# 4.17.60 Created: 2026-11-09 16:55:34 +0000 UTC Image Digest: `sha256:76baeb5c514cded4b1de03a9720f072d7cb7193a53281cc3b13f0ff368e302c2` ## Changes from 4.17.59 ### Components * Kubectl 1.30.5 * Kubernetes 1.30.14 * Kubernetes Tests 1.30.14 * Red Hat Enterprise Linux CoreOS upgraded from 417.94.202610010234-0 to 417.94.202611061051-0 ### Rebuilt images without code change * [agent-installer-api-server](https://github.com/openshift/assisted-service) git [11f678ed](https://github.com/openshift/assisted-service/commit/11f678ed6998c56deebdeeaec1ac755c655c694f) `sha256:62b198dfb3da66607ec1769e26f847e15e28b8efe9f41712c85fd880fac7f770` * [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [e755d585](https://github.com/openshift/assisted-installer/commit/e755d585d2405fc4f7b4414ae8f263e4e3ef589d) `sha256:2cb944dc24a7d16d22d0e411d867deeabe5b21f989a749b990a30c4e46c001e6` * [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [aee1535a](https://github.com/openshift/assisted-installer-agent/commit/aee1535a922442712eafd1058d6464cda4d9335b) `sha256:f40e946fe707d8cb6a378b419182d14f1104ba4f608e4080d1e5e111ab4d0169` * [agent-installer-orchestrator](https://github.com/openshift/assisted-installer) git [e755d585](https://github.com/openshift/assisted-installer/commit/e755d585d2405fc4f7b4414ae8f263e4e3ef589d) `sha256:4d657d26a1b5643c7b4611e54abc1f3d1f40c9371e1f98f08ca7046ec9c5114c` * [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [b3595281](https://github.com/openshift/agent-installer-utils/commit/b359528186b9df8ff5796f2bbfdab7f6bbaad491) `sha256:b4c15c09dd16ea52ba45c9b33f621dbb6b34d34befb40909b9ed100acf313717` * [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [ea660559](https://github.com/openshift/apiserver-network-proxy/commit/ea6605595cf1a0c94fb0fa82a2ceec15970da655) `sha256:7cef41d2a87c99304de093cab4a28fbe6ddca37535b1d6265edf420b058f517d` * [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [9b1719e3](https://github.com/openshift/aws-encryption-provider/commit/9b1719e3c46f18fe763ee7cdf34012a969550b0b) `sha256:f7653dab3cbb2e56b0e145de7765293a5c0bd93d3a6e99305a0e3c48c6fb5351` * [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [cc562120](https://github.com/openshift/azure-kubernetes-kms/commit/cc562120ff540e237cc170b8a82a8cbbc3a32ad2) `sha256:56d88dfffa3a70a95985bbd56392154881e281bf6540e51a5977f70f9275af79` * [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [41b34248](https://github.com/openshift/cluster-api-provider-metal3/commit/41b3424801977f102b00bb5c7e8fe15d65d3ade5) `sha256:0578796a9eeb3eea198ada4c2975369c1ac66e06a8a6254228d6a3a8b6c98459` * [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [ae674d78](https://github.com/openshift/cluster-api-provider-baremetal/commit/ae674d7808379c454f972ff0cccac8bb9adcc98f) `sha256:45d686c0f92517004ef56990bdcf75c98d552869eb03596f332ff488e15b0719` * [baremetal-operator](https://github.com/openshift/baremetal-operator) git [087a24f2](https://github.com/openshift/baremetal-operator/commit/087a24f21f11bc85a6d922c156bda6270e7eadfa) `sha256:4b0f0780c3356d090e902a7e99b07e1b67e68f9162350c99d53641a2f54bce3a` * [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator) git [6a11cde3](https://github.com/openshift/cloud-credential-operator/commit/6a11cde3b4cf42a9382c01f537f012f6df487899) `sha256:064d8b57569931db8e3699a8537ad69ce3e83258fb9f7724b8953a9839f1cb18` * [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [241af368](https://github.com/openshift/cloud-network-config-controller/commit/241af368428cb2deedeaf8e21d237aa01216292a) `sha256:d727f8002bb6e731deedb1ae39de417fb981218b9e8ed5c22c4fc5e4f9f0ba59` * [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [efa6fd9b](https://github.com/openshift/kubernetes-autoscaler/commit/efa6fd9b220e841591d8be2208cdec4ffc826429) `sha256:551b7e8ba90bc5a3fbbb3ae508d09dc39ab49d92c7931cc8b66de746069d9599` * [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [bb407dd1](https://github.com/openshift/cluster-autoscaler-operator/commit/bb407dd17744ed46ac9eedde23e2a8cd7371bfc9) `sha256:0f3a231b70321ef8e9baee60e1095c9b9bfefa4e8a2e16ad1fd6bd343258aa3b` * [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [95dd9129](https://github.com/openshift/cluster-bootstrap/commit/95dd9129fa44410a0103fe087d13e27dddecab19) `sha256:2ab063e95f97851554547a9050b0a4a5c46dd08d107ce600b5323b7687b56794` * [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [3b417931](https://github.com/openshift/cluster-api/commit/3b417931b1e94534cbde2c435c262befad8a57f1) `sha256:dcfa843a7b9c4b57ce98a4d57d8d93771a3433d45596ffd2040ed69636a886d8` * [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [17abd1d9](https://github.com/openshift/cluster-capi-operator/commit/17abd1d9c801288347f4134965b268389a90c342) `sha256:d7f7b37af66a9994944fd503946a94a6dcad792dd3c010d9fc8e14a3ed08cc5a` * [cluster-config-api](https://github.com/openshift/api) git [92c55bf0](https://github.com/openshift/api/commit/92c55bf0f372c222dc02f17685c383d18e2c2e8b) `sha256:eaa96aa31e8e169097b1564edc54d7493eefbe2acde8e759914d73b6b8dd05f3` * [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [cfd318de](https://github.com/openshift/cluster-config-operator/commit/cfd318de9718f1c73b40d99900125bdca41482ef) `sha256:7cd7c776ce9ddf801ca5f669a3770e663b92701313187c27500b8fa033e64632` * [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [f7e01c2f](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/f7e01c2f91628b25d1578c0a752f9b55c4233625) `sha256:82e8e23366e9a4e0ee33d0ffc7122987435a086a5b468a5bd67b89ca265618e3` * [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [a07cc2b5](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/a07cc2b522f7f78ee985a33118b5f93c9c2bde8f) `sha256:937e04b2341b8ca6781d08ecfe6bb5bede71f65606abd56af12925f6b3e2bd56` * [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [1a0cea11](https://github.com/openshift/cluster-image-registry-operator/commit/1a0cea11ec4ba91416b698ab2e87d03a09a0e367) `sha256:0c4edff781970048e3afb14233caf4a9cfc2325dcb77c51f9aa4917000ce8a1a` * [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator) git [17253375](https://github.com/openshift/cluster-ingress-operator/commit/1725337535e32158f37471a2286c9142f100ff41) `sha256:8e55c2d3bab23c40a8c3ed304c11add9dd9675e8972fc8acfc39b969d4795a3d` * [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [c1947350](https://github.com/openshift/cluster-api-operator/commit/c1947350f996bcc50c549c9e83382179d6455247) `sha256:3a1899749811394f05439a52736bc39e1a5d383bab726a14241556c3a8e80613` * [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [0097f210](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/0097f21060a7e10679567eb57b87feb4f55230e3) `sha256:cfd5dd98d86437adf87503283f2d3c82798e700c89b3d1e1ed498c7819d862ba` * [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [acc2380e](https://github.com/openshift/cluster-machine-approver/commit/acc2380eb52e4f83ba07f9d04b44a36cbc47a48c) `sha256:d4af1f4987ae0384a4ad5e36a23a3f0649beb596dbf87bf62f6e84d5a997db5d` * [cluster-network-operator](https://github.com/openshift/cluster-network-operator) git [dc98c59e](https://github.com/openshift/cluster-network-operator/commit/dc98c59e223f325acb113a697771e737266876a5) `sha256:fd2df003f30e4f653f9dad396cc5e08b02ab6e44087fcd7ebefdb13b43a6f715` * [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [fe37d7cf](https://github.com/openshift/cluster-node-tuning-operator/commit/fe37d7cf96ef3280f1bd41c55372b520fdf6c821) `sha256:247581fe75d4aaf2fbdc9e0bd73cebd2cfd91ea2a329de90f5b3ba5c66f95fef` * [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [8c61cd4b](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/8c61cd4bcf3719137950e3ac287346013b471a08) `sha256:052a3e6d8e38bef82aed5ba9e7fd78513b8e4555947ec6ff51cb7e682bbf151a` * [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [b05a249d](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/b05a249d6919978217aefa7060951af078eac931) `sha256:a0f3c67aec02f6a6e029b214f27067b663c926734f3465f97e48eaf1e2de9cd9` * [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [7209e90d](https://github.com/openshift/cluster-policy-controller/commit/7209e90d4205dc16bf0c83fb556c3d955d942d6b) `sha256:8a3954d7df39d9108d0b391b4d5c17e6fd38483e86e9c414f29dc3cc00af597c` * [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [63022033](https://github.com/openshift/cluster-update-keys/commit/6302203333a9a7f22dc3e4ecd280028e8a8bfb86) `sha256:9aa28f3c9c267f8fd3ea5108ab8a82f1ac461653ef93f5bb4722575e3dab8d3a` * [configmap-reloader](https://github.com/openshift/configmap-reload) git [62d56d6a](https://github.com/openshift/configmap-reload/commit/62d56d6a8b7ce26889cce1ba55ab4c958398967c) `sha256:b12863622c23cb66a1bae504447c7be4c9612ec4908cbcbbfe26234c60aac3ea` * [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [621348df](https://github.com/openshift/containernetworking-plugins/commit/621348df96a03f642716845a15dc4043cc5f85f1) `sha256:c9e1142bd503f8583c7c3ca7068f651b893ed7a35a18cf9cf455912b4288c485` * [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [621348df](https://github.com/openshift/containernetworking-plugins/commit/621348df96a03f642716845a15dc4043cc5f85f1) `sha256:00507aeabfc20724abc2d4ee085309f6547e828fbd21057fa3432edaa3387ddf` * [csi-driver-shared-resource](https://github.com/openshift/csi-driver-shared-resource) git [66aee5b0](https://github.com/openshift/csi-driver-shared-resource/commit/66aee5b045bf2b32f6ccbf7a62c1151b8889811a) `sha256:dcd065de529cc6660600260fb8043a288b7e2963752ece07535edbd22573bed9` * [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [95be6bdf](https://github.com/openshift/csi-driver-shared-resource-operator/commit/95be6bdf8da55c75b9d5027f0e32a0cd2f070d8a) `sha256:c24c30003b7549f044bff5d3ee61071b874aff3655e20e7eed7775000f961981` * [csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource) git [66aee5b0](https://github.com/openshift/csi-driver-shared-resource/commit/66aee5b045bf2b32f6ccbf7a62c1151b8889811a) `sha256:3b6498af3ec76eeda727ff52e58adc1000b086efe95f8d7774f2430ffbc9fa7c` * [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [3dd2253e](https://github.com/openshift/csi-node-driver-registrar/commit/3dd2253ed70cb565a63a208fa667d55f3222fb19) `sha256:8bd03ddd43b36e94f26b854d6e2c26610637a51545b1935fe8938e105adb3fdb` * [docker-builder](https://github.com/openshift/builder) git [865c7982](https://github.com/openshift/builder/commit/865c79826e67f14dbce7cb0a21313bbb82b1fad0) `sha256:2d207e598de5d998b90b583cfe5cdb7361c1d200842e9570812e55e27f337d8f` * [driver-toolkit](https://github.com/openshift/driver-toolkit) git [859518f6](https://github.com/openshift/driver-toolkit/commit/859518f6952407a56ddf7d0562c98fe27e9e0efe) `sha256:89333cb7c6de019e597d2a3e2183185fb3cdfd5ab64a3256d5160376643a30d8` * [egress-router-cni](https://github.com/openshift/egress-router-cni) git [3193a756](https://github.com/openshift/egress-router-cni/commit/3193a756d60e14f7139992e2e42b7036955652e7) `sha256:c0a1d5b2a9faeb3b1514650c3f6c97a77a1e59b5027bc51106cde87aa8285a22` * [etcd](https://github.com/openshift/etcd) git [0d9e0a90](https://github.com/openshift/etcd/commit/0d9e0a907c4aea7c4b2bff627478785fb99511f5) `sha256:d1fe33437e140fd10fbabdc0764553b2ae6ed7229b419402064a47369b1586e3` * [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [9c043915](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/9c043915bd01ede967dd412034190303150a9825) `sha256:eadcbef88f94f68a7a68c6ccbabfb58c58fa6a28153d87ad65d7e196488f6f7c` * [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [a6cc81b5](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/a6cc81b5ff924e190c701c509fdfea67e6615ff9) `sha256:049882dacd0e947d3463d39d2af5e6baf1e1d183e8d1144921fcde2f9c1af584` * [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [89fbc4e8](https://github.com/openshift/machine-api-provider-ibmcloud/commit/89fbc4e852047a5a394a42d2334bdf02d190fcc0) `sha256:f6609c8cd25a84446c02ea71163909e4c888cb1a240cc8bda37689f41dd78b8d` * [keepalived-ipfailover](https://github.com/openshift/images) git [e3879e9e](https://github.com/openshift/images/commit/e3879e9e36d64c6be08b621a50ad5d3ee343dc3e) `sha256:60db0ee460b8d0dcb663522ff19bf948a9fd98ac9e5b652d99f020799f07e35e` * [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [df9ac952](https://github.com/openshift/kubernetes-metrics-server/commit/df9ac95276c08cff0b295c3eeb52c835abf95900) `sha256:a928542b67f2273afbbe7cf7a511188370199e0227e715f1078f2af91b7187f5` * [kube-proxy](https://github.com/openshift/sdn) git [fd50551b](https://github.com/openshift/sdn/commit/fd50551b5c640fb4bda787faaab32f8b641839e9) `sha256:a60e4f01c15863f735a661defc21c8fabda4e76ce3e5df8b913519815e222126` * [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [f708b5ec](https://github.com/openshift/kube-rbac-proxy/commit/f708b5ecf87b948864e4f68d0724cda5de13a9d9) `sha256:4e4f029dbd2f31a8a91df9de763cf80cca1b65ca90b2bdba7c030142dbb8b946` * [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [69b07ae0](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/69b07ae04918806079f1a4fbc2f110453bc8db19) `sha256:1f70efcc5af99ede25a1b48b59567964beb7dbe6290f783d1bf0f44678830dc2` * [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [d7d7a591](https://github.com/openshift/cloud-provider-kubevirt/commit/d7d7a59127ef9020cbf6339a313e7eb7346c95f6) `sha256:ac1b0303b310f243ddcaa6e61e0f6d64302af0eb9ebe310843cf076dae6ccae1` * [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [b4ad2d68](https://github.com/openshift/kubevirt-csi-driver/commit/b4ad2d68d25572212ca92d42bb209d103d3589d6) `sha256:ac2e78823ad697865b2ed4824283d3c5a7f6d17db440d8f792837623515425b8` * [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [931afe11](https://github.com/openshift/cluster-api-provider-libvirt/commit/931afe11b155006f805d0b029e46416e632d1a14) `sha256:923a03544969949e9102234c62e23125b4f97810e5a59df6be5dd23b40a9a57a` * [machine-api-operator](https://github.com/openshift/machine-api-operator) git [d3564c17](https://github.com/openshift/machine-api-operator/commit/d3564c17a7e52bdf5f92d78948ef814973ee126d) `sha256:50a6832b75f2b92676124d3fd4a5256966f3d0add0f70aa441e5b57ebcc133a9` * [machine-os-images](https://github.com/openshift/machine-os-images) git [cc250001](https://github.com/openshift/machine-os-images/commit/cc250001ddce8bd6342942f045ff7f9930c74040) `sha256:94cb99a834e886d24ceb4e93902c3c82bce3e8aee5e15ee796bb9f55d2293878` * [metallb-frr](https://github.com/openshift/frr) git [b575d5df](https://github.com/openshift/frr/commit/b575d5dfac5319d7d296922de69c73baea6d142d) `sha256:5bba08b52c18e27012dd83181b01ffb833d23417d2f712b125e270bb7d126916` * [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [4d0b1703](https://github.com/openshift/multus-networkpolicy/commit/4d0b170379c4e158d976b4dd7bccbed5835fdede) `sha256:02946df18ae579374c425a8db5209f6d24900dee16d936cc446a23c3cdf79745` * [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:a9c5fb3af72d4741df4b5a85f11b7f08118125f64b6f1c2890763b9d1d365165` * [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [40cfb3dc](https://github.com/openshift/whereabouts-cni/commit/40cfb3dca70a4d37dff426c0ec1c77efcb399e1b) `sha256:38534b0401e1911caecdbf8392e686826ced1ce9f0589226d3368f3d0c6fa44b` * [must-gather](https://github.com/openshift/must-gather) git [ea72c2eb](https://github.com/openshift/must-gather/commit/ea72c2eb404f9fe9282be70d1af7689f8f139fee) `sha256:bed98d0dfc68489b9c9aa0596c2b9c588498905d0ced98b0508d2cb661e2055d` * [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [8f7cc925](https://github.com/openshift/bond-cni/commit/8f7cc9253b83072c273c28cff64b00eb6ef3b38a) `sha256:7dec5a8be8cbc68dc5704abb3fcf1fde68385f553c07c764c5791b84487a9894` * [network-tools](https://github.com/openshift/network-tools) git [e59e7b25](https://github.com/openshift/network-tools/commit/e59e7b258e2baa5815bc13763804694615896ab0) `sha256:d173bf81ec4707113985b04f0ff4543c230eced24ead4e9e990e14cad4cce21c` * [olm-catalogd](https://github.com/openshift/operator-framework-catalogd) git [c740e056](https://github.com/openshift/operator-framework-catalogd/commit/c740e05677bbeb20cbb601e8b261c07a81cf0a8a) `sha256:0253d245d32191f6445e59edbbac18b8da24017a70d6b9210d4ce2f2e25baec3` * [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller) git [fa8d10c5](https://github.com/openshift/operator-framework-operator-controller/commit/fa8d10c53339688c290fe3e8867df7124de04c42) `sha256:07d81a62e14736e7067dddfa48d921c82eeee294a3394ec8bf1d20c908cf2d16` * [openshift-apiserver](https://github.com/openshift/openshift-apiserver) git [79a42c56](https://github.com/openshift/openshift-apiserver/commit/79a42c566a8c7857d23623d296c80a70fc2b8148) `sha256:34744b0163435c34e1af31a0e56fb0090f09c7b7fee5c4177f389bbe8e802d76` * [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [5593c5f7](https://github.com/openshift/cluster-api-provider-openstack/commit/5593c5f7f70758cec5e9feac54eb248fbd6d75d8) `sha256:79c172cb6c1370398ec57590610f2406122172fe904636f2cfe654ed7c0713f8` * [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [3b926d20](https://github.com/openshift/machine-api-provider-openstack/commit/3b926d2094bab3c6759252b7681cc36473b29021) `sha256:5ee4f808449eaa71e43156e8c463f967ccf225b8d61544c1550a3ebf5eca2cb1` * [operator-framework-tools](https://github.com/openshift/operator-framework-olm) git [c9ad6fd8](https://github.com/openshift/operator-framework-olm/commit/c9ad6fd83727301129cfd1a2b165bf29949529a8) `sha256:5f920b09646d4b55443915c4e5ba5cf3ea07ccbdd78eedc71358efa4764048c6` * [operator-lifecycle-manager](https://github.com/openshift/operator-framework-olm) git [c9ad6fd8](https://github.com/openshift/operator-framework-olm/commit/c9ad6fd83727301129cfd1a2b165bf29949529a8) `sha256:7f6b14b8b05ab6439b61d898496fb5892f36718b212f0fbf5038c13937c56e33` * [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [5cf36fde](https://github.com/operator-framework/operator-marketplace/commit/5cf36fde25cf22b7f58b0a3242f82cadd18acc6f) `sha256:03be61278cbc5098402013672b433d63c4bf9e4614d31da57501b523737545a8` * [operator-registry](https://github.com/openshift/operator-framework-olm) git [c9ad6fd8](https://github.com/openshift/operator-framework-olm/commit/c9ad6fd83727301129cfd1a2b165bf29949529a8) `sha256:70d4fd9cccfb98974fd438fee18c581d3bc61bbaf7709c5a4e27f8361a8beeb5` * [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes) git [12f4e7e1](https://github.com/openshift/ovn-kubernetes/commit/12f4e7e12f583767c8e9549408e36bbf4000b1b4) `sha256:a34d98bf7e983fa16920eca48c40e6984e56025e38e416ca7e0016b9160e359e` * [ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes) git [12f4e7e1](https://github.com/openshift/ovn-kubernetes/commit/12f4e7e12f583767c8e9549408e36bbf4000b1b4) `sha256:8a91053f8ae9bd6272790498e5fd7d70edbfee0ad7ea9d1d24f06791f47ae763` * [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [06ec4e3a](https://github.com/openshift/prom-label-proxy/commit/06ec4e3af0f27ae6e8ece0d31ff1e802b7d08a50) `sha256:0e5bb331753dcb4408f3519b9f2740921d5bc64220340303c36882a3385d86f7` * [prometheus](https://github.com/openshift/prometheus) git [8b2b7087](https://github.com/openshift/prometheus/commit/8b2b70879280211b7ebd0b44ea02bddc2cba825e) `sha256:7f97453a577070a522fb15629ae9acf2f4475f05273a84ed74e0d660a9d07e82` * [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [bed9c9bd](https://github.com/openshift/prometheus-alertmanager/commit/bed9c9bd31940eeed0e082906a581bac40a3f7aa) `sha256:702cd7a02c9c749889748fe7bf79470b7f5b79fea5d1b60bf47a08e0cacf3247` * rhel-coreos `sha256:80ab3a3c8391015b1cd65d8f231bc74717039fdd9d1be91a016c1182aee5f8eb` * rhel-coreos-extensions `sha256:272a756bf728ed04a711cd8054e0388ee54d9577d491e021940027c33051b852` * [service-ca-operator](https://github.com/openshift/service-ca-operator) git [2cb0a44d](https://github.com/openshift/service-ca-operator/commit/2cb0a44d1245cf2f5d7bdf2072484cdfdfa50eaa) `sha256:4c3c8e53d05304d87bb4fc323a190442758c182502dd80855a59bb87bff0965e` * [telemeter](https://github.com/openshift/telemeter) git [15895a06](https://github.com/openshift/telemeter/commit/15895a068e7e89b14292fde4601208c3eeb3a715) `sha256:18bb4af1ca5a57c2bf04f03e2a6d2bb897ce7b896e7d6b8805f8d0afa04a3419` * [thanos](https://github.com/openshift/thanos) git [51fe5fa4](https://github.com/openshift/thanos/commit/51fe5fa45f6df55266ca874287b47b2825f01b32) `sha256:e1dc8f735ea1c4293178b330e0df9fddb6988c7a5fceb42b8093b58fbd9a3830` ### [aws-cloud-controller-manager, aws-cluster-api-controllers, aws-ebs-csi-driver, aws-ebs-csi-driver-operator, aws-machine-controllers, aws-pod-identity-webhook, azure-cloud-controller-manager, azure-cloud-node-manager, azure-cluster-api-controllers, azure-disk-csi-driver, azure-disk-csi-driver-operator, azure-file-csi-driver, azure-file-csi-driver-operator, azure-machine-controllers, azure-workload-identity-webhook, csi-driver-manila, csi-driver-manila-operator, csi-driver-nfs, gcp-cloud-controller-manager, gcp-cluster-api-controllers, gcp-machine-controllers, gcp-pd-csi-driver, gcp-pd-csi-driver-operator, hyperkube, ironic, ironic-agent, ironic-machine-os-downloader, ironic-static-ip-manager, machine-image-customization-controller, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, powervs-block-csi-driver, powervs-block-csi-driver-operator, powervs-cloud-controller-manager, powervs-machine-controllers, vsphere-cloud-controller-manager, vsphere-cluster-api-controllers, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector](https://github.com/openshift/kubernetes/tree/cbb83c80af4c43d17eab5d8828706b67e4337294) * [OCPBUGS-136162](https://issues.redhat.com/browse/OCPBUGS-136162): Fix kubeadm preflight host URL construction [#2842](https://github.com/openshift/kubernetes/pull/2842) * [Full changelog](https://github.com/openshift/kubernetes/compare/4e295fa517e17429af4d8004e7a8028fe719e60f...cbb83c80af4c43d17eab5d8828706b67e4337294) ### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/eeb42e14fa22ab7453fb9ce680122a6cbd31ad8e) * [OCPBUGS-103154](https://issues.redhat.com/browse/OCPBUGS-103154): Bump golang.org/x/net to v0.35.0-sec.4 [#10972](https://github.com/openshift/installer/pull/10972) * [Full changelog](https://github.com/openshift/installer/compare/de6c46c003a6c5fdffc950cb51f561087ac13964...eeb42e14fa22ab7453fb9ce680122a6cbd31ad8e) ### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/e03f273e515f919d14a718c1cb5e3b1dce236848) * [OCPBUGS-103159](https://issues.redhat.com/browse/OCPBUGS-103159): Fix