89340: Remove skopeo-install script #6202
OCPBUGS-88334: Skip chrony-wait on first node join #6178
OCPBUGS-88335: daemon: don’t pull/extract extensions for all OS updates #6179
OCPBUGS-86998: configure-ovs: copy lldp mode to br-ex port #6134
OCPBUGS-87008: Stabilize ocl 4.21 #6138
OCPBUGS-86979: Update AMI Whitelist #6129
OCPBUGS-86576: Verify extension packages are installed #6090
OCPBUGS-84481: MCS fallback to latest v3 #5883
OCPBUGS-86216: Fix re-cordon detection #6066
OCPBUGS-86232: Apply password only if changes exist #6068
OCPBUGS-86037: use --delete-if-present for karg removal #6058
OCPBUGS-85645: Add terminationMessagePolicy to build pod containers #6045
OCPBUGS-85386: Fix CVE-2026-34986 #6025
OCPBUGS-85286: Fix Admin Ack message for azure/vsphere clusters upgrading to 4.22 #6017
OCPBUGS-85126: Fix units rollback if update failure #6008
OCPBUGS-84941: Fix ssh and password rollbacks #5987
OCPBUGS-84970: Fix encapsulated IGN version #5996
OCPBUGS-84878: Update AMI Whitelist #5915
OCPBUGS-84253: improve JSON unmarshalling for secret decoding #5877
OCPBUGS-83874: Allow enablement of systemd units with existing files #5869
OCPBUGS-83708: Update AMI Whitelist #5857
OCPBUGS-83390: Use HA leader election defaults for MCO on SNO #5838
OCPBUGS-81711: When adding new nodes, MCD executes commands after setting the nodes’ state as Done #5836
OCPBUGS-79482: Skip boot image updates until cluster is stable #5804
OCPBUGS-79426: Update AMI Whitelist #5798
OCPBUGS-79372: set default-timeout-stop to 200s globally #5793
OCPBUGS-78800: Re-order logger setting to eliminate race condition #5779
OCPBUGS-78528: Fix e2e iri tests #5759
OCPBUGS-78201: kubelet: Less aggressive low memory reservation #5756
OCPBUGS-77833: Update AMI Whitelist #5743
OCPBUGS-77689: Create admin-ack gates for azure/vsphere clusters upgrading to 4.22 #5735
OCPBUGS-77577: Fix failure domain matching during vsphere boot image updates #5727
OCPBUGS-77534: Update AMI Whitelist #5722
OCPBUGS-77354: Clean up vsphere login error logging #5705
OCPBUGS-76555: Remove MCD liveness probe #5651
OCPBUGS-77072: mcd_config_drift not working properly #5675
OCPBUGS-76823: reduce MCO image size #5657
OCPBUGS-76833: Machine-config controller should not log about non-existent pull-secret changes #5659
OCPBUGS-73805: Prevent unnecessary systemd unit disable #5648
MCO-2017: Backport OSImageStreams to 4.21 #5515
OCPBUGS-76356: crio: disable short_name_mode until we introduce ctrcfg api for it #5636
OCPBUGS-76359: Update AMI script and list #5639
OCPBUGS-76271: machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] #5624
AGENT-1431: Backport InternalReleaseImage support #5610
OCPBUGS-74145: enable nodeip-configuration for platform external #5581
OCPBUGS-74542: Stale operator metrics Service and ServiceMonitor resources need to be deleted #5600
OCPBUGS-74431: CVE-2025-58183 ose-machine-config-operator-container: Unbounded allocation when parsing GNU sparse map [openshift-4.21] #5596
OCPBUGS-73819: Set NodeDegraded MCN condition when node state annotation is set to Degraded #5554
OCPBUGS-74103: Fix up bootstrap-e2e #5568
OCPBUGS-73872: CPMS boot image config should not override standard MachineSet configuration #5559
OCPBUGS-74102: Fixes the issue in the test TestKubeletConfigMaxPods when AutoNodeSizing is enabled by default #5567
OCPBUGS-71196: Enable existing units without content #5561
OCPBUGS-73344: Fix timeout during configMap cleanup #5544
OCPBUGS-72398: Move operator metrics into the controller #5536
OCPNODE-3973: Default CPU/Memory changes to Workers - AutoSizingReserved #5530
OCPBUGS-69878: clusteroperator/machine-config blips Degraded=True in CI jobs #5510
OCPBUGS-69965: Skip boot image updates if arch annotation is not found #5513
OCPBUGS-68377: MCO degraded when an empty pull-secret is configured #5499
OCPBUGS-68403: MCP is not correctly degraded when a pivotError happens #5502
OCPBUGS-67318: Revert “Default Enablement of Auto Sizing Reserved in OpenShift 4.21” #5493
Full changelog

machine-image-customization-controller

OCPBUGS-104119: Replace golang.org/x/net with openshift-sustaining/net v0.50.0-sec.4 for CVE-2026-33814 #195
OCPBUGS-78536: Return error when network data Secret lacks nmstate key #171
OCPBUGS-77031: Add IPA messages for console and SSH login #163
OCPBUGS-77490: Clean up dnf cache to reduce container image size #164
Full changelog

machine-os-images

OCPBUGS-87873: Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs #97
OCPBUGS-85478: Force rebuild for OCP 4.21 #93
OCPBUGS-85478: Force rebuild for OCP 4.21 #89
Full changelog

monitoring-plugin

OU-1589: [release-4.21] sanitize linkified URLs in alert annotations #1381
OCPBUGS-130566: [release-4.21] escape regex variable values in regex matcher contexts #1347
OU-1392: [release-4.21] fix: parse datetime ranges from the specified format rather than browser specific apis #1350
OCPBUGS-118236: [release-4.21] Bump fast-uri to fix CVE-2026-84292 #1333
OU-1528: [release-4.21] Optimize namespace changes in Alerts #1311
NO-JIRA: [release-4.21] Sanitize alert runbook URLs #1296
Fix OCPBUGS-104124: CVE-2026-33814 Replace golang.org/x/net with the patched github.com/openshift-sustaining/net@v0.50.0-sec.4 fork to remediate CVE-2026-33814 #1201
OCPBUGS-98789: [release-4.21] replace outdated react-linkify dependency #1149
OCPBUGS-98425: fix for CVE-2026-59869 #1136
Fix for OCPBUGS-89702: CVE-2026-12143 #1090
NO-JIRA: [release-4.21] - e2e monitoring stabilization #919
OCPBUGS-99028: Fix CVE-2026-49978 - bump DOMPurify to >= 3.4.7 #1086
OU-1240: Makefile and package.json to enable test-frontend-ci #1095
OCPBUGS-99283: graph redirect query parameter #1072
OU-651: Fix AlertRules page to display user defined loki alerts #1060
Fix for OCPBUGS-91631: CVE-2026-45736 #1024
OU-1396: [release-4.21] fix: use replace to set variables to avoid navigation trap #1033
NO-JIRA: fix incidents unit test #1037
Fix for OCPBUGS-94011: CVE-2026-13676 #1029
OCPBUGS-87088: [release-4.21] fast-uri: URI authority bypass due to improper delimiter handling #973
OCPBUGS-88396: CVE-2026-44487 bump axios to 1.16.0 #999
OCPBUGS-84290: bump follow-redirects to 1.16.0 #987
OCPBUGS-84828, OCPBUGS-84991, OCPBUGS-85007, OCPBUGS-85037: Update Axios to v1.15.2 #982
OCPBUGS-79460: immutable bump: fix for CVE-2026-29063 [4.21] #947
OU-1368: reset queries when namespace changes in dev perspective #940
OU-1367: prevent namespace and project desync #937
NO-JIRA: release-4.21 e2e-monitoring and e2e-coo working #904
OCPBUGS-83494: [release-4.21] feat: re enable dev console views #856
OCPBUGS-83304: [release-4.21] openshift4/ose-monitoring-plugin-rhel9: Axios: Remote Code Execution via Prototype Pollution escalation #890
OCPBUGS-82302: [release-4.21] fix: re encode params when redirecting from graph to query-browser #871
OCPBUGS-78358: fix for CVE-2025-69873 #845
NO-JIRA: [release-4.21] e2e-monitoring fixing loop on legacy dashboard #828
OCPBUGS-77227: [openshift-4.21] CVE-2026-25639 openshift4/ose-monitoring-plugin-rhel9:Axios affected by Denial of Service via proto Key in mergeConfig #795
OU-1062: [release-4.21] feat: mark alert menu active for incidents tab #761
NO-JIRA: [release-4.21] simplify frontend build in Dockerfile.art #808
OCPBUGS-74909: fix: update vulnerable dependencies #751
NO-JIRA: [release-4.21] fix: remove unnecessary package.lock #729
OCPBUGS-71223: fix: update qs vulnerable dependency #718
OU-1145: remove random multiplication #703
NO-JIRA: [release-4.21] automation - dev user scenarios fixes with namespace level changes #698
OCPBUGS-67297: [release-4.21] fix: upgrade node-forge vulnerable dependency #685
NO-JIRA: [release-4.21] - automation - monitoring stabilization presubmit #687
OU-1130: Add missing commits to 4.21 #682
Full changelog

multus-admission-controller

OCPBUGS-104135: bump golang.org/x/net to v0.50.0-sec.3 to fix CVE-2026-33814 #131
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-104143: [release-4.21] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #354
OCPBUGS-120763: [Release 4.21] Cherry-pick fix for the issue of stripping delegate datastore config on CNI DEL, leaking IPAM addresses #351
OCPBUGS-80831: bump grpc to 1.79.3 to address CVE-2026-33186 #310
OCPBUGS-82064: Bump CNI version to 1.1.0 #284
Full changelog

multus-networkpolicy

OCPBUGS-104136: [release-4.21] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #125
OCPBUGS-77489: Clean up dnf cache #100
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-104139: Fix CVE-2026-33814 by adding patch for golang.org/x/net package #423
Full changelog

must-gather

OCPBUGS-85050: Collect object size with the object count #542
Full changelog

network-metrics-daemon

OCPBUGS-104121: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.3 to address CVE-2026-33814 #150
Full changelog

networking-console-plugin

maintenance: Bump the npm group with 32 updates #639
OCPNETUI-181: migrate to @kubevirt-ui-ext/kubevirt-api #629
maintenance: Bump the npm group with 24 updates #621
OCPNETUI-186: Sync Dockerfile with Dockerfile.art #617
maintenance: Bump the npm group with 20 updates #597
OCPNETUI-156: dependency cleanup #592
OCPNETUI-156: reassign dev and prod dependencies #585
maintenance: Bump the npm group with 23 updates #576
maintenance: Bump the npm group across 1 directory with 24 updates #571
OCPNETUI-156: Align shared modules with Console #565
maintenance: Bump the npm group with 15 updates #548
maintenance: Bump the npm group across 1 directory with 20 updates #536
maintenance: Bump the npm group with 232 updates #498
OCPNETUI-82: Lower Dockerfile base image versions #518
OCPBUGS-85606: Fix React error on MultiNetworkPolicies page #484
OCPBUGS-98790: Updating linkify-it to 5.0.2 to fix CVE-2026-48801 #463
OCPBUGS-74099: fixed translations of pod column titles #435
OCPBUGS-92375: Updated doc links based on release #439
OCPBUGS-88313: Trim subnet input in UDN creation form #430
OCPBUGS-81620: Update lodash to 4.18.1 for CVE-2026-4800 #372
OCPBUGS-83388: Fix CVE-2026-34043 in serialize-javascript #369
OCPBUGS-82161: Migrate to npm #359
OCPBUGS-66283, OCPBUGS-67252, OCPBUGS-70285, OCPBUGS-74473: Fix CVEs via upgrading yarn.lock #346
CNV-59877: Fix permissions request for NADs #353
OCPBUGS-77887: Clean up cruft in /var/cache/dnf #361
OCPBUGS-77225: Fix NAD creation using default namespace instead of selected one #349
CNV-77540: fix Enable MultiNetworkPolicies lead to invalid URL #341
CNV-74687: Fixing the title and redirect when deleting a vm network #340
CNV-76879: Allow passing the physical network name via URL parameter in the VM network wizard #332
CNV-75831: list all NetworkPolicies in “All projects” #324
OCPBUGS-73790: remove whitelist for allowlist #323
CNV-76211: Remove deprecated badge from localnet #322
CNV-76277: Fix name generator with unprofessional names #316
CNV-72230: fix networking links #310
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

nutanix-cloud-controller-manager

OCPBUGS-104126: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.43.0-sec.4 to address CVE-2026-33814 #74
Full changelog

oauth-apiserver

OCPBUGS-104146: Replace golang.org/x/net with github.com/openshift-sustaining/net v0.50.0-sec.4 #221
NO-JIRA: (chore): update OWNERS file #167
Full changelog

oauth-proxy

OCPBUGS-112097: bugfix: rewrite open redirect strings to ‘/’ #381
OCPBUGS-74131: test/e2e - do not use ambiguous container image short names #344
Full changelog

oauth-server

OCPBUGS-104169: Use patched x/net fork v0.50.0-sec.4 #284
OCPBUGS-87078: bugfix: default to english when Accept-Language header contains more than 1000 underscores #269
OCPBUGS-81816: Bump github.com/go-jose/go-jose/v3 from v3.0.3 to v3.0.5 #234
OCPBUGS-77454: groupmapper: avoid mutating original group users slice when removing user #213
Full changelog

oc-mirror

OCPBUGS-129394: v1 accept catalog root entries and relative symlink targets #1575
OCPBUGS-104022: Use patched x/net fork v0.50.0-sec.4 #1555
OCPBUGS-105785: fix for CVE-2026-39829 #1503
Fix for OCPBUGS-81971: CVE-2026-34986 github.com/go-jose/go-jose/v4 #1426
OCPBUGS-82546: Only print catalog rebuild message if there are catalogs to rebuild #1388
OCPBUGS-82543: Fix printing collection messages with 0 collection items #1387
OCPBUGS-81743: Remove status field from CatalogSource, ClusterCatalog… #1383
CLID-549, OCPBUGS-78458: Update Dockerfile.tests to run Go integration tests #1371
OCPBUGS-77222: Fix registriesd “unknown userid” failure for arbitrary UIDs #1358
OCPBUGS-76126: Fix reg config detection for explicit false values #1349
OCPBUGS-74981: fix conversion issue for catalog #1346
OCPBUGS-74577: fix duplicated channel bug in filtered catalogs #1345
Full changelog

olm-catalogd, olm-operator-controller

OCPBUGS-128986: [release-4.21] clean up orphaned catalog cache temp dirs #815
OCPBUGS-104166: [release-4.21] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #801
OCPBUGS-100383: Fix cache path to avoid /var/cache/dnf conflict #785
OCPBUGS-98090: fix(test): use in-cluster catalog for preflight permission checks [release-4.21] #778
OCPBUGS-99756: increase catalog HTTP client timeout from 10s to 5m #774
OCPBUGS-86842: [release-4.21] catalogd: clean up orphaned temp dirs in catalog storage #742
OCPBUGS-81993, OCPBUGS-81994: Bump github.com/go-jose/go-jose/v4 to 4.1.4 #718
OCPBUGS-80839, OCPBUGS-80840: Bump google.golang.org/grpc to v1.79.3 #721
OCPBUGS-79059: update OCP-75441 to support multi-arch[release-4.21] #671
OCPBUGS-74967: [release-4.21] enhance qe cases to make it more stable #626
OCPBUGS-74633: config watchnamespace api cases #620
OCPBUGS-74562: enhance ocp-79770 #617
OCPBUGS-72576: update 83026 to specify the clustercatalog #591
: OCPBUGS-72574: [release-4.21]: update 80458’s timeout to 180s #585
Full changelog

openshift-apiserver

OCPBUGS-82918: Address CVE-2026-35469 #646
Full changelog

openshift-controller-manager

OCPBUGS-104165: Use patched x/net fork v0.50.0-sec.4 #460
Full changelog

openshift-state-metrics

NO-ISSUE: synchronize OWNERS from main branch #154
Full changelog

openstack-cluster-api-controllers

UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.13 into release-4.21 #417
UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.13 into release-4.21 #394
Full changelog

openstack-machine-api-provider

OCPBUGS-97825: Revendor CAPO #176
OCPBUGS-76789: Fix make test #156
OCPBUGS-69644: Don’t record event for every reconcile #146
Full changelog

openstack-resource-controller

OCPBUGS-104030: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.43.0-sec.3 to address CVE-2026-33814 #44
UPSTREAM-SYNC: Bump envtest version #47
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-104147, OCPBUGS-104152: CVE-2026-33814: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.3 #1363
OCPBUGS-95444, OCPBUGS-95447: bumping containerd to v1.7.33 #1354
OCPBUGS-81995, OCPBUGS-81996, OCPBUGS-81997: Bump github.com/go-jose/go-jose/v4 to v4.1.4 #1294
OCPBUGS-80847, OCPBUGS-80848, OCPBUGS-80849: Bump google.golang.org/grpc to v1.79.3 for CVE-2026-33186[Release-4.21] #1289
OCPBUGS-79398: Fix SA restore resourceVersion conflict error #1266
OCPBUGS-79400: Fix nil pointer dereference in sortUnpackJobs when sorting non-failed jobs #1265
OCPBUGS-79380: enhance case to make it pass per test bundle change #1263
OCPBUGS-78558: Re-Apply Fix admin context race condition in parallel tests #1261
OCPBUGS-77712: Update NetworkPolicy egress to support HyperShift custom API ports #1246
OCPBUGS-77067: Remove the collect-profiles info from the microshift kustomization file #1234
OCPBUGS-76325: [release-4.21]remove qe case of testing collect-profiles #1222
OCPBUGS-76266: Remove the collect-profiles job #1220
OCPBUGS-72580: [release-4.21] OCPQE-31297: enhance ocp and microshift olm case #1189
Full changelog

