Back to index

PullSpec:

quay.io/openshift-release-dev/ocp-release:4.19.53-multi

Qualifiers (status api): None

Tests:

• Informing jobs
  • e2e-aws-ovn-multi-x-ax Succeeded periodic-ci-openshift-multiarch-main-nightly-4.19-ocp-e2e-aws-ovn-multi-x-ax
  • e2e-aws-ovn-multi-x-x Succeeded periodic-ci-openshift-multiarch-main-nightly-4.19-ocp-e2e-aws-ovn-multi-x-x
  • hypershift-e2e-aks-multi-x-ax Failed (1 retry) periodic-ci-openshift-hypershift-release-4.19-periodics-e2e-aks-multi-x-ax

    • Attempt 1 Failed
    • Attempt 2 Failed

Upgrades from:

• 4.22.19 - Failed Failed

---

Loading changelog, this may take a while ...

Changes from 4.22.19

Created: 2026-10-25 14:53:19 +0000 UTC

Image Digest: sha256:ce46e879b787c9e79c35b38c6dba8217b4459eecf0d6a19fd0dfd690cb7746b4

Release 4.19.53 was created from quay.io/openshift-release-dev/ocp-release-nightly@sha256:fc52d28be0c8f92d7b2e7844fb3e60dc6f09e95b7a1ed36775896fbfa549b5e1

Components

• Kubectl upgraded from 1.35.2 to 1.32.1
• Kubernetes upgraded from 1.35.8 to 1.32.13
• Kubernetes Tests upgraded from 1.35.1 to 1.32.8
• Red Hat Enterprise Linux CoreOS upgraded from 10.2.20261013-0 to 9.6.20261023-1

  The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	OKD Hypershift	OKD SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
AWSClusterHostedDNSInstall (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AWSDedicatedHosts (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AWSDualStackInstall (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AWSEuropeanSovereignCloudInstall (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AWSServiceLBNetworkSecurityGroup (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AdditionalStorageConfig (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AzureClusterHostedDNSInstall (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AzureDedicatedHosts (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AzureDualStackInstall (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AzureMultiDisk (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
BootImageSkewEnforcement (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
CBORServingAndStorage (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
CRDCompatibilityRequirementOperator (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
CRIOCredentialProviderConfig (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClientsAllowCBOR (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClientsPreferCBOR (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIComputeInstall (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIControlPlaneInstall (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIMachineManagement (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIMachineManagementAWS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIMachineManagementAzure (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIMachineManagementBareMetal (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIMachineManagementGCP (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIMachineManagementOpenStack (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIMachineManagementPowerVS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIMachineManagementVSphere (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterUpdateAcceptRisks (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterUpdatePreflight (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ConfidentialCluster (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ConfigurablePKI (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
DRAPartitionableDevices (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
EVPN (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
EventTTL (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ExternalOIDCExternalClaimsSourcing (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ExternalOIDCWithUpstreamParity (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ExternalSnapshotMetadata (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
GCPCustomAPIEndpointsInstall (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
GCPDualStackInstall (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
GCPSovereignCloudInstall (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
GatewayAPIWithoutOLM (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
HyperShiftOnlyDynamicResourceAllocation (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ImageModeStatusReporting (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
IrreconcilableMachineConfig (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
KMSEncryption (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MachineAPIMigrationAWS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MachineAPIMigrationOpenStack (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MachineAPIMigrationVSphere (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ManagedBootImagesCPMS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MultiDiskSetup (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MutableCSINodeAllocatableCount (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MutatingAdmissionPolicy (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NetworkConnect (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NewOLMBoxCutterRuntime (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NewOLMConfigAPI (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NewOLMWebhookProviderOpenshiftServiceCA (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NoOverlayMode (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NoRegistryClusterInstall (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
OSStreams (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
OnPremDNSRecords (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ProvisioningRequestAvailable (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
StoragePerformantSecurityPolicy (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
TLSAdherence (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereMixedNodeEnv (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereMultiVCenterDay2 (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Not Available (Changed)	Not Available (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
DualReplica (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Disabled (Changed)	Disabled (Changed)
SigstoreImageVerificationPKI (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Disabled (Changed)	Disabled (Changed)
ExternalOIDCWithUIDAndExtraClaimMappings (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
ImageStreamImportMode (3 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
IngressControllerDynamicConfigurationManager (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
InsightsConfig (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
InsightsOnDemandDataGather (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
SigstoreImageVerification (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
UpgradeStatus (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
UserNamespacesPodSecurityStandards (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
UserNamespacesSupport (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
VSphereHostVMGroupZonal (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
VSphereMultiDisk (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
VSphereMultiNetworks (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
ExternalOIDC (0 tests)	Enabled	Disabled (Changed)	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled	Enabled
AWSEFSDriverVolumeMetrics (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
AdditionalRoutingCapabilities (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
AdminNetworkPolicy (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
AlibabaPlatform (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
BareMetalLoadBalancer (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
CPMSMachineNamePrefix (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
ChunkSizeMiB (5 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
CloudDualStackNodeIPs (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
DisableKubeletCloudCredentialProviders (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
GCPLabelsTags (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
GatewayAPI (6 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
GatewayAPIController (5 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
HardwareSpeed (3 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
IngressControllerLBSubnetsAWS (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
MachineConfigNodes (13 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
ManagedBootImages (5 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
ManagedBootImagesAWS (5 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
MultiArchInstallAWS (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
MultiArchInstallGCP (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
NetworkDiagnosticsConfig (6 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
NetworkLiveMigration (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
NetworkSegmentation (56 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
NodeDisruptionPolicy (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
OnClusterBuild (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
PersistentIPsForVirtualization (12 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
PinnedImages (5 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
PrivateHostedZoneAWS (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
RouteAdvertisements (11 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
SetEIPForNLBIngressController (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
StreamingCollectionEncodingToJSON (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
StreamingCollectionEncodingToProtobuf (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
VSphereDriverConfiguration (5 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
VSphereMultiVCenters (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
ValidatingAdmissionPolicy (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
ClusterVersionOperatorConfiguration (0 tests)	Disabled	Disabled	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Disabled (Changed)	Disabled (Changed)
KMSEncryptionProvider (0 tests)	Disabled	Disabled	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Enabled (Changed)	Enabled (Changed)
SELinuxMount (6 tests)	Disabled	Disabled	Enabled	Enabled	Not Available (Changed)	Not Available (Changed)	Disabled (Changed)	Disabled (Changed)
DynamicResourceAllocation (0 tests)			Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
GCPClusterHostedDNS (0 tests)			Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
HighlyAvailableArbiter (0 tests)			Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
InsightsConfigAPI (0 tests)			Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
InsightsRuntimeExtractor (0 tests)			Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
MachineAPIProviderOpenStack (0 tests)			Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
NodeSwap (0 tests)			Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
PlatformOperators (0 tests)			Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
ProcMountType (0 tests)			Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
SELinuxChangePolicy (0 tests)			Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)
TranslateStreamCloseWebsocketRequests (0 tests)			Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)
VolumeAttributesClass (30 tests)			Enabled (New)	Enabled (New)	Not Available (Changed)	Not Available (Changed)	Enabled (New)	Enabled (New)

New images

• cluster-kube-cluster-api-operator git 21f85831 sha256:e3b7ffb2a4894a8a9905fc92e9ef564d92ff699798d3d4bdccae215928afe36b
• libvirt-machine-controllers git be869073 sha256:b7cfb4f3b2c008608606f90423e4267b28346e82cf97f3d24ac7af77ae7b2e4f

Removed images

• agent-installer-ui
• aws-node-termination-handler
• csi-external-snapshot-metadata
• rhel-coreos-10
• rhel-coreos-10-extensions
• volume-data-source-validator

agent-installer-api-server

• OCPBUGS-89930: patching golang.org/x/crypto with sustaining/crypto@v0.33.0-sec.2 #10799
• OCPBUGS-94046: Add sourcedir /run/chrony-dhcp to generated chrony.conf #10545
• MGMT-23439: Pin gotestsum to v1.12.2 for Go 1.21 compatibility #10020
• OCPBUGS-74630: Retry incomplete cluster registration in ABI #8809
• And 8 elided commits (e.g. from squash or rebase merges)
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• OCPBUGS-103563: Bump x/net to v0.35.0-sec.4 #2290
• Full changelog

agent-installer-node-agent

• OCPBUGS-103566: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #1619
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

agent-installer-utils

• OCPBUGS-68295: bump github.com/sirupsen/logrus to v1.9.3 #236
• OCPBUGS-60938: Update ISOBuilder OCP 4.19 Dev Preview Release notes #142
• OCPBUGS-60107: Add ISOBuilder Release notes #137
• OCPBUGS-59731: add back NHR and FAR operators #131
• OCPBUGS-58285: OVE ISOBuilder works only if and when the script is ex… #121
• OCPBUGS-59254: invalid default channel configuration for package “mtv… #126
• OCPBUGS-59666: Enable ‘q’ and ‘c’ hotkeys for quit and configure network #129
• OCPBUGS-57922: Update operators list in ISOBuilder #118
• OCPBUGS-57420: Bump iso-builder appliance dependency #115
• OCPBUGS-57301: Update mtv-operator to version used in 4.19 catalog #112
• OCPBUGS-56991: OVE isobuilder fails on CentOS Stream 9 due to missing… #104
• ART-13081: append .0 to go.mod version #106
• OCPBUGS-56690: Fix nmtui redirection after quit #97
• OCPBUGS-56810: bump appliance to 936210 #99
• OCPBUGS-56759: ISOBuilder- Remove default password for nodes #100
• OCPBUGS-56490: Add operator CRs post-install in OVE build script #95
• OCPBUGS-56216: OVE builder: Remove RHEL9 image from additionalImages #92
• OCPBUGS-56116: configure the channel for each OLM operators #90
• OCPBUGS-55793: Use internal image registry #87
• OCPBUGS-55761: Include RHEL 9 guest image to support VM launches via … #85
• Full changelog

apiserver-network-proxy

• ART-13081: append .0 to go.mod version #79
• Full changelog

aws-cluster-api-controllers

• OCPBUGS-103572: replace golang.org/x/net with openshift-sustaining/net v0.35.0-sec.4 for CVE-2026-33814 #651
• 🐛 OCPBUGS-123677: UPSTREAM: <carry>: Fix unit tests for OpenShift CI environment #640
• 🌱 OCPBUGS-123613: UPSTREAM: <carry>: Remove upstream .github files unused in OpenShift CI #639
• OCPBUGS-61794: UPSTREAM <carry>: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It #568
• OCPBUGS-59241, OCPBUGS-59242: bump github.com/golang/glog to v1.2.5 #558
• OCPBUGS-55998: Update manifests to remove reliance on v1beta1 admission registration #552
• Full changelog

aws-ebs-csi-driver

• OCPBUGS-82794: Address CVE-2026-35469 #330
• OCPBUGS-80386: Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.75.1-sec.1 #312
• OCPBUGS-72365: Fix incomplete vendor/ after vendoring #295
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

• OCPBUGS-103638, OCPBUGS-103715, OCPBUGS-103746: replace golang.org/x/net with openshift-sustaining fork #633
• OCPBUGS-103592, OCPBUGS-103601: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #611
• OCPBUGS-80489: Bump google.golang.org/grpc #541
• OCPBUGS-84242: [release-4.19] adds the csi-external-resizer to the image-references #546
• OCPBUGS-56898: Fix Cinder, Manila driver metrics #386
• OCPBUGS-63559: Add RBAC ClusterRole and Binding for driver node #455
• OCPBUGS-62926: Add withCABundleDaemonSetHook() to AWS EFS operator #444
• OCPBUGS-60595: Bump library-go #420
• OCPBUGS-59893: Remove stale conditions #411
• OCPBUGS-56527: openstack-cinder: Set –with-topology flag for node driver also #384
• Full changelog

aws-kms-encryption-provider

• OCPBUGS-80360: Bump google.golang.org/grpc to v1.79.3 #42
• OCPBUGS-45666: Updating aws-kms-encryption-provider-container image to be consistent with ART for 4.19 #27
• Full changelog

aws-machine-controllers

• OCPBUGS-73729: Fix reconciler consistency checks in Update and Exists #165
• OCPBUGS-63137: client: re-use a single file for building the session instead of randomly named files #152
• OCPBUGS-63137: revert: client: re-use a single file for building the session instead of randomly named files #149
• OCPBUGS-63137: client: re-use a single file for building the session instead of randomly named files #147
• OCPBUGS-56633: fix: make machineset annotation controller respect paused condition #130
• OCPBUGS-55706: Update machine-api-operator pkg with fixes #128
• Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

• OCPBUGS-103595, OCPBUGS-103768: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.43.0-sec.3 to address CVE-2026-33814 #207
• OCPBUGS-80390, OCPBUGS-80391, OCPBUGS-80533: Bump google.golang.org/grpc to v1.79.3 #180
• Full changelog

azure-cluster-api-controllers

• OCPBUGS-89940: Address CVE-2026-39829 #400
• OCPBUGS-80392: Bump google.golang.org/grpc to v1.79.3 #385
• OCPBUGS-59888: Add support to disable CAPZ components through a manager flag #347
• OCPBUGS-56100: fix: reuse global TracerProvider #340
• OCPBUGS-56962: [release-4.19] Update manifests to remove dependency on admissionregistration v1beta1 #339
• Full changelog

azure-disk-csi-driver

• UPSTREAM: 3582: OCPBUGS-103602: Bump golang.org/x/net to v0.43.0-sec.4 #171
• OCPBUGS-112786: UPSTREAM: 3277: fix: allow . in Azure tags #170
• OCPBUGS-80393: Bump google.golang.org/grpc to v1.79.3 #141
• OCPBUGS-78035: add instantAccessDurationMinutes parameter to enable IA snapshots for PremiumV2/UltraSSD disks #129
• Full changelog

azure-file-csi-driver

• OCPBUGS-103591: Bump golang.org/x/net to v0.43.0-sec.4 #157
• OCPBUGS-92920: Bump golang.org/x/crypto to v0.41.0-sec.2 #147
• OCPBUGS-80396: Bump google.golang.org/grpc to v1.79.3 #129
• OCPBUGS-61975: Rebase to upstream v1.32.3 for OCP 4.19 #103
• OCPBUGS-55831: UPSTREAM: 2515: allow deleting cross-subscription snapshots #93
• Full changelog

azure-kms-encryption-provider

• OCPBUGS-103554: [release-4.19] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #60
• OCPBUGS-80361: Bump google.golang.org/grpc to 1.64.1-sec.1 patch #45
• ART-13081: append .0 to go.mod version #18
• Full changelog

azure-machine-controllers

• OCPBUGS-103689: replace golang.org/x/net with openshift-sustaining/net@v0.43.0-sec.4 #212
• OCPBUGS-65782: Set updateDomainCount to one when faultDomainCount is one #174
• OCPBUGS-63578: Support DataDisks on Azure Stack Hub #166
• OCPBUGS-56163: [release-4.19] Update virtualmachines service to armcompute/v5 SDK #144
• OCPBUGS-56653: Fix failure when attempting to modify immutable availabilitySet #154
• Full changelog

azure-service-operator

• OCPBUGS-80362: Bump google.golang.org/grpc to v1.79.3 #30
• Full changelog

azure-workload-identity-webhook

• OCPBUGS-103605: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.43.0-sec.4 to address CVE-2026-33814 #62
• OCPBUGS-81914: CVE-2026-34986: use sustaining go-jose fork (avoids Go 1.24 bump) #52
• ART-13081: append .0 to go.mod version #36
• Full changelog

baremetal-cluster-api-controllers

• OCPBUGS-56962: [release-4.19] Update manifests to remove dependency on admissionregistration v1beta1 #45
• Full changelog

baremetal-installer, installer, installer-artifacts

• OCPBUGS-103604, OCPBUGS-103681: Bump golang.org/x/net to v0.43.0-sec.4 #10969
• OCPBUGS-100064: openstack: Reserve addresses for load balancer #10722
• OCPBUGS-89936, OCPBUGS-92919: Replace golang.org/x/crypto with github.com/openshift-sustaining/crypto@v0.41.0-sec.3 #10856
• OCPBUGS-115289: Update gcloud version to one that can be found #10844
• OCPBUGS-113537: Update RHCOS-release-4.19 bootimage metadata to 9.6.20260818-0 #10800
• OCPBUGS-79002: [release-4.19] - Allow all instance types in the install config for GCP #10505
• OCPBUGS-91984: azure: Add field in installconfig to disallow shared access key #10653
• OCPBUGS-77051: Update RHCOS-release-4.19 data/data/coreos/rhcos.json to 9.6.20260616-0 #10652
• OCPBUGS-79503: Increase size of /var/ostreecontainer mount #10433
• OCPBUGS-57323: Power VS: Provide detailed error when entered VPCName cannot be found #9779
• OCPBUGS-78496: fix wavelength zone name regex #10391
• OCPBUGS-73781: pkg/asset/manifests/azure: save cidr blocks #10216
• OCPBUGS-74940: Increase agent-installer pre-network-manager timeout #10284
• OCPBUGS-74675: [release-4.19] GCP: skip AI zones #10274
• OCPBUGS-74629: add support for NVIDIA H100 and H200 enabled machine series #10270
• OCPBUGS-66358: Update the RHCOS 4.19 bootimage metadata to 9.6.20260112-0 #10248
• OCPBUGS-68296: [4.19] uplift logrus #10165
• OCPBUGS-65610: Azure UPI ARM template: use storageAccountId #10151
• OCPBUGS-63437: vSphere 7 deprecation #10026
• OCPBUGS-66999: Use separate tmpfs for ostree checkout on live ISO #10153
• OCPBUGS-65512: Remove pending items on gcp no-op #10074
• Revert “OCPBUGS-65587: Update the RHCOS 4.19 bootimage metadata to 9.6.20251113-0” #10094
• OCPBUGS-65587: Update the RHCOS 4.19 bootimage metadata to 9.6.20251113-0 #10085
• OCPBUGS-63634: Update the RHCOS 4.19 bootimage metadata to 9.6.20251023-0 #10038
• OCPBUGS-63702: Prevent duplicate noProxy when adding nodes #10045
• OCPBUGS-62981: Catch gcp destroy cases where the operation is nil #10013
• OCPBUGS-62159: Update the RHCOS 4.19 bootimage metadata #9996
• OCPBUGS-62911: None: Allow IPv6 Primary DualStack installs on platforms None and External #10008
• OCPBUGS-61313: Use less permissive access for /var/lib/etcd for SNO #9927
• OCPBUGS-59573: Checking for selected PE retrieved data and returning errors for missing values #9842
• OCPBUGS-60832: node-joner ignore error if SSH key was not found #9910
• OCPBUGS-61109: Misleading error when confidentialCompute: Enabled #9920
• OCPBUGS-60925: Update the RHCOS 4.19 bootimage metadata #9915
• OCPBUGS-60652: PowerVS: config variables not honored #9901
• OCPBUGS-60666: Azure: change LB and pubic IP skus to Standard #9903
• OCPBUGS-59607: Refine check for supported SNO platforms #9843
• Revert “Update RHCOS 4.19 bootimage metadata to 9.6.20250811-0” #9906
• OCPBUGS-60402: baremetal: always set external v6 URL on dualstack #9879
• OCPBUGS-58905: Update RHCOS 4.19 bootimage metadata to 9.6.20250811-0 #9888
• OCPBUGS-56963: Make swift containers removal not fatal for UPI. #9765
• OCPBUGS-58403: When AWS_PROFILE is invalid ask for credentials #9829
• OCPBUGS-58073: Refactor removing loadbalancer in OpenStack. #9808
• OCPBUGS-58263: allow to deploy single nodes with UPI #9812
• OCPBUGS-57901: vSphere - remove unit tests using nip.io #9802
• OCPBUGS-58060: MCO: consider custom AMI for edge compute machine pool #9807
• OCPBUGS-56020: AWS Destroy use AWS SDK v2 #9703
• OCPBUGS-57394: Prompt User for AWS Creds when none are found #9782
• OCPBUGS-57137: Revert “CORS-3883: Remove user-assigned identity from ARM template” #9771
• OCPBUGS-57039: ensure ctrplane nodes can access bootstrap MCS #9768
• OCPBUGS-56826: update the punctuation #9755
• OCPBUGS-56372: Added better logging for vSphere destroy #9719
• OCPBUGS-56832: add unit tests for vsphere VIPS/machinenetworks population #9757
• OCPBUGS-56811: Update Control Plane replica validation for Single Node OpenShift #9756
• MGMT-20702, OCPBUGS-56762: Avoid duplicate machine networks #9745
• OCPBUGS-55995: [Nutanix] nil error displayed when setting a not exist value in preloadedOSImageName field #9701
• OCPBUGS-56712: add the VM types that the install pass into the tested_instance_types #9730
• OCPBUGS-56646: Update RHCOS 4.19 bootimage metadata to 9.6.20250523-0 #9742
• OCPBUGS-56595: [release-4.19] OCPBUGS-56567: default Azure to create VM user-assigned identities #9735
• OCPBUGS-55068: Update RHCOS 4.19 bootimage metadata to 9.6.20250513-0 #9721
• OCPBUGS-56006: [release-4.19] CORS-3634, CORS-3771, CORS-3772: Azure doc: add support for Lsv4, Lasv4, Dxv6, NDs and NV series #9702
• OKD-251: Update SCOS 4.19 bootimage metadata to 9.0.20250510-0 #9714
• OCPBUGS-56061: fixes to get shellcheck to pass #9705
• OCPBUGS-56140: apply fixes for yaml-lint errors #9710
• OCPBUGS-56075: Pre-create password files for agent installer OVE #9707
• OCPBUGS-55957: Remove Terraform & Altinfra Build Artifacts #9698
• OCPBUGS-55909: Apply defaults then validate confidentialCompute #9695
• OCPBUGS-55731: azure stack: switch cloud provider to standard lb #9690
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

baremetal-operator

• OCPBUGS-98209: Add BMH finalizer on PreprovisioningImage #508
• OCPBUGS-87966: Fix preprovisioning network Secret lifecycle during BMH deletion #494
• OCPBUGS-88039: Fix invalidDNSNameinvalidipv6 test #496
• OCPBUGS-59133: Unblock BMH direct deletion when detached annotation is present #423
• OCPBUGS-56765: Make firmware update handle only a subset of Spec.Updates #420
• OCPBUGS-56026: Redfish: correctly handle missing system ID #415
• Full changelog

baremetal-runtimecfg

• OCPBUGS-103590: Fix CVE-2026-33814 by adding patch for golang.org/x/net package #407
• OCPBUGS-60110: Re-add ENABLE_NODEIP_DEBUG env var #365
• OCPBUGS-57781: iptables: Switch PREROUTING REDIRECT rule to DNAT instead #352
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-103551, OCPBUGS-103599: Use patched x/net fork v0.43.0-sec.4 #2419
• Fix for OCPBUGS-88243: CVE-2026-39821 #2362
• OCPBUGS-91095, OCPBUGS-94720: Bump golang.org/x/net to openshift-sustaining/net v0.43.0-sec.2 #2343
• OCPBUGS-105503, OCPBUGS-105504: Fix pre-existing unit test failures on release-4.19 #2356
• OCPBUGS-77802: Makefile: Strip debugging symbols by default #2217
• OCPBUGS-65757: pkg/cli/admin/upgrade: Tighten force warnings #2146
• OCPBUGS-65594: fix(must-gather): do not set node affinity if nodename is set #2143
• OCPBUGS-64585: Help with must-gather scheduling through suggesting preferance of nodes #2124
• OCPBUGS-59487: adm, inspect, ns: Collect UserDefinedNetwork CRs #2061
• OCPBUGS-58077: Return error in case of error #2052
• OCPBUGS-56905: avoid transfering permissions when copying artifacts from node-joiner pod #2032
• OCPBUGS-56511: Replace colon to hypen in the filename while extracting tar on Windows #2024
• OCPBUGS-56203: Adding sos.conf file for default sos config into the tools image #2020
• Full changelog