CVE-2026-33814 by adding patch for golang.org/x/net package [#409](https://github.com/openshift/baremetal-runtimecfg/pull/409) * [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/745189508eec80ee07a921d1b2c227812db37237...e03f273e515f919d14a718c1cb5e3b1dce236848) ### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/28d0040e8fb48bd4b2ca492e01ebd0f168487adb) * [OCPBUGS-102061](https://issues.redhat.com/browse/OCPBUGS-102061), [OCPBUGS-103161](https://issues.redhat.com/browse/OCPBUGS-103161): Use patched x/net fork v0.35.0-sec.4 [#2417](https://github.com/openshift/oc/pull/2417) * [Full changelog](https://github.com/openshift/oc/compare/7189593997f243911aeeb6e473e76d5ad0fd1e50...28d0040e8fb48bd4b2ca492e01ebd0f168487adb) ### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/251bf348b980326ae2edaf16f27e70d73cecb030) * [OCPBUGS-103168](https://issues.redhat.com/browse/OCPBUGS-103168): replace golang.org/x/net with openshift-sustaining/net@v0.35.0-sec.4 [#989](https://github.com/openshift/cluster-authentication-operator/pull/989) * [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/9f93cafccca989417378a804f134f68fb4fea40d...251bf348b980326ae2edaf16f27e70d73cecb030) ### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/519676b249b496a573f6e28f34890420529c61e0) * [OCPBUGS-103170](https://issues.redhat.com/browse/OCPBUGS-103170): Use patched x/net fork v0.35.0-sec.4 [#672](https://github.com/openshift/cluster-baremetal-operator/pull/672) * [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/16ed4727250a72342b3da7b280d3456f7055a6c9...519676b249b496a573f6e28f34890420529c61e0) ### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/fe105e6bc242b77274a9364de13a605402de5b0b) * [OCPBUGS-103176](https://issues.redhat.com/browse/OCPBUGS-103176): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 [#514](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/514) * [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/6d4c0096477d7e15f31ef0492ad9382ea1be1ef1...fe105e6bc242b77274a9364de13a605402de5b0b) ### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/5b929d9b9f3c6c034cb90ddd405d8725fbac56d4) * [OCPBUGS-103178](https://issues.redhat.com/browse/OCPBUGS-103178): Use patched x/net fork v0.35.0-sec.4 [#494](https://github.com/openshift/cluster-dns-operator/pull/494) * [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/81507f04686df3e16793b270084ead0a2a67fb38...5b929d9b9f3c6c034cb90ddd405d8725fbac56d4) ### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/1dc16edfad74463e003c473613672236ba0cf6f1) * [OCPBUGS-103181](https://issues.redhat.com/browse/OCPBUGS-103181): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 [#1696](https://github.com/openshift/cluster-etcd-operator/pull/1696) * [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/bfffdcbac76071143cf554785ca2bde0ac69ac7e...1dc16edfad74463e003c473613672236ba0cf6f1) ### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/a7c640c2be82d1918dcf3ac91b0e6362e8e8864a) * [OCPBUGS-103173](https://issues.redhat.com/browse/OCPBUGS-103173): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 [#2300](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2300) * [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/84e19b2149ab818a455b00717d790856c13ea387...a7c640c2be82d1918dcf3ac91b0e6362e8e8864a) ### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/91fe72a64d195b68b2c076f62e0513946a09e09b) * [OCPBUGS-103172](https://issues.redhat.com/browse/OCPBUGS-103172): Fix CVE-2026-33814 by adding patch for golang.org/x/net package [#962](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/962) * [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/12f60539287eda85e99efbdcf85a1ecf59e021fa...91fe72a64d195b68b2c076f62e0513946a09e09b) ### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/64f0ede69f6e5afcfa47c96ce5b876c0ffbbb515) * [OCPBUGS-103171](https://issues.redhat.com/browse/OCPBUGS-103171): [release-4.17] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#670](https://github.com/openshift/cluster-kube-scheduler-operator/pull/670) * [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/013ff606240919fcb46eb9a8b707598a9b049ee5...64f0ede69f6e5afcfa47c96ce5b876c0ffbbb515) ### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/1a4ef3b5a17cf1b018acbdf35c2055898d2d52fc) * [OCPBUGS-129160](https://issues.redhat.com/browse/OCPBUGS-129160): don't delete admin-owned Alertmanager secrets on destroy [#3143](https://github.com/openshift/cluster-monitoring-operator/pull/3143) * [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/1179cda06fce0890dbd4529aadcbad77a82dd2ac...1a4ef3b5a17cf1b018acbdf35c2055898d2d52fc) ### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/9bdb00434f4b2977ad7d7868f3656c43abadece2) * [OCPBUGS-103193](https://issues.redhat.com/browse/OCPBUGS-103193): bump golang.org/x/net to v0.35.0-sec.3 to fix CVE-2026-33814 [#246](https://github.com/openshift/cluster-olm-operator/pull/246) * [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/f289edc3bb99197984aa392b13dfef07b075bcce...9bdb00434f4b2977ad7d7868f3656c43abadece2) ### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/6fa6dfc70a6301451094b0e2f8f6be94d22816a2) * [OCPBUGS-129480](https://issues.redhat.com/browse/OCPBUGS-129480): Restrict samples operator access to the global pull-secret [#733](https://github.com/openshift/cluster-samples-operator/pull/733) * [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/1d2ba42214637c7ed7e5e3e0aec257e9b949d061...6fa6dfc70a6301451094b0e2f8f6be94d22816a2) ### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/a3da8d647911554718b28762e5d2a9829acc4602) * [OCPBUGS-103187](https://issues.redhat.com/browse/OCPBUGS-103187): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#734](https://github.com/openshift/cluster-storage-operator/pull/734) * [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/a039f8a2e73771f76e799ed497535705037f3bf5...a3da8d647911554718b28762e5d2a9829acc4602) ### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/367d573e56de4f3dbe88a97ec515bd5acecbe141) * [OCPBUGS-103186](https://issues.redhat.com/browse/OCPBUGS-103186): Bump golang.org/x/net to v0.35.0-sec.3 [#1460](https://github.com/openshift/cluster-version-operator/pull/1460) * [Full changelog](https://github.com/openshift/cluster-version-operator/compare/b855c68099755979a053f60a49300d3502f44325...367d573e56de4f3dbe88a97ec515bd5acecbe141) ### [console](https://github.com/openshift/console/tree/c61250ec246c8990b9f8474fbf4ba30259143323) * [OCPBUGS-127155](https://issues.redhat.com/browse/OCPBUGS-127155): [release-4.17] inkify-it: Denial of Service via crafted mailto: links [#17382](https://github.com/openshift/console/pull/17382) * [Full changelog](https://github.com/openshift/console/compare/b61b5d90e1cd21fe13b05dc2d164c7d84627e358...c61250ec246c8990b9f8474fbf4ba30259143323) ### [console-operator](https://github.com/openshift/console-operator/tree/22228bba3d9289e11282f907e2278724df09b315) * [OCPBUGS-103205](https://issues.redhat.com/browse/OCPBUGS-103205): Use github.com/openshift-sustaining/net patch to fix CVE-2026-33814 [#1224](https://github.com/openshift/console-operator/pull/1224) * [Full changelog](https://github.com/openshift/console-operator/compare/e8032813321ac4c2daec869a7703c31cd9b2acf4...22228bba3d9289e11282f907e2278724df09b315) ### [coredns](https://github.com/openshift/coredns/tree/532fc381de0b06d1e11715ed16ffc4f4e263b078) * [OCPBUGS-103200](https://issues.redhat.com/browse/OCPBUGS-103200): Fix CVE-2026-33814 by adding patch for golang.org/x/net package [#206](https://github.com/openshift/coredns/pull/206) * [Full changelog](https://github.com/openshift/coredns/compare/fe89d27d6f2b27baf686c89c4c1c1ceb88fe3567...532fc381de0b06d1e11715ed16ffc4f4e263b078) ### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/26244f2233c9627bef9dd8c3ba87e9301bf02e4a) * [OCPBUGS-103210](https://issues.redhat.com/browse/OCPBUGS-103210): Bump golang.org/x/net to v0.35.0-sec.4 [#116](https://github.com/openshift/csi-external-attacher/pull/116) * [Full changelog](https://github.com/openshift/csi-external-attacher/compare/8d93b8a3560410cb2ff3dd6d285fea822720edd4...26244f2233c9627bef9dd8c3ba87e9301bf02e4a) ### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/4aef9e77fe00ca2665bd2ed4995109618f367369) * [OCPBUGS-92864](https://issues.redhat.com/browse/OCPBUGS-92864): Replace golang.org/x/crypto with github.com/openshift-sustaining/crypto@v0.33.0-sec.5 to address CVE-2026-46597 [#162](https://github.com/openshift/csi-external-provisioner/pull/162) * [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/88d1fdf1716d5d69bc88fdab27677185b440e155...4aef9e77fe00ca2665bd2ed4995109618f367369) ### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/f1c3090c58ddc2c50a02c8427fb79b5c788b0ce9) * [OCPBUGS-80084](https://issues.redhat.com/browse/OCPBUGS-80084): Patching openshift-sustaining/grpc-go v1.71.3-sec.1 [#204](https://github.com/openshift/csi-external-resizer/pull/204) * [Full changelog](https://github.com/openshift/csi-external-resizer/compare/96012dea4582fd44513410d90b6db640fce5613a...f1c3090c58ddc2c50a02c8427fb79b5c788b0ce9) ### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/cc5ce2e5028f15429772766f6a5f4a2f93d26505) * [OCPBUGS-103212](https://issues.redhat.com/browse/OCPBUGS-103212), [OCPBUGS-103215](https://issues.redhat.com/browse/OCPBUGS-103215): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 [#229](https://github.com/openshift/csi-external-snapshotter/pull/229) * [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/59c396dfa5bd6f1cb42c42cbc3ad66dd5898348c...cc5ce2e5028f15429772766f6a5f4a2f93d26505) ### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/6e58d04f7b94e3bf3e070a665ffc1f6caf4a6c2b) * [OCPBUGS-103203](https://issues.redhat.com/browse/OCPBUGS-103203): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 [#110](https://github.com/openshift/csi-livenessprobe/pull/110) * [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/e7d841dc545b9fb3a8a3303b8cac62d35620905b...6e58d04f7b94e3bf3e070a665ffc1f6caf4a6c2b) ### [docker-registry](https://github.com/openshift/image-registry/tree/13618f00551d5dcf9fba8e902682171f6fa67cc1) * [OCPBUGS-103223](https://issues.redhat.com/browse/OCPBUGS-103223): [release-4.17] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#481](https://github.com/openshift/image-registry/pull/481) * [Full changelog](https://github.com/openshift/image-registry/compare/d0595c9e720caa5489628e49ed45a8eb85fa7b69...13618f00551d5dcf9fba8e902682171f6fa67cc1) ### [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook/tree/653b08cc6e4833118d13fc1a1862174030721451) * [OCPBUGS-103230](https://issues.redhat.com/browse/OCPBUGS-103230): Replace golang.org/x/net with github.com/openshift-sustaining/net v0.35.0-sec.4 [#27](https://github.com/openshift/gcp-workload-identity-federation-webhook/pull/27) * [Full changelog](https://github.com/openshift/gcp-workload-identity-federation-webhook/compare/08579e9f60ab7f5f6c57f7e507c66a7ff0cc6d62...653b08cc6e4833118d13fc1a1862174030721451) ### [haproxy-router](https://github.com/openshift/router/tree/2f5cbd9eee4856abceeace9be26b26f51f806157) * [OCPBUGS-103220](https://issues.redhat.com/browse/OCPBUGS-103220): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 