operator-marketplace

OCPBUGS-77580: Update NetworkPolicy egress to support HyperShift custom API ports #729
OCPBUGS-73881: Increase default catalog polling interval to 4h (240m) #705
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-133314: NO-JIRA: Branch Sync release-5.0 to release-4.21 [10-16-2026] #3550
NO-JIRA: REVERT-ME: Precreate CDN gateway topology before NAD/UDN sync #3519
OCPBUGS-130569: Add pperiyasamy to OWNERS for release-4.21 branch #3528
OCPBUGS-128910: NO-JIRA: Branch Sync release-5.0 to release-4.21 [10-01-2026] #3504
NO-JIRA: Branch Sync release-5.0 to release-4.21 [09-28-2026] #3477
OCPBUGS-128245: Branch Sync release-5.0 to release-4.21 [09-18-2026] #3462
OCPBUGS-112513: NO-JIRA: Branch Sync release-4.22 to release-4.21 [08-21-2026] #3413
OCPBUGS-99165: Branch Sync release-4.22 to release-4.21 [08-13-2026] #3393
OCPBUGS-105516, OCPBUGS-105605: Branch Sync release-4.22 to release-4.21 [08-10-2026] #3374
OCPBUGS-90029, OCPBUGS-90470, OCPBUGS-92544, OCPBUGS-93018: Branch Sync release-4.22 to release-4.21 [08-06-2026] #3365
OCPBUGS-95075: Branch Sync release-4.22 to release-4.21 [07-29-2026] #3337
OCPBUGS-99276, OCPBUGS-99277: Branch Sync release-4.22 to release-4.21 [07-20-2026] #3306
OCPBUGS-99165: Branch Sync release-4.22 to release-4.21 [07-15-2026] #3300
OCPBUGS-98398: Branch Sync release-4.22 to release-4.21 [06-10-2026] #3243
OCPBUGS-84923: Branch Sync release-4.22 to release-4.21 [04-27-2026] #3160
OCPBUGS-81634, OCPBUGS-83814: Branch Sync release-4.22 to release-4.21 [04-16-2026] #3145
OCPBUGS-83566: Branch Sync release-4.22 to release-4.21 [03-25-2026] #3087
OCPBUGS-81475: node: fix serviceUpdateNotNeeded nil pointer comparison #3098
OCPBUGS-77257, OCPBUGS-78094: Branch Sync release-4.22 to release-4.21 [03-23-2026] #3080
OCPBUGS-78771: Branch Sync release-4.22 to release-4.21 [03-11-2026] #3050
OCPBUGS-76472: OCPBUGS-72532: Branch Sync release-4.22 to release-4.21 [12-19-2025] #3022
OCPBUGS-77147: Minimize ACLs by combining ipBlocks into single ACL #2995
OCPBUGS-77309: Clear stale conntrack UDP entries for nodePorts #3002
OCPBUGS-77046, OCPBUGS-77086: [release-4.21] combined backport PR for 2 escalations #2984
OCPBUGS-74267: release-4.21 fix(localnet, ipamless): Prevent LSP deletion on sync #2940
Full changelog

powervs-block-csi-driver

OCPBUGS-104161, OCPBUGS-89654, OCPBUGS-90028, OCPBUGS-90454, OCPBUGS-91231, OCPBUGS-92545, OCPBUGS-93024, OCPBUGS-93510, OCPBUGS-95008, OCPBUGS-96558: Bump golang.org dependencies #144
OCPBUGS-80852: Fix CVE-2026-33186 by bumping google.golang.org/grpc to 1.79.3 #127
OCPBUGS-82924: Fix CVE-2026-35469 by bumping github.com/moby/spdystream to v0.5.1 #121
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-104163: Mitigate CVE-2026-33814 by bumping golang.org/x/net to v0.57.0 #122
Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART for 4.21 #107
OCPBUGS-80853: Fix CVE-2026-33186 by bumping google.golang.org/grpc to v1.79.3 #106
Full changelog

powervs-cloud-controller-manager

OCPBUGS-101468, OCPBUGS-104164, OCPBUGS-91239, OCPBUGS-96559: Bump x/net to address CVEs #116
OCPBUGS-80854: bump google.golang.org/grpc to v1.79.3 to fix CVE-2026-33186 #98
Full changelog

prom-label-proxy

NO-ISSUE: synchronize OWNERS from main branch [release-4.21] #406
Full changelog

prometheus

NO-ISSUE: synchronize OWNERS from main branch #389
OCPBUGS-93729: fix for CVE-2026-42151 #357
OCPBUGS-88670: remote: validate snappy decoded length before allocation in read endpoint #331
OCPBUGS-93920: fix(tsdb): temporarily ignore Direct IO enablement errors on unsupported filesystems #340
OCPBUGS-86250: fix: TLS client cert rotation when no CA is configured #314
OCPBUGS-80855: Bump google.golang.org/grpc to v1.79.3 #309
OCPBUGS-78581: [release-4.21] chore(kubernetes): deduplicate warning logs from the API #298
Full changelog

prometheus-alertmanager

NO-JIRA: synchronize OWNERS with main #193
OCPBUGS-104155: Use github.com/openshift-sustaining/net patch to fix CVE-2026-33814 #169
OCPBUGS-98182: build(deps): bump github.com/hashicorp/memberlist to a forked version which fixes CVE-2026-14362 #158
OCPBUGS-100352: Set testdata CA expiry to 20 years from issue date (#4112) #145
OCPBUGS-99446: embed tzdata in the alertmanager binary #142
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

NO-ISSUE: synchronize OWNERS from main branch #413
OCPBUGS-104160, OCPBUGS-104188: [release-4.21] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #394
OCPBUGS-77295: backport upstream fix to reconcile resources with inconsistent status #365
OCPBUGS-74477: Validate webhookURL secret for MSTeams receiver in AlertmanagerConfig CRD #359
OCPBUGS-67943: [bot] Bump openshift/prometheus-operator to v0.87.1 #350
Full changelog

prometheus-node-exporter

OCPBUGS-104190: Use patched x/net fork v0.50.0-sec.4 #197
NO-ISSUE: synchronize OWNERS from main branch [release-4.21] #209
Full changelog

rhel-coreos, rhel-coreos-extensions

OCPBUGS-105490: NetworkManager-ovs has moved to RHCOS #1957
OCPBUGS-82523: post-process: Remove workaround for openvswitch additional group #1926
- [release-4.21] extensions: Add rhel-9.6-server-ose-4.21 #1914
NO-JIRA: [release-4.21] extensions: Fix repo name to match 4.21 #1913
COS-3946: Backport rhel-10.2 support to release-4.21 branch #1898
NO-JIRA: rhaos-pkgs-match-openshift: exclude known package mismatches #1889
NO-JIRA: Remove (commented) WASM mentions #1888
OCPBUGS-72560: package: add ose-crio-credential-provider #1880
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

rhel-coreos-10, rhel-coreos-10-extensions

OCPBUGS-82523: post-process: Remove workaround for openvswitch additional group #1926
- [release-4.21] extensions: Add rhel-9.6-server-ose-4.21 #1914
NO-JIRA: [release-4.21] extensions: Fix repo name to match 4.21 #1913
COS-3946: Backport rhel-10.2 support to release-4.21 branch #1898
NO-JIRA: rhaos-pkgs-match-openshift: exclude known package mismatches #1889
NO-JIRA: Remove (commented) WASM mentions #1888
OCPBUGS-72560: package: add ose-crio-credential-provider #1880
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

route-controller-manager

OCPBUGS-104024: Fix CVE-2026-33814 by adding patch for golang.org/x/net package #107
OCPBUGS-80726: Bump google.golang.org/grpc to v1.79.3 #82
OCPBUGS-76641: filter ingress namespace on UnmanagedRoutes metric #73
Full changelog

telemeter

OCPBUGS-80868: Bump google.golang.org/grpc to v1.79.3 #589
OCPBUGS-81817: [release-1.21] Fix CVE-2026-34986 #593
Full changelog

tests

OCPBUGS-130853: stage the creation of test pods to minimize etcd impact #31745
OCPBUGS-69943: feat: render OTE JSON results in spyglass #30633
OCPBUGS-120726: fix: skip MCPs with non-ready nodes during MCN property validation #31524
OCPBUGS-115200: fix: adjusting DaemonSet test to dynamically compute expected pod count #31523
OCPBUGS-115282: Raise status polling timeout and write bound #31587
OCPBUGS-114439: Fix probe termination test to use pod status instead of kubelet event text #31569
OCPBUGS-100439: retry GetVotingMemberNames on transient etcd client fails #31507
OCPBUGS-99671: Backport node_e2e test migrations #31426
OCPBUGS-99300: admit and extract non-payload 4.21 #31386
OCPBUGS-90523: Use AdminPolicyBasedExternalRoute CR for external gateway test #31316
OCPBUGS-94114: support Parents field on origin test suites #31353
OCPBUGS-88564: fix CUDN status condition tests for NetworkAllocationSucceeded condition #31300
OCPBUGS-84252: Move imagepolicy test to disruptive long-running suite #31061
OCPBUGS-78330, OCPBUGS-82146, OCPBUGS-85550, OCPBUGS-88295, OCPBUGS-88297, OCPBUGS-88320, OCPBUGS-88322, OCPBUGS-88324: Backport noOLM Gateway API test coverage and upgrade tests #31232
OCPBUGS-88328: Fix Pod.Create() to use –local flag for template proc… #31269
OCPBUGS-85149: Enable Gateway API tests on vSphere and baremetal #31139
OCPQE-32041: bump(k8s): move docker types into container package #31169
OCPBUGS-74373: Remove restriction of unmanaged x-k8s.io #30718
OCPBUGS-84655: fix openshift/network/third-party suite selecting zero tests #31091
OCPBUGS-84978: Skip image-registry operator tests for Libvirt platform in upgrade jobs. #31123
OCPBUGS-84947: test: add monitortest to detect pods stuck in Pending state #31117
OCPBUGS-84947: Add [Late] test to collect CRI-O goroutine dumps via SIGUSR1 #31118
OCPBUGS-81638: Manual cherry-pick node swap feature testcases to 4.21 #30973
OCPBUGS-82064: Assert CNI version greater than equal to 1.0.0 #30977
OCPBUGS-81638: Add openshift/disruptive-longrunning testsuite in release-4.21 branch #30976
OCPBUGS-78780: changed http to https for three places to reduce test false positives and false negatives #30902
OCPBUGS-79365: Verify etc pod should start with oom_score_adj as system-node-critical #30916
OCPBUGS-78485: run resource request/limit check early #30879
OCPBUGS-78192: Exclude disruption during NoExecuteTaintManager serial tests #30857
OCPBUGS-78064: Update optimized builds test to use rpm -qa instead of dnf #30856
OCPBUGS-78064: Allow test to tolerate running on minimal images #30852
OCPBUGS-77823: add the missing namespace from managed openshift #30838
OCPBUGS-77826: Remove exception for monitoring OLM Progression condition #30839
OCPBUGS-77097: Add test for CPMS OnDelete strategy with full master replacement #30802
: OCPBUGS-76856:cert tests: mark TLS registry test as informing #30779
OCPBUGS-76529: Fix flakiness in MutableCSINodeAllocatableCount test #30772
OCPBUGS-76955: co/kube-storage-version-migrator reports Available=False in a non-upgrade job #30740
OCPBUGS-75513: adjust olm test to pass on a degraded run #30749
OCPBUGS-75513: update test logic for degraded cluster run #30748
OCPBUGS-74499: Update MCN tests to better handle condition transitions through the “Unknown” state #30729
OCPBUGS-74503: VsphereConfigurationTestsRollOutTooOften event matcher should use broader regex #30730
OCPBUGS-74372: Add/RemoveSigtermProtection event matcher for SigstoreImageVerification test #30723
OCPBUGS-74303: Add filter for openshift-copy-to-node ns #30715
OCPBUGS-74094: Ignore repeated TopologyAwareHintsDisabled events #30699
OCPBUGS-73808: update watch request limits for cluster-autoscaler-operator #30691
OCPBUGS-67016: Isolate and reduce parallelism for OrderedNamespaceDeletion tests. #30661
OCPBUGS-70143: Fix race condition in external binary extraction #30641
OCPBUGS-72414: change iperf2 test to serial from parallel #30673
OCPBUGS-72414, OCPBUGS-72415: only run Netpol two at a time #30667
OCPBUGS-72386: Add more exceptions for CO/image-registry’s Degraded=True #30663
OCPBUGS-71229: Unrevert tls tests with fixes #30660
OCPBUGS-69816: BeforeEach was indirectly called in DetermineReleasePayloadImage #30622
OCPBUGS-69903: add test for MutableCSINodeAllocatableCount feature #30630
OCPBUGS-69389: exculude Flaky tests for openshift/csi test suite #30613
Full changelog

thanos

OCPBUGS-129054: Bump github.com/klauspost/compress to fix CVE-2026-63209 #229
OCPBUGS-84492: Revert “OCPBUGS-80870: CVE-2026-33186 openshift4/ose-thanos-rhel9: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation [openshift-4.21]” #180
OCPBUGS-80870: CVE-2026-33186 openshift4/ose-thanos-rhel9: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation [openshift-4.21] #174
Full changelog

volume-data-source-validator

OCPBUGS-104198: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.50.0-sec.3 #21
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-104185: Replace golang.org/x/net with sustaining fork for CVE-2026-33814 in 4.21 #132
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-104210: Bump golang.org/x/net to github.com/openshift-sustaining/net v0.50.0-sec.4 CVE-2026-33814 [release-4.21] #127
OCPBUGS-80875: Bump google.golang.org/grpc to v1.79.3 #102
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-96573: Bump golang.org/x/net to v0.50.0-sec.4 #196
OCPBUGS-93031: Bump golang.org/x/crypto/ssh to v0.48.0-sec.1 #190
OCPBUGS-80878: Bump google.golang.org/grpc to 1.79.3 #171
Full changelog

vsphere-csi-driver-operator

OCPBUGS-104208: Bump golang.org/x/net to v0.50.0-sec.3 #353
OCPBUGS-74701: Fix update of stable-generation annotation #330
Full changelog

vsphere-problem-detector

OCPBUGS-127130: Fixed GetVCenter to handle removed FDs better #241
OCPBUGS-104206: Bump golang.org/x/net to v0.50.0-sec.4 #230
OCPBUGS-87097: Fixed compute cluster permission logic for single fd with read-only custom resourcepool #222
OCPBUGS-74706: fix concurrent map writes #207
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Red Hat Enterprise Linux CoreOS (`rhel-coreos`)

Package List

cri-o-1.34.15-9.rhaos4.21.git0903fe5.el9
kernel-5.14.0-570.152.1.el9_6
openshift-kubelet-4.21.0-202610221616.p2.g601ff80.assembly.stream.el9
systemd-252-51.el9_6.6

Full list (565 packages)