cloud-credential-operator

• OCPBUGS-103588: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.43.0-sec.4 to address CVE-2026-33814 #1099
• OCPBUGS-81917: Bump go-jose/go-jose/v4@v4.1.4 #1030
• OCPBUGS-80400: Bump google.golang.org/grpc to v1.79.3 #1023
• OCPBUGS-74547: Resolve nil pointer exception in hasResourceTags #971
• OCPBUGS-65799: ccoctl azure: retry custom role creation on consistency errors #949
• OCPBUGS-65478: ccoctl: use pagination when listing resources in aws #946
• OCPBUGS-63547: ccoctl: add public-key-file flag to create-all #937
• OCPBUGS-60970: ccoctl: aws to use proper issuer url on subsequent runs #906
• OCPBUGS-60617: ccoctl azure dnszone-resource-group-name now optional #900
• OCPBUGS-59401: github.com/golang/glog v1.2.5 #890
• OCPBUGS-58246: ccoctl: only add owned tag to azure resources on create #881
• OCPBUGS-55798: Sync OpenStack CA Bundles from legacy location #866
• OCPBUGS-56978: Azure: resolve nil pointer exception when role assignment exists #870
• OCPBUGS-55903: Render: configure proxy on bootstrap static pod #857
• OCPBUGS-56054: golang.org/x/net v0.38.0 #858
• Full changelog

cloud-network-config-controller

• OCPBUGS-65513: Fix capacity calculation #190
• OCPBUGS-63753: Change the capacity struct from int to ptrOfInt #186
• Full changelog

cluster-authentication-operator

• OCPBUGS-103609: Bump golang.org/x/net from v0.30.0 to v0.43.0-sec.4 #982
• OCPBUGS-86956: Updating ose-cluster-authentication-operator-container image to be consistent with ART for 4.19 #852
• OCPBUGS-65602: set appropriate rolling update settings #809
• Full changelog

cluster-autoscaler

• OCPBUGS-103756: Replace golang.org/x/net with openshift-sustaining/net v0.43.0-sec.4 for CVE-2026-33814 #441
• OCPBUGS-78697: allow clusterapi provider to skip paused resources #412
• OCPBUGS-63676: update node info processors to include unschedulable nodes #392
• OCPBUGS-63603: refactor cloud provider options #388
• OCPBUGS-63455: Fixes histograms becoming empty after loaded from checkpoints #395
• OCPBUGS-60900: revert openshift replica fix #374
• OCPBUGS-59638: fix checkpoint gc of unknown recommenders #366
• Full changelog

cluster-autoscaler-operator

• OCPBUGS-103611: Bump x/net package in release-4.19 #385
• OCPBUGS-73954: Add rbac for volumeattachments #359
• Full changelog

cluster-baremetal-operator

• OCPBUGS-78457: Explicitly set the ReadOnlyRootFilesystem flag to false #574
• OCPBUGS-78704: Update kubebuilder tools to more latest version #578
• OCPBUGS-63134: Always have a service for ironic-api port #512
• OCPBUGS-60286: Remove webhookport (9447) as HostPort #498
• OCPBUGS-57504: Treat ResourceNotFound as non-fatal #484
• OCPBUGS-56644: Allow provisioningIP when network disabled #474
• Full changelog

cluster-capi-controllers

• OCPBUGS-80401: Bump google.golang.org/grpc to v1.79.3 #295
• OCPBUGS-55998: Regenerate manifests to drop usage of v1beta1 admissionregistration #237
• Full changelog

cluster-capi-operator

• OCPBUGS-80405: Bump google.golang.org/grpc to v1.79.3 #546
• NO-JIRA: Allow sustaining engineering to self serve dependency updates #557
• OCPBUGS-59228, OCPBUGS-59229: fix: clusteroperator: do not update status.relatedobjects if only order changed #332
• OCPBUGS-57449: mapi2capi: Create new machine template when changing MAPI providerSpec #317
• OCPBUGS-56776: fix: ensure CAPI machineset is created not paused when authoritative #304
• OCPBUGS-56714: fix: bump openshift/library-go to fix ValidatingAdmissionPolicyV1 apply in capiinstaller #305
• OCPBUGS-56633: fix: watch CAPI resources in the migration controllers #303
• OCPBUGS-56722: MachineSet deletion logic #302
• OCPBUGS-56105, OCPCLOUD-2893: Add related objects to must-gather config #296
• OCPBUGS-56055: fix: machine: propagate non-authoritative deletion #294
• OCPBUGS-55998: Should not use v1beta1 of the AdmissionRegistration API group #291
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-103613: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.43.0-sec.4 to address CVE-2026-33814 #512
• OCPBUGS-63165: ccm: disable unused secure-serving port and webhook #420
• OCPBUGS-56788: Fix config-sync-controller logging #390
• OCPBUGS-60950: Default cloud.conf if no configmap is found #412
• OCPBUGS-59847: Adds service for cloud-controller-manager #402
• OCPBUGS-59847: Update service selector to match deployment label #401
• Full changelog

cluster-config-api

• OCPBUGS-98410: add new serviceAccountToken fs type #2926
• OCPBUGS-68378: Add HTTPKeepAliveTimeout to IngressController API #2627
• OWNERS: update approvers/reviewers #2624
• OCPBUGS-66984: Introduce ClosedClientConnectionPolicy to IngressController API #2616
• CNTRLPLANE-1979: Promote streaming list encoding to Default #2597
• NO-JIRA: Promote streaming list encoding to Default on Hypershift. #2559
• CNTRLPLANE-1609: Add feature gates for StreamingCollectionEncoding #2517
• OCPBUGS-62155: Add ‘AGE’ print column to MachineConfigNode object #2500
• OCPBUGS-61096: Add default value for MachineHealthCheck’s maxUnhealthy to the description #2464
• MCO-1766: Promote PinnedImageSets feature gate to default #2377
• MCO-1720: Promote MachineConfigNode feature gate to default #2376
• CORENET-6148: Promote RouteAdvertisements feature gate to default feature set #2425
• OCPBUGS-60414: MachineOSConfig name should match MachineConfigPool #2449
• Update crd-schema.json to release 1.33 branch #2447
• OCPBUGS-56773: disable psa for 4.19 #2346
• OCPBUGS-56761: Revert v1alpha1 removal #2345
• OCPBUGS-56407: Fix validation for Resource field in MOSB API #2329
• Full changelog

cluster-csi-snapshot-controller-operator

• OCPBUGS-103626: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #294
• Full changelog

cluster-etcd-operator

• OCPBUGS-103623: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.43.0-sec.4 to address CVE-2026-33814 #1694
• OCPBUGS-85275: Wait for revision stability before removing etcd members #1613
• OCPBUGS-78353: Prefer to remove members where they have another healthy machine in the same failure domain index #1565
• OCPBUGS-74628: Add priority field to prevent early shutdown #1539
• OCPBUGS-63338: Ensure revision.json persists on ungraceful shutdown #1502
• OCPBUGS-61019: add individual context to the health check #1475
• OCPBUGS-60443: Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace #1472
• OCPBUGS-59802: add missing informer syncs #1454
• OCPBUGS-59285: fix ordering on bootstrap IP selection #1446
• OCPBUGS-45731: Updating cluster-etcd-operator-container image to be consistent with ART for 4.19 #1376
• OCPBUGS-59313: add missing ports to svc and pod spec #1447
• OCPBUGS-57956: feat: update logic to list arbiter nodes #1437
• OCPBUGS-57490: Comply with OCP pod standards for TNF jobs #1434
• OCPBUGS-56806: increase tnf job timeouts #1427
• OCPBUGS-56109: adjust alerts according to platform #1423
• OCPBUGS-55691: Remove ‘meta’ keyword from pcs resource create command #1420
• Full changelog

cluster-image-registry-operator

• OCPBUGS-60517: fix(azure): resolve credential caching issues around UAMI support #1243
• OCPBUGS-53872: bump github.com/golang-jwt/jwt #1214
• OCPBUGS-56363: bump golang.org/x/oauth2 #1207
• Full changelog

cluster-ingress-operator

• OCPBUGS-103610: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.43.0-sec.3 #1570
• OCPBUGS-86716: Add configuration override for X-SSL strip #1476
• OCPBUGS-65723: IngressOperator not exposing some metrics for degraded… #1308
• OCPBUGS-68378: Implement HTTPKeepAliveTimeout tuning option #1323
• NO-JIRA: Add new NID team members to OWNERS [release-4.19] #1318
• OCPBUGS-66984: Implement ClosedClientConnectionPolicy field #1320
• NE-2102: Bump to OSSM 3.1.0 and Istio 1.26.2 #1264
• NO-JIRA: [release-4.19] docs - correct Istio version format in ossm-overrides.md #1255
• OCPBUGS-60204: Update GatewayAPI test to check if deployment has 1 or more pod #1260
• NE-2109: Add OSSM channel and version override annotations #1252
• NE-2105: desiredIstio: Enable GIE if InferencePool found #1251
• NE-2103: Bump to OSSM 3.0.1 and Istio 1.24.4 #1244
• OCPBUGS-58394: desiredIstio: Do not enable a default PDB #1241
• OCPBUGS-56213: Check capabilities before watching OLM resource #1233
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-103624: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.43.0-sec.4 to address CVE-2026-33814 #2298
• OCPBUGS-128389: Fix kube-apiserver-to-kubelet-signer refresh interval #2324
• OCPBUGS-83857: Allow setting the oauthMetadata when auth type is None #2118
• OCPBUGS-74628: Add priority field to prevent early shutdown #1959
• OCPBUGS-65525: OpenShift cluster got degraded after rotating the kube-apiserver-service-network-signer cert #1964
• Revert “[release-4.19] OCPBUGS-65560: Optimistically update Kube Server and Client CA bundles” #1963
• OCPBUGS-63342: [release-4.19] Revert “Revert “OCPBUGS-58116: certregenerationcontroller: start configInformers #1945
• OCPBUGS-60682: Optimistically update Kube Server and Client CA bundles #1920
• OCPBUGS-60121: [release-4.19] Set goaway chance to 0.001 #1887
• OCPBUGS-60677: certrotation: ensure that all rotated secrets/configmaps have RefreshOnlyWhenExpired set #1901
• OCPBUGS-60495: certrotationcontroller: extend node-system-admin-signer lifetime #1897
• OCPBUGS-59957: Add missing service ports to apiserver service #1880
• Revert “[release-4.19] OCPBUGS-58116: certregenerationcontroller: start configInformers again” #1867
• OCPBUGS-58116: certregenerationcontroller: start configInformers again #1861
• OCPBUGS-56160: Change validity / refresh for some certs which should not be affected by dev cycle rotation change #1841
• OCPBUGS-56266: SCC: add hostmount-anyuid-v2 #1844
• OCPBUGS-55709: bump library-go to bring in updated audit policies #1840
• OCPBUGS-45911: revert dev cert rotation #1835
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-103621: Fix CVE-2026-33814 by adding patch for golang.org/x/net package #960
• OCPBUGS-64687: Add priority field to prevent early shutdown #893
• OCPBUGS-60682: Throttle resourcesynccontroller on pairs with dual writers. #884
• OCPBUGS-60682: certrotationcontroller: set RefreshOnlyWhenExpired for CA bundle #861
• OCPBUGS-60132: Missing endpoint slices for open ports the operator uses #853
• Full changelog

cluster-kube-scheduler-operator

• CNTRLPLANE-2843: chore: update OWNERS #621
• OCPBUGS-74628: Add priority field to prevent early shutdown #609
• Full changelog

cluster-machine-approver

• OCPBUGS-63586: port 9193 need to be internal and port 9194 need to have a service #281
• Full changelog

cluster-monitoring-operator

• OCPBUGS-129139: don’t delete admin-owned Alertmanager secrets on destroy #3141
• NO-ISSUE: synchronize OWNERS from main branch [release-4.19] #3107
• OCPBUGS-112575: [release-4.19] Makefile: version-stamp golangci-lint binary to prevent stale linter #3067
• OCPBUGS-105310: [release-4.19] wrap library-go resourceCache with mutex for thread safety #3042
• OCPBUGS-103627: [release-4.19] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #3073
• OCPBUGS-104539: Backport e2e stabilization 4.19 #3029
• OCPBUGS-100373: [release-4.19] fix: watch cluster wide proxy changes and apply changes accordingly #3023
• OCPBUGS-94080: ship collector:node_scrape_collector_success:avg to Telemetry #2991
• OCPBUGS-86994: increase lookup interval #2948
• OCPBUGS-77273: AlertingRule: fix duplicate PrometheusRules after MD5->SHA-224 naming change #2834
• OCPBUGS-67167: Add the collection of MTV migration metrics #2773
• OCPBUGS-67003: make CMO Upgradeable=false if invalid Prometheus externalLabels are used #2775
• OCPBUGS-62830: Remove cluster from non-multicluster dashboards #2760
• OCPBUGS-63236: Remove AlertManager endpoints when disabled #2716
• OCPBUGS-64578: Fix KSM deny-list typo #2730
• OCPBUGS-63409: chore(prometheus/remotewrite): [release-4.19] clarify that the in-cluster proxy env vars set in prometheus container can be used in all configs that support proxyConfig.proxyFromEnvironment #2722
• OCPBUGS-63197: add flag –watch-referenced-objects-in-all-namespaces to prometheus-operator #2678
• OCPBUGS-62965, OCPBUGS-62966, OCPBUGS-62967, OCPBUGS-62968, OCPBUGS-62969: [Backport] non-HA alert cases #2709
• OCPBUGS-62752: Add mcd_local_unsupported_packages metric from MCO to telemetry 4.19 #2697
• OCPBUGS-62453: test: remove image registry e2e tests #2690
• OCPBUGS-61486: chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind #2666
• OCPBUGS-59932: operator: increase wait time till degraded to max 4 times 5m #2629
• OCPBUGS-57185: chore(alerts): adjust PrometheusPossibleNarrowSelectors description and add link to to-be-added runbook #2609
• OCPBUGS-55737: [release-4.19] MON-4200: disable –auto-gomemlimit for Prometheus on SNO until we can ensure it won’t result in excessive CPU usage #2597
• Full changelog

cluster-network-operator

• OCPBUGS-99750: Bump github.com/containernetworking/cni v0.8.0 -> v1.3.0 #3094
• OCPBUGS-84177: Handle zero-worker HyperShift clusters in daemonset rollout [4.19 backport] #2974
• OCPBUGS-85404: Remove duplicated openssl parameter #3003
• OCPBUGS-84201: wait for patch port to apply drop garp flows #2971
• OCPBUGS-84143: fix(hypershift): use net.JoinHostPort for URL construction #2969
• OCPBUGS-77150: Add config override for openflow-probe #2964
• CORENET-6311, OCPBUGS-74205: Skip running _stackmanager for libreswan 5.3+ #2885
• OCPBUGS-67208: Fix whereabouts-token-watcher DaemonSet improvements #2857
• OCPBUGS-70328: Tweak iptables-alerter to try to avoid crictl bug #2867
• OCPBUGS-57134: whereabouts-config is a reserved name for user interaction. #2719
• OCPBUGS-63447, OCPBUGS-63448: Annotate whereabouts-controller #2822
• OCPBUGS-62670: Add drop flows for GARP #2809
• OCPBUGS-61460: Set maxUnavailable 10% on MultiNetworkPolicy DS #2794
• OCPBUGS-61185: Consume latest OCP API in 4.19 #2790
• OCPBUGS-60983: Update CNO reviewers/approvers #2765
• OCPBUGS-60761: Allow overriding OVN-Kubernetes configuration #2781
• OCPBUGS-60534: Fix multus webhook match condition for spec changes #2777
• OCPBUGS-60095: Add release version annotation to whereabouts-controller/whereabouts-token-watcher #2762
• OCPBUGS-59645: [release-4.19] BGP related backports #2748
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-115119: Use Add() instead of AddRateLimited() for routine Profile enqueues #1626
• OCPBUGS-87932: Requeue PerformanceStatus update when status write fails #1543
• OCPBUGS-82802: Bump github.com/moby/spdystream from v0.5.0 to v0.5.1 #1533
• OCPBUGS-85438: e2e: Add irqbalance StartLimitBurst >= 100 #1514
• OCPBUGS-73797: PPC: ghw: filter out namespaces dir #1455
• OCPBUGS-63418: Do not cause kubelet failed dependency by ocp-tuned-one-shot.service #1416
• And 9 elided commits (e.g. from squash or rebase merges)
• Full changelog

cluster-olm-operator

• OCPBUGS-80420: Bump google.golang.org/grpc to v1.79.3 #199
• OCPBUGS-56825: fix olm.maxOpenShiftVersion float parsing #122
• Full changelog

cluster-policy-controller

• OCPBUGS-98410: [4.19] add serviceAccountToken volume type to psalabelsyncer #195
• Full changelog

cluster-samples-operator

• OCPBUGS-129481: Restrict samples operator access to the global pull-secret #730
• OCPBUGS-63510: references to github.com/sclorg/django-ex.git now also refer to the branch #656
• Full changelog

cluster-storage-operator

• OCPBUGS-103630: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #736
• OCPBUGS-87095: remove oVirt code from CSO 4.19 #705
• OCPBUGS-77007: add vsphere permissions for checking if users is authorized to see metrics #667
• OCPBUGS-62667: Move metrics to vsphere driver #631
• OCPBUGS-60152: hypershift: add app label to csdriveroperators running in HCP #604
• OCPBUGS-56253: sync Azure File permissions with upstream docs #2 #580
• Full changelog

cluster-update-keys

• NO-ISSUE: Updating ose-cluster-update-keys-container image to be consistent with ART for 4.19 #80
• Full changelog

cluster-version-operator

• OCPBUGS-103642: Bump golang.org/x/net to v0.43.0-sec.3 #1458
• OCPBUGS-70181: OCPBUGS-70181: Unify capitalization when comparing architectures for available updates #1291
• NO-ISSUE: hongkai becomes an approver release-4.19 #1285
• OCPBUGS-70296: add the ports Field into the CVO’s container spec #1283
• OCPBUGS-62868: temporarily disable metrics auth for hypershift clusters #1245
• OCPBUGS-55937: Gate 4.19 -> 4.20 upgrade due to admissionregistration.k8s.io/v1beta1 API removal #1193
• OCPBUGS-60168: CVO protects /metrics with authorization #1222
• OCPBUGS-56771: Fix ImplicitlyEnabledCapabilities #1199
• Full changelog

configmap-reloader

• ART-13081: append .0 to go.mod version #68
• Full changelog

console

• OCPBUGS-83496: remove dev to admin links as dev monitoring views are enabled #16174
• OCPBUGS-83496: Temporarily skip the flaky Data Grid installation spec #17354
• OCPBUGS-128641: Wait for demo plugin deployment readiness #17332
• OCPBUGS-111706: Re-enable Knative Cypress e2e tests #16906
• OCPBUGS-122013: Validate chart URL in /api/helm/verify #17154
• Fix for OCPBUGS-92079: CVE-2026-44990 #16716
• OCPBUGS-112275: Fix flaky TestAsyncCache backend test #17048
• Fix OCPBUGS-98765: CVE-2026-48801 #16855
• OCPBUGS-100516, OCPBUGS-101792: Fix CVE-2026-69153 and CVE-2026-45623 - Bump postcss #17057
• OCPBUGS-98428: [release-4.19] CVE-2026-59869 bump js-yaml #17007
• OCPBUGS-109139: Fix leading whitespace in Quick Start execute code snippets #17004
• OCPBUGS-100182: fix trailing quote in prometheus query #16884
• OCPBUGS-100068: quickstart page i18n misses (Fix Quick Starts i18n bundle lookup for zh-CN)- #16869 #16871
• OCPBUGS-86751, OCPBUGS-87083, OCPBUGS-88750: [release-4.19] bump package: webpack-dev-server, protobufjs, fast-uri #16727
• OCPBUGS-99486: Disable Knative e2e Cypress tests in CI #16802
• OCPBUGS-84285: Bump follow-redirects to 1.16.0 to fix CVE-2026-40895 #16672
• Fix for OCPBUGS-81608: CVE-2026-4800 #16562
• OCPBUGS-86454: [release-4.19] shell-quote: Arbitrary code execution via command injection due to unescaped line terminators #16526
• OCPBUGS-97966: Fix false positive scheduler degradation caused by user workloads #16725
• OCPBUGS-90623: Allow VolumeSnapshot restore when parent PVC is deleted #16661
• OCPBUGS-89712: Prevent binary secret data corruption when editing #16640
• OCPBUGS-79451: Bump immutable #16324
• OCPBUGS-77126: [release-4.19] CVE-2026-26996 Bump minimatch library #16343
• OCPBUGS-85308: [release-4.19] Backport OCPBUGS-78439: vsphere settings #16413
• OCPBUGS-84772: Add robots.txt policy to console #16378
• NO-JIRA: enable multi-architecture yarn builds #16416
• OCPBUGS-84271: Fix VolumeSnapshot and VolumeSnapshotContent table sorting #16335
• OCPBUGS-81738: Fix editing secrets with mixed text and binary data #16257
• OCPBUGS-81736: Migrate InstallPlan components table to PatternFly Table #16256
• OCPBUGS-81574: Clean up old session cookies to prevent accumulation #16242
• OCPBUGS-81515: Visiting Group Detail Page > RoleBindings will show error #16234
• OCPBUGS-78292: Fix infinite recursion in project access form #16130
• CONSOLE-5011: migrate to yarn berry #16071
• OCPBUGS-76950: “Import from Git” should not force HTTPS/443 for Git providers (GitHub/GitLab/Bitbucket) #16028
• OCPBUGS-74464: Bump lodash to latest #15964
• OCPBUGS-74341: Do not resolve disabled catalog type extensions #15945
• OCPBUGS-70335: OpenShift Console can only show user name instead of full name as the display name #15888
• OCPBUGS-72399: Fix Helm chart installation with CA/TLS certificates #15898
• OCPBUGS-70135: Update client initialization in checkPackageManifestHandler #15877
• OCPBUGS-69677: Spread operand details across 2 col #15859
• OCPBUGS-69860: PVC shows negative Available space in OpenShift Console on RHOCP 4 #15866
• OCPBUGS-62725: Fixes namespace-scoped operators that were not showing as installed when viewing OperatorHub in “All Projects” mode #15816
• OCPBUGS-67361: Disallowed Pipelines-plugin Pipelines navigation section #15839
• OCPBUGS-66245: The number of Quick Starts item is wrong #15793
• OCPBUGS-66179: Fix unnecessary rerenders with pod-connect #15784
• OCPBUGS-62438: Updation of label from edit label doesn’t work #15547
• OCPBUGS-65930: Preserve query string in perspective switch + remove dev console folks from reviewers #15760
• OCPBUGS-63703: Fix dynamic form spacing and layout issues #15706
• OCPBUGS-64834: Preserve path on perspective switch #15697
• OCPBUGS-64849: HPA Form View in RHOCP Web Console Incorrectly Requires Both CPU and … #15698
• OCPBUGS-64746: Fix Bare Metal Hosts nav item #15687
• OCPBUGS-63588: Expose prometheus tenancy label path as a proxy #15645
• OCPBUGS-63607: limit node log length to 1000 lines #15647
• OCPBUGS-63530: Remove required flag from ‘console.flag/model’ pipelines-plugin extension #15642
• OCPBUGS-63156: Initialize log package #15610
• OCPBUGS-62999: switch to dev perspective for /dev-monitoring #15598
• OCPBUGS-59953: fix: Fix negative CPU util graphs #15345
• OCPBUGS-62643: bump dompurify to latest #15588
• OCPBUGS-62083: /auth/error?error=missing_state&error_type=auth is showing blank page #15523
• OCPBUGS-62087: Help dropdown should be closed automatically after tour model opened #15527
• OCPBUGS-61821: Refactor PodConnect and Terminal to TypeScript #15503
• OCPBUGS-61781: Fix improper DescriptionList refactor #15497
• NO-JIRA: Update CHANGELOG in relation to 4.18 plugin SDK package publish #15457
• OCPBUGS-60420: QuickStarts Link buttons to other quickstarts are duplicate #15391
• OCPBUGS-50571: Make sure CSP violations are only reported to telemetry once per day per browser #15366
• OCPBUGS-60279: Remove ancient X-XSS-Protection header #15381
• OCPBUGS-60038: Resolving API Version Conflicts in Tekton Pipeline Runs #15354
• OCPBUGS-60294: OpenShift Console’s “Start Job” action overrides configured “backoffLimit” to “6” #15382
• NO-JIRA: Update CHANGELOG for latest 4.19 plugin SDK package publish #15406
• OCPBUGS-60039: Fix i18n string for event stream (again) #15388
• OCPBUGS-60039: Fix i18n string for event stream #15355
• OCPBUGS-56651: Recognize Detached BMH status #15083
• OCPBUGS-58214: Incorrect i18n translations in 4.19 batch #15218
• OCPBUGS-59790: Move alertmanager settings route #15331
• OCPBUGS-59639: Fixing no resources found message can not be shown completely #15320
• OCPBUGS-59810: Default name is comprised of ‘-’ on ‘Add to favorites’ page when language is Korean/Japanese/Chinese. #15333
• OCPBUGS-56280: Follow-on fix. Add new “plugins-order” flag to bridge cli args #15168
• OCPBUGS-59199: Deleted objects remain in favorites and cause 404 errors #15267
• OCPBUGS-59557: add data-test attrs to console plugins table #15305
• OCPBUGS-59513: Update model flags when plugins load #15298
• OCPBUGS-58331: change ‘/metrics/usage’ endpoint to ‘/api/metrics/usage’ #15273
• OCPBUGS-58433: Add the Origin header to the HeaderBlacklist in the co… #15246
• OCPBUGS-59315: Not able to launch terminal window from OCP web console due to console plugin conflicts #15280
• OCPBUGS-58217: fix missing form styles in Create PVC page + Clone PVC… #15260
• OCPBUGS-58183: ContainerResource metric data for HPAs isn’t visible i… #15213
• OCPBUGS-58316: Implement sessions in openshift authenticator #15234
• OCPBUGS-58375: fix bug where / in console.tab/horizontalNav href breaks navigation #15239
• OCPBUGS-58377: fix runtime error when editing HPA using the form #15240
• OCPBUGS-58090: Cannot read properties of undefined (reading ‘node-role.kubernetes.io/master’) error while accessing node logs from console #15204
• NO-JIRA: Update Console plugin SDK changelogs #15212
• OCPBUGS-57390: i18n upload/download routine task - Sprint 270 #15175
• OCPBUGS-57755: Add the ability to launch multiple modals with useModal hook #15189
• OCPBUGS-57113: Cannot read properties of undefined (reading ‘filter’) error while accessing nodes from console. #15180
• OCPBUGS-57391: OpenShift console PVC clone cannot use B as the unit #15176
• OCPBUGS-57384: Update vSphere configuration form to support CM YAML f… #15174
• OCPBUGS-56950: UI for search by label is distorted in topology #15111
• OCPBUGS-56841: Fix TypeError Cannot read properties of null (reading ‘metadata’) #15100
• OCPBUGS-56779: Fix and enable web terminal tests #15097
• OCPBUGS-55928: Improving the DevExp for passing the CSP directives to console per flag #15076
• OCPBUGS-56693: Expose PodRingSet via Dynamic Plugin SDK #15086
• OCPBUGS-57180: Fix ‘/metrics’ endpoint token review to handle interna… #15152
• OCPBUGS-57207: Getting “Oh no something went wrong” error message in web console. #15159
• OCPBUGS-57319: Add Select project field in import forms #15171
• OCPBUGS-57110: fix VirtualizedTable runtime error if sortColumn is no… #15140
• OCPBUGS-57105: Fix runtime error when navigating alert actions #15138
• OCPBUGS-56470: fix bug where AlertItem is missing info icon #15071
• OCPBUGS-57200: Opening Edit Secret modal and saving without changes throws error #15157
• OCPBUGS-56764: Fix regression with drawers and modals #15094
• OCPBUGS-56475: Enable pipeline tests by installing operator version 1.17 #15073
• OCPBUGS-56882: Add initialization link annotation support to csv anno… #15104
• OCPBUGS-57183: clarify verbiage for Lightspeed hide button #15151
• OCPBUGS-57054: Should show default OpenShift Logo for a theme when there is not custom logo set for the theme. #15123
• OCPBUGS-57128: HorizontalPodAutoscalers via console require CPU resource limit even though HPAs use requests for scaling #15145
• OCPBUGS-56885: Helm resource list error in console #15105
• OCPBUGS-56888: Add flags in console static plugin for all the components of this epic #15106
• OCPBUGS-56837: Added developer getting started card in Admin project overview page #15098
• OCPBUGS-56987: fix bug where Roles list was displaying invalid data f… #15120
• OCPBUGS-56775: Layout of Welcome to the new OpenShift experience! buttons is wonky on mobile #15096
• OCPBUGS-56149: Refactor Kebab+ActionsMenu to use PF #15051
• OCPBUGS-56413: [knative] Self-provisioner user can not access or create event sources via ODC #15067
• OCPBUGS-55941, OCPBUGS-56107: get go mod tidy to pass, bump Console Helm dependencies to 3.17.3 #15032
• OCPBUGS-56362: improve description of the custom logos CLI args #15061
• OCPBUGS-55979: fix alignment of Getting Started item icons #15040
• OCPBUGS-55929: Sample segment sessions #15031
• NO-JIRA: Update plugin SDK docs #15074
• OCPBUGS-55987: Fix impersonate group action #15041
• OCPBUGS-55976: Add patternfly/react-topology to shared modules list of dynamic plugin sdk #15039
• OCPBUGS-56077: remove 60 day alert from cluster update modal #15047
• OCPBUGS-55972: Wrap ListPageHeader action with a div #15038
• OCPBUGS-55961: resolve http Context and Client handling #15036
• OCPBUGS-55959: add data-quickstart-id to quick create button #15034
• OCPBUGS-55702: fix bug where Critical Alerts section cannot be collapsed #15018
• OCPBUGS-55814: Add DEVCONSOLE_PROXY flag #15027
• Full changelog

