# 4.17.60

Created: 2026-11-09 17:03:39 +0000 UTC

Image Digest: `sha256:3ac6c84af6eabdcb162237f7b8ad058bfd12f4458fc654263f927c945af77ac5`


## Changes from 4.17.59

### Components

* Kubectl 1.30.5
* Kubernetes 1.30.14
* Kubernetes Tests 1.30.14
* Red Hat Enterprise Linux CoreOS upgraded from 417.94.202610010234-0 to 417.94.202611061051-0


### Rebuilt images without code change

* [agent-installer-api-server](https://github.com/openshift/assisted-service) git [11f678ed](https://github.com/openshift/assisted-service/commit/11f678ed6998c56deebdeeaec1ac755c655c694f) `sha256:04faea1e0ab50d9875de48ac8689384ac4fd968f9b20755c1fa8c273bc6b0654`
* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [e755d585](https://github.com/openshift/assisted-installer/commit/e755d585d2405fc4f7b4414ae8f263e4e3ef589d) `sha256:6126f02ad653f3f8cfba95f1b703d5aa3ced3d7699dd669b7d3b893196f3999d`
* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [aee1535a](https://github.com/openshift/assisted-installer-agent/commit/aee1535a922442712eafd1058d6464cda4d9335b) `sha256:7e1970e2236be0d898594e4dc1375be49c66721098e4a0a390a32e26ae0ba0cd`
* [agent-installer-orchestrator](https://github.com/openshift/assisted-installer) git [e755d585](https://github.com/openshift/assisted-installer/commit/e755d585d2405fc4f7b4414ae8f263e4e3ef589d) `sha256:7ee20848aaa1f4457fe13a7c8b506ce1c3dd81d2c2071392e210586b8a0a90ad`
* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [b3595281](https://github.com/openshift/agent-installer-utils/commit/b359528186b9df8ff5796f2bbfdab7f6bbaad491) `sha256:01de79cafe14ba3e592ffd932902fb3ca105f0fed5c3e68f0e75fd9ab85be8c0`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [ea660559](https://github.com/openshift/apiserver-network-proxy/commit/ea6605595cf1a0c94fb0fa82a2ceec15970da655) `sha256:3016d169c6f6820cf9fffa2231623475fffeb40156d6851c470f81330b0a2a9e`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [300430d9](https://github.com/openshift/cloud-provider-aws/commit/300430d912b9da0469c6aada6088c5df42819bb3) `sha256:5cb52341755e7bbb6189dd5da6dab8c5f3c4cd2ca57afc7dd4a7e0705dc033cb`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [9b1719e3](https://github.com/openshift/aws-encryption-provider/commit/9b1719e3c46f18fe763ee7cdf34012a969550b0b) `sha256:e3b05bdbb73652f29b709b34fd13537a97f98006d76696a567a0d5546f724571`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [2b53de06](https://github.com/openshift/machine-api-provider-aws/commit/2b53de06ff5d2bd8fbe3e1f53f5329dae48074b7) `sha256:1ad9ee3f5e5172559d646f057721351b68741e67c43f8a0d0dc111446d7e1173`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [80efc4ea](https://github.com/openshift/aws-pod-identity-webhook/commit/80efc4ea7cdec14eb5d552ace3fdac7049b4fb56) `sha256:1fe5bcc5fbe64ac4baf2f925be3e0b5d60587dd944a7b5b2c37812b06bd17d80`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [08c5419a](https://github.com/openshift/cluster-api-provider-azure/commit/08c5419ade9e988a7286b714f8b9fd3be05b0e0b) `sha256:e13a1a5a36bfb2c7e1b29cf3333432a39400da498146ce65bd1dd909b7469e36`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [2201d80e](https://github.com/openshift/azure-file-csi-driver/commit/2201d80e445acaf19142a843dbd395d8e274e726) `sha256:c599c0691933c79c9fe55a78adb2d9f0f7740d7bc3c5cce75290de6c4a76b8f8`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [cc562120](https://github.com/openshift/azure-kubernetes-kms/commit/cc562120ff540e237cc170b8a82a8cbbc3a32ad2) `sha256:0ed1a6a946f0f0669c90e9d7f0302edd56997c27621c7d8a56173fb0c74c0007`