NetworkManager-1:1.52.0-11.el9_6.1
NetworkManager-cloud-setup-1:1.52.0-11.el9_6.1
NetworkManager-libnm-1:1.52.0-11.el9_6.1
NetworkManager-ovs-1:1.52.0-11.el9_6.1
NetworkManager-team-1:1.52.0-11.el9_6.1
NetworkManager-tui-1:1.52.0-11.el9_6.1
WALinuxAgent-udev-2.13.1.1-1.el9_6
aardvark-dns-2:1.14.0-1.el9
acl-2.4.0-0.el9_6.1
adcli-0.9.2-1.el9
afterburn-5.9.0-1.el9_6
afterburn-dracut-5.9.0-1.el9_6
alternatives-1.24-2.el9
attr-2.5.1-3.el9
audit-3.1.5-4.el9
audit-libs-3.1.5-4.el9
authselect-1.2.6-3.el9
authselect-libs-1.2.6-3.el9
avahi-libs-0.8-22.el9_6.1
basesystem-11-13.el9
bash-5.1.8-9.el9
bash-completion-1:2.11-5.el9
bind-libs-32:9.16.23-31.el9_6.4
bind-license-32:9.16.23-31.el9_6.4
bind-utils-32:9.16.23-31.el9_6.4
binutils-2.35.2-63.el9_6.1
binutils-gold-2.35.2-63.el9_6.1
bootc-1.1.6-6.el9_6
bootupd-0.2.35-1.el9_6
bsdtar-3.5.3-7.el9_6.2
bubblewrap-0.4.1-8.el9_6.1
bzip2-1.0.8-10.el9_5
bzip2-libs-1.0.8-10.el9_5
c-ares-1.19.1-2.el9_4
ca-certificates-2026.2.92_v9.0.319-90.3.el9_6
checkpolicy-3.6-1.el9
chrony-4.6.1-1.el9
cifs-utils-7.2-0.el9_6.2
clevis-21-208.el9
clevis-dracut-21-208.el9
clevis-luks-21-208.el9
clevis-systemd-21-208.el9
cloud-utils-growpart-0.33-1.el9
composefs-1.0.8-1.el9
composefs-libs-1.0.8-1.el9
conmon-3:2.1.12-1.el9_6.1
conmon-rs-0.6.6-0.rhaos4.18.el9.1
console-login-helper-messages-0.21.3-1.el9
console-login-helper-messages-issuegen-0.21.3-1.el9
console-login-helper-messages-profile-0.21.3-1.el9
container-selinux-4:2.247.0-1.el9_6
containernetworking-plugins-1:1.6.2-3.el9_6.1
containers-common-2:1-117.el9_6
coreos-installer-0.24.0-6.el9_6
coreos-installer-bootinfra-0.24.0-6.el9_6
coreutils-8.32-39.el9
coreutils-common-8.32-39.el9
cpio-2.13-16.el9
cracklib-2.9.6-27.el9
cracklib-dicts-2.9.6-27.el9
cri-o-1.34.15-9.rhaos4.21.git0903fe5.el9
cri-tools-1.34.0-8.el9
criu-3.19-1.3.el9_6
criu-libs-3.19-1.3.el9_6
crun-1.27-1.el9_6
crypto-policies-20250128-1.git5269e22.el9
crypto-policies-scripts-20250128-1.git5269e22.el9
cryptsetup-2.7.2-3.el9_6.1
cryptsetup-libs-2.7.2-3.el9_6.1
curl-7.76.1-31.el9_6.3
cyrus-sasl-gssapi-2.1.27-21.el9
cyrus-sasl-lib-2.1.27-21.el9
dbus-1:1.12.20-8.el9
dbus-broker-28-7.el9
dbus-common-1:1.12.20-8.el9
dbus-libs-1:1.12.20-8.el9
dbus-tools-1:1.12.20-8.el9
device-mapper-9:1.02.202-6.el9
device-mapper-event-9:1.02.202-6.el9
device-mapper-event-libs-9:1.02.202-6.el9
device-mapper-libs-9:1.02.202-6.el9
device-mapper-multipath-0.8.7-35.el9_6.3
device-mapper-multipath-libs-0.8.7-35.el9_6.3
device-mapper-persistent-data-1.1.0-1.el9
diffutils-3.7-12.el9
dmidecode-1:3.6-1.el9
dnf-4.14.0-25.el9
dnf-data-4.14.0-25.el9
dnsmasq-2.85-17.el9_6.1
dosfstools-4.2-3.el9
dracut-057-89.git20250311.el9_6.1
dracut-network-057-89.git20250311.el9_6.1
dracut-squash-057-89.git20250311.el9_6.1
e2fsprogs-1.46.5-7.el9
e2fsprogs-libs-1.46.5-7.el9
efi-filesystem-6-2.el9_0
efibootmgr-16-12.el9
efivar-libs-38-3.el9
elfutils-debuginfod-client-0.192-6.el9_6
elfutils-default-yama-scope-0.192-6.el9_6
elfutils-libelf-0.192-6.el9_6
elfutils-libs-0.192-6.el9_6
ethtool-2:6.11-1.el9
expat-2.5.0-5.el9_6.1
fcoe-utils-1.0.34-0.git14ef0d2.el9
file-5.39-16.el9
file-libs-5.39-16.el9
filesystem-3.16-5.el9
findutils-1:4.8.0-7.el9
firewalld-filesystem-1.3.4-15.el9_6.1
fstrm-0.6.1-3.el9
fuse-2.9.9-17.el9
fuse-common-3.10.2-9.el9
fuse-libs-2.9.9-17.el9
fuse-overlayfs-1.14-1.el9
fuse3-3.10.2-9.el9
fuse3-libs-3.10.2-9.el9
fwupd-2.1.6-1.el9_6
gawk-5.1.0-6.el9
gawk-all-langpacks-5.1.0-6.el9
gdbm-libs-1:1.23-1.el9
gdisk-1.0.7-5.el9
geolite2-city-20191217-6.el9
geolite2-country-20191217-6.el9
gettext-0.21-8.el9
gettext-libs-0.21-8.el9
git-core-2.47.3-1.el9_6
glib2-2.68.4-16.el9_6.8
glibc-2.34-168.el9_6.25
glibc-common-2.34-168.el9_6.25
glibc-gconv-extra-2.34-168.el9_6.25
glibc-minimal-langpack-2.34-168.el9_6.25
glusterfs-6.0-57.4.el9
glusterfs-client-xlators-6.0-57.4.el9
glusterfs-fuse-6.0-57.4.el9
glusterfs-libs-6.0-57.4.el9
gmp-1:6.2.0-13.el9
gnupg2-2.3.3-4.el9_6.1
gnutls-3.8.3-6.el9_6.5
gobject-introspection-1.68.0-11.el9
gpgme-1.15.1-6.el9
grep-3.6-5.el9
groff-base-1.22.4-10.el9
grub2-common-1:2.06-105.el9_6.2
grub2-efi-x64-1:2.06-105.el9_6.2
grub2-pc-1:2.06-105.el9_6.2
grub2-pc-modules-1:2.06-105.el9_6.2
grub2-tools-1:2.06-105.el9_6.2
grub2-tools-minimal-1:2.06-105.el9_6.2
gssproxy-0.8.4-7.el9
gzip-1.12-1.el9
hostname-3.23-6.el9
hwdata-0.348-9.18.el9
ignition-2.21.0-7.el9_6.2
ignition-grub-2.21.0-7.el9_6.2
ima-evm-utils-1.5-3.el9
info-6.7-15.el9
inih-49-6.el9
initscripts-service-10.11.8-4.el9
ipcalc-1.0.0-5.el9
iproute-6.11.0-1.el9
iproute-tc-6.11.0-1.el9
iptables-libs-1.8.10-11.el9_5
iptables-nft-1.8.10-11.el9_5
iputils-20210202-11.el9_6.3
irqbalance-2:1.9.4-2.el9_6.2
iscsi-initiator-utils-6.2.1.9-1.gita65a472.el9_6.3
iscsi-initiator-utils-iscsiuio-6.2.1.9-1.gita65a472.el9_6.3
isns-utils-libs-0.101-4.el9_6.1
jansson-2.14-1.el9
jose-14-1.el9
jq-1.6-17.el9_6.4
json-c-0.14-11.el9
json-glib-1.6.6-1.el9
kbd-2.4.0-11.el9
kbd-legacy-2.4.0-11.el9
kbd-misc-2.4.0-11.el9
kernel-5.14.0-570.152.1.el9_6
kernel-core-5.14.0-570.152.1.el9_6
kernel-modules-5.14.0-570.152.1.el9_6
kernel-modules-core-5.14.0-570.152.1.el9_6
kernel-modules-extra-5.14.0-570.152.1.el9_6
kexec-tools-2.0.29-5.el9_6.2
keyutils-1.6.3-1.el9
keyutils-libs-1.6.3-1.el9
kmod-28-10.el9
kmod-libs-28-10.el9
kpartx-0.8.7-35.el9_6.3
krb5-libs-1.21.1-8.el9_6.2
less-590-5.el9
libacl-2.4.0-0.el9_6.1
libaio-0.3.111-13.el9
libarchive-3.5.3-7.el9_6.2
libassuan-2.5.5-3.el9
libattr-2.5.1-3.el9
libbasicobjects-0.1.1-53.el9
libblkid-2.37.4-21.el9_6.1
libbpf-2:1.5.0-1.el9
libbrotli-1.0.9-7.el9_6.3
libcap-2.48-9.el9_6.1
libcap-ng-0.8.2-7.el9
libcbor-0.7.0-5.el9
libcollection-0.7.0-53.el9
libcom_err-1.46.5-7.el9
libcomps-0.1.18-1.el9
libconfig-1.7.2-9.el9
libcurl-7.76.1-31.el9_6.3
libdaemon-0.14-23.el9
libdb-5.3.28-57.el9_6
libdhash-0.5.0-53.el9
libdnf-0.69.0-13.el9
libdnf-plugin-subscription-manager-1.29.45.1-1.el9_6
libdrm-2.4.123-2.el9
libeconf-0.4.1-4.el9
libedit-3.1-38.20210216cvs.el9
libev-4.33-6.el9
libevent-2.1.12-8.el9_4
libfdisk-2.37.4-21.el9_6.1
libffi-3.4.2-8.el9
libfido2-1.13.0-2.el9
libgcc-11.5.0-5.el9_5
libgcrypt-1.10.0-11.el9_6.1
libgomp-11.5.0-5.el9_5
libgpg-error-1.42-5.el9
libibverbs-54.0-2.el9_6
libicu-67.1-10.el9_6
libidn2-2.3.0-7.el9
libini_config-1.3.1-53.el9
libipa_hbac-2.9.6-4.el9_6.5
libjcat-0.1.6-3.el9
libjose-14-1.el9
libkcapi-1.4.0-2.el9_6.1
libkcapi-hmaccalc-1.4.0-2.el9_6.1
libksba-1.5.1-7.el9
libldb-4.21.3-14.el9_6.1
libluksmeta-9-12.el9
libmaxminddb-1.5.2-4.el9
libmicrohttpd-1:0.9.72-5.el9
libmnl-1.0.4-16.el9_4
libmodulemd-2.13.0-2.el9
libmount-2.37.4-21.el9_6.1
libmspack-0.10.1-0.7.alpha.el9
libndp-1.9-1.el9
libnet-1.2-7.el9
libnetfilter_conntrack-1.0.9-1.el9
libnfnetlink-1.0.1-23.el9_5
libnfsidmap-1:2.5.4-34.el9_6.5
libnftnl-1.2.6-4.el9_4
libnghttp2-1.43.0-6.el9_6.1
libnl3-3.11.0-1.el9
libnl3-cli-3.11.0-1.el9
libnvme-1.11.1-1.el9
libpath_utils-0.2.1-53.el9
libpcap-14:1.10.0-4.el9
libpciaccess-0.16-7.el9
libpkgconf-1.7.3-10.el9
libpsl-0.21.1-5.el9
libpwquality-1.4.4-8.el9
libref_array-0.1.5-53.el9
librepo-1.14.5-2.el9
libreport-filesystem-2.15.2-6.el9
librhsm-0.0.3-9.el9
libseccomp-2.5.2-2.el9
libselinux-3.6-3.el9
libselinux-utils-3.6-3.el9
libsemanage-3.6-5.el9_6
libsepol-3.6-2.el9
libsigsegv-2.13-4.el9
libslirp-4.4.0-8.el9
libsmartcols-2.37.4-21.el9_6.1
libsmbclient-4.21.3-14.el9_6.1
libsolv-0.7.24-3.el9_6.1
libss-1.46.5-7.el9
libssh-0.10.4-15.el9_6.1
libssh-config-0.10.4-15.el9_6.1
libsss_certmap-2.9.6-4.el9_6.5
libsss_idmap-2.9.6-4.el9_6.5
libsss_nss_idmap-2.9.6-4.el9_6.5
libsss_sudo-2.9.6-4.el9_6.5
libstdc++-11.5.0-5.el9_5
libtalloc-2.4.2-1.el9
libtasn1-4.16.0-9.el9
libtdb-1.4.12-1.el9
libteam-1.31-16.el9_1
libtevent-0.16.1-1.el9
libtirpc-1.3.3-9.el9
libtool-ltdl-2.4.6-46.el9
libunistring-0.9.10-15.el9
liburing-2.5-1.el9
libusbx-1.0.30-1.el9_6
libuser-0.63-16.el9
libutempter-1.2.1-6.el9
libuuid-2.37.4-21.el9_6.1
libuv-1:1.42.0-2.el9_4
libverto-0.3.2-3.el9
libverto-libev-0.3.2-3.el9
libwbclient-4.21.3-14.el9_6.1
libxcrypt-4.4.18-3.el9
libxcrypt-compat-4.4.18-3.el9
libxml2-2.9.13-13.el9_6
libxmlb-0.3.28-1.el9_6
libxslt-1.1.34-13.el9_6.2
libyaml-0.2.5-7.el9
libzstd-1.5.5-1.el9
linux-firmware-20251111-151.8.el9_6
linux-firmware-whence-20251111-151.8.el9_6
lldpad-1.1.1-4.gitf1dd9eb.el9
lmdb-libs-0.9.29-3.el9
logrotate-3.18.0-9.el9
lsof-4.94.0-3.el9
lua-libs-5.4.4-4.el9
luksmeta-9-12.el9
lvm2-9:2.03.28-6.el9
lvm2-libs-9:2.03.28-6.el9
lz4-libs-1.9.3-5.el9
lzo-2.10-7.el9
mdadm-4.3-8.el9_6.1
microcode_ctl-4:20250211-1.20260227.1.el9_6
mokutil-2:0.6.0-4.el9
mpfr-4.1.0-7.el9
nano-5.6.1-7.el9
ncurses-6.2-10.20210508.el9_6.2
ncurses-base-6.2-10.20210508.el9_6.2
ncurses-libs-6.2-10.20210508.el9_6.2
net-tools-2.0-0.64.20160912git.el9
netavark-2:1.14.1-1.el9_6.1
nettle-3.10.1-1.el9
newt-0.52.21-11.el9
nfs-utils-1:2.5.4-34.el9_6.5
nftables-1:1.0.9-6.el9_6.1
nmap-ncat-3:7.92-3.el9
nmstate-2.2.60-1.el9_6.1
npth-1.6-8.el9
nss-altfiles-2.18.1-20.el9
numactl-libs-2.0.19-1.el9
numad-0.5-37.20150602git.el9
nvme-cli-2.11-7.el9_6
oniguruma-6.9.6-1.el9.6
open-vm-tools-12.5.0-1.el9_6.2
openldap-2.6.8-4.el9
openshift-clients-4.21.0-202610221616.p2.gd0bf7cc.assembly.stream.el9
openshift-kubelet-4.21.0-202610221616.p2.g601ff80.assembly.stream.el9
openssh-8.7p1-45.el9_6.5
openssh-clients-8.7p1-45.el9_6.5
openssh-server-8.7p1-45.el9_6.5
openssl-1:3.2.2-7.el9_6.4
openssl-fips-provider-3.0.7-11.el9_0
openssl-fips-provider-so-3.0.7-11.el9_0
openssl-libs-1:3.2.2-7.el9_6.4
openvswitch-selinux-extra-policy-1.0-39.el9fdp
openvswitch3.5-3.5.2-72.el9fdp.3
os-prober-1.77-12.el9_5
ose-aws-ecr-image-credential-provider-4.21.0-202610221616.p2.gfdc7f3f.assembly.stream.el9
ose-azure-acr-image-credential-provider-4.21.0-202610221616.p2.g53d73b1.assembly.stream.el9
ose-crio-credential-provider-4.21.0-202610221616.p2.g83d4961.assembly.stream.el9
ose-gcp-gcr-image-credential-provider-4.21.0-202610221616.p2.gf064fc7.assembly.stream.el9
ostree-2025.2-4.el9_6
ostree-grub2-2025.2-4.el9_6
ostree-libs-2025.2-4.el9_6
p11-kit-0.25.3-3.el9_5
p11-kit-trust-0.25.3-3.el9_5
pam-1.5.1-26.el9_6.1
passt-0^20250217.ga1e48a0-14.el9_6
passt-selinux-0^20250217.ga1e48a0-14.el9_6
passwd-0.80-12.el9
pciutils-3.7.0-7.el9
pciutils-libs-3.7.0-7.el9
pcre-8.44-4.el9
pcre2-10.40-6.el9_6.1
pcre2-syntax-10.40-6.el9_6.1
perl-AutoLoader-5.74-481.1.el9_6
perl-B-1.80-481.1.el9_6
perl-Carp-1.50-460.el9
perl-Class-Struct-0.66-481.1.el9_6
perl-Data-Dumper-2.174-462.el9
perl-Digest-1.19-4.el9
perl-Digest-MD5-2.58-4.el9
perl-Encode-4:3.08-462.el9
perl-Errno-1.30-481.1.el9_6
perl-Exporter-5.74-461.el9
perl-Fcntl-1.13-481.1.el9_6
perl-File-Basename-2.85-481.1.el9_6
perl-File-Path-2.18-4.el9
perl-File-Temp-1:0.231.100-4.el9
perl-File-stat-1.09-481.1.el9_6
perl-FileHandle-2.03-481.1.el9_6
perl-Getopt-Long-1:2.52-4.el9
perl-Getopt-Std-1.12-481.1.el9_6
perl-HTTP-Tiny-0.076-462.el9
perl-IO-1.43-481.1.el9_6
perl-IO-Socket-IP-0.41-5.el9
perl-IO-Socket-SSL-2.073-2.el9
perl-IPC-Open3-1.21-481.1.el9_6
perl-MIME-Base64-3.16-4.el9
perl-Mozilla-CA-20200520-6.el9
perl-NDBM_File-1.15-481.1.el9_6
perl-Net-SSLeay-1.94-1.el9
perl-POSIX-1.94-481.1.el9_6
perl-PathTools-3.78-461.el9
perl-Pod-Escapes-1:1.07-460.el9
perl-Pod-Perldoc-3.28.01-461.el9
perl-Pod-Simple-1:3.42-4.el9
perl-Pod-Usage-4:2.01-4.el9
perl-Scalar-List-Utils-4:1.56-462.el9
perl-SelectSaver-1.02-481.1.el9_6
perl-Socket-4:2.031-4.el9
perl-Storable-1:3.21-460.el9
perl-Symbol-1.08-481.1.el9_6
perl-Term-ANSIColor-5.01-461.el9
perl-Term-Cap-1.17-460.el9
perl-Text-ParseWords-3.30-460.el9
perl-Text-Tabs+Wrap-2013.0523-460.el9
perl-Time-Local-2:1.300-7.el9
perl-URI-5.09-3.el9
perl-base-2.27-481.1.el9_6
perl-constant-1.33-461.el9
perl-if-0.60.800-481.1.el9_6
perl-interpreter-4:5.32.1-481.1.el9_6
perl-libnet-3.13-4.el9
perl-libs-4:5.32.1-481.1.el9_6
perl-mro-1.23-481.1.el9_6
perl-overload-1.31-481.1.el9_6
perl-overloading-0.02-481.1.el9_6
perl-parent-1:0.238-460.el9
perl-podlators-1:4.14-460.el9
perl-subs-1.03-481.1.el9_6
perl-vars-1.05-481.1.el9_6
pigz-2.8-1.el9
pkgconf-1.7.3-10.el9
pkgconf-m4-1.7.3-10.el9
pkgconf-pkg-config-1.7.3-10.el9
podman-5:5.4.0-22.el9_6.5
policycoreutils-3.6-2.1.el9
policycoreutils-python-utils-3.6-2.1.el9
polkit-0.117-13.el9
polkit-libs-0.117-13.el9
polkit-pkla-compat-0.1-21.el9
popt-1.18-8.el9
procps-ng-3.3.17-14.el9
protobuf-c-1.3.3-13.el9
psmisc-23.4-3.el9
publicsuffix-list-dafsa-20210518-3.el9
python-unversioned-command-3.9.21-2.el9_6.7
python3-3.9.21-2.el9_6.7
python3-audit-3.1.5-4.el9
python3-chardet-4.0.0-5.el9
python3-cloud-what-1.29.45.1-1.el9_6
python3-dateutil-1:2.8.1-7.el9
python3-dbus-1.2.18-2.el9
python3-decorator-4.4.2-6.el9
python3-distro-1.5.0-7.el9
python3-dnf-4.14.0-25.el9
python3-dnf-plugin-versionlock-4.3.0-20.el9
python3-dnf-plugins-core-4.3.0-20.el9
python3-gobject-base-3.40.1-6.el9
python3-gobject-base-noarch-3.40.1-6.el9
python3-gpg-1.15.1-6.el9
python3-hawkey-0.69.0-13.el9
python3-idna-2.10-7.el9_4.1
python3-iniparse-0.4-45.el9
python3-inotify-0.9.6-25.el9
python3-libcomps-0.1.18-1.el9
python3-libdnf-0.69.0-13.el9
python3-librepo-1.14.5-2.el9
python3-libs-3.9.21-2.el9_6.7
python3-libselinux-3.6-3.el9
python3-libsemanage-3.6-5.el9_6
python3-pip-wheel-21.3.1-1.el9
python3-policycoreutils-3.6-2.1.el9
python3-pysocks-1.7.1-12.el9
python3-pyyaml-5.4.1-6.el9
python3-requests-2.25.1-10.el9_6
python3-rpm-4.16.1.3-37.el9
python3-setools-4.4.4-1.el9
python3-setuptools-53.0.0-13.el9_6.1
python3-setuptools-wheel-53.0.0-13.el9_6.1
python3-six-1.15.0-9.el9
python3-subscription-manager-rhsm-1.29.45.1-1.el9_6
python3-systemd-234-19.el9
python3-urllib3-1.26.5-6.el9_6.2
qemu-guest-agent-17:9.1.0-15.el9_6.20
quota-1:4.09-4.el9
quota-nls-1:4.09-4.el9
rdma-core-54.0-2.el9_6
readline-8.1-4.el9
redhat-release-9.6-0.1.el9
redhat-release-eula-9.6-0.1.el9
rpcbind-1.2.6-7.el9
rpm-4.16.1.3-37.el9
rpm-build-libs-4.16.1.3-37.el9
rpm-libs-4.16.1.3-37.el9
rpm-ostree-2025.6-6.el9_6
rpm-ostree-libs-2025.6-6.el9_6
rpm-plugin-selinux-4.16.1.3-37.el9
rpm-plugin-systemd-inhibit-4.16.1.3-37.el9
rpm-sign-libs-4.16.1.3-37.el9
rsync-3.2.5-3.el9_6.1
runc-4:1.2.9-3.el9_6.1
samba-client-libs-4.21.3-14.el9_6.1
samba-common-4.21.3-14.el9_6.1
samba-common-libs-4.21.3-14.el9_6.1
sed-4.8-9.el9
selinux-policy-38.1.53-5.el9_6.2
selinux-policy-targeted-38.1.53-5.el9_6.2
setup-2.13.7-10.el9
sg3_utils-1.47-10.el9_6.2
sg3_utils-libs-1.47-10.el9_6.2
shadow-utils-2:4.9-12.el9
shadow-utils-subid-2:4.9-12.el9
shared-mime-info-2.1-5.el9
shim-x64-16.1-8.el9_6
skopeo-2:1.18.1-6.el9_6.1
slang-2.3.2-11.el9
slirp4netns-1.3.2-1.el9
snappy-1.1.8-8.el9
socat-1.7.4.1-6.el9_6.1
sqlite-libs-3.34.1-8.el9_6.1
squashfs-tools-4.4-10.git1.el9
ssh-key-dir-0.1.4-1.el9
sssd-2.9.6-4.el9_6.5
sssd-ad-2.9.6-4.el9_6.5
sssd-client-2.9.6-4.el9_6.5
sssd-common-2.9.6-4.el9_6.5
sssd-common-pac-2.9.6-4.el9_6.5
sssd-ipa-2.9.6-4.el9_6.5
sssd-krb5-2.9.6-4.el9_6.5
sssd-krb5-common-2.9.6-4.el9_6.5
sssd-ldap-2.9.6-4.el9_6.5
sssd-nfs-idmap-2.9.6-4.el9_6.5
sssd-proxy-2.9.6-4.el9_6.5
stalld-1.20.4-1.el9_6
strace-6.12-1.el9
subscription-manager-1.29.45.1-1.el9_6
subscription-manager-rhsm-certificates-20220623-1.el9
sudo-1.9.5p2-10.el9_6.4
systemd-252-51.el9_6.6
systemd-journal-remote-252-51.el9_6.6
systemd-libs-252-51.el9_6.6
systemd-pam-252-51.el9_6.6
systemd-rpm-macros-252-51.el9_6.6
systemd-udev-252-51.el9_6.6
tar-2:1.34-7.el9_6.2
teamd-1.31-16.el9_1
tmux-3.2a-5.el9
toolbox-0.1.2-1.rhaos4.19.el9
tpm2-tools-5.2-4.el9
tpm2-tss-3.2.3-1.el9
tzdata-2026e-1.el9_6
unbound-libs-1.16.2-19.el9_6.2
usermode-1.114-6.el9
userspace-rcu-0.12.1-6.el9
util-linux-2.37.4-21.el9_6.1
util-linux-core-2.37.4-21.el9_6.1
vim-minimal-2:8.2.2637-22.el9_6.4
virt-what-1.27-1.el9
which-2.21-30.el9_6
xfsprogs-6.4.0-5.el9
xmlsec1-1.2.29-13.el9
xmlsec1-openssl-1.2.29-13.el9
xz-5.2.5-8.el9_0
xz-libs-5.2.5-8.el9_0
yajl-2.1.0-25.el9
zlib-1.2.11-40.el9
zram-generator-0.3.2-7.el9
zstd-1.5.5-1.el9