to address CVE-2026-33814 [#845](https://github.com/openshift/router/pull/845) * [Full changelog](https://github.com/openshift/router/compare/216fb937c4d84bdad2c44e2659e4a69235d062fc...2f5cbd9eee4856abceeace9be26b26f51f806157) ### [hypershift](https://github.com/openshift/hypershift/tree/16a7b50a548e2f9951395ff64c6f0b0825401ed6) * Sync approver aliases with main for release-4.17 [#10188](https://github.com/openshift/hypershift/pull/10188) * [Full changelog](https://github.com/openshift/hypershift/compare/858722705e2f6d7e7b1cba5ba5ed9e6c32a7e1a2...16a7b50a548e2f9951395ff64c6f0b0825401ed6) ### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/b6fd9e7d13470be831e31b238eea82a7d5f6b54b) * [OCPBUGS-120696](https://issues.redhat.com/browse/OCPBUGS-120696): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 [#115](https://github.com/openshift/cloud-provider-ibm/pull/115) * [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/ad8f7eb0ffba27fa8db8ad3692f530728312ad06...b6fd9e7d13470be831e31b238eea82a7d5f6b54b) ### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/0946d079c4b73c6e51d6b53c21608f2488016785) * [OCPBUGS-103222](https://issues.redhat.com/browse/OCPBUGS-103222): Use patched x/net fork v0.35.0-sec.4 [#188](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/188) * [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/ee301303640e89a985108bf3b055051a644b5c37...0946d079c4b73c6e51d6b53c21608f2488016785) ### [insights-operator](https://github.com/openshift/insights-operator/tree/99dfadcb53e5dd2944eed17d0d83829247142924) * [OCPBUGS-103241](https://issues.redhat.com/browse/OCPBUGS-103241): Bump golang.org/x/net to v0.35.0-sec.3 [#1356](https://github.com/openshift/insights-operator/pull/1356) * [Full changelog](https://github.com/openshift/insights-operator/compare/2e91ecb38e819b2b191553461ff5dc61359115c9...99dfadcb53e5dd2944eed17d0d83829247142924) ### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/748de1c0867b7b29b5a9cc00ef34d845c5554529) * [OCPBUGS-103237](https://issues.redhat.com/browse/OCPBUGS-103237): Use patched x/net fork v0.35.0-sec.4 [#163](https://github.com/openshift/kube-state-metrics/pull/163) * [Full changelog](https://github.com/openshift/kube-state-metrics/compare/e88f1b27fd66ab75d9b5fde8419e9efba0923236...748de1c0867b7b29b5a9cc00ef34d845c5554529) ### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/dce858fb2ef61223e31d8c8c8548b841ff6e9d82) * [OCPBUGS-103252](https://issues.redhat.com/browse/OCPBUGS-103252): Use patched x/net fork v0.35.0-sec.4 [#6578](https://github.com/openshift/machine-config-operator/pull/6578) * [Full changelog](https://github.com/openshift/machine-config-operator/compare/3bdd678e83da52e0754b393b82435eea968af3ed...dce858fb2ef61223e31d8c8c8548b841ff6e9d82) ### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/581000c8b25998d88d8db83f593717a6d6562fd8) * [OCPBUGS-118233](https://issues.redhat.com/browse/OCPBUGS-118233): [release-4.17] Bump fast-uri to 3.1.7 to fix CVE-2026-84292 [#1336](https://github.com/openshift/monitoring-plugin/pull/1336) * [OCPBUGS-98777](https://issues.redhat.com/browse/OCPBUGS-98777): [release-4.17] replace outdated react-linkify dependency [#1343](https://github.com/openshift/monitoring-plugin/pull/1343) * [Full changelog](https://github.com/openshift/monitoring-plugin/compare/ffd758f816979228ae5f5d8ec526e74efcbf149a...581000c8b25998d88d8db83f593717a6d6562fd8) ### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/afc6978cc2f88eea447fc10aea47078df8093ed1) * [OCPBUGS-103264](https://issues.redhat.com/browse/OCPBUGS-103264): bump golang.org/x/net to v0.35.0-sec.3 to fix CVE-2026-33814 [#135](https://github.com/openshift/multus-admission-controller/pull/135) * [Full changelog](https://github.com/openshift/multus-admission-controller/compare/041b743a1172af3c8ace0cf046fe95bda7a9d5a2...afc6978cc2f88eea447fc10aea47078df8093ed1) ### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/184062f842c56ca62bd6603aa77a89160a6b3e0f) * [OCPBUGS-103255](https://issues.redhat.com/browse/OCPBUGS-103255), [OCPBUGS-103257](https://issues.redhat.com/browse/OCPBUGS-103257): [release-4.17] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#358](https://github.com/openshift/multus-cni/pull/358) * [Full changelog](https://github.com/openshift/multus-cni/compare/659299d118afc196d66b16a7714e17e6d11d0669...184062f842c56ca62bd6603aa77a89160a6b3e0f) ### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/88dbfcd26d195b90fea2dca4200509a29a65ecee) * [OCPBUGS-103254](https://issues.redhat.com/browse/OCPBUGS-103254): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 to address CVE-2026-33814 [#154](https://github.com/openshift/network-metrics-daemon/pull/154) * [OCPBUGS-130598](https://issues.redhat.com/browse/OCPBUGS-130598): add ./bin to PATH in check_golint.sh [#162](https://github.com/openshift/network-metrics-daemon/pull/162) * [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/f56bbf7af25fbae200c966378337db85c6b17126...88dbfcd26d195b90fea2dca4200509a29a65ecee) ### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/4412fa1f1222ef735cd4eed1cf0c28bed4d98cc0) * [OCPNETUI-168](https://issues.redhat.com/browse/OCPNETUI-168): Update Owners file [#646](https://github.com/openshift/networking-console-plugin/pull/646) * [Full changelog](https://github.com/openshift/networking-console-plugin/compare/02524de642295b592ad52235f9e2d6e22edf92ff...4412fa1f1222ef735cd4eed1cf0c28bed4d98cc0) ### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/994f90899b6535140c535476f09aef88d4c1e8b6) * [OCPBUGS-103267](https://issues.redhat.com/browse/OCPBUGS-103267): Replace