* [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [ba741f7b](https://github.com/openshift/machine-api-provider-azure/commit/ba741f7bf4301218bf1d4cbd0be932c567a11e78) `sha256:3f5a918536be6f2f7d80a651ba4dc7adee3b2bb42a96204b40ec4c667b0c229a`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [41b34248](https://github.com/openshift/cluster-api-provider-metal3/commit/41b3424801977f102b00bb5c7e8fe15d65d3ade5) `sha256:edfb0706b3839276df72ab75c04d79d6b149fe823c6691bb0fb654074ea8415b`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [ae674d78](https://github.com/openshift/cluster-api-provider-baremetal/commit/ae674d7808379c454f972ff0cccac8bb9adcc98f) `sha256:6a0aac10c7331ac81c07ecc9ca9629933b0b5dfe42e77a715461570cef3b1446`
* [baremetal-operator](https://github.com/openshift/baremetal-operator) git [087a24f2](https://github.com/openshift/baremetal-operator/commit/087a24f21f11bc85a6d922c156bda6270e7eadfa) `sha256:d12e3d53f4eb18cdc928281e3b1449b77ec9ac65597623f88b4a711298a26164`
* [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator) git [6a11cde3](https://github.com/openshift/cloud-credential-operator/commit/6a11cde3b4cf42a9382c01f537f012f6df487899) `sha256:a8f97b90e0fe29e425f1edab0efedc2bdb1ff1294ad1f71cb82cd46d12a953ce`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [241af368](https://github.com/openshift/cloud-network-config-controller/commit/241af368428cb2deedeaf8e21d237aa01216292a) `sha256:8b0ded93931a3951f24d3d91ba975a1b3dd87d8dec1739e72efc8087458e96da`
* [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [efa6fd9b](https://github.com/openshift/kubernetes-autoscaler/commit/efa6fd9b220e841591d8be2208cdec4ffc826429) `sha256:87ecb142d51a81324974862893ecf9b7481e4cbbd0e4a1b2ae9e4313876e857b`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [bb407dd1](https://github.com/openshift/cluster-autoscaler-operator/commit/bb407dd17744ed46ac9eedde23e2a8cd7371bfc9) `sha256:6997c6deffaf858743de0f5a95caa81daccb1d2a442c8b869d21daeaac0fffa8`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [95dd9129](https://github.com/openshift/cluster-bootstrap/commit/95dd9129fa44410a0103fe087d13e27dddecab19) `sha256:3649f3459cfaf452ef0bab8103bb63ad903101dbde1dc7275674bec0faa700b3`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [3b417931](https://github.com/openshift/cluster-api/commit/3b417931b1e94534cbde2c435c262befad8a57f1) `sha256:a58b7a7d78828ded3e108426e41e4a561d5093eef07951bbbc3f6ef59b7608c9`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [17abd1d9](https://github.com/openshift/cluster-capi-operator/commit/17abd1d9c801288347f4134965b268389a90c342) `sha256:52fe4b2d975853574617924661605aede58860167366d4dcdc0cd0e917a809c4`
* [cluster-config-api](https://github.com/openshift/api) git [92c55bf0](https://github.com/openshift/api/commit/92c55bf0f372c222dc02f17685c383d18e2c2e8b) `sha256:43ec4c7a4a15b63f87570baabe5d7a10b9f1187f5f65a75062c401da82ecfbae`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [cfd318de](https://github.com/openshift/cluster-config-operator/commit/cfd318de9718f1c73b40d99900125bdca41482ef) `sha256:0c46d7d0b8ebbf0e2a15eeffaf2bcd704064e0897ffb767e5418a89a234fc976`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [f7e01c2f](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/f7e01c2f91628b25d1578c0a752f9b55c4233625) `sha256:2ac10f69f41b3faf84cc6b9c1700da8abe25aa8fb4576fb368cdd494a216c59d`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [a07cc2b5](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/a07cc2b522f7f78ee985a33118b5f93c9c2bde8f) `sha256:1c64057320d02522d8db883d59165688fe16d5b0d13497f93f04a10e2aaf546e`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [1a0cea11](https://github.com/openshift/cluster-image-registry-operator/commit/1a0cea11ec4ba91416b698ab2e87d03a09a0e367) `sha256:84f0c10416e125ac44cc7f7bd9f867fc0c614ac4cf632c40c5ef1450c643bcc8`