Changed:

NetworkManager 1:1.54.3-5.el9_8 → 1:1.52.0-11.el9_6.1
NetworkManager-cloud-setup 1:1.54.3-5.el9_8 → 1:1.52.0-11.el9_6.1
NetworkManager-libnm 1:1.54.3-5.el9_8 → 1:1.52.0-11.el9_6.1
NetworkManager-ovs 1:1.54.3-5.el9_8 → 1:1.52.0-11.el9_6.1
NetworkManager-team 1:1.54.3-5.el9_8 → 1:1.52.0-11.el9_6.1
NetworkManager-tui 1:1.54.3-5.el9_8 → 1:1.52.0-11.el9_6.1
WALinuxAgent-udev 2.14.0.1-4.el9 → 2.13.1.1-1.el9_6
aardvark-dns 2:1.17.1-1.el9_8 → 2:1.14.0-1.el9
acl 2.4.0-1.el9_8 → 2.4.0-0.el9_6.1
adcli 0.9.3.1-3.el9 → 0.9.2-1.el9
afterburn 5.10.0-1.el9 → 5.9.0-1.el9_6
afterburn-dracut 5.10.0-1.el9 → 5.9.0-1.el9_6
attr 2.6.0-1.el9_8 → 2.5.1-3.el9
audit 3.1.5-8.el9 → 3.1.5-4.el9
audit-libs 3.1.5-8.el9 → 3.1.5-4.el9
avahi-libs 0.8-23.el9 → 0.8-22.el9_6.1
bind-libs 32:9.16.23-40.el9_8.12 → 32:9.16.23-31.el9_6.4
bind-license 32:9.16.23-40.el9_8.12 → 32:9.16.23-31.el9_6.4
bind-utils 32:9.16.23-40.el9_8.12 → 32:9.16.23-31.el9_6.4
binutils 2.35.2-72.el9 → 2.35.2-63.el9_6.1
binutils-gold 2.35.2-72.el9 → 2.35.2-63.el9_6.1
bootc 1.16.4-2.el9_8 → 1.1.6-6.el9_6
bootupd 0.2.35-1.el9_8 → 0.2.35-1.el9_6
bsdtar 3.5.3-11.el9_8 → 3.5.3-7.el9_6.2
bubblewrap 0.6.3-1.el9_8.1 → 0.4.1-8.el9_6.1
bzip2 1.0.8-11.el9 → 1.0.8-10.el9_5
bzip2-libs 1.0.8-11.el9 → 1.0.8-10.el9_5
ca-certificates 2026.2.92_v9.0.319-90.3.el9_8 → 2026.2.92_v9.0.319-90.3.el9_6
chrony 4.8-1.el9 → 4.6.1-1.el9
cifs-utils 7.7-1.el9_8 → 7.2-0.el9_6.2
clevis 21-209.el9 → 21-208.el9
clevis-dracut 21-209.el9 → 21-208.el9
clevis-luks 21-209.el9 → 21-208.el9
clevis-systemd 21-209.el9 → 21-208.el9
conmon 3:2.2.1-2.el9_8 → 3:2.1.12-1.el9_6.1
container-selinux 4:2.247.0-1.el9_8 → 4:2.247.0-1.el9_6
containernetworking-plugins 1:1.9.0-4.el9_8 → 1:1.6.2-3.el9_6.1
containers-common 5:5.8-1.el9 → 2:1-117.el9_6
coreos-installer 0.26.0-1.el9_8 → 0.24.0-6.el9_6
coreos-installer-bootinfra 0.26.0-1.el9_8 → 0.24.0-6.el9_6
coreutils 8.32-41.el9_8.1 → 8.32-39.el9
coreutils-common 8.32-41.el9_8.1 → 8.32-39.el9
cracklib 2.9.6-28.el9 → 2.9.6-27.el9
cracklib-dicts 2.9.6-28.el9 → 2.9.6-27.el9
cri-o 1.35.10-3.rhaos4.22.git9383502.el9 → 1.34.15-9.rhaos4.21.git0903fe5.el9
cri-tools 1.35.0-5.el9 → 1.34.0-8.el9
criu 3.19-4.el9_8 → 3.19-1.3.el9_6
criu-libs 3.19-4.el9_8 → 3.19-1.3.el9_6
crun 1.27-1.el9_8 → 1.27-1.el9_6
crypto-policies 20260224-1.gitea0f072.el9_8 → 20250128-1.git5269e22.el9
crypto-policies-scripts 20260224-1.gitea0f072.el9_8 → 20250128-1.git5269e22.el9
cryptsetup 2.8.1-3.el9 → 2.7.2-3.el9_6.1
cryptsetup-libs 2.8.1-3.el9 → 2.7.2-3.el9_6.1
curl 7.76.1-40.el9_8.8 → 7.76.1-31.el9_6.3
cyrus-sasl-gssapi 2.1.27-22.el9 → 2.1.27-21.el9
cyrus-sasl-lib 2.1.27-22.el9 → 2.1.27-21.el9
dbus-broker 28-9.el9_8 → 28-7.el9
device-mapper 9:1.02.207-4.el9_8.1 → 9:1.02.202-6.el9
device-mapper-event 9:1.02.207-4.el9_8.1 → 9:1.02.202-6.el9
device-mapper-event-libs 9:1.02.207-4.el9_8.1 → 9:1.02.202-6.el9
device-mapper-libs 9:1.02.207-4.el9_8.1 → 9:1.02.202-6.el9
device-mapper-multipath 0.8.7-45.el9 → 0.8.7-35.el9_6.3
device-mapper-multipath-libs 0.8.7-45.el9 → 0.8.7-35.el9_6.3
dmidecode 1:3.6-2.el9 → 1:3.6-1.el9
dnf 4.14.0-34.el9_8 → 4.14.0-25.el9
dnf-data 4.14.0-34.el9_8 → 4.14.0-25.el9
dnsmasq 2.85-18.el9_8.2 → 2.85-17.el9_6.1
dracut 057-120.git20260728.el9_8 → 057-89.git20250311.el9_6.1
dracut-network 057-120.git20260728.el9_8 → 057-89.git20250311.el9_6.1
dracut-squash 057-120.git20260728.el9_8 → 057-89.git20250311.el9_6.1
e2fsprogs 1.46.5-8.el9 → 1.46.5-7.el9
e2fsprogs-libs 1.46.5-8.el9 → 1.46.5-7.el9
efi-filesystem 6-4.el9 → 6-2.el9_0
elfutils-debuginfod-client 0.194-1.el9 → 0.192-6.el9_6
elfutils-default-yama-scope 0.194-1.el9 → 0.192-6.el9_6
elfutils-libelf 0.194-1.el9 → 0.192-6.el9_6
elfutils-libs 0.194-1.el9 → 0.192-6.el9_6
ethtool 2:6.15-2.el9 → 2:6.11-1.el9
expat 2.5.0-6.el9_8.7 → 2.5.0-5.el9_6.1
file 5.39-17.el9 → 5.39-16.el9
file-libs 5.39-17.el9 → 5.39-16.el9
firewalld-filesystem 1.3.4-20.el9_8 → 1.3.4-15.el9_6.1
fuse-overlayfs 1.16-1.el9_7 → 1.14-1.el9
fwupd 2.0.19-2.el9_8 → 2.1.6-1.el9_6
gawk 5.1.0-6.el9_8.1 → 5.1.0-6.el9
gawk-all-langpacks 5.1.0-6.el9_8.1 → 5.1.0-6.el9
git-core 2.52.0-1.el9 → 2.47.3-1.el9_6
glib2 2.68.4-19.el9_8.10 → 2.68.4-16.el9_6.8
glibc 2.34-283.el9_8 → 2.34-168.el9_6.25
glibc-common 2.34-283.el9_8 → 2.34-168.el9_6.25
glibc-gconv-extra 2.34-283.el9_8 → 2.34-168.el9_6.25
glibc-minimal-langpack 2.34-283.el9_8 → 2.34-168.el9_6.25
gnupg2 2.3.3-5.el9_7 → 2.3.3-4.el9_6.1
gnutls 3.8.10-9.el9_8 → 3.8.3-6.el9_6.5
grub2-common 1:2.06-126.el9_8 → 1:2.06-105.el9_6.2
grub2-efi-x64 1:2.06-126.el9_8 → 1:2.06-105.el9_6.2
grub2-pc 1:2.06-126.el9_8 → 1:2.06-105.el9_6.2
grub2-pc-modules 1:2.06-126.el9_8 → 1:2.06-105.el9_6.2
grub2-tools 1:2.06-126.el9_8 → 1:2.06-105.el9_6.2
grub2-tools-minimal 1:2.06-126.el9_8 → 1:2.06-105.el9_6.2
gzip 1.12-2.el9_8 → 1.12-1.el9
hwdata 0.348-9.22.el9 → 0.348-9.18.el9
ignition 2.26.0-1.el9_8.2 → 2.21.0-7.el9_6.2
ignition-grub 2.26.0-1.el9_8.2 → 2.21.0-7.el9_6.2
ima-evm-utils 1.6.2-2.el9 → 1.5-3.el9
iproute 6.17.0-2.el9 → 6.11.0-1.el9
iproute-tc 6.17.0-2.el9 → 6.11.0-1.el9
iputils 20210202-15.el9_7 → 20210202-11.el9_6.3
irqbalance 2:1.9.4-5.el9 → 2:1.9.4-2.el9_6.2
iscsi-initiator-utils 6.2.1.11-1.git4b3e853.el9_8.2 → 6.2.1.9-1.gita65a472.el9_6.3
iscsi-initiator-utils-iscsiuio 6.2.1.11-1.git4b3e853.el9_8.2 → 6.2.1.9-1.gita65a472.el9_6.3
isns-utils-libs 0.101-4.el9_8.1 → 0.101-4.el9_6.1
jq 1.6-19.el9_8.2 → 1.6-17.el9_6.4
kbd 2.4.0-12.el9_8 → 2.4.0-11.el9
kbd-legacy 2.4.0-12.el9_8 → 2.4.0-11.el9
kbd-misc 2.4.0-12.el9_8 → 2.4.0-11.el9
kernel 5.14.0-687.61.1.el9_8 → 5.14.0-570.152.1.el9_6
kernel-core 5.14.0-687.61.1.el9_8 → 5.14.0-570.152.1.el9_6
kernel-modules 5.14.0-687.61.1.el9_8 → 5.14.0-570.152.1.el9_6
kernel-modules-core 5.14.0-687.61.1.el9_8 → 5.14.0-570.152.1.el9_6
kernel-modules-extra 5.14.0-687.61.1.el9_8 → 5.14.0-570.152.1.el9_6
kexec-tools 2.0.29-17.el9 → 2.0.29-5.el9_6.2
kmod 28-11.el9 → 28-10.el9
kmod-libs 28-11.el9 → 28-10.el9
kpartx 0.8.7-45.el9 → 0.8.7-35.el9_6.3
krb5-libs 1.21.1-10.el9_8 → 1.21.1-8.el9_6.2
less 590-6.el9 → 590-5.el9
libacl 2.4.0-1.el9_8 → 2.4.0-0.el9_6.1
libarchive 3.5.3-11.el9_8 → 3.5.3-7.el9_6.2
libattr 2.6.0-1.el9_8 → 2.5.1-3.el9
libblkid 2.37.4-25.el9 → 2.37.4-21.el9_6.1
libbpf 2:1.5.0-3.el9 → 2:1.5.0-1.el9
libbrotli 1.0.9-10.el9_8 → 1.0.9-7.el9_6.3
libcap 2.48-10.el9_8.1 → 2.48-9.el9_6.1
libcom_err 1.46.5-8.el9 → 1.46.5-7.el9
libcurl 7.76.1-40.el9_8.8 → 7.76.1-31.el9_6.3
libdnf 0.69.0-18.el9 → 0.69.0-13.el9
libdnf-plugin-subscription-manager 1.29.50-1.el9 → 1.29.45.1-1.el9_6
libdrm 2.4.128-1.el9 → 2.4.123-2.el9
libeconf 0.4.1-7.el9_8 → 0.4.1-4.el9
libedit 3.1-39.20210216cvs.el9 → 3.1-38.20210216cvs.el9
libevent 2.1.13-1.el9_8 → 2.1.12-8.el9_4
libfdisk 2.37.4-25.el9 → 2.37.4-21.el9_6.1
libgcc 11.5.0-14.el9 → 11.5.0-5.el9_5
libgcrypt 1.10.0-13.el9_8 → 1.10.0-11.el9_6.1
libgomp 11.5.0-14.el9 → 11.5.0-5.el9_5
libibverbs 61.0-2.el9 → 54.0-2.el9_6
libipa_hbac 2.9.8-4.el9_8.1 → 2.9.6-4.el9_6.5
libkcapi 1.4.0-3.el9_8 → 1.4.0-2.el9_6.1
libkcapi-hmaccalc 1.4.0-3.el9_8 → 1.4.0-2.el9_6.1
libldb 4.23.5-12.el9_8 → 4.21.3-14.el9_6.1
libluksmeta 10-1.el9 → 9-12.el9
libmount 2.37.4-25.el9 → 2.37.4-21.el9_6.1
libnfsidmap 1:2.5.4-42.el9_8 → 1:2.5.4-34.el9_6.5
libnghttp2 1.43.0-6.el9_8.2 → 1.43.0-6.el9_6.1
libnvme 1.16.1-3.el9_8 → 1.11.1-1.el9
libpcap 14:1.10.0-4.el9_8.1 → 14:1.10.0-4.el9
librepo 1.19.0-1.el9 → 1.14.5-2.el9
libsepol 3.6-3.el9 → 3.6-2.el9
libsmartcols 2.37.4-25.el9 → 2.37.4-21.el9_6.1
libsmbclient 4.23.5-12.el9_8 → 4.21.3-14.el9_6.1
libsolv 0.7.24-6.el9_8 → 0.7.24-3.el9_6.1
libss 1.46.5-8.el9 → 1.46.5-7.el9
libssh 0.10.4-19.el9_8 → 0.10.4-15.el9_6.1
libssh-config 0.10.4-19.el9_8 → 0.10.4-15.el9_6.1
libsss_certmap 2.9.8-4.el9_8.1 → 2.9.6-4.el9_6.5
libsss_idmap 2.9.8-4.el9_8.1 → 2.9.6-4.el9_6.5
libsss_nss_idmap 2.9.8-4.el9_8.1 → 2.9.6-4.el9_6.5
libsss_sudo 2.9.8-4.el9_8.1 → 2.9.6-4.el9_6.5
libstdc++ 11.5.0-14.el9 → 11.5.0-5.el9_5
libtalloc 2.4.3-1.el9 → 2.4.2-1.el9
libtasn1 4.16.0-10.el9_8 → 4.16.0-9.el9
libtdb 1.4.14-1.el9 → 1.4.12-1.el9
libtevent 0.17.1-1.el9 → 0.16.1-1.el9
liburing 2.12-1.el9 → 2.5-1.el9
libusbx 1.0.30-1.el9_8 → 1.0.30-1.el9_6
libuser 0.63-17.el9 → 0.63-16.el9
libuuid 2.37.4-25.el9 → 2.37.4-21.el9_6.1
libwbclient 4.23.5-12.el9_8 → 4.21.3-14.el9_6.1
libxml2 2.9.13-14.el9_8.5 → 2.9.13-13.el9_6
libxmlb 0.3.24-1.el9 → 0.3.28-1.el9_6
libxslt 1.1.34-14.el9_8.1 → 1.1.34-13.el9_6.2
linux-firmware 20260827-161.3.el9_8 → 20251111-151.8.el9_6
linux-firmware-whence 20260827-161.3.el9_8 → 20251111-151.8.el9_6
logrotate 3.18.0-12.el9 → 3.18.0-9.el9
luksmeta 10-1.el9 → 9-12.el9
lvm2 9:2.03.33-4.el9_8.1 → 9:2.03.28-6.el9
lvm2-libs 9:2.03.33-4.el9_8.1 → 9:2.03.28-6.el9
mdadm 4.4-4.el9_8.2 → 4.3-8.el9_6.1
microcode_ctl 4:20260210-1.20260812.1.el9_8 → 4:20250211-1.20260227.1.el9_6
mokutil 2:0.7.2-4.el9 → 2:0.6.0-4.el9
mpfr 4.1.0-10.el9 → 4.1.0-7.el9
ncurses 6.2-12.20210508.el9 → 6.2-10.20210508.el9_6.2
ncurses-base 6.2-12.20210508.el9 → 6.2-10.20210508.el9_6.2
ncurses-libs 6.2-12.20210508.el9 → 6.2-10.20210508.el9_6.2
netavark 2:1.17.2-1.el9 → 2:1.14.1-1.el9_6.1
nfs-utils 1:2.5.4-42.el9_8 → 1:2.5.4-34.el9_6.5
nftables 1:1.0.9-9.el9_8 → 1:1.0.9-6.el9_6.1
nmap-ncat 3:7.92-5.el9 → 3:7.92-3.el9
nmstate 2.2.60-2.el9_8 → 2.2.60-1.el9_6.1
numactl-libs 2.0.19-3.el9 → 2.0.19-1.el9
nvme-cli 2.16-1.el9 → 2.11-7.el9_6
open-vm-tools 13.0.10-1.el9 → 12.5.0-1.el9_6.2
openshift-clients 4.22.0-202610221634.p2.ga726d94.assembly.stream.el9 → 4.21.0-202610221616.p2.gd0bf7cc.assembly.stream.el9
openshift-kubelet 4.22.0-202610242057.p2.g7545c30.assembly.stream.el9 → 4.21.0-202610221616.p2.g601ff80.assembly.stream.el9
openssh 9.9p1-13.el9_8 → 8.7p1-45.el9_6.5
openssh-clients 9.9p1-13.el9_8 → 8.7p1-45.el9_6.5
openssh-server 9.9p1-13.el9_8 → 8.7p1-45.el9_6.5
openssl 1:3.5.8-2.el9_8 → 1:3.2.2-7.el9_6.4
openssl-fips-provider 3.0.7-11.el9_8 → 3.0.7-11.el9_0
openssl-fips-provider-so 3.0.7-11.el9_8 → 3.0.7-11.el9_0
openssl-libs 1:3.5.8-2.el9_8 → 1:3.2.2-7.el9_6.4
ose-aws-ecr-image-credential-provider 4.22.0-202610221634.p2.gd3eb84f.assembly.stream.el9 → 4.21.0-202610221616.p2.gfdc7f3f.assembly.stream.el9
ose-azure-acr-image-credential-provider 4.22.0-202610221634.p2.g860d459.assembly.stream.el9 → 4.21.0-202610221616.p2.g53d73b1.assembly.stream.el9
ose-crio-credential-provider 4.22.0-202610221634.p2.g83d4961.assembly.stream.el9 → 4.21.0-202610221616.p2.g83d4961.assembly.stream.el9
ose-gcp-gcr-image-credential-provider 4.22.0-202610221634.p2.g85bdbf8.assembly.stream.el9 → 4.21.0-202610221616.p2.gf064fc7.assembly.stream.el9
ostree 2025.7-1.el9 → 2025.2-4.el9_6
ostree-grub2 2025.7-1.el9 → 2025.2-4.el9_6
ostree-libs 2025.7-1.el9 → 2025.2-4.el9_6
p11-kit 0.26.4-1.el9_8 → 0.25.3-3.el9_5
p11-kit-trust 0.26.4-1.el9_8 → 0.25.3-3.el9_5
pam 1.5.1-28.el9_8.1 → 1.5.1-26.el9_6.1
passt 0^20251210.gd04c480-7.el9_8 → 0^20250217.ga1e48a0-14.el9_6
passt-selinux 0^20251210.gd04c480-7.el9_8 → 0^20250217.ga1e48a0-14.el9_6
pcre2 10.40-7.el9_8 → 10.40-6.el9_6.1
pcre2-syntax 10.40-7.el9_8 → 10.40-6.el9_6.1
perl-AutoLoader 5.74-484.el9_8 → 5.74-481.1.el9_6
perl-B 1.80-484.el9_8 → 1.80-481.1.el9_6
perl-Class-Struct 0.66-484.el9_8 → 0.66-481.1.el9_6
perl-Errno 1.30-484.el9_8 → 1.30-481.1.el9_6
perl-Fcntl 1.13-484.el9_8 → 1.13-481.1.el9_6
perl-File-Basename 2.85-484.el9_8 → 2.85-481.1.el9_6
perl-File-stat 1.09-484.el9_8 → 1.09-481.1.el9_6
perl-FileHandle 2.03-484.el9_8 → 2.03-481.1.el9_6
perl-Getopt-Std 1.12-484.el9_8 → 1.12-481.1.el9_6
perl-IO 1.43-484.el9_8 → 1.43-481.1.el9_6
perl-IPC-Open3 1.21-484.el9_8 → 1.21-481.1.el9_6
perl-NDBM_File 1.15-484.el9_8 → 1.15-481.1.el9_6
perl-Net-SSLeay 1.94-3.el9 → 1.94-1.el9
perl-POSIX 1.94-484.el9_8 → 1.94-481.1.el9_6
perl-SelectSaver 1.02-484.el9_8 → 1.02-481.1.el9_6
perl-Symbol 1.08-484.el9_8 → 1.08-481.1.el9_6
perl-URI 5.09-3.el9_8.1 → 5.09-3.el9
perl-base 2.27-484.el9_8 → 2.27-481.1.el9_6
perl-if 0.60.800-484.el9_8 → 0.60.800-481.1.el9_6
perl-interpreter 4:5.32.1-484.el9_8 → 4:5.32.1-481.1.el9_6
perl-libs 4:5.32.1-484.el9_8 → 4:5.32.1-481.1.el9_6
perl-mro 1.23-484.el9_8 → 1.23-481.1.el9_6
perl-overload 1.31-484.el9_8 → 1.31-481.1.el9_6
perl-overloading 0.02-484.el9_8 → 0.02-481.1.el9_6
perl-subs 1.03-484.el9_8 → 1.03-481.1.el9_6
perl-vars 1.05-484.el9_8 → 1.05-481.1.el9_6
podman 6:5.8.2-7.el9_8 → 5:5.4.0-22.el9_6.5
policycoreutils 3.6-5.el9 → 3.6-2.1.el9
policycoreutils-python-utils 3.6-5.el9 → 3.6-2.1.el9
polkit 0.117-14.el9 → 0.117-13.el9
polkit-libs 0.117-14.el9 → 0.117-13.el9
python-unversioned-command 3.9.25-7.el9_8.6 → 3.9.21-2.el9_6.7
python3 3.9.25-7.el9_8.6 → 3.9.21-2.el9_6.7
python3-audit 3.1.5-8.el9 → 3.1.5-4.el9
python3-cloud-what 1.29.50-1.el9 → 1.29.45.1-1.el9_6
python3-dateutil 1:2.9.0.post0-1.el9_7 → 1:2.8.1-7.el9
python3-dnf 4.14.0-34.el9_8 → 4.14.0-25.el9
python3-dnf-plugin-versionlock 4.3.0-26.el9 → 4.3.0-20.el9
python3-dnf-plugins-core 4.3.0-26.el9 → 4.3.0-20.el9
python3-hawkey 0.69.0-18.el9 → 0.69.0-13.el9
python3-idna 2.10-8.el9_8 → 2.10-7.el9_4.1
python3-libdnf 0.69.0-18.el9 → 0.69.0-13.el9
python3-librepo 1.19.0-1.el9 → 1.14.5-2.el9
python3-libs 3.9.25-7.el9_8.6 → 3.9.21-2.el9_6.7
python3-pip-wheel 21.3.1-2.el9_8 → 21.3.1-1.el9
python3-policycoreutils 3.6-5.el9 → 3.6-2.1.el9
python3-rpm 4.16.1.3-40.el9 → 4.16.1.3-37.el9
python3-setuptools 53.0.0-15.el9 → 53.0.0-13.el9_6.1
python3-setuptools-wheel 53.0.0-15.el9 → 53.0.0-13.el9_6.1
python3-subscription-manager-rhsm 1.29.50-1.el9 → 1.29.45.1-1.el9_6
python3-urllib3 1.26.5-8.el9_8 → 1.26.5-6.el9_6.2
qemu-guest-agent 17:10.1.0-17.el9_8.9 → 17:9.1.0-15.el9_6.20
rdma-core 61.0-2.el9 → 54.0-2.el9_6
redhat-release 9.8-1.0.el9 → 9.6-0.1.el9
redhat-release-eula 9.8-1.0.el9 → 9.6-0.1.el9
rpcbind 1.2.6-7.el9_8.1 → 1.2.6-7.el9
rpm 4.16.1.3-40.el9 → 4.16.1.3-37.el9
rpm-build-libs 4.16.1.3-40.el9 → 4.16.1.3-37.el9
rpm-libs 4.16.1.3-40.el9 → 4.16.1.3-37.el9
rpm-ostree 2026.1-6.el9_8 → 2025.6-6.el9_6
rpm-ostree-libs 2026.1-6.el9_8 → 2025.6-6.el9_6
rpm-plugin-selinux 4.16.1.3-40.el9 → 4.16.1.3-37.el9
rpm-plugin-systemd-inhibit 4.16.1.3-40.el9 → 4.16.1.3-37.el9
rpm-sign-libs 4.16.1.3-40.el9 → 4.16.1.3-37.el9
rsync 3.2.7-1.el9_8 → 3.2.5-3.el9_6.1
runc 4:1.4.2-3.el9_8 → 4:1.2.9-3.el9_6.1
samba-client-libs 4.23.5-12.el9_8 → 4.21.3-14.el9_6.1
samba-common 4.23.5-12.el9_8 → 4.21.3-14.el9_6.1
samba-common-libs 4.23.5-12.el9_8 → 4.21.3-14.el9_6.1
sed 4.8-10.el9 → 4.8-9.el9
selinux-policy 38.1.75-2.el9_8.1 → 38.1.53-5.el9_6.2
selinux-policy-targeted 38.1.75-2.el9_8.1 → 38.1.53-5.el9_6.2
sg3_utils 1.47-10.el9_8.1 → 1.47-10.el9_6.2
sg3_utils-libs 1.47-10.el9_8.1 → 1.47-10.el9_6.2
shadow-utils 2:4.9-16.el9 → 2:4.9-12.el9
shadow-utils-subid 2:4.9-16.el9 → 2:4.9-12.el9
shim-x64 16.1-7.el9 → 16.1-8.el9_6
skopeo 2:1.22.2-8.el9_8 → 2:1.18.1-6.el9_6.1
slirp4netns 1.3.3-1.el9 → 1.3.2-1.el9
socat 1.7.4.1-8.el9 → 1.7.4.1-6.el9_6.1
sqlite-libs 3.34.1-11.el9_8 → 3.34.1-8.el9_6.1
sssd 2.9.8-4.el9_8.1 → 2.9.6-4.el9_6.5
sssd-ad 2.9.8-4.el9_8.1 → 2.9.6-4.el9_6.5
sssd-client 2.9.8-4.el9_8.1 → 2.9.6-4.el9_6.5
sssd-common 2.9.8-4.el9_8.1 → 2.9.6-4.el9_6.5
sssd-common-pac 2.9.8-4.el9_8.1 → 2.9.6-4.el9_6.5
sssd-ipa 2.9.8-4.el9_8.1 → 2.9.6-4.el9_6.5
sssd-krb5 2.9.8-4.el9_8.1 → 2.9.6-4.el9_6.5
sssd-krb5-common 2.9.8-4.el9_8.1 → 2.9.6-4.el9_6.5
sssd-ldap 2.9.8-4.el9_8.1 → 2.9.6-4.el9_6.5
sssd-nfs-idmap 2.9.8-4.el9_8.1 → 2.9.6-4.el9_6.5
sssd-proxy 2.9.8-4.el9_8.1 → 2.9.6-4.el9_6.5
stalld 1.26.3-1.el9 → 1.20.4-1.el9_6
subscription-manager 1.29.50-1.el9 → 1.29.45.1-1.el9_6
sudo 1.9.17p2-3.el9_8.3 → 1.9.5p2-10.el9_6.4
systemd 252-67.el9_8.6 → 252-51.el9_6.6
systemd-journal-remote 252-67.el9_8.6 → 252-51.el9_6.6
systemd-libs 252-67.el9_8.6 → 252-51.el9_6.6
systemd-pam 252-67.el9_8.6 → 252-51.el9_6.6
systemd-rpm-macros 252-67.el9_8.6 → 252-51.el9_6.6
systemd-udev 252-67.el9_8.6 → 252-51.el9_6.6
tar 2:1.34-13.el9_8 → 2:1.34-7.el9_6.2
toolbox 0.1.2-1.rhaos4.22.el9 → 0.1.2-1.rhaos4.19.el9
tpm2-tools 5.2-7.el9 → 5.2-4.el9
tzdata 2026e-1.el9_8 → 2026e-1.el9_6
unbound-libs 1.24.2-3.el9_8.8 → 1.16.2-19.el9_6.2
usermode 1.114-7.el9 → 1.114-6.el9
util-linux 2.37.4-25.el9 → 2.37.4-21.el9_6.1
util-linux-core 2.37.4-25.el9 → 2.37.4-21.el9_6.1
vim-minimal 2:8.2.2637-26.el9_8.23 → 2:8.2.2637-22.el9_6.4
virt-what 1.27-2.el9 → 1.27-1.el9
xfsprogs 6.4.0-7.el9 → 6.4.0-5.el9
xz 5.2.5-8.el9_8.1 → 5.2.5-8.el9_0
xz-libs 5.2.5-8.el9_8.1 → 5.2.5-8.el9_0
zram-generator 1.1.2-1.el9 → 0.3.2-7.el9