console-operator

• OCPBUGS-103631: Use github.com/openshift-sustaining/net patch to fix CVE-2026-33814 #1222
• NETOBSERV-2296: add missing annotations on netobserv quickstart #1094
• OCPBUGS-98988: [4.19] Stabilize telemetry config to prevent continuous console pod rollouts #1193
• OCPBUGS-61879: pluginOrder field should only contain available plugins #1047
• OCPBUGS-61119: Consolidate telemetry values oscilation #1037
• OCPBUGS-59488: Update downloads deployment configuration to use master node selector #1016
• OCPBUGS-59618: Fetch synced CM for the CertificateAuthority issuer + Wire synced OIDC Auth CM to Console #1028
• OCPBUGS-56280: Add plugins order to console config #988
• OCPBUGS-56761: Revert v1alpha1 removal #991
• OCPBUGS-55716: Fix issue where console operator orphans custom logo configmaps in openshift-console namespace #985
• OCPBUGS-55842: Lift FeatureGate by bumping openshift/api #986
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

container-networking-plugins, containernetworking-plugins-microshift

• OCPBUGS-85715: CI Build root image tag sync with ART #238
• Full changelog

coredns

• OCPBUGS-103640: Fix CVE-2026-33814 by adding patch for golang.org/x/net package #204
• OCPBUGS-60246: UPSTREAM: 7083 and 6836: Fix failing TestZoneExternalCNAMELookupWithProxy #148
• ART-13081: append .0 to go.mod version #133
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OCPBUGS-103724, OCPBUGS-103725: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #423
• OCPBUGS-80490: Bump google.golang.org/grpc #386
• OCPBUGS-64812: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.31 into release-4.19 #335
• OCPBUGS-58834: CARRY: don’t ignore json files #338
• OCPBUGS-57799: Rebase release-4.19 onto release-1.31 #331
• OCPBUGS-56027: [cinder-csi-plugin] Don’t report topology capability when –with-topology=False #323
• Full changelog

csi-driver-nfs

• OCPBUGS-82805: Bump github.com/moby/spdystream@v0.5.1 #193
• OCPBUGS-80434: Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.75.1-sec.1 to avoid go version bump and fix CVE-2026-33186 #178
• Full changelog

csi-external-attacher

• UPSTREAM: 110: OCPBUGS-103651: Bump golang.org/x/net to v0.43.0-sec.4 #114
• OCPBUGS-80435: Bump google.golang.org/grpc to v1.79.3 #104
• Full changelog

csi-external-provisioner

• OCPBUGS-92905: Replace golang.org/x/crypto with github.com/openshift-sustaining/crypto@v0.41.0-sec.4 to address CVE-2026-46597 #161
• OCPBUGS-82806: Address CVE-2026-35469 #140
• OCPBUGS-80436: Bump google.golang.org/grpc #129
• Full changelog

csi-external-resizer

• OCPBUGS-103650: Bump golang.org/x/net to v0.43.0-sec.4 #212
• OCPBUGS-80437: Patching google.golang.org/grpc to v1.75.1 #202
• OCPBUGS-62468: Requeue PVC over PV creation #177
• Full changelog

csi-external-snapshotter, csi-snapshot-controller

• OCPBUGS-127500: [release-4.19] OCPBUGS-92084: UPSTREAM: 1392: Fix VolumeSnapshotContent deletion #256
• OCPBUGS-103648: Replace golang.org/x/net with github.com/openshift-sustaining/net v0.43.0-sec.3 #237
• OCPBUGS-80438, OCPBUGS-80441: Bump google.golang.org/grpc to v1.79.3 #210
• OCPBUGS-58463: UPSTREAM: 1303: Fix requeueing snapshot content after deletion error #182
• Full changelog

csi-livenessprobe

• OCPBUGS-103653: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.43.0-sec.4 to address CVE-2026-33814 #102
• Full changelog

csi-node-driver-registrar

• OCPBUGS-63193: update log level verbosity to not clutter logs #88
• Full changelog

docker-builder

• OCPBUGS-89948, OCPBUGS-90373, OCPBUGS-92448, OCPBUGS-92619, OCPBUGS-92917: Bump golang.org/x/crypto to fix CVE-2025-22869,CVE-2025-47913,CVE-2026-46597,CVE-2026-39829,CVE-2026-39832 #552
• NO-JIRA: Bump Go builder image from 1.23 to 1.24 for OpenShift 4.19 #536
• OCPBUGS-66993: bump buildah to 1.39.7 to fix CVE-2025-52881 #497
• OCPBUGS-65624: BuildConfig inline Dockerfile fails with heredoc syntax #485
• OCPBUGS-57173: S2I build cpu limits observed by assemble are limited to 1 cpu #471
• Full changelog

docker-registry

• OCPBUGS-103654: [relese-4.19] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #479
• OCPBUGS-68302: update logrus to v1.9.1 #463
• OCPBUGS-53656: bump jwt and oauth dependencies #429
• Full changelog

egress-router-cni

• OCPBUGS-99750: Bump containernetworking/cni to v1.3.0 github.com/containernetworking/plugins to 1.4.0 #108
• Full changelog

etcd

• OCPBUGS-74602: 4.19 rebase 3.5.26 #360
• OCPBUGS-63476: 4.19 rebase 3.5.24 #348
• OCPBUGS-61041: Revert “OCPBUGS-52181: Ensure cluster id changes during force-new-cluster” #340
• ETCD-726: Rebase etcd 3.5.21 openshift 4.19 #324
• OCPBUGS-52181: Ensure cluster id changes during force-new-cluster #313
• OCPBUGS-50510: Add configurable option for hardware-related timeout delay #311
• OCPBUGS-45488: Updating ose-etcd-container image to be consistent with ART for 4.19 #306
• ETCD-717: Rebase etcd 3.5.19 openshift 4.19 #315
• DOWNSTREAM: <carry>: OCPBUGS-51838: fix a compaction induce latency issue #309
• ETCD-709: Rebase etcd 3.5.18 openshift 4.19 #308
• OCPBUGS-44528: Rebase etcd 3.5.17 openshift 4.18 #302
• DOWNSTREAM: <carry>: ETCD-697: add tls min/max version to grpc proxy #301
• DOWNSTREAM: <carry>: ETCD-696: Add rev bumping to force-new-cluster #300
• NO-ISSUE: Add support for cachi2 based deps in Dockerfile.art #296
• NO-ISSUE: Add support for cachi2 based deps #294
• OCPBUGS-39188: Rebase etcd 3.5.16 openshift 4.18 #290
• NO-JIRA: use golang 1.22 image #285
• ETCD-656: Automate datadir move after quorum-restore #284
• DOWNSTREAM: <carry>: ETCD-653: add jq to the etcd image #282
• OCPBUGS-34653: Rebase etcd 3.5.14 openshift 4.17 #273
• CORS-3191: DOWNSTREAM <carry>: add native binary to installer images #269
• CORS-3249: DOWNSTREAM <carry>: installer: make etcd binaries static #268
• CORS-3249: DOWNSTREAM <carry>: add installer Dockerfile for ART builds #267
• OCPBUGS-31624: Rebase etcd 3.5.13 openshift 4.16 #259
• no-issue: Update Installer dockerfile to use golang-1.20 #251
• OCPBUGS-28730: Rebase etcd 3.5.12 openshift 4.16 #242
• CORS-3191: Add Dockerfile to build etcd for openshift-installer #249
• OCPBUGS-24988: Updating ose-etcd-container image to be consistent with ART #236
• OCPBUGS-24931: Rebase etcd 3.5.11 openshift 4.16 #237
• OCPBUGS-19279: Updating ose-etcd images to be consistent with ART #215
• OCPBUGS-20560: [4.15] Rebase openshift/etcd to 3.5.10 #224
• OCPBUGS-18179: UPSTREAM <carry>: update build images to rhel9 #211
• OCPBUGS-11850: Rebase etcd-3.5.9 into openshift-4.14 #203
• OCPBUGS-11850: Rebase etcd-3.5.8 into openshift-4.14 #201
• Update owners #184
• Updating ose-etcd images to be consistent with ART #182
• Updating ose-etcd images to be consistent with ART #181
• OCPBUGS-5458: UPSTREAM:<carry>: etcdserver: process the scenaro of the last WAL rec… #175
• OCPBUGS-3098: Rebase openshift/etcd 4.13 onto v3.5.6 #168
• Bug OCPBUGS-3098: UPSTREAM: <carry>: server/etcdmain: add configurable cipher list to gRPC proxy listener #162
• OCPBUGS-861: Rebase openshift/etcd 4.12 onto v3.5.5 #144
• Updating ose-etcd images to be consistent with ART #134
• Bug 2085997: increases cluster discovery time from 10s to 135s #131
• Revert “UPSTREAM: <carry>: increases cluster discovery time from 10s to 180s” #130
• Bug 2085997: increases cluster discovery time from 10s to 180s #129
• Add new members to reviewers/approvers #121
• Remove MemberList patch #120
• 3.5.3 with history #116
• Contiguous to 3.5.2 #109
• OWNERS: bump #104
• UPSTREAM: <carry>: add –experimental-max-learner flag #102
• OWNERS: clean up #101
• Bug 2003775: UPSTREAM: <carry>: server: Fix for v3.5 Ensure that cluster members stored in v2store and backend are in sync #98
• UPSTREAM: <carry>: storage/backend: Add a gauge to indicate if defrag is active #97
• Updating ose-etcd images to be consistent with ART #95
• Bug 1994986: (CARRY) etcdctl/ctlv3/ctl.go: Remove check perf command #94
• Bug 1992673: Fix build #93
• ETCD-203: Updating ose-etcd images to be consistent with ART #92
• ETCD-202: bump etcd v3.5.0 #91
• ETCD-200: Bump etcd v3.4.16 to go 1.15 #86
• Updating ose-etcd images to be consistent with ART #87
• ETCD-199: bump etcd v3.4.16 #83
• Updating ose-etcd images to be consistent with ART #84
• Bug 1958913: discover-etcd-initial-cluster: retry if member is not part of member list and dataDir exists #81
• Bug 1958405: UPSTREAM: <carry>: etcdserver/api/etcdhttp: log successful etcd server side health check in debug level #80
• Bug 1958405: UPSTREAM: <carry>: *: log server-side /health checks #79
• Bug 1958405: UPSTREAM: <carry>: server: add support for log rotation (#12774) #78
• UPSTREAM: <carry>: *: ensure zap logger is set before use #75
• ETCD-180: Bug 1927942: UPSTREAM: <carry>: *: add support for socket options #70
• ETCD-178: Bug 1931652: openshift-tools: fix on off flow and add unit tests #73
• Updating ose-etcd builder & base images to be consistent with ART #68
• Bug 1870189: Bump v3.4.14 #65
• OWNERS: add component #60
• Updating ose-etcd builder & base images to be consistent with ART #59
• Bug 1878163: Updating ose-etcd builder & base images to be consistent with ART #57
• Bug 1883772: discover-etcd-initial-cluster: improve error handling when we dont scale member #56
• Bug 1859196: bump etcd v3.4.9 #52
• Bug 1814576: make evaluation of targetMember strict #48
• *: bump etcd to v3.4.7 #44
• list all peers in initial-cluster #38
• Bug 1808544: If we weren’t able to get client or target member go ahead and start … #36
• Bug 1808073: fix archive member name, unmask error #34
• Bug 1806751: Archive data-dir if target member is unstarted #29
• Use var lib etcd as data dir #30
• Bug 1805807: create logic for golang ETCD_INITIAL_CLUSTER #28
• add stub discovery-etcd-initial-cluster #26
• Bug 1801237: *: bump etcd to v3.3.18 #21
• : bump etcd to v3.3.17 #20
• Dockerfile: bump golang 1.12 #19
• BUG 1747124: Dockerfile: use build instead of make build #17
• Dockerfile: bump golang to 1.11 #14
• Bug 1706103: Dockerfile: set coreos org as canonical for release-3.3 #12
• [cherry-pick openshift-4.0] *: Change gRPC proxy to expose etcd server endpoint /metrics #6
• Dockerfile: resolve issue where binary was not properly copied #5
• clientv3: automated cherry pick of #10153 to release-3.3 #10161
• Automated cherry pick of #9997 #10041
• etcdctl: cherry pick of #10109 to release-3.3 #10122
• etcdserver: remove duplicated imports #10093
• etcdserver: cherry-pick #9861 to release-3.3 #10027
• Automated cherry pick of #9990 #10004
• Automated cherry pick of #9761 #9940
• And 206 elided commits (e.g. from squash or rebase merges)
• Full changelog

gcp-cluster-api-controllers

• OCPBUGS-80451: Bump google.golang.org/grpc to v1.79.3 #289
• OCPBUGS-56962: [release-4.19] Update manifests to remove dependency on admissionregistration v1beta1 #243
• Full changelog

gcp-machine-controllers

• OCPBUGS-103685: Bump golang.org/x/net to v0.43.0-sec.3 #188
• OCPBUGS-80473: Bump google.golang.org/grpc to v1.79.3 #164
• OCPBUGS-59386: Add max-concurrent-reconciles flag to machine actuator #125
• OCPBUGS-56924: allow instances with unknown quotas to be created #119
• Full changelog

gcp-pd-csi-driver

• OCPBUGS-103660: CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork #146
• OCPBUGS-80455: Bump google.golang.org/grpc to v1.79.3 in release-4.19 #110
• OCPBUGS-68307: Update logrus to 1.9.3 #88
• OCPBUGS-62116: UPSTREAM: 2054: Fix Hyperdisk Resize That Requires Iops/Throughput Adjustment #82
• OCPBUGS-59749: 4.19: UPSTREAM: 2116: Remove check on snapshot create support for multi-writer HyperDisk-HA and let such validations occur at the PD control plane layer #80
• Full changelog

gcp-pd-csi-driver-operator

• OCPBUGS-80454: Replace google.golang.org/grpc with fork #186
• Full changelog

haproxy-router

• OCPBUGS-86727: Prevent SSRF via FQDN-typed EndpointSlices #820
• OCPBUGS-86716: Strip X-SSL-* headers for plain HTTP #799
• OCPBUGS-80456: Bump google.golang.org/grpc to v1.79.3 #767
• OCPBUGS-66984: Add option abortonclose to HAProxy configuration template #701
• Full changelog

hyperkube, kube-proxy, pod

• OCPBUGS-82786, OCPBUGS-82814: Address CVE-2026-35469 #2680
• OCPBUGS-77478: Rebase v1.32.13 to release-4.19 #2602
• OCPBUGS-76518: Rebase v1.32.12 #2592
• OCPBUGS-65552: Rebase v1.32.10 #2515
• OCPBUGS-59651: Fix Concurrentmap Iteration #2509
• CNTRLPLANE-1609: Backport StreamingCollectionEncoding for JSON and protobuf #2478
• OCPBUGS-61556: Rebase v1.32.9 #2464
• OCPBUGS-61488: UPSTREAM: <carry>: backporting fix for concurrent map iteration and write #2456
• OCPBUGS-60510: Unrevert bump to v1.32.8 #2439
• OCPBUGS-61021: UPSTREAM: <carry>: Revert “Rebase v1.32.8 to 4.19” #2433
• OCPBUGS-60510: Rebase v1.32.8 to 4.19 #2412
• OCPBUGS-60074: UPSTREAM: 132028: podresources: list: use active pods #2391
• OCPBUGS-59534: Rebase v1.32.7 to 4.19 #2367
• OCPBUGS-57886: Bump 4.19 1.32.6 #2340
• NO-JIRA: UPSTREAM: <carry>: Update rebase.sh to handle go versions major.minor.patch #2341
• OCPBUGS-58175: Fix flake caused by invalid detection of active policies in VAP integration tests #2347
• OCPBUGS-55937: UPSTREAM: <carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated. #2290
• OCPBUGS-56082: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2297
• OCPBUGS-56437: Bump 4.19 1.32.5 #2304
• OCPBUGS-56256: UPSTREAM: 131495: Handle unsupported node expansion for RWX volumes #2302
• OCPBUGS-56193: UPSTREAM: 131236: RWX tests should create RWX volumes #2301
• OCPBUGS-55895: Fix node expansion on older kubelets #2289
• OCPBUGS-55265: Bump 1.32.4 #2275
• Full changelog