golang.org/x/net with github.com/openshift-sustaining/net v0.35.0-sec.4 [#225](https://github.com/openshift/oauth-apiserver/pull/225) * [Full changelog](https://github.com/openshift/oauth-apiserver/compare/e078aeb29048d2b37e0b8e2657641a9207fd4d84...994f90899b6535140c535476f09aef88d4c1e8b6) ### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/62ea5f58fb0a844b23571e2dd928a7a1fe9bcd14) * [OCPBUGS-136604](https://issues.redhat.com/browse/OCPBUGS-136604): [release-4.17] Sync OWNERS and OWNERS_ALIASES with master [#402](https://github.com/openshift/oauth-proxy/pull/402) * [OCPBUGS-112108](https://issues.redhat.com/browse/OCPBUGS-112108): bugfix: rewrite open redirect strings to '/' [#385](https://github.com/openshift/oauth-proxy/pull/385) * [Full changelog](https://github.com/openshift/oauth-proxy/compare/484a750a66e287c751116d4384b37281c9951a26...62ea5f58fb0a844b23571e2dd928a7a1fe9bcd14) ### [oauth-server](https://github.com/openshift/oauth-server/tree/0b4554d1a571ecf1659b821e337bd48bb048e297) * [OCPBUGS-103265](https://issues.redhat.com/browse/OCPBUGS-103265): Replace golang.org/x/net with openshift-sustaining/net v0.35.0-sec.4 for CVE-2026-33814 [#280](https://github.com/openshift/oauth-server/pull/280) * [OCPBUGS-87070](https://issues.redhat.com/browse/OCPBUGS-87070): bugfix: default to english when Accept-Language header contains more than 1000 underscores [#273](https://github.com/openshift/oauth-server/pull/273) * [Full changelog](https://github.com/openshift/oauth-server/compare/be35f2dd002c1b655397207edf65c112aa59388c...0b4554d1a571ecf1659b821e337bd48bb048e297) ### [oc-mirror](https://github.com/openshift/oc-mirror/tree/88cc22ff4099e072fb771cf897c602ca15620330) * [OCPBUGS-130910](https://issues.redhat.com/browse/OCPBUGS-130910): v1 accept catalog root entries and relative symlink targets [#1595](https://github.com/openshift/oc-mirror/pull/1595) * [Full changelog](https://github.com/openshift/oc-mirror/compare/58375b70881938be8a1e08750507e4a40943f6fd...88cc22ff4099e072fb771cf897c602ca15620330) ### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/9a4e2d4dac6c46c1046d6438e4048bf0df9b0bc9) * [OCPBUGS-103272](https://issues.redhat.com/browse/OCPBUGS-103272): Use patched x/net fork v0.35.0-sec.4 [#456](https://github.com/openshift/openshift-controller-manager/pull/456) * [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/967faa66125ae77148df87d8394d07112c4c0b8c...9a4e2d4dac6c46c1046d6438e4048bf0df9b0bc9) ### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/ebe70417102d920f9c6b461c6885ddccd6939956) * NO-ISSUE: synchronize OWNERS from main branch [#150](https://github.com/openshift/openshift-state-metrics/pull/150) * [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/adf649209467aef8d5da1d17851fa991285edbc2...ebe70417102d920f9c6b461c6885ddccd6939956) ### [openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/83846faf670b4d253debe6b6dbca996b605843b5) * [OCPBUGS-103277](https://issues.redhat.com/browse/OCPBUGS-103277), [OCPBUGS-103279](https://issues.redhat.com/browse/OCPBUGS-103279): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork- #421 [#421](https://github.com/openshift/cloud-provider-openstack/pull/421) * [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/3358ea3f5ed8835aa760ee5cf02b9980bcdeb528...83846faf670b4d253debe6b6dbca996b605843b5) ### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/3fa74cb46c31d769c98ddb83ceb1f54ab91e9ba1) * [OCPBUGS-103280](https://issues.redhat.com/browse/OCPBUGS-103280): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#196](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/196) * [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/00ba71fd3736b00d019383fce2ec74a9c5f9414c...3fa74cb46c31d769c98ddb83ceb1f54ab91e9ba1) ### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/4db03df9eab1a25ff35839bb5f55b7302cf57620) * NO-ISSUE: synchronize OWNERS from main branch [#416](https://github.com/openshift/prometheus-operator/pull/416) * [Full changelog](https://github.com/openshift/prometheus-operator/compare/2c3a4e92762622587fe91f9f8d6de4f564a968e4...4db03df9eab1a25ff35839bb5f55b7302cf57620) ### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/a44c23e9d59e133d5572ef885edcf26e070b612d) * [OCPBUGS-103292](https://issues.redhat.com/browse/OCPBUGS-103292): Use patched x/net fork v0.35.0-sec.4 [#195](https://github.com/openshift/node_exporter/pull/195) * [Full changelog](https://github.com/openshift/node_exporter/compare/f9af0fe40cfdfc92d06ec1204e6d647c00d337b8...a44c23e9d59e133d5572ef885edcf26e070b612d) ### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/b5f700bef062d92668927de6817aeea62646fff6) * [OCPBUGS-103135](https://issues.redhat.com/browse/OCPBUGS-103135): Fix CVE-2026-33814 by adding patch for golang.org/x/net package [#111](https://github.com/openshift/route-controller-manager/pull/111) * [Full changelog](https://github.com/openshift/route-controller-manager/compare/1e53205fa2e239df3c39a78bb50fddce77b4f3e1...b5f700bef062d92668927de6817aeea62646fff6) ### [tests](https://github.com/openshift/origin/tree/187fdd8e58ad9b710d5d856a96e1c8f7b38b8cc5) * [OCPBUGS-130857](https://issues.redhat.com/browse/OCPBUGS-130857): stage the creation of test pods to minimize etcd impact [#31741](https://github.com/openshift/origin/pull/31741) * [Full changelog](https://github.com/openshift/origin/compare/5abe37f6f7844abc4d088595c0631734fb46864c...187fdd8e58ad9b710d5d856a96e1c8f7b38b8cc5)