Removed:

adcli-selinux 0.9.3.1-3.el9
azure-vm-utils 0.7.0-1.el9
flashrom 1.2-10.el9
fwupd-plugin-flashrom 2.0.19-2.el9_8
numactl 2.0.19-3.el9
perl-Unicode-Normalize 1.27-461.el9

Extensions

Full list (162 packages)

NetworkManager-libreswan-1.2.29-1.el9_6.x86_64
bison-3.7.4-5.el9.x86_64
capstone-4.0.2-11.el9_6.x86_64
corosync-3.1.9-2.el9_6.2.x86_64
corosynclib-3.1.9-2.el9_6.2.x86_64
cpp-11.5.0-5.el9_5.x86_64
crun-wasm-1.8.5-5.rhaos4.14.el9.x86_64
daxctl-libs-78-2.el9.x86_64
edk2-ovmf-20241117-2.el9_6.2.noarch
elfutils-libelf-devel-0.192-6.el9_6.x86_64
fence-agents-all-4.10.0-86.el9_6.22.x86_64
fence-agents-amt-ws-4.10.0-86.el9_6.22.noarch
fence-agents-apc-4.10.0-86.el9_6.22.noarch
fence-agents-apc-snmp-4.10.0-86.el9_6.22.noarch
fence-agents-bladecenter-4.10.0-86.el9_6.22.noarch
fence-agents-brocade-4.10.0-86.el9_6.22.noarch
fence-agents-cisco-mds-4.10.0-86.el9_6.22.noarch
fence-agents-cisco-ucs-4.10.0-86.el9_6.22.noarch
fence-agents-common-4.10.0-86.el9_6.22.noarch
fence-agents-drac5-4.10.0-86.el9_6.22.noarch
fence-agents-eaton-snmp-4.10.0-86.el9_6.22.noarch
fence-agents-emerson-4.10.0-86.el9_6.22.noarch
fence-agents-eps-4.10.0-86.el9_6.22.noarch
fence-agents-heuristics-ping-4.10.0-86.el9_6.22.noarch
fence-agents-hpblade-4.10.0-86.el9_6.22.noarch
fence-agents-ibmblade-4.10.0-86.el9_6.22.noarch
fence-agents-ifmib-4.10.0-86.el9_6.22.noarch
fence-agents-ilo-moonshot-4.10.0-86.el9_6.22.noarch
fence-agents-ilo-mp-4.10.0-86.el9_6.22.noarch
fence-agents-ilo-ssh-4.10.0-86.el9_6.22.noarch
fence-agents-ilo2-4.10.0-86.el9_6.22.noarch
fence-agents-intelmodular-4.10.0-86.el9_6.22.noarch
fence-agents-ipdu-4.10.0-86.el9_6.22.noarch
fence-agents-ipmilan-4.10.0-86.el9_6.22.noarch
fence-agents-kdump-4.10.0-86.el9_6.22.x86_64
fence-agents-mpath-4.10.0-86.el9_6.22.noarch
fence-agents-redfish-4.10.0-86.el9_6.22.x86_64
fence-agents-rhevm-4.10.0-86.el9_6.22.noarch
fence-agents-rsa-4.10.0-86.el9_6.22.noarch
fence-agents-rsb-4.10.0-86.el9_6.22.noarch
fence-agents-sbd-4.10.0-86.el9_6.22.noarch
fence-agents-scsi-4.10.0-86.el9_6.22.noarch
fence-agents-vmware-rest-4.10.0-86.el9_6.22.noarch
fence-agents-vmware-soap-4.10.0-86.el9_6.22.noarch
fence-agents-wti-4.10.0-86.el9_6.22.noarch
fence-virt-4.10.0-86.el9_6.22.x86_64
flex-2.6.4-9.el9.x86_64
fmt-9.1.0-1.el9.x86_64
gcc-11.5.0-5.el9_5.x86_64
glibc-devel-2.34-168.el9_6.25.x86_64
glibc-headers-2.34-168.el9_6.25.x86_64
gnutls-dane-3.8.3-6.el9_6.5.x86_64
gnutls-utils-3.8.3-6.el9_6.5.x86_64
ipmitool-1.8.18-27.el9.x86_64
ipxe-roms-qemu-20200823-9.git4bd064de.el9_0.noarch
kata-containers-3.31.0-6.rhaos4.19.el9.x86_64
kernel-5.14.0-570.152.1.el9_6.x86_64
kernel-core-5.14.0-570.152.1.el9_6.x86_64
kernel-devel-5.14.0-570.152.1.el9_6.x86_64
kernel-headers-5.14.0-570.152.1.el9_6.x86_64
kernel-modules-5.14.0-570.152.1.el9_6.x86_64
kernel-modules-extra-5.14.0-570.152.1.el9_6.x86_64
kernel-rt-core-5.14.0-570.152.1.el9_6.x86_64
kernel-rt-devel-5.14.0-570.152.1.el9_6.x86_64
kernel-rt-kvm-5.14.0-570.152.1.el9_6.x86_64
kernel-rt-modules-5.14.0-570.152.1.el9_6.x86_64
kernel-rt-modules-core-5.14.0-570.152.1.el9_6.x86_64
kernel-rt-modules-extra-5.14.0-570.152.1.el9_6.x86_64
krb5-pkinit-1.21.1-8.el9_6.2.x86_64
krb5-workstation-1.21.1-8.el9_6.2.x86_64
ldns-1.7.1-12.el9_6.1.x86_64
libfdt-1.6.0-7.el9.x86_64
libkadm5-1.21.1-8.el9_6.2.x86_64
libknet1-1.28-1.el9.x86_64
libknet1-compress-bzip2-plugin-1.28-1.el9.x86_64
libknet1-compress-lz4-plugin-1.28-1.el9.x86_64
libknet1-compress-lzma-plugin-1.28-1.el9.x86_64
libknet1-compress-lzo2-plugin-1.28-1.el9.x86_64
libknet1-compress-plugins-all-1.28-1.el9.x86_64
libknet1-compress-zlib-plugin-1.28-1.el9.x86_64
libknet1-compress-zstd-plugin-1.28-1.el9.x86_64
libknet1-crypto-nss-plugin-1.28-1.el9.x86_64
libknet1-crypto-openssl-plugin-1.28-1.el9.x86_64
libknet1-crypto-plugins-all-1.28-1.el9.x86_64
libknet1-plugins-all-1.28-1.el9.x86_64
libmpc-1.2.1-4.el9.x86_64
libnozzle1-1.28-1.el9.x86_64
libpmem-1.12.1-1.el9.x86_64
libpng-2:1.6.37-12.el9_6.4.x86_64
libqb-2.0.8-1.el9.x86_64
librdmacm-54.0-2.el9_6.x86_64
libreswan-5.3.2-2.el9fdp.x86_64
libwsman1-2.6.8-23.el9.x86_64
libxcrypt-devel-4.4.18-3.el9.x86_64
libzstd-devel-1.5.5-1.el9.x86_64
lld-17.0.6-1.el9.x86_64
lld-libs-17.0.6-1.el9.x86_64
llvm-17.0.6-5.el9.x86_64
llvm-libs-17.0.6-5.el9.x86_64
lm_sensors-libs-3.6.0-10.el9.x86_64
m4-1.4.19-1.el9.x86_64
make-1:4.3-8.el9.x86_64
ndctl-libs-78-2.el9.x86_64
net-snmp-libs-1:5.9.1-17.el9_6.1.x86_64
net-snmp-utils-1:5.9.1-17.el9_6.1.x86_64
nspr-4.39.0-5.el9_6.x86_64
nss-3.124.0-5.el9_6.x86_64
nss-softokn-3.124.0-5.el9_6.x86_64
nss-softokn-freebl-3.124.0-5.el9_6.x86_64
nss-sysinit-3.124.0-5.el9_6.x86_64
nss-tools-3.124.0-5.el9_6.x86_64
nss-util-3.124.0-5.el9_6.x86_64
openssl-devel-1:3.2.2-7.el9_6.4.x86_64
openvswitch3.5-ipsec-3.5.2-72.el9fdp.3.x86_64
openwsman-python3-2.6.8-23.el9.x86_64
pacemaker-2.1.9-1.4.el9_6.x86_64
pacemaker-cli-2.1.9-1.4.el9_6.x86_64
pacemaker-cluster-libs-2.1.9-1.4.el9_6.x86_64
pacemaker-libs-2.1.9-1.4.el9_6.x86_64
pacemaker-schemas-2.1.9-1.4.el9_6.noarch
pcp-conf-6.3.7-1.el9_6.1.x86_64
pcp-libs-6.3.7-1.el9_6.1.x86_64
pcs-0.11.9-2.el9_6.4.x86_64
perl-TimeDate-1:2.33-6.el9.noarch
pixman-0.40.0-6.el9_3.x86_64
protobuf-3.14.0-16.el9_6.1.x86_64
python3-cffi-1.14.5-5.el9.x86_64
python3-cryptography-36.0.1-5.el9_6.x86_64
python3-lxml-4.6.5-3.el9_6.1.x86_64
python3-openvswitch3.5-3.5.2-72.el9fdp.3.x86_64
python3-ply-3.11-14.el9.noarch
python3-pycparser-2.20-6.el9.noarch
python3-pycurl-7.43.0.6-8.el9.x86_64
python3-pyparsing-2.4.7-9.el9.noarch
python3-tornado-6.4.2-2.el9_6.7.x86_64
qemu-img-17:9.1.0-15.el9_6.20.x86_64
qemu-kvm-common-17:9.1.0-15.el9_6.20.x86_64
qemu-kvm-core-17:9.1.0-15.el9_6.20.x86_64
redhat-logos-90.5-1.el9_6.1.x86_64
resource-agents-4.10.0-71.el9_6.34.x86_64
ruby-3.0.7-166.el9_6.x86_64
ruby-default-gems-3.0.7-166.el9_6.noarch
ruby-libs-3.0.7-166.el9_6.x86_64
rubygem-bigdecimal-3.0.0-166.el9_6.x86_64
rubygem-bundler-2.2.33-166.el9_6.noarch
rubygem-io-console-0.5.7-166.el9_6.x86_64
rubygem-json-2.5.1-166.el9_6.x86_64
rubygem-psych-3.3.2-166.el9_6.x86_64
rubygem-rdoc-6.3.4.1-166.el9_6.noarch
rubygem-rexml-3.2.5-166.el9_6.noarch
rubygems-3.2.33-166.el9_6.noarch
sbd-1.5.2-1.el9.x86_64
seabios-bin-1.16.3-4.el9.noarch
seavgabios-bin-1.16.3-4.el9.noarch
spdlog-1.13.0-1.rhaos4.14.el9.x86_64
sysstat-12.5.4-9.el9.x86_64
telnet-1:0.17-85.el9.x86_64
usbguard-1.0.0-16.el9.x86_64
usbguard-selinux-1.0.0-16.el9.noarch
virtiofsd-1.13.2-1.el9_6.x86_64
wasmedge-0.14.0-2.rhaos4.20.el9.x86_64
zlib-devel-1.2.11-40.el9.x86_64