hypershift

• OCPBUGS-120749: update Containerfile.cli runtime base image to floating tag [release-4.19] #9559
• OCPBUGS-76287: CVE-2025-52881 openshift/hypershift multicluster-engine/hypershift-rhel9-operator: container escape and denial of service due to arbitrary write gadgets and procfs write redirects [mce-2.9] #8282
• OCPBUGS-99116: fix(backport): konnectivity agent auth #9094
• OCPBUGS-89355: build(operator): drop hypershift-no-cgo from operator container images #8759
• NO-JIRA: fix(tekton): remove path filter from control-plane-operator pipelines #8664
• OCPBUGS-85623: fix CVE-2026-33186 by replacing grpc-go #8512
• OCPBUGS-84143: fix(cno): use brackets only for IPv6 in server URL #8345
• OCPBUGS-81161: [release-4.19] fix(cpo): Don’t remove HCP Ingress from routes when CapabilityRoute is disabled #8093
• OCPBUGS-78742: fix(sync-global-pullsecret): compare content ignoring trailing newlines #7992
• OCPBUGS-74106: Fix CVE-2025-58183 #7547
• OCPBUGS-76531: feat(updates): enable CVO metrics access with RHOBS monitoring flag #7698
• OCPBUGS-77367, OCPBUGS-77844: Fix ignition-server pod restarts #7858
• OCPBUGS-75932: [release-4.19] fix(cpo): Correct route labeling logic for HCP router infrastructure #7643
• OCPBUGS-72393: Fix Konflux EC voilation, nginx image deprecated #7440
• CNV-70889: use csi-resizer image from release provider #7102
• OCPBUGS-65829: The Containerfile in the repo has hypershift-no-cgo, but the published image quay.io/hypershift/hypershift-operator:latest doesn’t #7256
• CNTRLPLANE-1709: feat: Backport Customer Global Pull Secret to OpenShift 4.19.z #7316
• OCPBUGS-69415: test: remove unit tests that depend on network communication [release-4.19] #7395
• OCPBUGS-65693: specify SCC annotation for pods in data plane #7255
• OCPBUGS-62959: fix(cvo): support image overrides annotation for CVO deployment #7065
• OCPBUGS-64817: Add CPO hotfix arm64 builds #7195
• OCPBUGS-63129: resolve initContainer permission issue after node reboot #7145
• OCPBUGS-63636: [release-4.19] fix(konnectivity): resolve circular dependency causing DNS timeouts and excessive retries #7110
• OCPBUGS-63368: Make the hypershift CLI binary FIPS-compliant #7092
• OCPBUGS-61407: fix: Do not admit OAuth route by private router unless… #6780
• OCPBUGS-62807: Fix driver-config ConfigMap content flapping due to random ordering #6944
• CNTRLPLANE-1423: feat(konflux): tag MCE HO images with latest #6833
• OCPBUGS-62183: fix(kas-bootstrap): increase wait timeouts to avoid KAS startup races #6886
• OCPBUGS-62202: Enable VolumeAttributesClass runtime config #6890
• OCPBUGS-60630: order ICSPs for determinism of OPENSHIFT_IMG_OVERRIDES #6674
• OCPBUGS-61567: [release-4.19] fix(proxy): ensure URLs have scheme before proxy resolution #6792
• OCPBUGS-61677: resolve MIRRORED_RELEASE_IMAGE flapping #6825
• OCPBUGS-61206: use common MCE konflux pipeline #6748
• OCPBUGS-61031: [release-4.19]: set default goaway-chance to 0.001 #6712
• OCPBUGS-60483: feat(validations): add wildcard support to DNS SAN conflict detection #6648
• OCPBUGS-60147: Always compress and encode payload in token secret for inplace upgrades #6606
• OCPBUGS-60152: add missing app label to some components #6636
• OCPBUGS-60125: fix(OCPBUGS-60125): Allow HCCO to set registry managementState to Removed; delete VAP during HC deletion #6689
• OCPBUGS-60648: Cache Azure KMS TokenCredential for ARO HCP and clarify CPO credentials cache naming #6677
• OCPBUGS-60100: fix: add dynamic security context uid to 4.19 missing components #6675
• OCPBUGS-57141: HCP payload doesn’t respect multiple mirrors #6517
• CNTRLPLANE-1270: Red Hat Konflux update control-plane-operator-4-19 #6660
• Red Hat Konflux purge control-plane-operator-4-19 #6659
• CNTRLPLANE-1267: conditional builds for mce-2.9 #6657
• OCPBUGS-57588: Update PSA from v1beta1 to v1 #6302
• OCPBUGS-59805: Router publish strategy related changes for IBM Cloud platform #6490
• OCPBUGS-59933: Use the image reference for the cache in the image metadata provider #6535
• CNTRLPLANE-1016: Support day2 tags changes for AWS default SecurityGroup #6455
• CNTRLPLANE-1034: chore: Relax the kas healthcheck for aro when AllowedCIDRBlocks #6617
• OCPBUGS-60100: feat: let ARO honour cp namespace annotation for default SC uids in 4.19 #6592
• CNTRLPLANE-1226: feat(konflux): Make CPO builds hermetic #6596
• CNTRLPLANE-1213: New API to support specifying cluster-autoscaler flags #6558
• OCPBUGS-57331: Set default security context on everything #6257
• OCPSTRAT-2173: feat(hcco): add support for hosted OIDC client secrets #6525
• OCPBUGS-58300: remove annotation is not working #6465
• CNTRLPLANE-1189: Global PullSecret daemonSet implementation #6507
• NO-JIRA: fix: set terminationMessagePolicy to FallbackToLogsOnError for olm-collect-profiles #6493
• CNTRLPLANE-1034: sharedingress: Add support for kube-apiserver whitelist CIDRs #6502
• OCPBUGS-58683: fix(hcco): Don’t use a default OIDC client secret name when no secret name is provided #6398
• OCPBUGS-59674: Initial Changes to Support Self-managed Azure #6481
• OCPBUGS-59547: Remove code associated with Managed Identity v2 for ARO HCP for 4.19 #6459
• OCPBUGS-59493: Remove unused jq and rsync rpms #6457
• OCPBUGS-59101: Configure ClusterServiceLoadBalancerHea… #6409
• NO-JIRA: chore(deps): update konflux references #6383
• NO-JIRA: [release-4.19] CNTRLPLANE-1042: Disable createClusterNone for azure and scope down verifyResourceGroupLocationsMatch check #6392
• OCPBUGS-57660: [release-4.19] CORENET-6094: CNO: add FRR-k8s image #6374
• OCPBUGS-58335: Support proxy authentication when user/pass is included in URL #6370
• CNTRLPLANE-1044: chore(deps): update konflux references #6342
• ACM-21713: adding .git in .dockerignore to fix version info #6318
• CNV-61396: Sync RBAC for expansion support in kubevirt CSI driver #6255
• CNTRLPLANE-374: hcco: handle post-install creation of OIDC client secrets #6296
• OCPBUGS-57485: Don’t use /version for haproxy health checks #6292
• chore(deps): update konflux references #6189
• ACM-21734 Fixing Konflux EC violations #6303
• NO-JIRA: cpov1: set TerminationMessagePolicy on oas-trust-anchor-generator #6295
• OCPBUGS-57299: Reuse hosted cluster release and metadata providers #6250
• OCPBUGS-56930: cpov1: set terminationMessagePolicy to FallbackToLogsOnError for all HCP containers #6245
• ARO-15626: Disallow users from setting .spec.managementState to Removed in the image registry operator config on Azure #6233
• OCPBUGS-56792: Fix CatalogSource image check when unauthorized #6198
• OCPBUGS-56910: util/version: Add Version420 #6215
• OCPBUGS-56910: Move EnsurePSANotPrivileged to AtLeast(t, Version420) #6212
• CNTRLPLANE-831: feat(konflux): add arm64 builds to cpo pipeline #6182
• OCPBUGS-56777: Disable PSA enforcement in 4.19 hosted cluster #6201
• OCPBUGS-56458: switch termination message policy to TerminationMessageFallbackToLogsOnError for debugability #6170
• OCPBUGS-56562: Do not validate OCP API Server SANS if PKI reconciliation is disabled #6178
• CNTRLPLANE-831: Red Had Konflux control-plane-operator-4-19 intial pipeline #6181
• CNTRLPLANE-916: Konflux build pipeline service account migration #6089
• CNTRLPLANE-915: chore(deps): update konflux references #6139
• OCPBUGS-55789: [release-4.19] Update KAS structured authentication configuration logic to use new uid and extras fields #6121
• OCPBUGS-56036: add multi-arch build for MCE 2.9 #6145
• OCPBUGS-55693: Add support for registry root entry only in the IDMS/ICSP #6131
• OCPBUGS-55927: Fix Konflux enterprise contract violations #6126
• OCPBUGS-55749: Fix mce-2.9 konflux pipelines #6117
• Red Hat Konflux update hypershift-cli-mce-29 #6104
• Full changelog

ibm-cloud-controller-manager

• OCPBUGS-120698: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 #113
• Full changelog

ibm-vpc-block-csi-driver

• OCPBUGS-80461: Bump google.golang.org/grpc to v1.79.3 #142
• OCPBUGS-77206: [release-4.19] standardize build paths #119
• Full changelog

ibm-vpc-block-csi-driver-operator

• OCPBUGS-103677: Use patched x/net fork v0.43.0-sec.4 #190
• Full changelog

ibmcloud-cluster-api-controllers

• OCPBUGS-103676: Replace golang.org/x/net with openshift-sustaining/net #173
• OCPBUGS-52542: CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork #118
• OCPBUGS-56962: [release-4.19] Update manifests to remove dependency on admissionregistration v1beta1 #115
• Full changelog

ibmcloud-machine-controllers

• OCPBUGS-103680: replace golang.org/x/net with openshift-sustaining/net v0.43.0-sec.4 #103
• OCPBUGS-81483: bump vpc go sdk #90
• NO-JIRA: Modernize test infrastructure to align with other MAPI providers #86
• Full changelog

insights-operator

• OCPBUGS-103682: Bump golang.org/x/net to v0.43.0-sec.3 #1354
• OCPBUGS-112750: secrets and configmap revisions count gathering #1350
• OCPBUGS-105424: Fix indentation bug on livenessProbe #1340
• OCPBUGS-99987: update HyperShift deployment manifest #1328
• OCPBUGS-88482: [release-4.19] extractor-controller #1306
• OCPBUGS-87808: add config option to disable runtime extractor #1303
• OCPBUGS-80464: Bump google.golang.org/grpc to v1.79.3 #1282
• OCPBUGS-83563: kubeletconfig gatherer #1272
• OCPBUGS-76962: Extends the time for the extractor liveness probe #1230
• OCPBUGS-75902: [bugfix] The ConfigMap value for StoragePath is ignored on basic routine #1224
• OCPBUGS-66202: Add filtering to add other possible pod status to QEMU gatherer #1190
• OCPBUGS-66058: [bugfix] The archive’s records may include files whose names are out of bounds #1183
• OCPBUGS-66061: QEMU logs are not gathered if there are pending status virt-launcher pods #1184
• OCPBUGS-62489: Update error message for missing SCA certificates #1152
• OCPBUGS-61971: add missing permissions for replicasets and events #1145
• And 7 elided commits (e.g. from squash or rebase merges)
• Full changelog

insights-runtime-exporter, insights-runtime-extractor

• OCPBUGS-77779: remove dnf cache from the container images #68
• Full changelog

ironic

• OCPBUGS-88476: Updating openstack-ironic commit that fixes CVE-2026-43003 #896
• OCPBUGS-100165: Update openstack-ironic commit hash for CVE-2026-44918 #882
• OCPBUGS-84855: Bump pyasn1 to 0.5.1-4 #825
• OCPBUGS-74406: Update sushy to include DGX B200 credentials fix #819
• OCPBUGS-74116: Bump keystonemiddleware version to 10.9.0-0.20260216145500.557d173 for CVE-2026-22797 fix #794
• OCPBUGS-77028: Update ironic hash for 4.19 with heartbeat inspection fix #797
• OCPBUGS-69785: Bump eventlet version to 0.33.1-7 #759
• OCPBUGS-65572: Include Handle HTTP 400 and 409 race condition in Redfish power opera… #724
• OCPBUGS-62961: Bump sushy to include fix #700
• Bug OCPBUGS-56639: Bump sushy to include SuperMicro Cd boot device string workaround #660
• OCPBUGS-55743: Extract files one-by-one in logwatch #656
• Full changelog

ironic-agent

• OCPBUGS-99885: Bump ironic-python-agent pinned commit for CVE-2026-66138 #307
• OCPBUGS-88476: Update ironic-python-agent commit that fixes CVE-2026-43003 #304
• OCPBUGS-95065: Replace individual package removal with a single rpm -e loop #285
• OCPBUGS-95065: Replace dnf remove with rpm -e to prevent dependency removal #273
• OCPBUGS-69783: Bump eventlet version to 0.33.1-7 #229
• OCPBUGS-67304: Include Test advertised ip reachability before assigning it #224
• OCPBUGS-62441: netutils: Use ethtool ioctl to get permanent mac address #198
• OCPBUGS-56042: collect the entire journal from the host #188
• Full changelog

ironic-machine-os-downloader

• ART-13081: append .0 to go.mod version #102
• Full changelog

kube-metrics-server

• NO-ISSUE: synchronize OWNERS from main branch [release-4.19] #84
• OCPBUGS-80365: Bump google.golang.org/grpc to v1.79.3 #63
• Full changelog

kube-state-metrics

• OCPBUGS-103674: Use patched x/net fork v0.43.0-sec.4 #165
• NO-ISSUE: synchronize OWNERS from main branch [release-4.19] #193
• OCPBUGS-99405: fix CronJob timezone panic and embed tzdata in kube-state-metrics #154
• Full changelog

kube-storage-version-migrator

• NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-19). #223
• Fix verify job with build-machinery bump #215
• ART-13081: append .0 to go.mod version #213
• Full changelog

kubevirt-cloud-controller-manager

• OCPBUGS-78392: Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART for 4.19 #63
• OCPBUGS-78392: Regenerate go.sum to fix verify-deps #85
• OCPBUGS-95085: OWNERS: Update component to Cloud Compute / KubeVirt Provider #84
• Full changelog

kubevirt-csi-driver

• OCPBUGS-80366: Bump google.golang.org/grpc to v1.79.3 #100
• OCPBUGS-79322: Add annotation-based fallback for infra VM node ID resolution #85
• OCPBUGS-78389: Updating ose-kubevirt-csi-driver-container image to be consistent with ART for 4.19 #79
• ”[release-4.19] OCPBUGS-58239: Implement volume expansion” #64
• Full changelog

machine-api-operator

• OCPBUGS-103684: replace golang.org/x/net with openshift-sustaining/net@v0.43.0-sec.4 #1544
• OCPBUGS-78715: : [release-4.19] Use resource group when generating default Azure image #1479
• OCPBUGS-61096: bump openshift/api #1411
• fix for OCPBUGS-60427: userDataSecret.name should be a Required value on AWS #1403
• OCPBUGS-59386: Enabled 10 concurrent reconciles on GCP #1391
• OCPBUGS-56227: correct aws kms permissions #1371
• OCPBUGS-55715: Revert “Added skip for when config not multi nic” #1366
• OCPBUGS-55786: [release-4.19] Fixes machineset paused condition nil pointer #1368
• OCPBUGS-55706: fix: use patch for machine/machineset status #1367
• Full changelog

machine-config-operator

• OCPBUGS-103699: Fix CVE-2026-33814 by adding patch for golang.org/x/net package #6506
• OCPBUGS-128824: [Release-4.19] Degraded MCP as generated-kubelet is generated with an old controller version #6612
• OCPBUGS-122228: Update message for MachineOSBuildFailed condition #6527
• OCPBUGS-120741: [manual cherry-pick of #6446] Use kubernetes scheme in drain controller event recorder #6499
• OCPBUGS-116942: Update AMI Whitelist #6488
• OCPBUGS-105427: Replace wildcard permissions with explicit verbs and resources in MCC ClusterRole #6384
• OCPBUGS-105216: Update AMI Whitelist #6378
• OCPBUGS-93808: move cleanUpDuplicatedMC to avoid double reboot on first updated Master node #6243
• OCPBUGS-98103: Remove sensitive ControllerConfig logging #6287
• OCPBUGS-95589: Bootstrap MCS logging entire ignition #6258
• OCPBUGS-95273: Update custom containerfile OCB test to work in a disconnected environment #6255
• OCPBUGS-96167: Update AMI Whitelist #6263
• OCPBUGS-88566: Verify extension packages are installed #6182
• OCPBUGS-86986: Update AMI Whitelist #6131
• OCPBUGS-86650: Apply password only if changes exist #6097
• OCPBUGS-86575: use –delete-if-present for karg removal #6088
• OCPBUGS-86586: Fix re-cordon detection #6093
• OCPBUGS-86233: Fix ssh and password rollbacks #6069
• OCPBUGS-66284: Set -fin timeouts in HAProxy config #5461
• OCPBUGS-86165: Add terminationMessagePolicy to build pod containers #6064
• OCPBUGS-85581: Fix units rollback if update failure #6039
• OCPBUGS-85018: Update AMI Whitelist #5997
• OCPBUGS-84042: Update AMI Whitelist #5871
• [release 4.19] OCPBUGS-81289: Calculate machine counts in MCP status from node properties #5823
• OCPBUGS-76920: Degrade MCPs status based on MCN NodeDegraded condition #5662
• OCPBUGS-81282: Re-order logger setting to eliminate race condition #5822
• OCPBUGS-81144: Update AMI Whitelist #5817
• OCPBUGS-79473: set default-timeout-stop to 200s globally #5802
• OCPBUGS-77955: Update AMI Whitelist #5749
• OCPBUGS-77221: Prevent unnecessary systemd unit disable #5688
• OCPBUGS-77828: Update AMI Whitelist #5742
• OCPBUGS-77725: reduce MCO image size #5737
• OCPBUGS-74147: enable nodeip-configuration for platform external #5579
• OCPBUGS-77229: Backport: Add delays to reduce TestOSBuildController failures #5690
• OCPBUGS-77420: Remove MCD liveness probe #5711
• OCPBUGS-77306: mcd_config_drift not working properly #5700
• OCPBUGS-77240: Fix MCN conditions not updating during OCL sync #5693
• OCPBUGS-77071: Machine-config controller should not log about non-existent pull-secret changes #5674
• OCPBUGS-76831: machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] #5658
• OCPBUGS-76362: Update AMI script and list #5640
• OCPBUGS-43435: After OCL is enabled few phases in MCN are not updating as expected #5606
• OCPBUGS-71210: MCP is not correctly degraded when a pivotError happens #5532
• OCPBUGS-70325: Remove log exposing kubeconfig #5526
• OCPBUGS-67264: cherry pick to few fixes that needed for missing services and configuration #5490
• OCPBUGS-67198: Fix cleanup in TestInstallRPMAndCheckMCDMetrics to decrease risk of test failures due to interference #5496
• OCPBUGS-64922: Update timing of MCN desired config spec update to align with node annotation setting #5439
• OCPBUGS-65839: Remove –mount directives #5430
• OCPBUGS-62168: Fix - NetworkManager restart or crash renders br-ex unusable #5352
• OCPBUGS-64844: Create temporal allow policy #5398
• OCPBUGS-63126: Ensure the node passed to RunCordonOrUncordon comes from the latest updated state #5348
• OCPBUGS-62670: [release-4.19] Networking: reset ovn-remote config and allow ovnkube controller to set it #5324
• OCPBUGS-62746: Fix MCP updated machine count for image mode disabling case #5336
• OCPBUGS-62788: Skip rpm-ostree local rebase if no PIS #5337
• OCPBUGS-61738: Recheck generatedByControllerVersion annotation prior to deleting a degraded MC #5283
• OCPBUGS-62706: Cert Controller should live fetch SAN IPs during cert rotation #5330
• OCPBUGS-62649: configure-ovs: work around a Cisco switch issue #5323
• OCPBUGS-62003: Machine-config controller should actively manage cordon while draining #5300
• OCPBUGS-62164: Add mcd_local_unsupported_packages recording rule #5306
• OCPBUGS-62114: Improve MCN CRD clean-up script #5299
• OCPBUGS-61835: Override NMState service definition #5287
• OCPBUGS-61284: Make MCN e2e tests blocking #5275
• OCPBUGS-60110: Enable debug logging for nodeip-configuration #5221
• OCPBUGS-59871: Understand and eliminate noisy logs for MCN #5199
• OCPBUGS-60767: Update the OnClusterBuild payload tests to reflect the validation rule requiring MCP & MOSC names to match #5258
• OCPBUGS-60265: Reintroduce cronjob that deletes MCN v1alpha1 CRD #5243
• OCPBUGS-60224: Invalid architecture value found in annotation during 4.19 update #5227
• OCPBUGS-60080: use channel to signal controller shutdown #5217
• OCPBUGS-59928, OPNET-681: Support migration to NMState #5208
• OCPBUGS-59899: Add workaround fix for static pod race #5204
• OCPBUGS-59978: ARO cert rotate fix #5210
• OCPBUGS-59720: TestMCNPoolNameCustom should clean up resources properly #5186
• OCPBUGS-56750: Support NODEIP_HINT in IPI deployments too #5082
• OCPBUGS-58894: Remove podman-etcd machine config source #5169
• OCPBUGS-59208: Backport QE ported test for OCL component readiness #5125
• OCPBUGS-58820: Add control-plane label for master nodes on legacy clusters #5168
• OCPBUGS-57327: Do not set cpu system reserve below the default value #5117
• OCPBUGS-57689: Ensure the build controller restarts on upgrade #5127
• OCPBUGS-57930: OCPBUGS-57506: Boot image controller should correctly handle marketplace boot images #5135
• OCPBUGS-57929: add MachineConfiguration to CO related objects #5132
• OCPBUGS-56623: Give keepalived container chroot cap #5074
• OCPBUGS-57064: Fix typo in MCN’s MachineConfigNodePinnedImageSetsDegraded message #5105
• OCPBUGS-56899: Fix dynamic-system-reserved-calc.sh when only true parameter is used #5094
• OCPBUGS-56829: Only update boot disks during GCP boot image updates #5088
• OCPBUGS-56445: Boot Image Controller should not degrade when golden configmap is slow to update #5063
• OCPBUGS-56632: daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers #5076
• OCPBUGS-56035: Only populate Status.PinnedImageSets.CurrentGeneration on valid generation value #5039
• OCPBUGS-56261: Fix interrupt state to account for failure correctly #5055
• OCPBUGS-56180: Add hot loop detection in the boot image controller #5050
• OCPBUGS-56263: scope MCD node listers to current node #5058
• OCPBUGS-56121: Adapt MCC to use LayeredNodeState and remove LayeredPoolState #5045
• OCPBUGS-56136: Compare the osImageURLs for OS validation check #5048
• OCPBUGS-56119: error from generateAndValidateRenderedMachineConfig function can be misleading #5044
• OCPBUGS-56038: OWNERS: update owners file with current MCO team members #5040
• OCPBUGS-55809: Use auto=start only for IPsec out connections #5035
• OCPBUGS-44757: Revert “OCPBUGS-44757: decrease leases for kubelet on azure” #5031
• Full changelog

machine-image-customization-controller

• OCPBUGS-103675: Replace golang.org/x/net with openshift-sustaining/net v0.43.0-sec.4 for CVE-2026-33814 #198
• OCPBUGS-81713: Return error when network data Secret lacks nmstate key #173
• OCPBUGS-77567: Clean up dnf cache to reduce container image size #166
• Full changelog

machine-os-images

• OCPBUGS-87875: Add support for hermetic builds via Cachi2 prefetched CoreOS ISOs #99
• OCPBUGS-55934: Dummy change to force a rebuild for 4.19 #63
• Full changelog

metallb-frr

• OCPBUGS-66055: Dockerfile: unpin FRR rpm #113
• Full changelog

monitoring-plugin

• OU-1589: [release-4.19] sanitize linkified URLs in alert annotations #1379
• OCPBUGS-132024: Updating monitoring-plugin-container image to be consistent with ART for 4.19 #1363
• OCPBUGS-130731: escape regex variable values in regex matcher contexts #1357
• OCPBUGS-118234: [release-4.19] Bump fast-uri to 3.1.7 to fix CVE-2026-84292 #1335
• OU-1392: [release-4.19] fix: parse datetime ranges from the specified format rather than browser specific apis- #1352 #1354
• OU-1528: [release-4.19] Optimize namespace changes in Alerts #1309
• OCPBUGS-103703: CVE-2026-33814-4-19 openshift4/ose-monitoring-plugin-rhel9: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [openshift-4.19] #1216
• NO-JIRA: [release-4.19] Sanitize alert runbook URLs #1291
• OCPBUGS-98783: [release-4.19] replace outdated react-linkify dependency #1167
• Fix for OCPBUGS-89704: CVE-2026-12143 #1152
• OCPBUGS-99026: Fix CVE-2026-49978 - bump DOMPurify to >= 3.4.7 #1088
• OU-1240: Makefile and package.json to enable test-frontend-ci #1097
• OU-1240: Dockerfile.test permission #1082
• OCPBUGS-99306: graph redirect query parameter #1075
• Fix for OCPBUGS-91617: CVE-2026-45736 #1026
• OU-651: Fix AlertRules page to display user defined loki alerts #1059
• Fix for OCPBUGS-94010: CVE-2026-13676 #1031
• NO-JIRA: fix incidents unit test #1040
• OCPBUGS-87084: [release-4.19] fast-uri: URI authority bypass due to improper delimiter handling #993
• OCPBUGS-84288: bump follow-redirects to 1.16.0 #988
• OCPBUGS-86923: Updating monitoring-plugin-container image to be consistent with ART for 4.19 #970
• OCPBUGS-79452: immutable bump: fix for CVE-2026-29063 [4.19] #952
• OU-1372: reset queries when namespace changes in dev perspective #950
• OU-1370: prevent namespace and project desync #944
• OCPBUGS-83496: [release-4.19] feat: re enable dev console views #858
• OCPBUGS-83300: [release-4.19] openshift4/ose-monitoring-plugin-rhel9: Axios: Remote Code Execution via Prototype Pollution escalation #889
• OCPBUGS-82520: fix: re encode params when redirecting from graph to query-browser #874
• OCPBUGS-77407: koa bump #867
• OCPBUGS-76579: [release-4.19]CVE-2026-25639 openshift4/ose-monitoring-plugin-rhel9: Axios affected by Denial of Service via proto Key in mergeConfig #789
• OCPBUGS-78360: fix for CVE-2025-69873 #847
• OCPBUGS-78397: Updating monitoring-plugin-container image to be consistent with ART for 4.19 #842
• NO-JIRA: simplify dockerfile by removing cachito dependencies [release-4.19] #806
• OCPBUGS-76937: fix: update vulnerable dependencies #773
• OU-1233: monitoring testing on release-4.19 branch - fix #785
• OU-1233: automation task - main into 419 and alerting conditional filtering #772
• OCPBUGS-74166: fix: update qs vulnerable dependency #737
• OU-1157: remove random multiplication #706
• OU-1131: Merge main into release-4.19 #693
• OCPBUGS-66388: Time range and Refresh interval dropdown button lack of unique identifier #671
• OU-863: [release-4.19]: Fix step calculation for metric explorer 4.19 #655
• OCPBUGS-63531: [release-4.19] Improve alignment with console SDK #647
• OCPBUGS-63588: [release-4.19] allow tenancy access to metrics tags #618
• OU-1060: remove troubleshooting panel links from non-admin #629
• NO-JIRA: [release-4.19] OCPBUGS-60296: fix legend height to avoid scroll overlap #498
• NO-JIRA: improve consistency in tab string #496
• : NO-JIRA: update the i18n #495
• OCPBUGS-60129: feat: add alerting rules tab to dev console #488
• OU-943: remove broken useEffect #484
• OU-943: Manual Cherry Pick #474
• OU-594: Manual cherry pick incidents tab 4 19 #479
• OU-863: [release-4.19] Manual cherry pick add disconnect option #482
• OU-939: Fix virt persepective new silence link #478
• OU-928: reset showgraph state when unmounting button #462
• OU-744: [release-4.19]: fix: set correct pf color for gradient background on legacy dashboards legend #457
• OU-880: [release-4.19] Manual cherry pick ou 880 #458
• OU-842: [release-4.19] fix: override notistack dependency to avoid conflict #455
• OCPBUGS-56422: “Negative matcher” is checked by default on Create silence page #415
• NO-JIRA: fix: update monitoring and virtualization routes to avoid overriding console routes #411
• : NO-JIRA: bound table scroll and column alignment #409 #409
• NO-JIRA: feature: upgrade react router to v5 compat #406
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

