4.16.0-0.nightly-multi-2026-10-07-000125

PullSpec:

quay.io/openshift-release-dev/ocp-release-nightly@sha256:2b3502ece592b026d8f16aa35ec122ae4e5da3b5c54e81ff54a4699983d9136a

Qualifiers (status api): None

Tests:

Blocking jobs
- multi-e2e-ovn Succeeded periodic-ci-openshift-multiarch-main-nightly-4.16-ocp-e2e-aws-ovn-heterogeneous

Changes from 4.16.0-0.nightly-multi-2026-10-02-075605

Created: 2026-10-07 02:51:13 +0000 UTC

Image Digest: sha256:bba8bda2dca33ed3966aac5853694aff854ff6e60faa1f920a37f5e952f24cb5

Components

Kubectl 1.29.7
Kubernetes 1.29.14
Kubernetes Tests 1.29.0
Red Hat Enterprise Linux CoreOS 416.94.202610010305-0

Rebuilt images without code change

network-interface-bond-cni git e6880659 sha256:40117b66422eb3d5d50bf7662df2dd4260d701811a27970f296f61c43357ea8d
ovn-kubernetes git 5b36fd8e sha256:7e6f8ac087357364e58b8b04dade08302e001470605a094c6d7eafcf102fd83a

agent-installer-api-server

OCPBUGS-89848: patching golang.org/x/crypto with sustaining/crypto@v0.33.0-sec.2 #10802
Full changelog

aws-cloud-controller-manager

OCPBUGS-88174: replace golang.org/x/net with sustaining fork v0.35.0-sec.4 #180
Full changelog

azure-machine-controllers

OCPBUGS-103039: replace golang.org/x/net with openshift-sustaining/net@v0.35.0-sec.4 #215
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-102965: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #291
Full changelog

console-operator

OCPBUGS-102982: Use github.com/openshift-sustaining/net patch to fix CVE-2026-33814 #1225
Full changelog

machine-api-operator

OCPBUGS-103044: replace golang.org/x/net with openshift-sustaining/net@v0.35.0-sec.4 #1547
Full changelog

olm-catalogd

OCPBUGS-103064: [release-4.16] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #149
Full changelog

vsphere-csi-driver-operator

OCPBUGS-103111: Bump golang.org/x/net to v0.35.0-sec.3 #358
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github