Red Hat Enterprise Linux CoreOS 10.2 (`rhel-coreos-10`)

Package List

cri-o-1.34.6-2.rhaos4.21.gitbca534a.el10
kernel-6.12.0-211.7.1.el10_2
openshift-kubelet-4.21.0-202606042250.p2.ga8c502a.assembly.stream.el10
systemd-257-23.el10

Full list (489 packages)

NetworkManager-1:1.56.0-1.el10
NetworkManager-cloud-setup-1:1.56.0-1.el10
NetworkManager-libnm-1:1.56.0-1.el10
NetworkManager-ovs-1:1.56.0-1.el10
NetworkManager-tui-1:1.56.0-1.el10
WALinuxAgent-udev-2.14.0.1-3.el10
aardvark-dns-2:1.17.0-1.el10
acl-2.3.2-4.el10
afterburn-5.10.0-1.el10
afterburn-dracut-5.10.0-1.el10
alternatives-1.30-2.el10
amd-gpu-firmware-20260130-22.el10
amd-ucode-firmware-20260130-22.el10
attr-2.5.2-5.el10
audit-4.0.3-5.el10
audit-libs-4.0.3-5.el10
audit-rules-4.0.3-5.el10
authselect-1.5.2-1.el10
authselect-libs-1.5.2-1.el10
avahi-libs-0.9~rc2-2.el10
azure-vm-utils-0.7.0-1.el10
basesystem-11-22.el10
bash-5.2.26-6.el10
bash-completion-1:2.11-16.el10
bind-libs-32:9.18.33-15.el10_2.1
bind-license-32:9.18.33-15.el10_2.1
bind-utils-32:9.18.33-15.el10_2.1
bootc-1.13.0-1.el10
bootupd-0.2.32-1.el10
bsdtar-3.7.7-8.el10_1
bubblewrap-0.10.0-3.el10
bzip2-1.0.8-25.el10
bzip2-libs-1.0.8-25.el10
c-ares-1.34.6-1.el10
ca-certificates-2025.2.80_v9.0.305-102.el10_1
catatonit-5:0.2.1-1.el10
checkpolicy-3.10-1.el10
chrony-4.8-2.el10
cifs-utils-7.5-1.el10
clevis-21-9.el10
clevis-dracut-21-9.el10
clevis-luks-21-9.el10
clevis-pin-tpm2-0.5.3-9.el10
clevis-systemd-21-9.el10
cloud-utils-growpart-0.33-11.el10
composefs-1.0.8-1.el10
composefs-libs-1.0.8-1.el10
conmon-3:2.2.1-2.el10
conmon-rs-0.6.6-0.rhaos4.18.el10.1
console-login-helper-messages-0.21.3-10.el10
console-login-helper-messages-issuegen-0.21.3-10.el10
console-login-helper-messages-profile-0.21.3-10.el10
container-selinux-4:2.246.0-1.el10
containers-common-6:5.8-2.el10
containers-common-extra-6:5.8-2.el10
coreos-installer-0.26.0-1.el10_2
coreos-installer-bootinfra-0.26.0-1.el10_2
coreutils-9.5-7.el10
coreutils-common-9.5-7.el10
cpio-2.15-3.el10
cracklib-2.9.11-8.el10
cracklib-dicts-2.9.11-8.el10
cri-o-1.34.6-2.rhaos4.21.gitbca534a.el10
cri-tools-1.35.0-2.el10
criu-4.2-1.el10
criu-libs-4.2-1.el10
crun-1.26-1.el10
crypto-policies-20260216-1.git0e54016.el10
crypto-policies-scripts-20260216-1.git0e54016.el10
cryptsetup-2.8.1-2.el10
cryptsetup-libs-2.8.1-2.el10
curl-8.12.1-4.el10
cyrus-sasl-gssapi-2.1.28-29.el10
cyrus-sasl-lib-2.1.28-29.el10
dbus-1:1.14.10-5.el10
dbus-broker-36-4.el10
dbus-common-1:1.14.10-5.el10
dbus-libs-1:1.14.10-5.el10
dbus-tools-1:1.14.10-5.el10
device-mapper-10:1.02.210-2.el10
device-mapper-event-10:1.02.210-2.el10
device-mapper-event-libs-10:1.02.210-2.el10
device-mapper-libs-10:1.02.210-2.el10
device-mapper-multipath-0.9.9-18.el10
device-mapper-multipath-libs-0.9.9-18.el10
device-mapper-persistent-data-1.3.0-1.el10
diffutils-3.10-8.el10
dmidecode-1:3.6-5.el10
dnf-4.20.0-21.el10
dnf-data-4.20.0-21.el10
dnsmasq-2.90-5.el10
dosfstools-4.2-12.el10
dracut-107-4.el10
dracut-network-107-4.el10
dracut-squash-107-4.el10
duktape-2.7.0-10.el10
e2fsprogs-1.47.1-5.el10
e2fsprogs-libs-1.47.1-5.el10
efi-filesystem-6-6.el10
efibootmgr-18-8.el10
efivar-libs-39-3.el10
elfutils-default-yama-scope-0.194-2.el10_2
elfutils-libelf-0.194-2.el10_2
elfutils-libs-0.194-2.el10_2
erofs-utils-1.8.10-1.el10
ethtool-2:6.15-2.el10
expat-2.7.3-1.el10
fcoe-utils-1.0.34-11.gitb233050.el10
file-5.45-9.el10
file-libs-5.45-9.el10
filesystem-3.18-17.el10
findutils-1:4.10.0-5.el10
firewalld-filesystem-2.4.0-1.el10_1
flatpak-session-helper-1.16.0-9.el10
fstrm-0.6.1-12.el10
fuse-common-3.16.2-5.el10
fuse-libs-2.9.9-25.el10
fuse3-3.16.2-5.el10
fuse3-libs-3.16.2-5.el10
fwupd-2.0.19-4.1.el10_2
gawk-5.3.0-6.el10
gdbm-1:1.23-12.el10_0
gdbm-libs-1:1.23-12.el10_0
gettext-envsubst-0.22.5-6.el10
gettext-libs-0.22.5-6.el10
gettext-runtime-0.22.5-6.el10
git-core-2.52.0-1.el10
glib2-2.80.4-12.el10
glibc-2.39-113.el10
glibc-common-2.39-113.el10
glibc-gconv-extra-2.39-113.el10
glibc-minimal-langpack-2.39-113.el10
gmp-1:6.2.1-12.el10
gnupg2-2.4.5-4.el10_1
gnutls-3.8.10-3.el10_1
gobject-introspection-1.79.1-6.el10
gpgme-1.23.2-6.el10
grep-3.11-10.el10
grub2-common-1:2.12-46.el10_2
grub2-efi-x64-1:2.12-46.el10_2
grub2-pc-1:2.12-46.el10_2
grub2-pc-modules-1:2.12-46.el10_2
grub2-tools-1:2.12-46.el10_2
grub2-tools-minimal-1:2.12-46.el10_2
gssproxy-0.9.2-10.el10
gzip-1.13-3.el10
hostname-3.23-14.el10
hwdata-0.379-10.8.el10
ignition-2.26.0-2.el10_2
ignition-grub-2.26.0-2.el10_2
ima-evm-utils-1.6.2-4.el10
info-7.1-6.el10
inih-58-3.el10
intel-gpu-firmware-20260130-22.el10
ipcalc-1.0.3-12.el10
iproute-6.17.0-2.el10
iproute-tc-6.17.0-2.el10
iptables-libs-1.8.11-12.el10_1
iptables-nft-1.8.11-12.el10_1
iputils-20240905-5.el10
irqbalance-2:1.9.4-6.el10
iscsi-initiator-utils-6.2.1.11-0.git4b3e853.el10
iscsi-initiator-utils-iscsiuio-6.2.1.11-0.git4b3e853.el10
isns-utils-libs-0.103-1.el10
jansson-2.14-3.el10
jose-14-102.el10
jq-1.7.1-11.el10
json-c-0.18-3.el10
json-glib-1.8.0-5.el10
kbd-2.6.4-7.el10
kbd-legacy-2.6.4-7.el10
kbd-misc-2.6.4-7.el10
kdump-utils-1.0.58-15.el10
kernel-6.12.0-211.7.1.el10_2
kernel-core-6.12.0-211.7.1.el10_2
kernel-modules-6.12.0-211.7.1.el10_2
kernel-modules-core-6.12.0-211.7.1.el10_2
kernel-modules-extra-6.12.0-211.7.1.el10_2
kexec-tools-2.0.32-3.el10
keyutils-1.6.3-5.el10
keyutils-libs-1.6.3-5.el10
kmod-31-13.el10
kmod-libs-31-13.el10
kpartx-0.9.9-18.el10
krb5-libs-1.21.3-9.el10_1
less-661-3.el10
libacl-2.3.2-4.el10
libaio-0.3.111-22.el10
libarchive-3.7.7-8.el10_1
libassuan-2.5.6-6.el10
libattr-2.5.2-5.el10
libbasicobjects-0.1.1-58.el10
libblkid-2.40.2-18.el10
libbpf-2:1.7.0-1.el10
libcap-2.69-7.el10_1.1
libcap-ng-0.8.4-6.el10
libcbor-0.11.0-3.el10
libcollection-0.7.0-58.el10
libcom_err-1.47.1-5.el10
libcomps-0.1.21-3.el10
libconfig-1.7.3-10.el10
libcurl-minimal-8.12.1-4.el10
libdhash-0.5.0-58.el10
libdnf-0.73.1-14.el10
libdnf-plugin-subscription-manager-1.30.12-1.el10
libdrm-2.4.128-1.el10
libeconf-0.6.2-4.el10
libedit-3.1-52.20230828cvs.el10
libev-4.33-15.el10
libevent-2.1.12-16.el10
libfdisk-2.40.2-18.el10
libffi-3.4.4-10.el10
libfido2-1.14.0-7.el10
libgcc-14.3.1-4.4.el10
libgcrypt-1.11.0-5.el10
libgomp-14.3.1-4.4.el10
libgpg-error-1.50-2.el10
libibverbs-61.0-1.el10
libicu-74.2-5.el10_0
libidn2-2.3.7-3.el10
libini_config-1.3.1-58.el10
libipa_hbac-2.12.0-1.el10
libjcat-0.2.2-2.el10
libjose-14-102.el10
libkcapi-1.5.0-3.el10
libkcapi-hasher-1.5.0-3.el10
libkcapi-hmaccalc-1.5.0-3.el10
libksba-1.6.7-2.el10
libldb-4.23.5-105.el10
libluksmeta-10-1.el10
libmaxminddb-1.9.1-4.el10
libmicrohttpd-1:1.0.0-3.el10
libmnl-1.0.5-7.el10
libmodulemd-2.15.0-12.el10
libmount-2.40.2-18.el10
libmspack-0.10.1-0.14.alpha.el10
libndp-1.9-2.el10
libnet-1.3-7.el10
libnetfilter_conntrack-1.0.9-12.el10
libnfnetlink-1.0.2-3.el10
libnfsidmap-1:2.8.3-5.el10_2
libnftnl-1.3.0-3.el10
libnghttp2-1.68.0-3.el10_2.1
libnl3-3.11.0-1.el10
libnvme-1.16.1-3.el10_2
libpath_utils-0.2.1-58.el10
libpcap-14:1.10.4-7.el10
libpciaccess-0.16-16.el10
libpkgconf-2.1.0-3.el10
libpwquality-1.4.5-12.el10
libref_array-0.1.5-58.el10
librepo-1.19.0-1.el10
librhsm-0.0.3-16.el10
libseccomp-2.5.6-1.el10
libselinux-3.10-1.el10
libselinux-utils-3.10-1.el10
libsemanage-3.10-1.el10
libsepol-3.10-1.el10
libsmartcols-2.40.2-18.el10
libsmbclient-4.23.5-105.el10
libsolv-0.7.33-2.el10
libss-1.47.1-5.el10
libsss_certmap-2.12.0-1.el10
libsss_idmap-2.12.0-1.el10
libsss_nss_idmap-2.12.0-1.el10
libsss_sudo-2.12.0-1.el10
libstdc++-14.3.1-4.4.el10
libtalloc-2.4.3-100.el10
libtasn1-4.20.0-1.el10
libtdb-1.4.14-100.el10
libtevent-0.17.1-100.el10
libtirpc-1.3.5-1.el10
libtool-ltdl-2.4.7-13.el10
libunistring-1.1-10.el10
liburing-2.12-1.el10
libusb1-1.0.29-3.el10
libutempter-1.2.1-15.el10
libuuid-2.40.2-18.el10
libuv-1:1.51.0-1.el10
libverto-0.3.2-10.el10
libverto-libev-0.3.2-10.el10
libwbclient-4.23.5-105.el10
libxcrypt-4.4.36-10.el10
libxml2-2.12.5-10.el10
libxmlb-0.3.24-1.el10
libxslt-1.1.39-8.el10_0
libyaml-0.2.5-16.el10
libzstd-1.5.5-9.el10
linux-firmware-20260130-22.el10
linux-firmware-whence-20260130-22.el10
lldpad-1.1.1-4.gitf1dd9eb.el10
lmdb-libs-0.9.32-4.el10
logrotate-3.22.0-5.el10
lsof-4.98.0-7.el10
lua-libs-5.4.6-7.el10
luksmeta-10-1.el10
lvm2-10:2.03.36-2.el10
lvm2-libs-10:2.03.36-2.el10
lz4-libs-1.9.4-8.el10
lzo-2.10-14.el10
makedumpfile-1.7.8-1.el10
mdadm-4.4-3.el10
microcode_ctl-4:20260210-1.el10
mokutil-2:0.7.2-4.el10
mpdecimal-2.5.1-12.el10
mpfr-4.2.1-8.el10
nano-8.1-3.el10
ncurses-base-6.4-15.20240127.el10_1
ncurses-libs-6.4-15.20240127.el10_1
net-tools-2.0-0.73.20160912git.el10
netavark-2:1.17.2-1.el10
nettle-3.10.1-1.el10
newt-0.52.24-5.el10
nfs-utils-1:2.8.3-5.el10_2
nftables-1:1.1.5-3.el10
nmap-ncat-4:7.92-5.el10
nmstate-2.2.58-1.el10
npth-1.6-21.el10
nss-altfiles-2.23.0-6.el10
numactl-2.0.19-3.el10
numactl-libs-2.0.19-3.el10
numad-0.5-50.20251104git.el10
nvidia-gpu-firmware-20260130-22.el10
nvme-cli-2.16-2.el10
oniguruma-6.9.9-7.el10
open-vm-tools-13.0.10-1.el10
openldap-2.6.10-1.el10
openshift-clients-4.21.0-202605201414.p2.gfdf8dab.assembly.stream.el10
openshift-kubelet-4.21.0-202606042250.p2.ga8c502a.assembly.stream.el10
openssh-9.9p1-22.el10_2
openssh-clients-9.9p1-22.el10_2
openssh-server-9.9p1-22.el10_2
openssl-1:3.5.5-1.el10
openssl-fips-provider-3.0.7-8.el10
openssl-fips-provider-so-3.0.7-8.el10
openssl-libs-1:3.5.5-1.el10
openvswitch-selinux-extra-policy-1.0-39.el10fdp
openvswitch3.5-3.5.2-63.el10fdp
os-prober-1.81-9.el10
ose-aws-ecr-image-credential-provider-4.21.0-202606021425.p2.gfdc7f3f.assembly.stream.el10
ose-azure-acr-image-credential-provider-4.21.0-202606092150.p2.gc9afac2.assembly.stream.el10
ose-crio-credential-provider-4.21.0-202606021425.p2.g83d4961.assembly.stream.el10
ose-gcp-gcr-image-credential-provider-4.21.0-202606021425.p2.ge27acce.assembly.stream.el10
ostree-2025.7-1.el10
ostree-grub2-2025.7-1.el10
ostree-libs-2025.7-1.el10
p11-kit-0.26.2-1.el10
p11-kit-trust-0.26.2-1.el10
pam-1.6.1-9.el10
pam-libs-1.6.1-9.el10
passt-0^20251210.gd04c480-3.el10
passt-selinux-0^20251210.gd04c480-3.el10
pciutils-3.13.0-6.el10
pciutils-libs-3.13.0-6.el10
pcre2-10.44-1.el10.3
pcre2-syntax-10.44-1.el10.3
pkgconf-2.1.0-3.el10
pkgconf-m4-2.1.0-3.el10
pkgconf-pkg-config-2.1.0-3.el10
podman-7:5.8.0-2.el10
podman-sequoia-0.4.0~pqc.2-1.el10
policycoreutils-3.10-1.el10
policycoreutils-python-utils-3.10-1.el10
polkit-125-4.el10
polkit-libs-125-4.el10
popt-1.19-8.el10
procps-ng-4.0.4-11.el10
protobuf-c-1.5.0-6.el10
psmisc-23.6-8.el10
python3-3.12.12-5.el10_2
python3-audit-4.0.3-5.el10
python3-charset-normalizer-3.4.2-1.el10
python3-cloud-what-1.30.12-1.el10
python3-dateutil-1:2.9.0.post0-1.el10_0
python3-dbus-1.3.2-8.el10
python3-decorator-5.1.1-12.el10
python3-distro-1.9.0-5.el10
python3-dnf-4.20.0-21.el10
python3-dnf-plugin-versionlock-4.7.0-10.el10
python3-dnf-plugins-core-4.7.0-10.el10
python3-file-magic-5.45-9.el10
python3-gobject-base-3.46.0-7.el10
python3-gobject-base-noarch-3.46.0-7.el10
python3-hawkey-0.73.1-14.el10
python3-idna-3.7-4.el10
python3-iniparse-0.5-10.el10
python3-inotify-0.9.6-36.el10
python3-libcomps-0.1.21-3.el10
python3-libdnf-0.73.1-14.el10
python3-librepo-1.19.0-1.el10
python3-libs-3.12.12-5.el10_2
python3-libselinux-3.10-1.el10
python3-libsemanage-3.10-1.el10
python3-packaging-24.2-2.el10
python3-pexpect-4.9.0-6.el10
python3-pip-wheel-23.3.2-7.el10
python3-policycoreutils-3.10-1.el10
python3-ptyprocess-0.7.0-9.el10
python3-pyyaml-6.0.1-19.el10
python3-requests-2.32.4-1.el10_0
python3-rpm-4.19.1.1-23.el10
python3-setools-4.6.0-3.el10
python3-setuptools-69.0.3-12.el10_0
python3-six-1.16.0-16.el10
python3-subscription-manager-rhsm-1.30.12-1.el10
python3-systemd-235-11.el10
python3-urllib3-1.26.19-2.el10_1.1
qemu-guest-agent-18:10.1.0-16.el10_2
quota-1:4.09-10.el10
quota-nls-1:4.09-10.el10
rdma-core-61.0-1.el10
readline-8.2-11.el10
redhat-release-10.2-17.el10
redhat-release-eula-10.2-17.el10
rpcbind-1.2.7-3.el10
rpm-4.19.1.1-23.el10
rpm-build-libs-4.19.1.1-23.el10
rpm-libs-4.19.1.1-23.el10
rpm-ostree-2026.1-2.el10
rpm-ostree-libs-2026.1-2.el10
rpm-plugin-selinux-4.19.1.1-23.el10
rpm-sequoia-1.10.1.1-2.el10
rpm-sign-libs-4.19.1.1-23.el10
rsync-3.4.1-2.el10_1.2
samba-client-libs-4.23.5-105.el10
samba-common-4.23.5-105.el10
samba-common-libs-4.23.5-105.el10
sed-4.9-5.el10
selinux-policy-42.1.18-4.el10_2
selinux-policy-targeted-42.1.18-4.el10_2
setup-2.14.5-7.el10
sg3_utils-1.48-7.el10
sg3_utils-libs-1.48-7.el10
shadow-utils-2:4.15.0-11.el10
shadow-utils-subid-2:4.15.0-11.el10
shared-mime-info-2.3-8.el10
shim-x64-16.1-4.el10
skopeo-2:1.22.0-2.el10
slang-2.3.3-8.el10
snappy-1.1.10-7.el10
socat-1.7.4.4-8.el10
sos-4.10.2-2.el10_2
sqlite-libs-3.46.1-5.el10_1
ssh-key-dir-0.1.4-9.el10
sssd-2.12.0-1.el10
sssd-ad-2.12.0-1.el10
sssd-client-2.12.0-1.el10
sssd-common-2.12.0-1.el10
sssd-common-pac-2.12.0-1.el10
sssd-ipa-2.12.0-1.el10
sssd-krb5-2.12.0-1.el10
sssd-krb5-common-2.12.0-1.el10
sssd-ldap-2.12.0-1.el10
sssd-nfs-idmap-2.12.0-1.el10
sssd-proxy-2.12.0-1.el10
stalld-1.26.3-1.el10
strace-6.12-3.el10
subscription-manager-1.30.12-1.el10
subscription-manager-rhsm-certificates-20220623-6.el10
sudo-1.9.17-2.p2.el10
systemd-257-23.el10
systemd-journal-remote-257-23.el10
systemd-libs-257-23.el10
systemd-pam-257-23.el10
systemd-udev-257-23.el10
tar-2:1.35-11.el10
tmux-3.3a-13.20230918gitb202a2f.el10
toolbox-0.3-1.el10
tpm2-tools-5.7-5.el10
tpm2-tss-4.1.3-6.el10
tpm2-tss-fapi-4.1.3-6.el10
tzdata-2026a-1.el10
unbound-anchor-1.24.2-7.el10_2.1
unbound-libs-1.24.2-7.el10_2.1
userspace-rcu-0.14.0-7.el10
util-linux-2.40.2-18.el10
util-linux-core-2.40.2-18.el10
vim-data-2:9.1.083-9.el10_2.1
vim-minimal-2:9.1.083-9.el10_2.1
virt-what-1.27-3.el10
which-2.21-44.el10
xfsprogs-6.16.0-1.el10
xmlsec1-1:1.2.39-3.el10
xmlsec1-openssl-1:1.2.39-3.el10
xz-1:5.6.2-4.el10_0
xz-libs-1:5.6.2-4.el10_0
zlib-ng-compat-2.2.3-3.el10_1
zram-generator-1.1.2-14.el10
zstd-1.5.5-9.el10