multus-admission-controller

• OCPBUGS-103694: bump golang.org/x/net to v0.35.0-sec.3 to fix CVE-2026-33814 #133
• OCPBUGS-58849: Update the github.com/golang/glog module to v1.2.4 #100
• ART-13081: append .0 to go.mod version #95
• Full changelog

multus-cni, multus-cni-microshift

• OCPBUGS-103706, OCPBUGS-103709: [release-4.19] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame- #355 #356
• OCPBUGS-85248: Fix server url in kubeconfig #288
• NO-ISSUE: [release-4.19] fix CI build root image #289
• Full changelog

multus-networkpolicy

• OCPBUGS-103708: [release-4.19] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #127
• OCPBUGS-77778: Clean up dnf cache #103
• OCPBUGS-77158: Fix modified vendor/ and go.sum after vendoring #82
• Full changelog

multus-whereabouts-ipam-cni

• OCPBUGS-59640: Prevent accidental IP deallocation in statefulsets #375
• Full changelog

must-gather

• OCPBUGS-85578: Collect object size with the object count #546
• OCPBUGS-59487: network: Gather OVN-Kubernetes CUDN CRs #499
• Full changelog

network-interface-bond-cni

• OCPBUGS-62107: Use netlinksafe instead of netlink to avoid netlink.ErrDumpInterrupted #96
• NO-JIRA:Add ci-operator yaml file #75
• OCPBUGS-57283: Bump github.com/containernetworking/plugins from to 1.7.1 #72
• Full changelog

network-metrics-daemon

• OCPBUGS-103710: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 #152
• And 2 elided commits (e.g. from squash or rebase merges)
• Full changelog

network-tools

• NO-JIRA: fix prefetch-dependencies step failure #166
• ART-13081: append .0 to go.mod version #146
• Full changelog

networking-console-plugin

• maintenance: Bump the npm group with 24 updates #624
• OCPNETUI-184: Sync Dockerfile with Dockerfile.art #615
• maintenance: Bump the npm group with 20 updates #600
• OCPNETUI-158: dependency cleanup #588
• OCPNETUI-158: reassign dev and prod dependencies #587
• maintenance: Bump the npm group with 23 updates #573
• maintenance: Bump the npm group across 1 directory with 24 updates #570
• OCPNETUI-158: Align shared modules with Console #568
• maintenance: Bump the npm group with 15 updates #551
• maintenance: Bump the npm group across 1 directory with 20 updates #534
• maintenance: Bump the npm group with 246 updates #509
• OCPNETUI-82: Lower Dockerfile base image versions #520
• OCPBUGS-98778: Updating linkify-it to 5.0.2 to fix CVE-2026-48801 #461
• OCPBUGS-60277: fixed broken link in empty state #441
• OCPBUGS-41605: Retain namespace selection between network policies tabs #422
• OCPBUGS-83384: Fix CVE-2026-34043 in serialize-javascript #395
• [release-4:19] OCPBUGS-84634: Migration from yarn to npm #398
• OCPBUGS-66279, OCPBUGS-67251: fix node-forge by upgrading webpack-dev-server: ^4.7.4 → ^5.2.3” #410
• OCPBUGS-73654: CVE-2026-22029 fix to @remix-run/router to 1.23.2 #405
• OCPBUGS-81610: Fix CVE-2026-CVE-2026-4800 in lodash #400
• OCPBUGS-79453: Bump immutable #391
• OCPBUGS-41199: Fix NAD creation using default namespace instead of selected one #351
• CNV-76277: Fix name generator with unprofessional names #318
• OCPBUGS-60137: Fix ingress details #261
• OCPBUGS-59841: Fix requiremenets with no value #255
• OCPBUGS-57266: Add fileupload translation #248
• OCPBUGS-57265: Fix pod context #247
• CNV-61827: fix styling issues #250
• CNV-61902: fetch description of terms for popovers #249
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

oauth-apiserver

• OCPBUGS-103704: Replace golang.org/x/net with github.com/openshift-sustaining/net v0.35.0-sec.4 #223
• NO-JIRA: (chore): update OWNERS file #169
• OCPBUGS-61760: bump kubernetes-apiserver to pick up loopback certificate expiration update #152
• OCPBUGS-63051: (bugfix): useroauthaccesstokens: cast delete validation object to correct type for admission #150
• Full changelog

oauth-proxy

• OCPBUGS-112092: bugfix: rewrite open redirect strings to ‘/’ #383
• OCPBUGS-58836: 4.19 kube 1.32 #318
• OCPBUGS-58343: release 4.19 CVE fixes #326
• OCPBUGS-58276: fix e2e tests #323
• Full changelog

oauth-server

• OCPBUGS-87074: bugfix: default to english when Accept-Language header contains more than 1000 underscores #271
• OCPBUGS-81808: Bump github.com/go-jose/go-jose/v3 from v3.0.3 to v3.0.5 #237
• OCPBUGS-58892: Fix mixup with Spanish and French locale variable names #192
• OCPBUGS-57282: Updating oauth-server-container image to be consistent with ART for 4.19 #183
• Use newer build-machinery-go #178
• ART-13081: append .0 to go.mod version #176
• Full changelog

oc-mirror

• OCPBUGS-129461: v1 accept catalog root entries and relative symlink targets #1577
• OCPBUGS-78147: Fix registriesd “unknown userid” failure for arbitrary UIDs #1367
• OCPBUGS-77663: Fix reg config detection for explicit false values #1363
• OCPBUGS-66410: fix: return only requested version #1323
• OCPBUGS-65968: Remove empty status field from generated IDMS/ITMS files #1318
• OCPBUGS-64683: removes unintended exec permissions #1307
• OCPBUGS-62311: v2/cli: show binary version in output #1277
• OCPBUGS-62606: generate the archive only after mirroring #1282
• OCPBUGS-62062: [release-4.19] changes the warning message of 4.21 #1271
• And 28 elided commits (e.g. from squash or rebase merges)
• Full changelog

olm-catalogd, olm-operator-controller

• OCPBUGS-129018: [release-4.19] clean up orphaned catalog cache temp dirs #817
• OCPBUGS-103696, OCPBUGS-103702: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #803
• OCPBUGS-104519: Fix cache path to avoid /var/cache/dnf conflict #789
• OCPBUGS-100313: increase catalog HTTP client timeout from 10s to 5m #784
• OCPBUGS-87180: [release-4.19] catalogd: clean up orphaned temp dirs in catalog storage #748
• OCPBUGS-80484, OCPBUGS-80485: Update grpc to v1.75.1-sec.1 to fix CVE-2026-33186 #731
• OCPBUGS-63405, OPRUN-4216: Port CRD upgrade safety carry from 4.20 without bumping deps #543
• And 10 elided commits (e.g. from squash or rebase merges)
• Full changelog

openshift-apiserver

• OCPBUGS-82820: Address CVE-2026-35469 #647
• OCPBUGS-66920: Add ValidatingAdmissionPolicy and check for omissions next time. #588
• OCPBUGS-61662: Adding validation directly and calling existing library-go validation #576
• OCPBUGS-65962: pkg/image: conditionally parse raw image manifest #582
• NO-JIRA: add .0 to go version #583
• OCPBUGS-65863: update pkg/image/OWNERS #578
• OCPBUGS-61759: bump kubernetes-apiserver to pick up loopback certificate expiration update #569
• OCPBUGS-57043: Updating ose-openshift-apiserver-container image to be consistent with ART for 4.19 #564
• OCPBUGS-57206: Wire dry run option to Image API server operations #524
• OCPBUGS-56494: Fix image reference in TestImageStreamImportQuayIO #510
• Full changelog

openshift-controller-manager

• OCPBUGS-56614: legacy image pull secret rollback controller #384
• OCPBUGS-57951: ignore error failing to find pull/push secrets #401
• OCPBUGS-57193: Set node-pullsecrets volume to read-only to protect image pull credentials #390
• OCPBUGS-55642: Empty proxy variables are causing issues during the build #376
• Full changelog

openshift-state-metrics

• NO-ISSUE: synchronize OWNERS from main branch #152
• ART-13081: append .0 to go.mod version #122
• Full changelog

openstack-cluster-api-controllers

• UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into release-4.19 #393
• OCPBUGS-64815: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into release-4.19 #370
• OCPBUGS-57891: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into release-4.19 #366
• Full changelog

openstack-machine-api-provider

• OCPBUGS-94015: Revendor CAPO #173
• OCPBUGS-69646: Don’t record event for every reconcile #144
• OCPBUGS-76791: Fix make test #158
• OCPBUGS-74586: Revendor CAPO #151
• Full changelog

openstack-resource-controller

• OCPBUGS-103574: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.43.0-sec.4 to address CVE-2026-33814 #46
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• OCPBUGS-103713, OCPBUGS-103714, OCPBUGS-103716: Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.43.0-sec.3- #1365 #1365
• OCPBUGS-80492, OCPBUGS-80493, OCPBUGS-80494: Fix CVE-2026-33186 with openshift-sustaining/grpc-go v1.75.1-sec.1 [release-4.19] #1310
• OCPBUGS-79700: Fix nil pointer dereference in sortUnpackJobs when sorting non-failed jobs #1270
• OCPBUGS-77437: Remove the collect-profiles info from the microshift kustomization file #1240
• OCPBUGS-76587: Remove the collect-profiles job #1229
• OCPBUGS-64925: Fix TOCTOU race condition in ensureInstallPlan (#3682) #1145
• OCPBUGS-61363: [4.19] e2e stability fixes #1079
• OCPBUGS-60525: Add NetworkPolicy as a supported kind #1047
• OCPBUGS-59258: 🐛 add catalog-operator control-plane-specific tolerations to unpack jobs #1037
• OCPBUGS-58259: Reduce Frequency of Update Requests for Copied CSVs (#3597) [release-4.19] #1030
• OCPBUGS-57352: reduce cache expiry frequency [release-4.19] #1019
• OCPBUGS-57279: [release-4.19]: operatorgroup: ensure clusterroleselectors in clusterrole aggregation rules are sorted #1015
• OCPBUGS-56034: fix(olm): improve error logging for missing olm.managed label (#3558) #999
• Full changelog

operator-marketplace

• OCPBUGS-73882: Increase default catalog polling interval to 4h (240m) #706
• OCPBUGS-62217: Remove Expect func so that the test case can use the retry logic #668
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-132715: Branch Sync release-4.20 to release-4.19 [10-16-2026] #3554
• OCPBUGS-129151: Branch Sync release-4.20 to release-4.19 [10-05-2026] #3510
• OCPBUGS-111880, OCPBUGS-111887: Branch Sync release-4.20 to release-4.19 [08-18-2026] #3403
• OCPBUGS-95077: Branch Sync release-4.20 to release-4.19 [08-11-2026] #3380
• OCPBUGS-105881: Add pperiyasamy to OWNERS for release-4.19 #3387
• OCPBUGS-98616: Branch Sync release-4.20 to release-4.19 [07-09-2026] #3289
• OCPBUGS-82825: Bump github.com/moby/spdystream to v0.5.1 #3320
• OCPBUGS-98212: Branch Sync release-4.20 to release-4.19 [05-27-2026] #3207
• OCPBUGS-85512: Branch Sync release-4.20 to release-4.19 [05-12-2026] #3186
• OCPBUGS-74397, OCPBUGS-85355: Branch Sync release-4.20 to release-4.19 [05-10-2026] #3181
• OCPBUGS-81478: node: fix serviceUpdateNotNeeded nil pointer comparison #3100
• OCPBUGS-82032: Branch Sync release-4.20 to release-4.19 [04-04-2026] #3116
• OCPBUGS-81526: Branch Sync release-4.20 to release-4.19 [03-03-2026] #3034
• OCPBUGS-77442: Clear stale conntrack UDP entries for nodePorts #3015
• OCPBUGS-77082, OCPBUGS-77096: [release-4.19] combined backport PR for 2 escalations #2986
• OCPBUGS-74269: release-4.19 fix(localnet, ipamless): Prevent LSP deletion on sync #2942
• OCPBUGS-70345: Branch Sync release-4.20 to release-4.19 [12-31-2025] #2915
• OCPBUGS-66139: Branch Sync release-4.20 to release-4.19 [12-03-2025] #2890
• CORENET-6055, OCPBUGS-65658, OCPBUGS-65909, OCPBUGS-65956: Branch Sync release-4.20 to release-4.19 [11-26-2025] #2872
• OCPBUGS-64854: Fix stale EIP assignments during failover and controller restart #2848
• OCPBUGS-64645: kubevirt: fix bad release of IPs of live migratable pods #2842
• OCPBUGS-63660: Skip Pending pods in EgressIP status updates #2834
• OCPBUGS-63234: [release-4.19] DownStream Merge Sync from 4.20 [10-16-2025] #2810
• OCPBUGS-62670: Fix EgressIP stale GARP post reboot + pod restart #2774
• OCPBUGS-62800: [release-4.19] DownStream Merge Sync from 4.20 [10-07-2025] #2786
• OCPBUGS-61454: [4.19] allow default network -> localnet on the same node for any localnet subnet #2753
• OCPBUGS-48709, OCPBUGS-60797, OCPBUGS-60979: DownStream Merge Sync from 4.20 [08-22-2025] #2733
• OCPBUGS-48709: DownStream Merge Sync from 4.20 [08-06-2025] #2704
• OCPBUGS-48709: DownStream Merge Sync from 4.20 [07-28-2025] #2688
• OCPBUGS-48709, OCPBUGS-59530: DownStream Merge Sync from 4.20 [07-17-2025] #2675
• OCPBUGS-48709: DownStream Merge Sync from 4.20 [07-09-2025] #2660
• OCPBUGS-59106: DownStream Merge Sync from 4.20 [06-18-2025] #2642
• OCPBUGS-57061, OCPBUGS-57062: DownStream Merge Sync from 4.20 [05-30-2025] #2596
• OCPBUGS-55825: Release 4.19 blocker bug ovs cpu backport: special cherry-pick #2551
• Full changelog

powervs-block-csi-driver

• OCPBUGS-86907: Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 4.19 #135
• OCPBUGS-80497: Fix CVE-2026-33186 by bumping google.golang.org/grpc to 1.79.3 #129
• OCPBUGS-82826: Fix CVE-2026-35469 by bumping github.com/moby/spdystream to v0.5.1 #123
• OCPBUGS-75601: Mitigate CVE-2025-61726 by bumping golang to 1.24.13 #119
• Full changelog

powervs-block-csi-driver-operator

• OCPBUGS-86917: Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART for 4.19 #116
• OCPBUGS-80498: Fix CVE-2026-33186 by bumping google.golang.org/grpc to v1.79.3 #109
• Full changelog

powervs-cloud-controller-manager

• OCPBUGS-80499: Replace google.golang.org/grpc with openshift-sustaining fork v1.75.1-sec.1 to v1.79.3 to fix CVE-2026-33186 #100
• Full changelog

powervs-machine-controllers

• OCPBUGS-61134: Use OS_GIT_VERSION in Makefile when found (for Konflux builds) #124
• Full changelog

prom-label-proxy

• NO-ISSUE: synchronize OWNERS from main branch [release-4.19] #412
• ART-13081: append .0 to go.mod version #382
• Full changelog

prometheus

• NO-ISSUE: synchronize OWNERS from main branch #382
• OCPBUGS-93706: fix for CVE-2026-42151 #360
• OCPBUGS-88654: remote: validate snappy decoded length before allocation in read endpoint #343
• OCPBUGS-98388: fix: TLS client cert rotation when no CA is configured #341
• OCPBUGS-80500: Bump google.golang.org/grpc to v1.79.3 #307
• OCPBUGS-62429: chore(scrape): default to legacy validation/escaping scheme until utf-8 is fully supported by prometheus-operator #275
• OCPBUGS-61486: chore: compute highestTimestamp at queryManager level #265
• Full changelog

prometheus-alertmanager

• NO-JIRA: synchronize OWNERS with main #191
• OCPBUGS-103733: Use github.com/openshift-sustaining/net patch to fix CVE-2026-33814 #171
• OCPBUGS-98179: fixes CVE-2026-14362 #161
• OCPBUGS-100354: Set testdata CA expiry to 20 years from issue date (#4112) #150
• OCPBUGS-99450: embed tzdata in the alertmanager binary #144
• OCPBUGS-73759: Include go-verify-deps expected files in gitignore #111
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• NO-ISSUE: synchronize OWNERS from main branch #410
• OCPBUGS-103729, OCPBUGS-103735: [release-4.19] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame #396
• OCPBUGS-77297: backport upstream fix to reconcile resources with inconsistent status #368
• OCPBUGS-77269: Validate webhookURL secret for MSTeams receiver in AlertmanagerConfig CRD #363
• OCPBUGS-63197: reconcile workload configurations when a referenced secret/configmap key is updated #339
• Full changelog

prometheus-node-exporter

• OCPBUGS-103732: CVE-2026-33814 openshift4/ose-prometheus-node-exporter-rhel9: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [openshift-4.19] #215
• NO-ISSUE: synchronize OWNERS from main branch [release-4.19] #201
• Full changelog

rhel-coreos, rhel-coreos-extensions

• OCPBUGS-109661: NetworkManager-ovs has moved to RHCOS #1960
• NO-JIRA: rhaos-pkgs-match-openshift: exclude known package mismatches #1921
• OCPBUGS-82525: post-process: Remove workaround for openvswitch additional group #1927
• Merge #1853
• Merge #1851
• OCPBUGS-58122: [TNF] OCP Two Node with Fencing symlink begone! #1827
• OCPBUGS-56278: extensions: llvm now available in rhel 9.6 and 10 #1817
• NO-JIRA: Remove kernel-rt-kvm for cs9 and cs10 #1815
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

route-controller-manager

• OCPBUGS-103575: Fix CVE-2026-33814 by adding patch for golang.org/x/net package #109
• OCPBUGS-80378: Bump google.golang.org/grpc to v1.79.3 #84
• OCPBUGS-77172: filter ingress namespace on UnmanagedRoutes metric #75
• Full changelog

telemeter

• OCPBUGS-80513: Bump google.golang.org/grpc to v1.79.3 #591
• OCPBUGS-81809: [release-1.19] Fix CVE-2026-34986 #595
• ART-13081: append .0 to go.mod version #560
• Full changelog

tests

• OCPBUGS-130855: stage the creation of test pods to minimize etcd impact #31739
• OCPBUGS-121957: Raise status polling timeout and write bound #31622
• OCPBUGS-100441: retry GetVotingMemberNames on transient etcd client fails #31509
• OCPBUGS-104577: Backport node_e2e test migrations #31484
• OCPBUGS-100045: Add openshift/disruptive-longrunning testsuite in release-4.19 #31438
• OCPBUGS-99302: admit and extract non-payload 4.19 #31404
• OCPBUGS-77878: auditloganalyzer: update test name, remove duplicated test #29992
• OCPBUGS-85275: Add test for CPMS OnDelete strategy with full master replacement #31054
• OCPBUGS-83656: Fix PinnedImages test to respect node taints #30971
• OCPBUGS-78545: Skip oauth test for external control plane topology #30887
• : run resource request/limit check early #30898
• OCPBUGS-77825: add the missing namespace from managed openshift #30836
• OCPBUGS-77790: Update MCN tests to better handle condition transitions through the “Unknown” state #30833
• OCPBUGS-74201: Unrevert TLS tests with fixes #30707
• OCPBUGS-67146: Fix MachineConfigNode test in two-node fencing clusters #30590
• OCPBUGS-67365: Updated the upgrade duration limit to 100 minutes for ppc64le #30606
• OCPBUGS-63727: CNTRLPLANE-1767:fix(disruption): Using correct internal LB of apiserver for monitor test on ARO and Baremetal Hypershift #30440
• OCPBUGS-63609: Migrate OCP-32383 to upstream #30429
• OCPBUGS-63637: Add imagestream update dryrun test #30432
• OCPBUGS-62642: Fix endpoint admission test namespace creation for ROSA #30331
• OCPBUGS-61172: OCPBUGS-60883: Fix PinnedImageSet test instability & update flow for tests using custom MCPs #30205
• OCPBUGS-56213: Skip GatewayAPIController tests on clusters without OLM capabilities #29815
• OCPBUGS-61666: chore(test/extended/prometheus): bump the series limit of total series sent via telemetry from each cluster #30249
• OCPBUGS-59512: disruptioninclusterapiserver: bump timeout to 10 mins #29999
• OCPBUGS-60510: Bump to latest openshift/kubernetes (v1.32.8) #30229
• OCPBUGS-60244: Wait 30s after the upgrade is complete to validate workloads #30144
• OCPBUGS-60797: Don’t check for remote node subnet BGP routes #30156
• NO-JIRA: Update extended/networking OWNERS #30088
• OCPBUGS-60569: images/tests: Remove rteval #30124
• OCPBUGS-60429: Load our MCO’s OTE binary #30043
• OCPBUGS-59757: OCPBUGS-59758: Improve MCN test stability #30018
• OCPBUGS-60117: Enable test for LGW L2 #30052
• OCPBUGS-60234: Move the legacy container failures #30073
• OCPBUGS-60092: feat(azure): skip metrics collection for ARO HCP hypershift #30051
• OCPBUGS-59398: Skip MCN’s node degrade test on 4.19 #29990
• OCPBUGS-59391: [release-4.19]: OVNK BGP: Sync ovn-kubernetes bgp e2e tests #29989
• OCPBUGS-59226: bump watch count limits #29982
• OCPBUGS-57886: Bump 4.19 1.32.6 #29933
• OCPBUGS-58470: Update IPsec e2e test to validate NAT-T encapsulation option #29957
• OCPBUGS-57206: Backport pr 29834 to release-4.19 #29903
• OCPBUGS-58204: Fix MCN test on agent compact FIPS jobs #29943
• OCPBUGS-58053: [release-4.19] MCO-1768: Enable PIS testing on Metal #29936
• OCPBUGS-57436: Add MCO test suite to 4.19 #29918
• OCPBUGS-57930: Boot image controller should correctly handle marketplace boot images #29935
• OCPBUGS-57217: Stabilize custom MCP cleanup on MCN tests #29902
• OCPBUGS-57303: Fix failed tests of e2e-aws-ovn-tls-13 #29906
• OCPBUGS-57020: Skip tests modifying cluster/network.config when it is not permitted #29884
• OCPBUGS-57189: RouteExternalCertificate : Add fix for None platform type #29899
• OCPBUGS-56187: OCPBUGS-55968: Fix PIS tests on SNO & Enable applicable MCN & PIS tests on SNO #29789
• OCPBUGS-56969, OCPBUGS-56970: Fix RouteExternalCertificate tests for few other on-prem jobs #29880
• OCPBUGS-56829: Only update boot disks during GCP boot image updates tests #29878
• OCPBUGS-56967: Do not set the MTU when using NetworkAttachementDefinition #29879
• OCPBUGS-56947: fix deployment rollout wait to wait for desired replicas #29877
• OCPBUGS-56886: Fix bearer token exposure in exit condition as well #29841
• OCPBUGS-56437: Update to kubernetes 1.32.5 #29875
• OCPBUGS-56796: Skip failing test [release-4.19] #29865
• OCPBUGS-56045: OLMv1: Update test bundles [release-4.19] #29836
• OCPBUGS-56662: Fix failed etcd test on arbiter ci run #29826
• OCPBUGS-56399: fix watch request counts #29799
• CORENET-5875, CORENET-5876, OCPBUGS-56000: Add EgressIP and L2 UDN route advertisements tests #29777
• OCPBUGS-55897: bump limits #29783
• OCPBUGS-55969: (olmv1 tests) Increase timeout for verifyAPIEndpoints #29770
• OCPBUGS-55897: bump limits #29767
• OCPBUGS-55265: Bump 1.32.4 #29707
• OKD-243: Skip GatewayAPIController tests for OKD #29749
• Full changelog

thanos

• OCPBUGS-80515: Bump google.golang.org/grpc to v1.79.3 #183
• Full changelog

vsphere-cloud-controller-manager

• OCPBUGS-77513: hermetic migration 4.19 #104
• Full changelog

vsphere-cluster-api-controllers

• OCPBUGS-80520: Bump google.golang.org/grpc to v1.79.3 #103
• OCPBUGS-61650: Fix unit tests #69
• OCPBUGS-56962: Update manifests gen to remove reliance on admission registration v1beta1 #61
• Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

• OCPBUGS-92935: Bump golang.org/x/crypto/ssh to v0.41.0-sec.2 #192
• OCPBUGS-80523: Bump google.golang.org/grpc to v1.79.3 #175
• OCPBUGS-68315: CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.9.3 #155
• OCPBUGS-55700: UPSTREAM: 3262: Fix panic on DeletedFinalStateUnknown #143
• Full changelog

vsphere-csi-driver-operator

• OCPBUGS-103754: Bump golang.org/x/net to v0.43.0-sec.3 #355
• OCPBUGS-84895: Fix password escaping #341
• Full changelog

vsphere-problem-detector

• OCPBUGS-123520: Fixed compute cluster permission logic for single fd with read-only custom resourcepool #240
• OCPBUGS-103758: Bump golang.org/x/net to v0.43.0-sec.4 #232
• OCPBUGS-76081: fix concurrent map writes #210
• OCPBUGS-66198: Fixed logic for vSphere compute cluster permission #198
• OCPBUGS-60535: Check for number of FailureDomain-s in GetVCenter() #188
• OCPBUGS-56230: replace operator client #183
• Full changelog

---

Node Image Info

Loading node image info, this may take a while ...