Changed:

NetworkManager 1:1.56.0-3.el10_2 → 1:1.56.0-1.el10
NetworkManager-cloud-setup 1:1.56.0-3.el10_2 → 1:1.56.0-1.el10
NetworkManager-libnm 1:1.56.0-3.el10_2 → 1:1.56.0-1.el10
NetworkManager-ovs 1:1.56.0-3.el10_2 → 1:1.56.0-1.el10
NetworkManager-tui 1:1.56.0-3.el10_2 → 1:1.56.0-1.el10
aardvark-dns 2:1.17.1-1.el10_2 → 2:1.17.0-1.el10
acl 2.4.0-1.el10_2 → 2.3.2-4.el10
amd-gpu-firmware 20260929-23.4.el10_2 → 20260130-22.el10
amd-ucode-firmware 20260929-23.4.el10_2 → 20260130-22.el10
attr 2.6.0-1.el10_2 → 2.5.2-5.el10
bind-libs 32:9.18.33-15.el10_2.13 → 32:9.18.33-15.el10_2.1
bind-license 32:9.18.33-15.el10_2.13 → 32:9.18.33-15.el10_2.1
bind-utils 32:9.18.33-15.el10_2.13 → 32:9.18.33-15.el10_2.1
bootc 1.16.4-2.el10_2 → 1.13.0-1.el10
bootupd 0.2.35-1.el10_2 → 0.2.32-1.el10
bsdtar 3.7.7-11.el10_2 → 3.7.7-8.el10_1
bubblewrap 0.10.0-5.el10_2 → 0.10.0-3.el10
c-ares 1.34.6-2.el10_2 → 1.34.6-1.el10
ca-certificates 2026.2.92_v9.0.319-100.3.el10_2 → 2025.2.80_v9.0.305-102.el10_1
cifs-utils 7.7-1.el10_2 → 7.5-1.el10
container-selinux 4:2.248.0-1.el10_2 → 4:2.246.0-1.el10
coreos-installer 0.27.0-1.el10_2 → 0.26.0-1.el10_2
coreos-installer-bootinfra 0.27.0-1.el10_2 → 0.26.0-1.el10_2
coreutils 9.5-8.el10_2.1 → 9.5-7.el10
coreutils-common 9.5-8.el10_2.1 → 9.5-7.el10
cri-o 1.35.10-3.rhaos4.22.git9383502.el10 → 1.34.6-2.rhaos4.21.gitbca534a.el10
cri-tools 1.35.0-4.el10 → 1.35.0-2.el10
criu 4.2-2.el10_2 → 4.2-1.el10
criu-libs 4.2-2.el10_2 → 4.2-1.el10
crun 1.30.1-2.el10_2 → 1.26-1.el10
crypto-policies 20260216-1.git0e54016.el10_2.2 → 20260216-1.git0e54016.el10
crypto-policies-scripts 20260216-1.git0e54016.el10_2.2 → 20260216-1.git0e54016.el10
curl 8.12.1-4.el10_2.7 → 8.12.1-4.el10
cyrus-sasl-gssapi 2.1.28-30.el10_2 → 2.1.28-29.el10
cyrus-sasl-lib 2.1.28-30.el10_2 → 2.1.28-29.el10
dbus-broker 36-5.el10_2 → 36-4.el10
dnf 4.20.0-22.el10_2 → 4.20.0-21.el10
dnf-data 4.20.0-22.el10_2 → 4.20.0-21.el10
dnsmasq 2.90-7.el10_2.1 → 2.90-5.el10
dracut 107-9.el10_2 → 107-4.el10
dracut-network 107-9.el10_2 → 107-4.el10
dracut-squash 107-9.el10_2 → 107-4.el10
expat 2.7.3-1.el10_2.7 → 2.7.3-1.el10
firewalld-filesystem 2.4.3-4.el10_2 → 2.4.0-1.el10_1
flatpak-session-helper 1.16.0-9.el10_2.6 → 1.16.0-9.el10
gawk 5.3.0-6.el10_2.1 → 5.3.0-6.el10
glib2 2.80.4-12.el10_2.22 → 2.80.4-12.el10
glibc 2.39-145.el10_2 → 2.39-113.el10
glibc-common 2.39-145.el10_2 → 2.39-113.el10
glibc-gconv-extra 2.39-145.el10_2 → 2.39-113.el10
glibc-minimal-langpack 2.39-145.el10_2 → 2.39-113.el10
gnutls 3.8.10-5.el10_2 → 3.8.10-3.el10_1
gzip 1.13-4.el10_2 → 1.13-3.el10
ignition 2.26.0-3.el10_2.4 → 2.26.0-2.el10_2
ignition-grub 2.26.0-3.el10_2.4 → 2.26.0-2.el10_2
intel-gpu-firmware 20260929-23.4.el10_2 → 20260130-22.el10
iptables-libs 1.8.11-16.el10_2 → 1.8.11-12.el10_1
iptables-nft 1.8.11-16.el10_2 → 1.8.11-12.el10_1
iscsi-initiator-utils 6.2.1.11-1.git4b3e853.el10_2.2 → 6.2.1.11-0.git4b3e853.el10
iscsi-initiator-utils-iscsiuio 6.2.1.11-1.git4b3e853.el10_2.2 → 6.2.1.11-0.git4b3e853.el10
isns-utils-libs 0.103-1.el10_2.1 → 0.103-1.el10
jq 1.7.1-11.el10_2.2 → 1.7.1-11.el10
kbd 2.6.4-8.el10_2 → 2.6.4-7.el10
kbd-legacy 2.6.4-8.el10_2 → 2.6.4-7.el10
kbd-misc 2.6.4-8.el10_2 → 2.6.4-7.el10
kernel 6.12.0-211.69.1.el10_2 → 6.12.0-211.7.1.el10_2
kernel-core 6.12.0-211.69.1.el10_2 → 6.12.0-211.7.1.el10_2
kernel-modules 6.12.0-211.69.1.el10_2 → 6.12.0-211.7.1.el10_2
kernel-modules-core 6.12.0-211.69.1.el10_2 → 6.12.0-211.7.1.el10_2
kernel-modules-extra 6.12.0-211.69.1.el10_2 → 6.12.0-211.7.1.el10_2
krb5-libs 1.21.3-10.el10_2 → 1.21.3-9.el10_1
libacl 2.4.0-1.el10_2 → 2.3.2-4.el10
libarchive 3.7.7-11.el10_2 → 3.7.7-8.el10_1
libattr 2.6.0-1.el10_2 → 2.5.2-5.el10
libcap 2.69-7.el10_2.1 → 2.69-7.el10_1.1
libcurl-minimal 8.12.1-4.el10_2.7 → 8.12.1-4.el10
libdnf 0.73.1-15.el10_2 → 0.73.1-14.el10
libevent 2.1.13-1.el10_2 → 2.1.12-16.el10
libgcrypt 1.11.0-7.el10_2 → 1.11.0-5.el10
libibverbs 1:61.0-2.el10_2 → 61.0-1.el10
libipa_hbac 2.12.0-3.el10_2.2 → 2.12.0-1.el10
libkcapi 1.5.1-1.el10_2 → 1.5.0-3.el10
libkcapi-hasher 1.5.1-1.el10_2 → 1.5.0-3.el10
libkcapi-hmaccalc 1.5.1-1.el10_2 → 1.5.0-3.el10
libldb 4.23.5-111.el10_2 → 4.23.5-105.el10
libnghttp2 1.68.0-3.el10_2.2 → 1.68.0-3.el10_2.1
libpcap 14:1.10.4-7.el10_2.1 → 14:1.10.4-7.el10
libsmbclient 4.23.5-111.el10_2 → 4.23.5-105.el10
libsolv 0.7.33-5.el10_2 → 0.7.33-2.el10
libsss_certmap 2.12.0-3.el10_2.2 → 2.12.0-1.el10
libsss_idmap 2.12.0-3.el10_2.2 → 2.12.0-1.el10
libsss_nss_idmap 2.12.0-3.el10_2.2 → 2.12.0-1.el10
libsss_sudo 2.12.0-3.el10_2.2 → 2.12.0-1.el10
libtasn1 4.20.0-5.el10_2 → 4.20.0-1.el10
libusb1 1.0.30-1.el10_2 → 1.0.29-3.el10
libuv 1:1.52.1-1.el10_2 → 1:1.51.0-1.el10
libwbclient 4.23.5-111.el10_2 → 4.23.5-105.el10
libxml2 2.12.5-10.el10_2.4 → 2.12.5-10.el10
libxslt 1.1.39-8.el10_2.1 → 1.1.39-8.el10_0
linux-firmware 20260929-23.4.el10_2 → 20260130-22.el10
linux-firmware-whence 20260929-23.4.el10_2 → 20260130-22.el10
mdadm 4.4-3.el10_2.2 → 4.4-3.el10
microcode_ctl 4:20260812-0.el10_2 → 4:20260210-1.el10
nftables 1:1.1.5-6.el10_2 → 1:1.1.5-3.el10
nmstate 2.2.60-3.el10_2 → 2.2.58-1.el10
nvidia-gpu-firmware 20260929-23.4.el10_2 → 20260130-22.el10
openshift-clients 4.22.0-202610221634.p2.ga726d94.assembly.stream.el10 → 4.21.0-202605201414.p2.gfdf8dab.assembly.stream.el10
openshift-kubelet 4.22.0-202610242057.p2.g7545c30.assembly.stream.el10 → 4.21.0-202606042250.p2.ga8c502a.assembly.stream.el10
openssh 9.9p1-29.el10_2 → 9.9p1-22.el10_2
openssh-clients 9.9p1-29.el10_2 → 9.9p1-22.el10_2
openssh-server 9.9p1-29.el10_2 → 9.9p1-22.el10_2
openssl 1:3.5.8-2.el10_2 → 1:3.5.5-1.el10
openssl-fips-provider 3.0.7-11.el10_2 → 3.0.7-8.el10
openssl-fips-provider-so 3.0.7-11.el10_2 → 3.0.7-8.el10
openssl-libs 1:3.5.8-2.el10_2 → 1:3.5.5-1.el10
openvswitch-selinux-extra-policy 1.0-40.el10fdp → 1.0-39.el10fdp
ose-aws-ecr-image-credential-provider 4.22.0-202610221634.p2.gd3eb84f.assembly.stream.el10 → 4.21.0-202606021425.p2.gfdc7f3f.assembly.stream.el10
ose-azure-acr-image-credential-provider 4.22.0-202610221634.p2.g860d459.assembly.stream.el10 → 4.21.0-202606092150.p2.gc9afac2.assembly.stream.el10
ose-crio-credential-provider 4.22.0-202610221634.p2.g83d4961.assembly.stream.el10 → 4.21.0-202606021425.p2.g83d4961.assembly.stream.el10
ose-gcp-gcr-image-credential-provider 4.22.0-202610221634.p2.g85bdbf8.assembly.stream.el10 → 4.21.0-202606021425.p2.ge27acce.assembly.stream.el10
p11-kit 0.26.4-1.el10_2 → 0.26.2-1.el10
p11-kit-trust 0.26.4-1.el10_2 → 0.26.2-1.el10
pam 1.6.1-9.el10_2.1 → 1.6.1-9.el10
pam-libs 1.6.1-9.el10_2.1 → 1.6.1-9.el10
passt 0^20251210.gd04c480-7.el10_2 → 0^20251210.gd04c480-3.el10
passt-selinux 0^20251210.gd04c480-7.el10_2 → 0^20251210.gd04c480-3.el10
pcre2 10.44-1.5.el10_2 → 10.44-1.el10.3
pcre2-syntax 10.44-1.5.el10_2 → 10.44-1.el10.3
podman 7:5.8.2-11.el10_2 → 7:5.8.0-2.el10
podman-sequoia 0.4.0~pqc.3-1.el10_2 → 0.4.0~pqc.2-1.el10
policycoreutils 3.10-2.el10_2 → 3.10-1.el10
policycoreutils-python-utils 3.10-2.el10_2 → 3.10-1.el10
polkit 125-4.el10_2.1 → 125-4.el10
polkit-libs 125-4.el10_2.1 → 125-4.el10
python3 3.12.15-1.el10_2 → 3.12.12-5.el10_2
python3-dnf 4.20.0-22.el10_2 → 4.20.0-21.el10
python3-hawkey 0.73.1-15.el10_2 → 0.73.1-14.el10
python3-idna 3.7-6.el10_2 → 3.7-4.el10
python3-libdnf 0.73.1-15.el10_2 → 0.73.1-14.el10
python3-libs 3.12.15-1.el10_2 → 3.12.12-5.el10_2
python3-pip-wheel 23.3.2-11.el10_2 → 23.3.2-7.el10
python3-policycoreutils 3.10-2.el10_2 → 3.10-1.el10
python3-urllib3 1.26.19-4.el10_2.2 → 1.26.19-2.el10_1.1
qemu-guest-agent 18:10.1.0-16.el10_2.5 → 18:10.1.0-16.el10_2
rdma-core 1:61.0-2.el10_2 → 61.0-1.el10
redhat-release 10.2-21.el10 → 10.2-17.el10
redhat-release-eula 10.2-21.el10 → 10.2-17.el10
rpcbind 1.2.7-3.el10_2.1 → 1.2.7-3.el10
rpm-ostree 2026.3-2.el10_2 → 2026.1-2.el10
rpm-ostree-libs 2026.3-2.el10_2 → 2026.1-2.el10
rpm-sequoia 1.10.2.1-1.el10_2 → 1.10.1.1-2.el10
rsync 3.5.0-3.el10_2 → 3.4.1-2.el10_1.2
samba-client-libs 4.23.5-111.el10_2 → 4.23.5-105.el10
samba-common 4.23.5-111.el10_2 → 4.23.5-105.el10
samba-common-libs 4.23.5-111.el10_2 → 4.23.5-105.el10
selinux-policy 42.1.18-4.el10_2.4 → 42.1.18-4.el10_2
selinux-policy-targeted 42.1.18-4.el10_2.4 → 42.1.18-4.el10_2
sg3_utils 1.48-7.el10_2.2 → 1.48-7.el10
sg3_utils-libs 1.48-7.el10_2.2 → 1.48-7.el10
skopeo 2:1.22.2-6.el10_2 → 2:1.22.0-2.el10
sos 4.11.2-4.el10_2 → 4.10.2-2.el10_2
sqlite-libs 3.46.1-6.el10_2 → 3.46.1-5.el10_1
sssd 2.12.0-3.el10_2.2 → 2.12.0-1.el10
sssd-ad 2.12.0-3.el10_2.2 → 2.12.0-1.el10
sssd-client 2.12.0-3.el10_2.2 → 2.12.0-1.el10
sssd-common 2.12.0-3.el10_2.2 → 2.12.0-1.el10
sssd-common-pac 2.12.0-3.el10_2.2 → 2.12.0-1.el10
sssd-ipa 2.12.0-3.el10_2.2 → 2.12.0-1.el10
sssd-krb5 2.12.0-3.el10_2.2 → 2.12.0-1.el10
sssd-krb5-common 2.12.0-3.el10_2.2 → 2.12.0-1.el10
sssd-ldap 2.12.0-3.el10_2.2 → 2.12.0-1.el10
sssd-nfs-idmap 2.12.0-3.el10_2.2 → 2.12.0-1.el10
sssd-proxy 2.12.0-3.el10_2.2 → 2.12.0-1.el10
sudo 1.9.17-10.p2.el10_2.7 → 1.9.17-2.p2.el10
systemd 257-23.el10_2.2 → 257-23.el10
systemd-journal-remote 257-23.el10_2.2 → 257-23.el10
systemd-libs 257-23.el10_2.2 → 257-23.el10
systemd-pam 257-23.el10_2.2 → 257-23.el10
systemd-udev 257-23.el10_2.2 → 257-23.el10
tar 2:1.35-13.el10_2 → 2:1.35-11.el10
toolbox 0.3-2.el10_2 → 0.3-1.el10
tzdata 2026e-1.el10_2 → 2026a-1.el10
unbound-anchor 1.24.2-7.el10_2.6 → 1.24.2-7.el10_2.1
unbound-libs 1.24.2-7.el10_2.6 → 1.24.2-7.el10_2.1
vim-data 2:9.1.083-9.el10_2.22 → 2:9.1.083-9.el10_2.1
vim-minimal 2:9.1.083-9.el10_2.22 → 2:9.1.083-9.el10_2.1
which 2.21-44.el10_0 → 2.21-44.el10
xz 1:5.6.2-4.el10_2.1 → 1:5.6.2-4.el10_0
xz-libs 1:5.6.2-4.el10_2.1 → 1:5.6.2-4.el10_0

Extensions

Full list (207 packages)

bc-1.07.1-23.el10.x86_64
binutils-2.41-63.el10.x86_64
binutils-gold-2.41-63.el10.x86_64
bison-3.8.2-9.el10.x86_64
capstone-5.0.1-8.el10_2.x86_64
cmake-filesystem-3.31.8-1.el10.x86_64
corosync-3.1.10-1.el10_2.1.x86_64
corosynclib-3.1.10-1.el10_2.1.x86_64
cpp-14.3.1-4.4.el10.x86_64
edk2-ovmf-20251114-5.el10_2.noarch
elfutils-debuginfod-client-0.194-2.el10_2.x86_64
elfutils-libelf-devel-0.194-2.el10_2.x86_64
fence-agents-all-4.16.0-21.el10_2.1.x86_64
fence-agents-amt-ws-4.16.0-21.el10_2.1.noarch
fence-agents-apc-4.16.0-21.el10_2.1.noarch
fence-agents-apc-snmp-4.16.0-21.el10_2.1.noarch
fence-agents-bladecenter-4.16.0-21.el10_2.1.noarch
fence-agents-brocade-4.16.0-21.el10_2.1.noarch
fence-agents-cisco-mds-4.16.0-21.el10_2.1.noarch
fence-agents-cisco-ucs-4.16.0-21.el10_2.1.noarch
fence-agents-common-4.16.0-21.el10_2.1.x86_64
fence-agents-drac5-4.16.0-21.el10_2.1.noarch
fence-agents-eaton-snmp-4.16.0-21.el10_2.1.noarch
fence-agents-emerson-4.16.0-21.el10_2.1.noarch
fence-agents-eps-4.16.0-21.el10_2.1.noarch
fence-agents-heuristics-ping-4.16.0-21.el10_2.1.noarch
fence-agents-hpblade-4.16.0-21.el10_2.1.noarch
fence-agents-ibmblade-4.16.0-21.el10_2.1.noarch
fence-agents-ifmib-4.16.0-21.el10_2.1.noarch
fence-agents-ilo-moonshot-4.16.0-21.el10_2.1.noarch
fence-agents-ilo-mp-4.16.0-21.el10_2.1.noarch
fence-agents-ilo-ssh-4.16.0-21.el10_2.1.noarch
fence-agents-ilo2-4.16.0-21.el10_2.1.noarch
fence-agents-intelmodular-4.16.0-21.el10_2.1.noarch
fence-agents-ipdu-4.16.0-21.el10_2.1.noarch
fence-agents-ipmilan-4.16.0-21.el10_2.1.noarch
fence-agents-kdump-4.16.0-21.el10_2.1.x86_64
fence-agents-mpath-4.16.0-21.el10_2.1.noarch
fence-agents-redfish-4.16.0-21.el10_2.1.x86_64
fence-agents-rhevm-4.16.0-21.el10_2.1.noarch
fence-agents-rsa-4.16.0-21.el10_2.1.noarch
fence-agents-rsb-4.16.0-21.el10_2.1.noarch
fence-agents-sbd-4.16.0-21.el10_2.1.noarch
fence-agents-scsi-4.16.0-21.el10_2.1.noarch
fence-agents-vmware-rest-4.16.0-21.el10_2.1.noarch
fence-agents-vmware-soap-4.16.0-21.el10_2.1.noarch
fence-agents-wti-4.16.0-21.el10_2.1.noarch
fence-virt-4.16.0-21.el10_2.1.x86_64
flex-2.6.4-19.el10.x86_64
gcc-14.3.1-4.4.el10.x86_64
glibc-devel-2.39-113.el10.x86_64
gnutls-dane-3.8.10-3.el10_1.x86_64
gnutls-utils-3.8.10-3.el10_1.x86_64
groff-base-1.23.0-10.el10.x86_64
ipmitool-1.8.19-10.el10_1.x86_64
ipxe-roms-qemu-20240119-5.gitde8a0821.el10.noarch
kata-containers-3.25.0-7.rhaos4.21.el9.x86_64
kernel-6.12.0-211.7.1.el10_2.x86_64
kernel-core-6.12.0-211.7.1.el10_2.x86_64
kernel-devel-6.12.0-211.7.1.el10_2.x86_64
kernel-headers-6.12.0-211.7.1.el10_2.x86_64
kernel-modules-6.12.0-211.7.1.el10_2.x86_64
kernel-modules-extra-6.12.0-211.7.1.el10_2.x86_64
kernel-rt-core-6.12.0-211.7.1.el10_2.x86_64
kernel-rt-devel-6.12.0-211.7.1.el10_2.x86_64
kernel-rt-modules-6.12.0-211.7.1.el10_2.x86_64
kernel-rt-modules-core-6.12.0-211.7.1.el10_2.x86_64
kernel-rt-modules-extra-6.12.0-211.7.1.el10_2.x86_64
krb5-pkinit-1.21.3-9.el10_1.x86_64
krb5-workstation-1.21.3-9.el10_1.x86_64
libfdt-1.7.0-12.el10.x86_64
libkadm5-1.21.3-9.el10_1.x86_64
libknet1-1.30-1.el10.x86_64
libknet1-compress-bzip2-plugin-1.30-1.el10.x86_64
libknet1-compress-lz4-plugin-1.30-1.el10.x86_64
libknet1-compress-lzma-plugin-1.30-1.el10.x86_64
libknet1-compress-lzo2-plugin-1.30-1.el10.x86_64
libknet1-compress-plugins-all-1.30-1.el10.x86_64
libknet1-compress-zlib-plugin-1.30-1.el10.x86_64
libknet1-compress-zstd-plugin-1.30-1.el10.x86_64
libknet1-crypto-nss-plugin-1.30-1.el10.x86_64
libknet1-crypto-openssl-plugin-1.30-1.el10.x86_64
libknet1-crypto-plugins-all-1.30-1.el10.x86_64
libknet1-plugins-all-1.30-1.el10.x86_64
libmpc-1.3.1-7.el10.x86_64
libnozzle1-1.30-1.el10.x86_64
libpng-2:1.6.40-11.el10_2.x86_64
libqb-2.0.8-6.el10.x86_64
libslirp-4.7.0-10.el10.x86_64
libwsman1-2.8.1-3.el10.x86_64
libxcrypt-devel-4.4.36-10.el10.x86_64
libzstd-devel-1.5.5-9.el10.x86_64
lm_sensors-libs-3.6.0-20.el10.x86_64
m4-1.4.19-11.el10.x86_64
make-1:4.4.1-9.el10.x86_64
ncurses-6.4-15.20240127.el10_1.x86_64
net-snmp-libs-1:5.9.4-19.el10.x86_64
net-snmp-utils-1:5.9.4-19.el10.x86_64
nspr-4.36.0-8.el10_0.x86_64
nss-3.112.0-8.el10_0.x86_64
nss-softokn-3.112.0-8.el10_0.x86_64
nss-softokn-freebl-3.112.0-8.el10_0.x86_64
nss-sysinit-3.112.0-8.el10_0.x86_64
nss-tools-3.112.0-8.el10_0.x86_64
nss-util-3.112.0-8.el10_0.x86_64
openssl-devel-1:3.5.5-1.el10.x86_64
openwsman-python3-2.8.1-3.el10.x86_64
pacemaker-3.0.1-5.el10.x86_64
pacemaker-cli-3.0.1-5.el10.x86_64
pacemaker-cluster-libs-3.0.1-5.el10.x86_64
pacemaker-libs-3.0.1-5.el10.x86_64
pacemaker-schemas-3.0.1-5.el10.noarch
pcp-conf-7.0.3-3.el10.x86_64
pcp-libs-7.0.3-3.el10.x86_64
pcs-0.12.2-3.el10_2.1.x86_64
perl-AutoLoader-5.74-512.2.el10_0.noarch
perl-B-1.89-512.2.el10_0.x86_64
perl-Carp-1.54-511.el10.noarch
perl-Class-Struct-0.68-512.2.el10_0.noarch
perl-Data-Dumper-2.189-512.el10.x86_64
perl-Digest-1.20-511.el10.noarch
perl-Digest-MD5-2.59-6.el10.x86_64
perl-DynaLoader-1.56-512.2.el10_0.x86_64
perl-Encode-4:3.21-511.el10.x86_64
perl-Errno-1.38-512.2.el10_0.x86_64
perl-Exporter-5.78-511.el10.noarch
perl-Fcntl-1.18-512.2.el10_0.x86_64
perl-File-Basename-2.86-512.2.el10_0.noarch
perl-File-Path-2.18-512.el10.noarch
perl-File-Temp-1:0.231.100-512.el10.noarch
perl-File-stat-1.14-512.2.el10_0.noarch
perl-FileHandle-2.05-512.2.el10_0.noarch
perl-Getopt-Long-1:2.58-3.el10.noarch
perl-Getopt-Std-1.14-512.2.el10_0.noarch
perl-HTTP-Tiny-0.088-512.el10.noarch
perl-IO-1.55-512.2.el10_0.x86_64
perl-IO-Socket-IP-0.42-512.el10.noarch
perl-IO-Socket-SSL-2.085-3.el10.noarch
perl-IPC-Open3-1.22-512.2.el10_0.noarch
perl-MIME-Base64-3.16-511.el10.x86_64
perl-Mozilla-CA-20231213-5.el10.noarch
perl-NDBM_File-1.17-512.2.el10_0.x86_64
perl-Net-SSLeay-1.94-8.el10.x86_64
perl-POSIX-2.20-512.2.el10_0.x86_64
perl-PathTools-3.91-512.el10.x86_64
perl-Pod-Escapes-1:1.07-511.el10.noarch
perl-Pod-Perldoc-3.28.01-512.el10.noarch
perl-Pod-Simple-1:3.45-511.el10.noarch
perl-Pod-Usage-4:2.03-511.el10.noarch
perl-Scalar-List-Utils-5:1.63-511.el10.x86_64
perl-SelectSaver-1.02-512.2.el10_0.noarch
perl-Socket-4:2.038-511.el10.x86_64
perl-Storable-1:3.32-511.el10.x86_64
perl-Symbol-1.09-512.2.el10_0.noarch
perl-Term-ANSIColor-5.01-512.el10.noarch
perl-Term-Cap-1.18-511.el10.noarch
perl-Text-ParseWords-3.31-511.el10.noarch
perl-Text-Tabs+Wrap-2024.001-511.el10.noarch
perl-Time-Local-2:1.350-511.el10.noarch
perl-TimeDate-1:2.33-16.el10.noarch
perl-URI-5.27-3.el10.noarch
perl-base-2.27-512.2.el10_0.noarch
perl-constant-1.33-512.el10.noarch
perl-if-0.61.000-512.2.el10_0.noarch
perl-interpreter-4:5.40.2-512.2.el10_0.x86_64
perl-libnet-3.15-512.el10.noarch
perl-libs-4:5.40.2-512.2.el10_0.x86_64
perl-locale-1.12-512.2.el10_0.noarch
perl-mro-1.29-512.2.el10_0.x86_64
perl-overload-1.37-512.2.el10_0.noarch
perl-overloading-0.02-512.2.el10_0.noarch
perl-parent-1:0.241-512.el10.noarch
perl-podlators-1:5.01-511.el10.noarch
perl-vars-1.05-512.2.el10_0.noarch
pixman-0.43.4-2.el10.x86_64
protobuf-3.19.6-15.el10_1.x86_64
python3-cffi-1.16.0-7.el10.x86_64
python3-cryptography-43.0.0-4.el10.x86_64
python3-lxml-5.2.1-4.el10.x86_64
python3-ply-3.11-25.el10.noarch
python3-pycparser-2.20-16.el10.noarch
python3-pyparsing-3.1.1-7.el10.noarch
python3-tornado-6.5.5-1.el10_2.x86_64
qemu-img-18:10.1.0-16.el10_2.x86_64
qemu-kvm-common-18:10.1.0-16.el10_2.x86_64
qemu-kvm-core-18:10.1.0-16.el10_2.x86_64
resource-agents-4.16.0-53.el10_2.3.x86_64
ruby-3.3.10-12.el10_1.x86_64
ruby-default-gems-3.3.10-12.el10_1.noarch
ruby-libs-3.3.10-12.el10_1.x86_64
rubygem-bigdecimal-3.1.5-12.el10_1.x86_64
rubygem-bundler-2.5.22-12.el10_1.noarch
rubygem-io-console-0.7.1-12.el10_1.x86_64
rubygem-json-2.7.2-12.el10_1.x86_64
rubygem-psych-5.1.2-12.el10_1.x86_64
rubygem-rdoc-6.6.3.1-12.el10_1.noarch
rubygem-rexml-3.4.4-12.el10_1.noarch
rubygems-3.5.22-12.el10_1.noarch
sbd-1.5.2-1.el10.5.x86_64
seabios-bin-1.17.0-1.el10.noarch
seavgabios-bin-1.17.0-1.el10.noarch
sysstat-12.7.6-4.el10.x86_64
telnet-1:0.17-94.el10.x86_64
usbguard-1.1.4-2.el10.x86_64
usbguard-selinux-1.1.4-2.el10.noarch
virtiofsd-1.13.3-1.el10.x86_64
zlib-ng-compat-devel-2.2.3-3.el10_1.x86_64

Red Hat Enterprise Linux CoreOS base layer: 10.2.20260521-0

OCPBUGS-87873: Add support for hermetic builds via Cachi2 prefetched CoreOS base layer: ISOs #97

View changelog in Markdown or change previous release:

Source code for this page located on github