Red Hat Enterprise Linux CoreOS (rhel-coreos)

Package List

• cri-o-1.32.13-16.rhaos4.19.git3c1400a.el9
• kernel-5.14.0-570.152.1.el9_6
• openshift-kubelet-4.19.0-202610221807.p2.g63adf01.assembly.stream.el9
• systemd-252-51.el9_6.6

Full list (564 packages)

• NetworkManager-1:1.52.0-11.el9_6.1
• NetworkManager-cloud-setup-1:1.52.0-11.el9_6.1
• NetworkManager-libnm-1:1.52.0-11.el9_6.1
• NetworkManager-ovs-1:1.52.0-11.el9_6.1
• NetworkManager-team-1:1.52.0-11.el9_6.1
• NetworkManager-tui-1:1.52.0-11.el9_6.1
• WALinuxAgent-udev-2.13.1.1-1.el9_6
• aardvark-dns-2:1.14.0-1.el9
• acl-2.4.0-0.el9_6.1
• adcli-0.9.2-1.el9
• afterburn-5.9.0-1.el9_6
• afterburn-dracut-5.9.0-1.el9_6
• alternatives-1.24-2.el9
• attr-2.5.1-3.el9
• audit-3.1.5-4.el9
• audit-libs-3.1.5-4.el9
• authselect-1.2.6-3.el9
• authselect-libs-1.2.6-3.el9
• avahi-libs-0.8-22.el9_6.1
• basesystem-11-13.el9
• bash-5.1.8-9.el9
• bash-completion-1:2.11-5.el9
• bind-libs-32:9.16.23-31.el9_6.4
• bind-license-32:9.16.23-31.el9_6.4
• bind-utils-32:9.16.23-31.el9_6.4
• binutils-2.35.2-63.el9_6.1
• binutils-gold-2.35.2-63.el9_6.1
• bootc-1.1.6-6.el9_6
• bootupd-0.2.35-1.el9_6
• bsdtar-3.5.3-7.el9_6.2
• bubblewrap-0.4.1-8.el9_6.1
• bzip2-1.0.8-10.el9_5
• bzip2-libs-1.0.8-10.el9_5
• c-ares-1.19.1-2.el9_4
• ca-certificates-2026.2.92_v9.0.319-90.3.el9_6
• checkpolicy-3.6-1.el9
• chrony-4.6.1-1.el9
• cifs-utils-7.2-0.el9_6.2
• clevis-21-208.el9
• clevis-dracut-21-208.el9
• clevis-luks-21-208.el9
• clevis-systemd-21-208.el9
• cloud-utils-growpart-0.33-1.el9
• composefs-1.0.8-1.el9
• composefs-libs-1.0.8-1.el9
• conmon-3:2.1.12-1.el9_6.1
• conmon-rs-0.6.6-0.rhaos4.18.el9.1
• console-login-helper-messages-0.21.3-1.el9
• console-login-helper-messages-issuegen-0.21.3-1.el9
• console-login-helper-messages-profile-0.21.3-1.el9
• container-selinux-4:2.247.0-1.el9_6
• containernetworking-plugins-1:1.6.2-3.el9_6.1
• containers-common-2:1-117.el9_6
• coreos-installer-0.24.0-6.el9_6
• coreos-installer-bootinfra-0.24.0-6.el9_6
• coreutils-8.32-39.el9
• coreutils-common-8.32-39.el9
• cpio-2.13-16.el9
• cracklib-2.9.6-27.el9
• cracklib-dicts-2.9.6-27.el9
• cri-o-1.32.13-16.rhaos4.19.git3c1400a.el9
• cri-tools-1.32.0-9.el9
• criu-3.19-1.3.el9_6
• criu-libs-3.19-1.3.el9_6
• crun-1.27-1.el9_6
• crypto-policies-20250128-1.git5269e22.el9
• crypto-policies-scripts-20250128-1.git5269e22.el9
• cryptsetup-2.7.2-3.el9_6.1
• cryptsetup-libs-2.7.2-3.el9_6.1
• curl-7.76.1-31.el9_6.3
• cyrus-sasl-gssapi-2.1.27-21.el9
• cyrus-sasl-lib-2.1.27-21.el9
• dbus-1:1.12.20-8.el9
• dbus-broker-28-7.el9
• dbus-common-1:1.12.20-8.el9
• dbus-libs-1:1.12.20-8.el9
• dbus-tools-1:1.12.20-8.el9
• device-mapper-9:1.02.202-6.el9
• device-mapper-event-9:1.02.202-6.el9
• device-mapper-event-libs-9:1.02.202-6.el9
• device-mapper-libs-9:1.02.202-6.el9
• device-mapper-multipath-0.8.7-35.el9_6.3
• device-mapper-multipath-libs-0.8.7-35.el9_6.3
• device-mapper-persistent-data-1.1.0-1.el9
• diffutils-3.7-12.el9
• dmidecode-1:3.6-1.el9
• dnf-4.14.0-25.el9
• dnf-data-4.14.0-25.el9
• dnsmasq-2.85-17.el9_6.1
• dosfstools-4.2-3.el9
• dracut-057-89.git20250311.el9_6.1
• dracut-network-057-89.git20250311.el9_6.1
• dracut-squash-057-89.git20250311.el9_6.1
• e2fsprogs-1.46.5-7.el9
• e2fsprogs-libs-1.46.5-7.el9
• efi-filesystem-6-2.el9_0
• efibootmgr-16-12.el9
• efivar-libs-38-3.el9
• elfutils-debuginfod-client-0.192-6.el9_6
• elfutils-default-yama-scope-0.192-6.el9_6
• elfutils-libelf-0.192-6.el9_6
• elfutils-libs-0.192-6.el9_6
• ethtool-2:6.11-1.el9
• expat-2.5.0-5.el9_6.1
• fcoe-utils-1.0.34-0.git14ef0d2.el9
• file-5.39-16.el9
• file-libs-5.39-16.el9
• filesystem-3.16-5.el9
• findutils-1:4.8.0-7.el9
• firewalld-filesystem-1.3.4-15.el9_6.1
• fstrm-0.6.1-3.el9
• fuse-2.9.9-17.el9
• fuse-common-3.10.2-9.el9
• fuse-libs-2.9.9-17.el9
• fuse-overlayfs-1.14-1.el9
• fuse3-3.10.2-9.el9
• fuse3-libs-3.10.2-9.el9
• fwupd-2.1.6-1.el9_6
• gawk-5.1.0-6.el9
• gawk-all-langpacks-5.1.0-6.el9
• gdbm-libs-1:1.23-1.el9
• gdisk-1.0.7-5.el9
• geolite2-city-20191217-6.el9
• geolite2-country-20191217-6.el9
• gettext-0.21-8.el9
• gettext-libs-0.21-8.el9
• git-core-2.47.3-1.el9_6
• glib2-2.68.4-16.el9_6.8
• glibc-2.34-168.el9_6.25
• glibc-common-2.34-168.el9_6.25
• glibc-gconv-extra-2.34-168.el9_6.25
• glibc-minimal-langpack-2.34-168.el9_6.25
• glusterfs-6.0-57.4.el9
• glusterfs-client-xlators-6.0-57.4.el9
• glusterfs-fuse-6.0-57.4.el9
• glusterfs-libs-6.0-57.4.el9
• gmp-1:6.2.0-13.el9
• gnupg2-2.3.3-4.el9_6.1
• gnutls-3.8.3-6.el9_6.5
• gobject-introspection-1.68.0-11.el9
• gpgme-1.15.1-6.el9
• grep-3.6-5.el9
• groff-base-1.22.4-10.el9
• grub2-common-1:2.06-105.el9_6.2
• grub2-efi-x64-1:2.06-105.el9_6.2
• grub2-pc-1:2.06-105.el9_6.2
• grub2-pc-modules-1:2.06-105.el9_6.2
• grub2-tools-1:2.06-105.el9_6.2
• grub2-tools-minimal-1:2.06-105.el9_6.2
• gssproxy-0.8.4-7.el9
• gzip-1.12-1.el9
• hostname-3.23-6.el9
• hwdata-0.348-9.18.el9
• ignition-2.21.0-7.el9_6.1
• ignition-grub-2.21.0-7.el9_6.1
• ima-evm-utils-1.5-3.el9
• info-6.7-15.el9
• inih-49-6.el9
• initscripts-service-10.11.8-4.el9
• ipcalc-1.0.0-5.el9
• iproute-6.11.0-1.el9
• iproute-tc-6.11.0-1.el9
• iptables-libs-1.8.10-11.el9_5
• iptables-nft-1.8.10-11.el9_5
• iputils-20210202-11.el9_6.3
• irqbalance-2:1.9.4-2.el9_6.2
• iscsi-initiator-utils-6.2.1.9-1.gita65a472.el9_6.3
• iscsi-initiator-utils-iscsiuio-6.2.1.9-1.gita65a472.el9_6.3
• isns-utils-libs-0.101-4.el9_6.1
• jansson-2.14-1.el9
• jose-14-1.el9
• jq-1.6-17.el9_6.4
• json-c-0.14-11.el9
• json-glib-1.6.6-1.el9
• kbd-2.4.0-11.el9
• kbd-legacy-2.4.0-11.el9
• kbd-misc-2.4.0-11.el9
• kernel-5.14.0-570.152.1.el9_6
• kernel-core-5.14.0-570.152.1.el9_6
• kernel-modules-5.14.0-570.152.1.el9_6
• kernel-modules-core-5.14.0-570.152.1.el9_6
• kernel-modules-extra-5.14.0-570.152.1.el9_6
• kexec-tools-2.0.29-5.el9_6.2
• keyutils-1.6.3-1.el9
• keyutils-libs-1.6.3-1.el9
• kmod-28-10.el9
• kmod-libs-28-10.el9
• kpartx-0.8.7-35.el9_6.3
• krb5-libs-1.21.1-8.el9_6.2
• less-590-5.el9
• libacl-2.4.0-0.el9_6.1
• libaio-0.3.111-13.el9
• libarchive-3.5.3-7.el9_6.2
• libassuan-2.5.5-3.el9
• libattr-2.5.1-3.el9
• libbasicobjects-0.1.1-53.el9
• libblkid-2.37.4-21.el9_6.1
• libbpf-2:1.5.0-1.el9
• libbrotli-1.0.9-7.el9_6.1
• libcap-2.48-9.el9_6.1
• libcap-ng-0.8.2-7.el9
• libcbor-0.7.0-5.el9
• libcollection-0.7.0-53.el9
• libcom_err-1.46.5-7.el9
• libcomps-0.1.18-1.el9
• libconfig-1.7.2-9.el9
• libcurl-7.76.1-31.el9_6.3
• libdaemon-0.14-23.el9
• libdb-5.3.28-57.el9_6
• libdhash-0.5.0-53.el9
• libdnf-0.69.0-13.el9
• libdnf-plugin-subscription-manager-1.29.45.1-1.el9_6
• libdrm-2.4.123-2.el9
• libeconf-0.4.1-4.el9
• libedit-3.1-38.20210216cvs.el9
• libev-4.33-6.el9
• libevent-2.1.12-8.el9_4
• libfdisk-2.37.4-21.el9_6.1
• libffi-3.4.2-8.el9
• libfido2-1.13.0-2.el9
• libgcc-11.5.0-5.el9_5
• libgcrypt-1.10.0-11.el9_6.1
• libgomp-11.5.0-5.el9_5
• libgpg-error-1.42-5.el9
• libibverbs-54.0-2.el9_6
• libicu-67.1-10.el9_6
• libidn2-2.3.0-7.el9
• libini_config-1.3.1-53.el9
• libipa_hbac-2.9.6-4.el9_6.5
• libjcat-0.1.6-3.el9
• libjose-14-1.el9
• libkcapi-1.4.0-2.el9_6.1
• libkcapi-hmaccalc-1.4.0-2.el9_6.1
• libksba-1.5.1-7.el9
• libldb-4.21.3-14.el9_6.1
• libluksmeta-9-12.el9
• libmaxminddb-1.5.2-4.el9
• libmicrohttpd-1:0.9.72-5.el9
• libmnl-1.0.4-16.el9_4
• libmodulemd-2.13.0-2.el9
• libmount-2.37.4-21.el9_6.1
• libmspack-0.10.1-0.7.alpha.el9
• libndp-1.9-1.el9
• libnet-1.2-7.el9
• libnetfilter_conntrack-1.0.9-1.el9
• libnfnetlink-1.0.1-23.el9_5
• libnfsidmap-1:2.5.4-34.el9_6.5
• libnftnl-1.2.6-4.el9_4
• libnghttp2-1.43.0-6.el9_6.1
• libnl3-3.11.0-1.el9
• libnl3-cli-3.11.0-1.el9
• libnvme-1.11.1-1.el9
• libpath_utils-0.2.1-53.el9
• libpcap-14:1.10.0-4.el9
• libpciaccess-0.16-7.el9
• libpkgconf-1.7.3-10.el9
• libpsl-0.21.1-5.el9
• libpwquality-1.4.4-8.el9
• libref_array-0.1.5-53.el9
• librepo-1.14.5-2.el9
• libreport-filesystem-2.15.2-6.el9
• librhsm-0.0.3-9.el9
• libseccomp-2.5.2-2.el9
• libselinux-3.6-3.el9
• libselinux-utils-3.6-3.el9
• libsemanage-3.6-5.el9_6
• libsepol-3.6-2.el9
• libsigsegv-2.13-4.el9
• libslirp-4.4.0-8.el9
• libsmartcols-2.37.4-21.el9_6.1
• libsmbclient-4.21.3-14.el9_6.1
• libsolv-0.7.24-3.el9_6.1
• libss-1.46.5-7.el9
• libssh-0.10.4-15.el9_6.1
• libssh-config-0.10.4-15.el9_6.1
• libsss_certmap-2.9.6-4.el9_6.5
• libsss_idmap-2.9.6-4.el9_6.5
• libsss_nss_idmap-2.9.6-4.el9_6.5
• libsss_sudo-2.9.6-4.el9_6.5
• libstdc++-11.5.0-5.el9_5
• libtalloc-2.4.2-1.el9
• libtasn1-4.16.0-9.el9
• libtdb-1.4.12-1.el9
• libteam-1.31-16.el9_1
• libtevent-0.16.1-1.el9
• libtirpc-1.3.3-9.el9
• libtool-ltdl-2.4.6-46.el9
• libunistring-0.9.10-15.el9
• liburing-2.5-1.el9
• libusbx-1.0.30-1.el9_6
• libuser-0.63-16.el9
• libutempter-1.2.1-6.el9
• libuuid-2.37.4-21.el9_6.1
• libuv-1:1.42.0-2.el9_4
• libverto-0.3.2-3.el9
• libverto-libev-0.3.2-3.el9
• libwbclient-4.21.3-14.el9_6.1
• libxcrypt-4.4.18-3.el9
• libxcrypt-compat-4.4.18-3.el9
• libxml2-2.9.13-12.el9_6.3
• libxmlb-0.3.28-1.el9_6
• libxslt-1.1.34-13.el9_6.2
• libyaml-0.2.5-7.el9
• libzstd-1.5.5-1.el9
• linux-firmware-20251111-151.8.el9_6
• linux-firmware-whence-20251111-151.8.el9_6
• lldpad-1.1.1-4.gitf1dd9eb.el9
• lmdb-libs-0.9.29-3.el9
• logrotate-3.18.0-9.el9
• lsof-4.94.0-3.el9
• lua-libs-5.4.4-4.el9
• luksmeta-9-12.el9
• lvm2-9:2.03.28-6.el9
• lvm2-libs-9:2.03.28-6.el9
• lz4-libs-1.9.3-5.el9
• lzo-2.10-7.el9
• mdadm-4.3-8.el9_6.1
• microcode_ctl-4:20250211-1.20260227.1.el9_6
• mokutil-2:0.6.0-4.el9
• mpfr-4.1.0-7.el9
• nano-5.6.1-7.el9
• ncurses-6.2-10.20210508.el9_6.2
• ncurses-base-6.2-10.20210508.el9_6.2
• ncurses-libs-6.2-10.20210508.el9_6.2
• net-tools-2.0-0.64.20160912git.el9
• netavark-2:1.14.1-1.el9_6.1
• nettle-3.10.1-1.el9
• newt-0.52.21-11.el9
• nfs-utils-1:2.5.4-34.el9_6.5
• nftables-1:1.0.9-6.el9_6.1
• nmap-ncat-3:7.92-3.el9
• nmstate-2.2.60-1.el9_6.1
• npth-1.6-8.el9
• nss-altfiles-2.18.1-20.el9
• numactl-libs-2.0.19-1.el9
• numad-0.5-37.20150602git.el9
• nvme-cli-2.11-7.el9_6
• oniguruma-6.9.6-1.el9.6
• open-vm-tools-12.5.0-1.el9_6.2
• openldap-2.6.8-4.el9
• openshift-clients-4.19.0-202610221807.p2.g2709219.assembly.stream.el9
• openshift-kubelet-4.19.0-202610221807.p2.g63adf01.assembly.stream.el9
• openssh-8.7p1-45.el9_6.5
• openssh-clients-8.7p1-45.el9_6.5
• openssh-server-8.7p1-45.el9_6.5
• openssl-1:3.2.2-7.el9_6.4
• openssl-fips-provider-3.0.7-11.el9_0
• openssl-fips-provider-so-3.0.7-11.el9_0
• openssl-libs-1:3.2.2-7.el9_6.4
• openvswitch-selinux-extra-policy-1.0-39.el9fdp
• openvswitch3.5-3.5.2-72.el9fdp.3
• os-prober-1.77-12.el9_5
• ose-aws-ecr-image-credential-provider-4.19.0-202610221807.p2.g425c1c5.assembly.stream.el9
• ose-azure-acr-image-credential-provider-4.19.0-202610221807.p2.gb249afb.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider-4.19.0-202610221807.p2.gd8d3aeb.assembly.stream.el9
• ostree-2025.2-4.el9_6
• ostree-grub2-2025.2-4.el9_6
• ostree-libs-2025.2-4.el9_6
• p11-kit-0.25.3-3.el9_5
• p11-kit-trust-0.25.3-3.el9_5
• pam-1.5.1-26.el9_6.1
• passt-0^20250217.ga1e48a0-14.el9_6
• passt-selinux-0^20250217.ga1e48a0-14.el9_6
• passwd-0.80-12.el9
• pciutils-3.7.0-7.el9
• pciutils-libs-3.7.0-7.el9
• pcre-8.44-4.el9
• pcre2-10.40-6.el9_6.1
• pcre2-syntax-10.40-6.el9_6.1
• perl-AutoLoader-5.74-481.1.el9_6
• perl-B-1.80-481.1.el9_6
• perl-Carp-1.50-460.el9
• perl-Class-Struct-0.66-481.1.el9_6
• perl-Data-Dumper-2.174-462.el9
• perl-Digest-1.19-4.el9
• perl-Digest-MD5-2.58-4.el9
• perl-Encode-4:3.08-462.el9
• perl-Errno-1.30-481.1.el9_6
• perl-Exporter-5.74-461.el9
• perl-Fcntl-1.13-481.1.el9_6
• perl-File-Basename-2.85-481.1.el9_6
• perl-File-Path-2.18-4.el9
• perl-File-Temp-1:0.231.100-4.el9
• perl-File-stat-1.09-481.1.el9_6
• perl-FileHandle-2.03-481.1.el9_6
• perl-Getopt-Long-1:2.52-4.el9
• perl-Getopt-Std-1.12-481.1.el9_6
• perl-HTTP-Tiny-0.076-462.el9
• perl-IO-1.43-481.1.el9_6
• perl-IO-Socket-IP-0.41-5.el9
• perl-IO-Socket-SSL-2.073-2.el9
• perl-IPC-Open3-1.21-481.1.el9_6
• perl-MIME-Base64-3.16-4.el9
• perl-Mozilla-CA-20200520-6.el9
• perl-NDBM_File-1.15-481.1.el9_6
• perl-Net-SSLeay-1.94-1.el9
• perl-POSIX-1.94-481.1.el9_6
• perl-PathTools-3.78-461.el9
• perl-Pod-Escapes-1:1.07-460.el9
• perl-Pod-Perldoc-3.28.01-461.el9
• perl-Pod-Simple-1:3.42-4.el9
• perl-Pod-Usage-4:2.01-4.el9
• perl-Scalar-List-Utils-4:1.56-462.el9
• perl-SelectSaver-1.02-481.1.el9_6
• perl-Socket-4:2.031-4.el9
• perl-Storable-1:3.21-460.el9
• perl-Symbol-1.08-481.1.el9_6
• perl-Term-ANSIColor-5.01-461.el9
• perl-Term-Cap-1.17-460.el9
• perl-Text-ParseWords-3.30-460.el9
• perl-Text-Tabs+Wrap-2013.0523-460.el9
• perl-Time-Local-2:1.300-7.el9
• perl-URI-5.09-3.el9
• perl-base-2.27-481.1.el9_6
• perl-constant-1.33-461.el9
• perl-if-0.60.800-481.1.el9_6
• perl-interpreter-4:5.32.1-481.1.el9_6
• perl-libnet-3.13-4.el9
• perl-libs-4:5.32.1-481.1.el9_6
• perl-mro-1.23-481.1.el9_6
• perl-overload-1.31-481.1.el9_6
• perl-overloading-0.02-481.1.el9_6
• perl-parent-1:0.238-460.el9
• perl-podlators-1:4.14-460.el9
• perl-subs-1.03-481.1.el9_6
• perl-vars-1.05-481.1.el9_6
• pigz-2.8-1.el9
• pkgconf-1.7.3-10.el9
• pkgconf-m4-1.7.3-10.el9
• pkgconf-pkg-config-1.7.3-10.el9
• podman-5:5.4.0-22.el9_6.5
• policycoreutils-3.6-2.1.el9
• policycoreutils-python-utils-3.6-2.1.el9
• polkit-0.117-13.el9
• polkit-libs-0.117-13.el9
• polkit-pkla-compat-0.1-21.el9
• popt-1.18-8.el9
• procps-ng-3.3.17-14.el9
• protobuf-c-1.3.3-13.el9
• psmisc-23.4-3.el9
• publicsuffix-list-dafsa-20210518-3.el9
• python-unversioned-command-3.9.21-2.el9_6.7
• python3-3.9.21-2.el9_6.7
• python3-audit-3.1.5-4.el9
• python3-chardet-4.0.0-5.el9
• python3-cloud-what-1.29.45.1-1.el9_6
• python3-dateutil-1:2.8.1-7.el9
• python3-dbus-1.2.18-2.el9
• python3-decorator-4.4.2-6.el9
• python3-distro-1.5.0-7.el9
• python3-dnf-4.14.0-25.el9
• python3-dnf-plugin-versionlock-4.3.0-20.el9
• python3-dnf-plugins-core-4.3.0-20.el9
• python3-gobject-base-3.40.1-6.el9
• python3-gobject-base-noarch-3.40.1-6.el9
• python3-gpg-1.15.1-6.el9
• python3-hawkey-0.69.0-13.el9
• python3-idna-2.10-7.el9_4.1
• python3-iniparse-0.4-45.el9
• python3-inotify-0.9.6-25.el9
• python3-libcomps-0.1.18-1.el9
• python3-libdnf-0.69.0-13.el9
• python3-librepo-1.14.5-2.el9
• python3-libs-3.9.21-2.el9_6.7
• python3-libselinux-3.6-3.el9
• python3-libsemanage-3.6-5.el9_6
• python3-pip-wheel-21.3.1-1.el9
• python3-policycoreutils-3.6-2.1.el9
• python3-pysocks-1.7.1-12.el9
• python3-pyyaml-5.4.1-6.el9
• python3-requests-2.25.1-10.el9_6
• python3-rpm-4.16.1.3-37.el9
• python3-setools-4.4.4-1.el9
• python3-setuptools-53.0.0-13.el9_6.1
• python3-setuptools-wheel-53.0.0-13.el9_6.1
• python3-six-1.15.0-9.el9
• python3-subscription-manager-rhsm-1.29.45.1-1.el9_6
• python3-systemd-234-19.el9
• python3-urllib3-1.26.5-6.el9_6.2
• qemu-guest-agent-17:9.1.0-15.el9_6.19
• quota-1:4.09-4.el9
• quota-nls-1:4.09-4.el9
• rdma-core-54.0-2.el9_6
• readline-8.1-4.el9
• redhat-release-9.6-0.1.el9
• redhat-release-eula-9.6-0.1.el9
• rpcbind-1.2.6-7.el9
• rpm-4.16.1.3-37.el9
• rpm-build-libs-4.16.1.3-37.el9
• rpm-libs-4.16.1.3-37.el9
• rpm-ostree-2025.6-6.el9_6
• rpm-ostree-libs-2025.6-6.el9_6
• rpm-plugin-selinux-4.16.1.3-37.el9
• rpm-plugin-systemd-inhibit-4.16.1.3-37.el9
• rpm-sign-libs-4.16.1.3-37.el9
• rsync-3.2.5-3.el9_6.1
• runc-4:1.2.9-3.el9_6.1
• samba-client-libs-4.21.3-14.el9_6.1
• samba-common-4.21.3-14.el9_6.1
• samba-common-libs-4.21.3-14.el9_6.1
• sed-4.8-9.el9
• selinux-policy-38.1.53-5.el9_6.2
• selinux-policy-targeted-38.1.53-5.el9_6.2
• setup-2.13.7-10.el9
• sg3_utils-1.47-10.el9_6.2
• sg3_utils-libs-1.47-10.el9_6.2
• shadow-utils-2:4.9-12.el9
• shadow-utils-subid-2:4.9-12.el9
• shared-mime-info-2.1-5.el9
• shim-x64-16.1-8.el9_6
• skopeo-2:1.18.1-6.el9_6.1
• slang-2.3.2-11.el9
• slirp4netns-1.3.2-1.el9
• snappy-1.1.8-8.el9
• socat-1.7.4.1-6.el9_6.1
• sqlite-libs-3.34.1-8.el9_6.1
• squashfs-tools-4.4-10.git1.el9
• ssh-key-dir-0.1.4-1.el9
• sssd-2.9.6-4.el9_6.5
• sssd-ad-2.9.6-4.el9_6.5
• sssd-client-2.9.6-4.el9_6.5
• sssd-common-2.9.6-4.el9_6.5
• sssd-common-pac-2.9.6-4.el9_6.5
• sssd-ipa-2.9.6-4.el9_6.5
• sssd-krb5-2.9.6-4.el9_6.5
• sssd-krb5-common-2.9.6-4.el9_6.5
• sssd-ldap-2.9.6-4.el9_6.5
• sssd-nfs-idmap-2.9.6-4.el9_6.5
• sssd-proxy-2.9.6-4.el9_6.5
• stalld-1.20.4-1.el9_6
• strace-6.12-1.el9
• subscription-manager-1.29.45.1-1.el9_6
• subscription-manager-rhsm-certificates-20220623-1.el9
• sudo-1.9.5p2-10.el9_6.4
• systemd-252-51.el9_6.6
• systemd-journal-remote-252-51.el9_6.6
• systemd-libs-252-51.el9_6.6
• systemd-pam-252-51.el9_6.6
• systemd-rpm-macros-252-51.el9_6.6
• systemd-udev-252-51.el9_6.6
• tar-2:1.34-7.el9_6.2
• teamd-1.31-16.el9_1
• tmux-3.2a-5.el9
• toolbox-0.1.2-1.rhaos4.19.el9
• tpm2-tools-5.2-4.el9
• tpm2-tss-3.2.3-1.el9
• tzdata-2026e-1.el9_6
• unbound-libs-1.16.2-19.el9_6.2
• usermode-1.114-6.el9
• userspace-rcu-0.12.1-6.el9
• util-linux-2.37.4-21.el9_6.1
• util-linux-core-2.37.4-21.el9_6.1
• vim-minimal-2:8.2.2637-22.el9_6.4
• virt-what-1.27-1.el9
• which-2.21-30.el9_6
• xfsprogs-6.4.0-5.el9
• xmlsec1-1.2.29-13.el9
• xmlsec1-openssl-1.2.29-13.el9
• xz-5.2.5-8.el9_0
• xz-libs-5.2.5-8.el9_0
• yajl-2.1.0-25.el9
• zlib-1.2.11-40.el9
• zram-generator-0.3.2-7.el9
• zstd-1.5.5-1.el9

Changed:

• NetworkManager 1:1.54.3-5.el9_8 → 1:1.52.0-11.el9_6.1
• NetworkManager-cloud-setup 1:1.54.3-5.el9_8 → 1:1.52.0-11.el9_6.1
• NetworkManager-libnm 1:1.54.3-5.el9_8 → 1:1.52.0-11.el9_6.1
• NetworkManager-ovs 1:1.54.3-5.el9_8 → 1:1.52.0-11.el9_6.1
• NetworkManager-team 1:1.54.3-5.el9_8 → 1:1.52.0-11.el9_6.1
• NetworkManager-tui 1:1.54.3-5.el9_8 → 1:1.52.0-11.el9_6.1
• WALinuxAgent-udev 2.14.0.1-4.el9 → 2.13.1.1-1.el9_6
• aardvark-dns 2:1.17.1-1.el9_8 → 2:1.14.0-1.el9
• acl 2.4.0-1.el9_8 → 2.4.0-0.el9_6.1
• adcli 0.9.3.1-3.el9 → 0.9.2-1.el9
• afterburn 5.10.0-1.el9 → 5.9.0-1.el9_6
• afterburn-dracut 5.10.0-1.el9 → 5.9.0-1.el9_6
• attr 2.6.0-1.el9_8 → 2.5.1-3.el9
• audit 3.1.5-8.el9 → 3.1.5-4.el9
• audit-libs 3.1.5-8.el9 → 3.1.5-4.el9
• avahi-libs 0.8-23.el9 → 0.8-22.el9_6.1
• bind-libs 32:9.16.23-40.el9_8.10 → 32:9.16.23-31.el9_6.4
• bind-license 32:9.16.23-40.el9_8.10 → 32:9.16.23-31.el9_6.4
• bind-utils 32:9.16.23-40.el9_8.10 → 32:9.16.23-31.el9_6.4
• binutils 2.35.2-72.el9 → 2.35.2-63.el9_6.1
• binutils-gold 2.35.2-72.el9 → 2.35.2-63.el9_6.1
• bootc 1.16.4-2.el9_8 → 1.1.6-6.el9_6
• bootupd 0.2.35-1.el9_8 → 0.2.35-1.el9_6
• bsdtar 3.5.3-11.el9_8 → 3.5.3-7.el9_6.2
• bubblewrap 0.6.3-1.el9 → 0.4.1-8.el9_6.1
• bzip2 1.0.8-11.el9 → 1.0.8-10.el9_5
• bzip2-libs 1.0.8-11.el9 → 1.0.8-10.el9_5
• ca-certificates 2025.2.80_v9.0.305-91.el9 → 2026.2.92_v9.0.319-90.3.el9_6
• chrony 4.8-1.el9 → 4.6.1-1.el9
• cifs-utils 7.7-1.el9_8 → 7.2-0.el9_6.2
• clevis 21-209.el9 → 21-208.el9
• clevis-dracut 21-209.el9 → 21-208.el9
• clevis-luks 21-209.el9 → 21-208.el9
• clevis-systemd 21-209.el9 → 21-208.el9
• conmon 3:2.2.1-2.el9_8 → 3:2.1.12-1.el9_6.1
• container-selinux 4:2.247.0-1.el9_8 → 4:2.247.0-1.el9_6
• containernetworking-plugins 1:1.9.0-4.el9_8 → 1:1.6.2-3.el9_6.1
• containers-common 5:5.8-1.el9 → 2:1-117.el9_6
• coreos-installer 0.27.0-1.el9_8 → 0.24.0-6.el9_6
• coreos-installer-bootinfra 0.27.0-1.el9_8 → 0.24.0-6.el9_6
• coreutils 8.32-41.el9_8.1 → 8.32-39.el9
• coreutils-common 8.32-41.el9_8.1 → 8.32-39.el9
• cracklib 2.9.6-28.el9 → 2.9.6-27.el9
• cracklib-dicts 2.9.6-28.el9 → 2.9.6-27.el9
• cri-o 1.35.9-12.rhaos4.22.git4c168db.el9 → 1.32.13-16.rhaos4.19.git3c1400a.el9
• cri-tools 1.35.0-4.el9 → 1.32.0-9.el9
• criu 3.19-4.el9_8 → 3.19-1.3.el9_6
• criu-libs 3.19-4.el9_8 → 3.19-1.3.el9_6
• crun 1.27-1.el9_8 → 1.27-1.el9_6
• crypto-policies 20260224-1.gitea0f072.el9_8 → 20250128-1.git5269e22.el9
• crypto-policies-scripts 20260224-1.gitea0f072.el9_8 → 20250128-1.git5269e22.el9
• cryptsetup 2.8.1-3.el9 → 2.7.2-3.el9_6.1
• cryptsetup-libs 2.8.1-3.el9 → 2.7.2-3.el9_6.1
• curl 7.76.1-40.el9_8.8 → 7.76.1-31.el9_6.3
• cyrus-sasl-gssapi 2.1.27-22.el9 → 2.1.27-21.el9
• cyrus-sasl-lib 2.1.27-22.el9 → 2.1.27-21.el9
• dbus-broker 28-9.el9_8 → 28-7.el9
• device-mapper 9:1.02.207-4.el9_8.1 → 9:1.02.202-6.el9
• device-mapper-event 9:1.02.207-4.el9_8.1 → 9:1.02.202-6.el9
• device-mapper-event-libs 9:1.02.207-4.el9_8.1 → 9:1.02.202-6.el9
• device-mapper-libs 9:1.02.207-4.el9_8.1 → 9:1.02.202-6.el9
• device-mapper-multipath 0.8.7-45.el9 → 0.8.7-35.el9_6.3
• device-mapper-multipath-libs 0.8.7-45.el9 → 0.8.7-35.el9_6.3
• dmidecode 1:3.6-2.el9 → 1:3.6-1.el9
• dnf 4.14.0-34.el9_8 → 4.14.0-25.el9
• dnf-data 4.14.0-34.el9_8 → 4.14.0-25.el9
• dnsmasq 2.85-18.el9_8.2 → 2.85-17.el9_6.1
• dracut 057-120.git20260728.el9_8 → 057-89.git20250311.el9_6.1
• dracut-network 057-120.git20260728.el9_8 → 057-89.git20250311.el9_6.1
• dracut-squash 057-120.git20260728.el9_8 → 057-89.git20250311.el9_6.1
• e2fsprogs 1.46.5-8.el9 → 1.46.5-7.el9
• e2fsprogs-libs 1.46.5-8.el9 → 1.46.5-7.el9
• efi-filesystem 6-4.el9 → 6-2.el9_0
• elfutils-debuginfod-client 0.194-1.el9 → 0.192-6.el9_6
• elfutils-default-yama-scope 0.194-1.el9 → 0.192-6.el9_6
• elfutils-libelf 0.194-1.el9 → 0.192-6.el9_6
• elfutils-libs 0.194-1.el9 → 0.192-6.el9_6
• ethtool 2:6.15-2.el9 → 2:6.11-1.el9
• expat 2.5.0-6.el9_8.5 → 2.5.0-5.el9_6.1
• file 5.39-17.el9 → 5.39-16.el9
• file-libs 5.39-17.el9 → 5.39-16.el9
• firewalld-filesystem 1.3.4-20.el9_8 → 1.3.4-15.el9_6.1
• fuse-overlayfs 1.16-1.el9_7 → 1.14-1.el9
• fwupd 2.0.19-2.el9_8 → 2.1.6-1.el9_6
• gawk 5.1.0-6.el9_8.1 → 5.1.0-6.el9
• gawk-all-langpacks 5.1.0-6.el9_8.1 → 5.1.0-6.el9
• git-core 2.52.0-1.el9 → 2.47.3-1.el9_6
• glib2 2.68.4-19.el9_8.10 → 2.68.4-16.el9_6.8
• glibc 2.34-283.el9_8 → 2.34-168.el9_6.25
• glibc-common 2.34-283.el9_8 → 2.34-168.el9_6.25
• glibc-gconv-extra 2.34-283.el9_8 → 2.34-168.el9_6.25
• glibc-minimal-langpack 2.34-283.el9_8 → 2.34-168.el9_6.25
• gnupg2 2.3.3-5.el9_7 → 2.3.3-4.el9_6.1
• gnutls 3.8.10-9.el9_8 → 3.8.3-6.el9_6.5
• grub2-common 1:2.06-126.el9_8 → 1:2.06-105.el9_6.2
• grub2-efi-x64 1:2.06-126.el9_8 → 1:2.06-105.el9_6.2
• grub2-pc 1:2.06-126.el9_8 → 1:2.06-105.el9_6.2
• grub2-pc-modules 1:2.06-126.el9_8 → 1:2.06-105.el9_6.2
• grub2-tools 1:2.06-126.el9_8 → 1:2.06-105.el9_6.2
• grub2-tools-minimal 1:2.06-126.el9_8 → 1:2.06-105.el9_6.2
• gzip 1.12-2.el9_8 → 1.12-1.el9
• hwdata 0.348-9.22.el9 → 0.348-9.18.el9
• ignition 2.26.0-1.el9_8 → 2.21.0-7.el9_6.1
• ignition-grub 2.26.0-1.el9_8 → 2.21.0-7.el9_6.1
• ima-evm-utils 1.6.2-2.el9 → 1.5-3.el9
• iproute 6.17.0-2.el9 → 6.11.0-1.el9
• iproute-tc 6.17.0-2.el9 → 6.11.0-1.el9
• iputils 20210202-15.el9_7 → 20210202-11.el9_6.3
• irqbalance 2:1.9.4-5.el9 → 2:1.9.4-2.el9_6.2
• iscsi-initiator-utils 6.2.1.11-1.git4b3e853.el9_8.2 → 6.2.1.9-1.gita65a472.el9_6.3
• iscsi-initiator-utils-iscsiuio 6.2.1.11-1.git4b3e853.el9_8.2 → 6.2.1.9-1.gita65a472.el9_6.3
• isns-utils-libs 0.101-4.el9_8.1 → 0.101-4.el9_6.1
• jq 1.6-19.el9_8.2 → 1.6-17.el9_6.4
• kbd 2.4.0-12.el9_8 → 2.4.0-11.el9
• kbd-legacy 2.4.0-12.el9_8 → 2.4.0-11.el9
• kbd-misc 2.4.0-12.el9_8 → 2.4.0-11.el9
• kernel 5.14.0-687.57.1.el9_8 → 5.14.0-570.152.1.el9_6
• kernel-core 5.14.0-687.57.1.el9_8 → 5.14.0-570.152.1.el9_6
• kernel-modules 5.14.0-687.57.1.el9_8 → 5.14.0-570.152.1.el9_6
• kernel-modules-core 5.14.0-687.57.1.el9_8 → 5.14.0-570.152.1.el9_6
• kernel-modules-extra 5.14.0-687.57.1.el9_8 → 5.14.0-570.152.1.el9_6
• kexec-tools 2.0.29-17.el9 → 2.0.29-5.el9_6.2
• kmod 28-11.el9 → 28-10.el9
• kmod-libs 28-11.el9 → 28-10.el9
• kpartx 0.8.7-45.el9 → 0.8.7-35.el9_6.3
• krb5-libs 1.21.1-10.el9_8 → 1.21.1-8.el9_6.2
• less 590-6.el9 → 590-5.el9
• libacl 2.4.0-1.el9_8 → 2.4.0-0.el9_6.1
• libarchive 3.5.3-11.el9_8 → 3.5.3-7.el9_6.2
• libattr 2.6.0-1.el9_8 → 2.5.1-3.el9
• libblkid 2.37.4-25.el9 → 2.37.4-21.el9_6.1
• libbpf 2:1.5.0-3.el9 → 2:1.5.0-1.el9
• libbrotli 1.0.9-10.el9_8 → 1.0.9-7.el9_6.1
• libcap 2.48-10.el9_8.1 → 2.48-9.el9_6.1
• libcom_err 1.46.5-8.el9 → 1.46.5-7.el9
• libcurl 7.76.1-40.el9_8.8 → 7.76.1-31.el9_6.3
• libdnf 0.69.0-18.el9 → 0.69.0-13.el9
• libdnf-plugin-subscription-manager 1.29.50-1.el9 → 1.29.45.1-1.el9_6
• libdrm 2.4.128-1.el9 → 2.4.123-2.el9
• libeconf 0.4.1-7.el9_8 → 0.4.1-4.el9
• libedit 3.1-39.20210216cvs.el9 → 3.1-38.20210216cvs.el9
• libevent 2.1.13-1.el9_8 → 2.1.12-8.el9_4
• libfdisk 2.37.4-25.el9 → 2.37.4-21.el9_6.1
• libgcc 11.5.0-14.el9 → 11.5.0-5.el9_5
• libgcrypt 1.10.0-13.el9_8 → 1.10.0-11.el9_6.1
• libgomp 11.5.0-14.el9 → 11.5.0-5.el9_5
• libibverbs 61.0-2.el9 → 54.0-2.el9_6
• libipa_hbac 2.9.8-4.el9_8.1 → 2.9.6-4.el9_6.5
• libkcapi 1.4.0-3.el9_8 → 1.4.0-2.el9_6.1
• libkcapi-hmaccalc 1.4.0-3.el9_8 → 1.4.0-2.el9_6.1
• libldb 4.23.5-12.el9_8 → 4.21.3-14.el9_6.1
• libluksmeta 10-1.el9 → 9-12.el9
• libmount 2.37.4-25.el9 → 2.37.4-21.el9_6.1
• libnfsidmap 1:2.5.4-42.el9_8 → 1:2.5.4-34.el9_6.5
• libnghttp2 1.43.0-6.el9_8.2 → 1.43.0-6.el9_6.1
• libnvme 1.16.1-3.el9_8 → 1.11.1-1.el9
• libpcap 14:1.10.0-4.el9_8.1 → 14:1.10.0-4.el9
• librepo 1.19.0-1.el9 → 1.14.5-2.el9
• libsepol 3.6-3.el9 → 3.6-2.el9
• libsmartcols 2.37.4-25.el9 → 2.37.4-21.el9_6.1
• libsmbclient 4.23.5-12.el9_8 → 4.21.3-14.el9_6.1
• libsolv 0.7.24-6.el9_8 → 0.7.24-3.el9_6.1
• libss 1.46.5-8.el9 → 1.46.5-7.el9
• libssh 0.10.4-19.el9_8 → 0.10.4-15.el9_6.1
• libssh-config 0.10.4-19.el9_8 → 0.10.4-15.el9_6.1
• libsss_certmap 2.9.8-4.el9_8.1 → 2.9.6-4.el9_6.5
• libsss_idmap 2.9.8-4.el9_8.1 → 2.9.6-4.el9_6.5
• libsss_nss_idmap 2.9.8-4.el9_8.1 → 2.9.6-4.el9_6.5
• libsss_sudo 2.9.8-4.el9_8.1 → 2.9.6-4.el9_6.5
• libstdc++ 11.5.0-14.el9 → 11.5.0-5.el9_5
• libtalloc 2.4.3-1.el9 → 2.4.2-1.el9
• libtasn1 4.16.0-10.el9_8 → 4.16.0-9.el9
• libtdb 1.4.14-1.el9 → 1.4.12-1.el9
• libtevent 0.17.1-1.el9 → 0.16.1-1.el9
• liburing 2.12-1.el9 → 2.5-1.el9
• libusbx 1.0.30-1.el9_8 → 1.0.30-1.el9_6
• libuser 0.63-17.el9 → 0.63-16.el9
• libuuid 2.37.4-25.el9 → 2.37.4-21.el9_6.1
• libwbclient 4.23.5-12.el9_8 → 4.21.3-14.el9_6.1
• libxml2 2.9.13-14.el9_8.5 → 2.9.13-12.el9_6.3
• libxmlb 0.3.24-1.el9 → 0.3.28-1.el9_6
• libxslt 1.1.34-14.el9_8.1 → 1.1.34-13.el9_6.2
• linux-firmware 20260827-161.3.el9_8 → 20251111-151.8.el9_6
• linux-firmware-whence 20260827-161.3.el9_8 → 20251111-151.8.el9_6
• logrotate 3.18.0-12.el9 → 3.18.0-9.el9
• luksmeta 10-1.el9 → 9-12.el9
• lvm2 9:2.03.33-4.el9_8.1 → 9:2.03.28-6.el9
• lvm2-libs 9:2.03.33-4.el9_8.1 → 9:2.03.28-6.el9
• mdadm 4.4-4.el9_8.2 → 4.3-8.el9_6.1
• microcode_ctl 4:20260210-1.20260812.1.el9_8 → 4:20250211-1.20260227.1.el9_6
• mokutil 2:0.7.2-4.el9 → 2:0.6.0-4.el9
• mpfr 4.1.0-10.el9 → 4.1.0-7.el9
• ncurses 6.2-12.20210508.el9 → 6.2-10.20210508.el9_6.2
• ncurses-base 6.2-12.20210508.el9 → 6.2-10.20210508.el9_6.2
• ncurses-libs 6.2-12.20210508.el9 → 6.2-10.20210508.el9_6.2
• netavark 2:1.17.2-1.el9 → 2:1.14.1-1.el9_6.1
• nfs-utils 1:2.5.4-42.el9_8 → 1:2.5.4-34.el9_6.5
• nftables 1:1.0.9-9.el9_8 → 1:1.0.9-6.el9_6.1
• nmap-ncat 3:7.92-5.el9 → 3:7.92-3.el9
• nmstate 2.2.60-2.el9_8 → 2.2.60-1.el9_6.1
• numactl-libs 2.0.19-3.el9 → 2.0.19-1.el9
• nvme-cli 2.16-1.el9 → 2.11-7.el9_6
• open-vm-tools 13.0.10-1.el9 → 12.5.0-1.el9_6.2
• openshift-clients 4.22.0-202609170632.p2.gd0f23b1.assembly.stream.el9 → 4.19.0-202610221807.p2.g2709219.assembly.stream.el9
• openshift-kubelet 4.22.0-202609220430.p2.g9858a61.assembly.stream.el9 → 4.19.0-202610221807.p2.g63adf01.assembly.stream.el9
• openssh 9.9p1-12.el9_8 → 8.7p1-45.el9_6.5
• openssh-clients 9.9p1-12.el9_8 → 8.7p1-45.el9_6.5
• openssh-server 9.9p1-12.el9_8 → 8.7p1-45.el9_6.5
• openssl 1:3.5.8-2.el9_8 → 1:3.2.2-7.el9_6.4
• openssl-fips-provider 3.0.7-11.el9_8 → 3.0.7-11.el9_0
• openssl-fips-provider-so 3.0.7-11.el9_8 → 3.0.7-11.el9_0
• openssl-libs 1:3.5.8-2.el9_8 → 1:3.2.2-7.el9_6.4
• openvswitch3.5 3.5.2-72.el9fdp.2 → 3.5.2-72.el9fdp.3
• ose-aws-ecr-image-credential-provider 4.22.0-202609252029.p2.gb4bad3f.assembly.stream.el9 → 4.19.0-202610221807.p2.g425c1c5.assembly.stream.el9
• ose-azure-acr-image-credential-provider 4.22.0-202609252029.p2.ga17a3e3.assembly.stream.el9 → 4.19.0-202610221807.p2.gb249afb.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider 4.22.0-202610051811.p2.gdf2fcb8.assembly.stream.el9 → 4.19.0-202610221807.p2.gd8d3aeb.assembly.stream.el9
• ostree 2025.7-1.el9 → 2025.2-4.el9_6
• ostree-grub2 2025.7-1.el9 → 2025.2-4.el9_6
• ostree-libs 2025.7-1.el9 → 2025.2-4.el9_6
• p11-kit 0.26.4-1.el9_8 → 0.25.3-3.el9_5
• p11-kit-trust 0.26.4-1.el9_8 → 0.25.3-3.el9_5
• pam 1.5.1-28.el9_8.1 → 1.5.1-26.el9_6.1
• passt 0^20251210.gd04c480-7.el9_8 → 0^20250217.ga1e48a0-14.el9_6
• passt-selinux 0^20251210.gd04c480-7.el9_8 → 0^20250217.ga1e48a0-14.el9_6
• pcre2 10.40-6.el9 → 10.40-6.el9_6.1
• pcre2-syntax 10.40-6.el9 → 10.40-6.el9_6.1
• perl-AutoLoader 5.74-484.el9_8 → 5.74-481.1.el9_6
• perl-B 1.80-484.el9_8 → 1.80-481.1.el9_6
• perl-Class-Struct 0.66-484.el9_8 → 0.66-481.1.el9_6
• perl-Errno 1.30-484.el9_8 → 1.30-481.1.el9_6
• perl-Fcntl 1.13-484.el9_8 → 1.13-481.1.el9_6
• perl-File-Basename 2.85-484.el9_8 → 2.85-481.1.el9_6
• perl-File-stat 1.09-484.el9_8 → 1.09-481.1.el9_6
• perl-FileHandle 2.03-484.el9_8 → 2.03-481.1.el9_6
• perl-Getopt-Std 1.12-484.el9_8 → 1.12-481.1.el9_6
• perl-IO 1.43-484.el9_8 → 1.43-481.1.el9_6
• perl-IPC-Open3 1.21-484.el9_8 → 1.21-481.1.el9_6
• perl-NDBM_File 1.15-484.el9_8 → 1.15-481.1.el9_6
• perl-Net-SSLeay 1.94-3.el9 → 1.94-1.el9
• perl-POSIX 1.94-484.el9_8 → 1.94-481.1.el9_6
• perl-SelectSaver 1.02-484.el9_8 → 1.02-481.1.el9_6
• perl-Symbol 1.08-484.el9_8 → 1.08-481.1.el9_6
• perl-base 2.27-484.el9_8 → 2.27-481.1.el9_6
• perl-if 0.60.800-484.el9_8 → 0.60.800-481.1.el9_6
• perl-interpreter 4:5.32.1-484.el9_8 → 4:5.32.1-481.1.el9_6
• perl-libs 4:5.32.1-484.el9_8 → 4:5.32.1-481.1.el9_6
• perl-mro 1.23-484.el9_8 → 1.23-481.1.el9_6
• perl-overload 1.31-484.el9_8 → 1.31-481.1.el9_6
• perl-overloading 0.02-484.el9_8 → 0.02-481.1.el9_6
• perl-subs 1.03-484.el9_8 → 1.03-481.1.el9_6
• perl-vars 1.05-484.el9_8 → 1.05-481.1.el9_6
• podman 6:5.8.2-7.el9_8 → 5:5.4.0-22.el9_6.5
• policycoreutils 3.6-5.el9 → 3.6-2.1.el9
• policycoreutils-python-utils 3.6-5.el9 → 3.6-2.1.el9
• polkit 0.117-14.el9 → 0.117-13.el9
• polkit-libs 0.117-14.el9 → 0.117-13.el9
• python-unversioned-command 3.9.25-7.el9_8.3 → 3.9.21-2.el9_6.7
• python3 3.9.25-7.el9_8.3 → 3.9.21-2.el9_6.7
• python3-audit 3.1.5-8.el9 → 3.1.5-4.el9
• python3-cloud-what 1.29.50-1.el9 → 1.29.45.1-1.el9_6
• python3-dateutil 1:2.9.0.post0-1.el9_7 → 1:2.8.1-7.el9
• python3-dnf 4.14.0-34.el9_8 → 4.14.0-25.el9
• python3-dnf-plugin-versionlock 4.3.0-26.el9 → 4.3.0-20.el9
• python3-dnf-plugins-core 4.3.0-26.el9 → 4.3.0-20.el9
• python3-hawkey 0.69.0-18.el9 → 0.69.0-13.el9
• python3-idna 2.10-8.el9_8 → 2.10-7.el9_4.1
• python3-libdnf 0.69.0-18.el9 → 0.69.0-13.el9
• python3-librepo 1.19.0-1.el9 → 1.14.5-2.el9
• python3-libs 3.9.25-7.el9_8.3 → 3.9.21-2.el9_6.7
• python3-pip-wheel 21.3.1-2.el9_8 → 21.3.1-1.el9
• python3-policycoreutils 3.6-5.el9 → 3.6-2.1.el9
• python3-rpm 4.16.1.3-40.el9 → 4.16.1.3-37.el9
• python3-setuptools 53.0.0-15.el9 → 53.0.0-13.el9_6.1
• python3-setuptools-wheel 53.0.0-15.el9 → 53.0.0-13.el9_6.1
• python3-subscription-manager-rhsm 1.29.50-1.el9 → 1.29.45.1-1.el9_6
• python3-urllib3 1.26.5-8.el9_8 → 1.26.5-6.el9_6.2
• qemu-guest-agent 17:10.1.0-17.el9_8.5 → 17:9.1.0-15.el9_6.19
• rdma-core 61.0-2.el9 → 54.0-2.el9_6
• redhat-release 9.8-1.0.el9 → 9.6-0.1.el9
• redhat-release-eula 9.8-1.0.el9 → 9.6-0.1.el9
• rpm 4.16.1.3-40.el9 → 4.16.1.3-37.el9
• rpm-build-libs 4.16.1.3-40.el9 → 4.16.1.3-37.el9
• rpm-libs 4.16.1.3-40.el9 → 4.16.1.3-37.el9
• rpm-ostree 2026.1-6.el9_8 → 2025.6-6.el9_6
• rpm-ostree-libs 2026.1-6.el9_8 → 2025.6-6.el9_6
• rpm-plugin-selinux 4.16.1.3-40.el9 → 4.16.1.3-37.el9
• rpm-plugin-systemd-inhibit 4.16.1.3-40.el9 → 4.16.1.3-37.el9
• rpm-sign-libs 4.16.1.3-40.el9 → 4.16.1.3-37.el9
• rsync 3.2.7-1.el9_8 → 3.2.5-3.el9_6.1
• runc 4:1.4.2-3.el9_8 → 4:1.2.9-3.el9_6.1
• samba-client-libs 4.23.5-12.el9_8 → 4.21.3-14.el9_6.1
• samba-common 4.23.5-12.el9_8 → 4.21.3-14.el9_6.1
• samba-common-libs 4.23.5-12.el9_8 → 4.21.3-14.el9_6.1
• sed 4.8-10.el9 → 4.8-9.el9
• selinux-policy 38.1.75-2.el9_8.1 → 38.1.53-5.el9_6.2
• selinux-policy-targeted 38.1.75-2.el9_8.1 → 38.1.53-5.el9_6.2
• sg3_utils 1.47-10.el9_8.1 → 1.47-10.el9_6.2
• sg3_utils-libs 1.47-10.el9_8.1 → 1.47-10.el9_6.2
• shadow-utils 2:4.9-16.el9 → 2:4.9-12.el9
• shadow-utils-subid 2:4.9-16.el9 → 2:4.9-12.el9
• shim-x64 16.1-7.el9 → 16.1-8.el9_6
• skopeo 2:1.22.2-8.el9_8 → 2:1.18.1-6.el9_6.1
• slirp4netns 1.3.3-1.el9 → 1.3.2-1.el9
• socat 1.7.4.1-8.el9 → 1.7.4.1-6.el9_6.1
• sqlite-libs 3.34.1-11.el9_8 → 3.34.1-8.el9_6.1
• sssd 2.9.8-4.el9_8.1 → 2.9.6-4.el9_6.5
• sssd-ad 2.9.8-4.el9_8.1 → 2.9.6-4.el9_6.5
• sssd-client 2.9.8-4.el9_8.1 → 2.9.6-4.el9_6.5
• sssd-common 2.9.8-4.el9_8.1 → 2.9.6-4.el9_6.5
• sssd-common-pac 2.9.8-4.el9_8.1 → 2.9.6-4.el9_6.5
• sssd-ipa 2.9.8-4.el9_8.1 → 2.9.6-4.el9_6.5
• sssd-krb5 2.9.8-4.el9_8.1 → 2.9.6-4.el9_6.5
• sssd-krb5-common 2.9.8-4.el9_8.1 → 2.9.6-4.el9_6.5
• sssd-ldap 2.9.8-4.el9_8.1 → 2.9.6-4.el9_6.5
• sssd-nfs-idmap 2.9.8-4.el9_8.1 → 2.9.6-4.el9_6.5
• sssd-proxy 2.9.8-4.el9_8.1 → 2.9.6-4.el9_6.5
• stalld 1.26.3-1.el9 → 1.20.4-1.el9_6
• subscription-manager 1.29.50-1.el9 → 1.29.45.1-1.el9_6
• sudo 1.9.17p2-3.el9_8.3 → 1.9.5p2-10.el9_6.4
• systemd 252-67.el9_8.6 → 252-51.el9_6.6
• systemd-journal-remote 252-67.el9_8.6 → 252-51.el9_6.6
• systemd-libs 252-67.el9_8.6 → 252-51.el9_6.6
• systemd-pam 252-67.el9_8.6 → 252-51.el9_6.6
• systemd-rpm-macros 252-67.el9_8.6 → 252-51.el9_6.6
• systemd-udev 252-67.el9_8.6 → 252-51.el9_6.6
• tar 2:1.34-13.el9_8 → 2:1.34-7.el9_6.2
• toolbox 0.1.2-1.rhaos4.22.el9 → 0.1.2-1.rhaos4.19.el9
• tpm2-tools 5.2-7.el9 → 5.2-4.el9
• tzdata 2026e-1.el9_8 → 2026e-1.el9_6
• unbound-libs 1.24.2-3.el9_8.8 → 1.16.2-19.el9_6.2
• usermode 1.114-7.el9 → 1.114-6.el9
• util-linux 2.37.4-25.el9 → 2.37.4-21.el9_6.1
• util-linux-core 2.37.4-25.el9 → 2.37.4-21.el9_6.1
• vim-minimal 2:8.2.2637-26.el9_8.23 → 2:8.2.2637-22.el9_6.4
• virt-what 1.27-2.el9 → 1.27-1.el9
• xfsprogs 6.4.0-7.el9 → 6.4.0-5.el9
• zram-generator 1.1.2-1.el9 → 0.3.2-7.el9

Removed:

• adcli-selinux 0.9.3.1-3.el9
• azure-vm-utils 0.7.0-1.el9
• flashrom 1.2-10.el9
• fwupd-plugin-flashrom 2.0.19-2.el9_8
• numactl 2.0.19-3.el9
• ose-crio-credential-provider 4.22.0-202609252029.p2.g83d4961.assembly.stream.el9

Extensions

Full list (162 packages)

• NetworkManager-libreswan-1.2.29-1.el9_6.x86_64
• bison-3.7.4-5.el9.x86_64
• capstone-4.0.2-11.el9_6.x86_64
• corosync-3.1.9-2.el9_6.2.x86_64
• corosynclib-3.1.9-2.el9_6.2.x86_64
• cpp-11.5.0-5.el9_5.x86_64
• crun-wasm-1.8.5-5.rhaos4.14.el9.x86_64
• daxctl-libs-78-2.el9.x86_64
• edk2-ovmf-20241117-2.el9_6.2.noarch
• elfutils-libelf-devel-0.192-6.el9_6.x86_64
• fence-agents-all-4.10.0-86.el9_6.22.x86_64
• fence-agents-amt-ws-4.10.0-86.el9_6.22.noarch
• fence-agents-apc-4.10.0-86.el9_6.22.noarch
• fence-agents-apc-snmp-4.10.0-86.el9_6.22.noarch
• fence-agents-bladecenter-4.10.0-86.el9_6.22.noarch
• fence-agents-brocade-4.10.0-86.el9_6.22.noarch
• fence-agents-cisco-mds-4.10.0-86.el9_6.22.noarch
• fence-agents-cisco-ucs-4.10.0-86.el9_6.22.noarch
• fence-agents-common-4.10.0-86.el9_6.22.noarch
• fence-agents-drac5-4.10.0-86.el9_6.22.noarch
• fence-agents-eaton-snmp-4.10.0-86.el9_6.22.noarch
• fence-agents-emerson-4.10.0-86.el9_6.22.noarch
• fence-agents-eps-4.10.0-86.el9_6.22.noarch
• fence-agents-heuristics-ping-4.10.0-86.el9_6.22.noarch
• fence-agents-hpblade-4.10.0-86.el9_6.22.noarch
• fence-agents-ibmblade-4.10.0-86.el9_6.22.noarch
• fence-agents-ifmib-4.10.0-86.el9_6.22.noarch
• fence-agents-ilo-moonshot-4.10.0-86.el9_6.22.noarch
• fence-agents-ilo-mp-4.10.0-86.el9_6.22.noarch
• fence-agents-ilo-ssh-4.10.0-86.el9_6.22.noarch
• fence-agents-ilo2-4.10.0-86.el9_6.22.noarch
• fence-agents-intelmodular-4.10.0-86.el9_6.22.noarch
• fence-agents-ipdu-4.10.0-86.el9_6.22.noarch
• fence-agents-ipmilan-4.10.0-86.el9_6.22.noarch
• fence-agents-kdump-4.10.0-86.el9_6.22.x86_64
• fence-agents-mpath-4.10.0-86.el9_6.22.noarch
• fence-agents-redfish-4.10.0-86.el9_6.22.x86_64
• fence-agents-rhevm-4.10.0-86.el9_6.22.noarch
• fence-agents-rsa-4.10.0-86.el9_6.22.noarch
• fence-agents-rsb-4.10.0-86.el9_6.22.noarch
• fence-agents-sbd-4.10.0-86.el9_6.22.noarch
• fence-agents-scsi-4.10.0-86.el9_6.22.noarch
• fence-agents-vmware-rest-4.10.0-86.el9_6.22.noarch
• fence-agents-vmware-soap-4.10.0-86.el9_6.22.noarch
• fence-agents-wti-4.10.0-86.el9_6.22.noarch
• fence-virt-4.10.0-86.el9_6.22.x86_64
• flex-2.6.4-9.el9.x86_64
• fmt-9.1.0-1.el9.x86_64
• gcc-11.5.0-5.el9_5.x86_64
• glibc-devel-2.34-168.el9_6.25.x86_64
• glibc-headers-2.34-168.el9_6.25.x86_64
• gnutls-dane-3.8.3-6.el9_6.5.x86_64
• gnutls-utils-3.8.3-6.el9_6.5.x86_64
• ipmitool-1.8.18-27.el9.x86_64
• ipxe-roms-qemu-20200823-9.git4bd064de.el9_0.noarch
• kata-containers-3.31.0-6.rhaos4.19.el9.x86_64
• kernel-5.14.0-570.152.1.el9_6.x86_64
• kernel-core-5.14.0-570.152.1.el9_6.x86_64
• kernel-devel-5.14.0-570.152.1.el9_6.x86_64
• kernel-headers-5.14.0-570.152.1.el9_6.x86_64
• kernel-modules-5.14.0-570.152.1.el9_6.x86_64
• kernel-modules-extra-5.14.0-570.152.1.el9_6.x86_64
• kernel-rt-core-5.14.0-570.152.1.el9_6.x86_64
• kernel-rt-devel-5.14.0-570.152.1.el9_6.x86_64
• kernel-rt-kvm-5.14.0-570.152.1.el9_6.x86_64
• kernel-rt-modules-5.14.0-570.152.1.el9_6.x86_64
• kernel-rt-modules-core-5.14.0-570.152.1.el9_6.x86_64
• kernel-rt-modules-extra-5.14.0-570.152.1.el9_6.x86_64
• krb5-pkinit-1.21.1-8.el9_6.2.x86_64
• krb5-workstation-1.21.1-8.el9_6.2.x86_64
• ldns-1.7.1-12.el9_6.1.x86_64
• libfdt-1.6.0-7.el9.x86_64
• libkadm5-1.21.1-8.el9_6.2.x86_64
• libknet1-1.28-1.el9.x86_64
• libknet1-compress-bzip2-plugin-1.28-1.el9.x86_64
• libknet1-compress-lz4-plugin-1.28-1.el9.x86_64
• libknet1-compress-lzma-plugin-1.28-1.el9.x86_64
• libknet1-compress-lzo2-plugin-1.28-1.el9.x86_64
• libknet1-compress-plugins-all-1.28-1.el9.x86_64
• libknet1-compress-zlib-plugin-1.28-1.el9.x86_64
• libknet1-compress-zstd-plugin-1.28-1.el9.x86_64
• libknet1-crypto-nss-plugin-1.28-1.el9.x86_64
• libknet1-crypto-openssl-plugin-1.28-1.el9.x86_64
• libknet1-crypto-plugins-all-1.28-1.el9.x86_64
• libknet1-plugins-all-1.28-1.el9.x86_64
• libmpc-1.2.1-4.el9.x86_64
• libnozzle1-1.28-1.el9.x86_64
• libpmem-1.12.1-1.el9.x86_64
• libpng-2:1.6.37-12.el9_6.4.x86_64
• libqb-2.0.8-1.el9.x86_64
• librdmacm-54.0-2.el9_6.x86_64
• libreswan-5.3.2-2.el9fdp.x86_64
• libwsman1-2.6.8-23.el9.x86_64
• libxcrypt-devel-4.4.18-3.el9.x86_64
• libzstd-devel-1.5.5-1.el9.x86_64
• lld-17.0.6-1.el9.x86_64
• lld-libs-17.0.6-1.el9.x86_64
• llvm-17.0.6-5.el9.x86_64
• llvm-libs-17.0.6-5.el9.x86_64
• lm_sensors-libs-3.6.0-10.el9.x86_64
• m4-1.4.19-1.el9.x86_64
• make-1:4.3-8.el9.x86_64
• ndctl-libs-78-2.el9.x86_64
• net-snmp-libs-1:5.9.1-17.el9_6.1.x86_64
• net-snmp-utils-1:5.9.1-17.el9_6.1.x86_64
• nspr-4.39.0-5.el9_6.x86_64
• nss-3.124.0-5.el9_6.x86_64
• nss-softokn-3.124.0-5.el9_6.x86_64
• nss-softokn-freebl-3.124.0-5.el9_6.x86_64
• nss-sysinit-3.124.0-5.el9_6.x86_64
• nss-tools-3.124.0-5.el9_6.x86_64
• nss-util-3.124.0-5.el9_6.x86_64
• openssl-devel-1:3.2.2-7.el9_6.4.x86_64
• openvswitch3.5-ipsec-3.5.2-72.el9fdp.3.x86_64
• openwsman-python3-2.6.8-23.el9.x86_64
• pacemaker-2.1.9-1.4.el9_6.x86_64
• pacemaker-cli-2.1.9-1.4.el9_6.x86_64
• pacemaker-cluster-libs-2.1.9-1.4.el9_6.x86_64
• pacemaker-libs-2.1.9-1.4.el9_6.x86_64
• pacemaker-schemas-2.1.9-1.4.el9_6.noarch
• pcp-conf-6.3.7-1.el9_6.1.x86_64
• pcp-libs-6.3.7-1.el9_6.1.x86_64
• pcs-0.11.9-2.el9_6.4.x86_64
• perl-TimeDate-1:2.33-6.el9.noarch
• pixman-0.40.0-6.el9_3.x86_64
• protobuf-3.14.0-16.el9_6.1.x86_64
• python3-cffi-1.14.5-5.el9.x86_64
• python3-cryptography-36.0.1-5.el9_6.x86_64
• python3-lxml-4.6.5-3.el9_6.1.x86_64
• python3-openvswitch3.5-3.5.2-72.el9fdp.3.x86_64
• python3-ply-3.11-14.el9.noarch
• python3-pycparser-2.20-6.el9.noarch
• python3-pycurl-7.43.0.6-8.el9.x86_64
• python3-pyparsing-2.4.7-9.el9.noarch
• python3-tornado-6.4.2-2.el9_6.3.x86_64
• qemu-img-17:9.1.0-15.el9_6.19.x86_64
• qemu-kvm-common-17:9.1.0-15.el9_6.19.x86_64
• qemu-kvm-core-17:9.1.0-15.el9_6.19.x86_64
• redhat-logos-90.5-1.el9_6.1.x86_64
• resource-agents-4.10.0-71.el9_6.34.x86_64
• ruby-3.0.7-166.el9_6.x86_64
• ruby-default-gems-3.0.7-166.el9_6.noarch
• ruby-libs-3.0.7-166.el9_6.x86_64
• rubygem-bigdecimal-3.0.0-166.el9_6.x86_64
• rubygem-bundler-2.2.33-166.el9_6.noarch
• rubygem-io-console-0.5.7-166.el9_6.x86_64
• rubygem-json-2.5.1-166.el9_6.x86_64
• rubygem-psych-3.3.2-166.el9_6.x86_64
• rubygem-rdoc-6.3.4.1-166.el9_6.noarch
• rubygem-rexml-3.2.5-166.el9_6.noarch
• rubygems-3.2.33-166.el9_6.noarch
• sbd-1.5.2-1.el9.x86_64
• seabios-bin-1.16.3-4.el9.noarch
• seavgabios-bin-1.16.3-4.el9.noarch
• spdlog-1.13.0-1.rhaos4.14.el9.x86_64
• sysstat-12.5.4-9.el9.x86_64
• telnet-1:0.17-85.el9.x86_64
• usbguard-1.0.0-16.el9.x86_64
• usbguard-selinux-1.0.0-16.el9.noarch
• virtiofsd-1.13.2-1.el9_6.x86_64
• wasmedge-0.14.0-2.rhaos4.19.el9.x86_64
• zlib-devel-1.2.11-40.el9.x86_64

Red Hat Enterprise Linux CoreOS base layer: 9.6.20261023-1