* [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator) git [17253375](https://github.com/openshift/cluster-ingress-operator/commit/1725337535e32158f37471a2286c9142f100ff41) `sha256:7ff5edff2a827b0010461c2b6f98cce4c208c34467a67e9ea0c78133a4aca885`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [c1947350](https://github.com/openshift/cluster-api-operator/commit/c1947350f996bcc50c549c9e83382179d6455247) `sha256:2bcd5abd0b36ef32c5f29faab1cfc651b0df95829a944ecf8eae0cc5a8a66239`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [0097f210](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/0097f21060a7e10679567eb57b87feb4f55230e3) `sha256:56c4e6a4bb1d4537dcc8d7a0928263e60319ce143bcb5422851584adfc1fb2d0`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [acc2380e](https://github.com/openshift/cluster-machine-approver/commit/acc2380eb52e4f83ba07f9d04b44a36cbc47a48c) `sha256:f2b2a77d2e504904ad6c28406988b458164f981f02ba1d4b37d141974ae89b16`
* [cluster-network-operator](https://github.com/openshift/cluster-network-operator) git [dc98c59e](https://github.com/openshift/cluster-network-operator/commit/dc98c59e223f325acb113a697771e737266876a5) `sha256:348e7ca66f1f368bf160a004b06ca0b2956cffc87b620e216cc439a240407021`
* [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [fe37d7cf](https://github.com/openshift/cluster-node-tuning-operator/commit/fe37d7cf96ef3280f1bd41c55372b520fdf6c821) `sha256:c72be7ea2b02413f7aa531ad17333fd59261bbf5149b892e512e43cfa86ee412`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [8c61cd4b](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/8c61cd4bcf3719137950e3ac287346013b471a08) `sha256:de141178df2d1c529fdabb194f0b020a3bf3f3155ec8f5e22268e2ebce66ea6b`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [b05a249d](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/b05a249d6919978217aefa7060951af078eac931) `sha256:03cfeaee32937b8f1369d508d44ac45610b470655c5ca52b9ee2b1567284c208`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [7209e90d](https://github.com/openshift/cluster-policy-controller/commit/7209e90d4205dc16bf0c83fb556c3d955d942d6b) `sha256:261ef33d7d479618bb4f75fe428abec3fe6808712a38d232ef4d0e81841e152b`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [63022033](https://github.com/openshift/cluster-update-keys/commit/6302203333a9a7f22dc3e4ecd280028e8a8bfb86) `sha256:54e02a366b7bbc254a0716f4328c2b8df023e956facc8a6348929f1583d2f06e`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [62d56d6a](https://github.com/openshift/configmap-reload/commit/62d56d6a8b7ce26889cce1ba55ab4c958398967c) `sha256:ee96720a03966e278f6e7b33613a2d0a273b804a6b61df03fba121fd05bcaf2a`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [621348df](https://github.com/openshift/containernetworking-plugins/commit/621348df96a03f642716845a15dc4043cc5f85f1) `sha256:8a858830f7feefeb5c550265912d91adfc6a3dbca0d056cadfc9c88a4c08658b`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [621348df](https://github.com/openshift/containernetworking-plugins/commit/621348df96a03f642716845a15dc4043cc5f85f1) `sha256:3f03b2dde814233a16c775f4db4afecfed4d40447d631a2a1335b84491452866`
* [csi-driver-shared-resource](https://github.com/openshift/csi-driver-shared-resource) git [66aee5b0](https://github.com/openshift/csi-driver-shared-resource/commit/66aee5b045bf2b32f6ccbf7a62c1151b8889811a) `sha256:400d6ee8757d491f734de8343399310bd0fbc6b580db8533c594d60f35f45790`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [95be6bdf](https://github.com/openshift/csi-driver-shared-resource-operator/commit/95be6bdf8da55c75b9d5027f0e32a0cd2f070d8a) `sha256:6d0d9d8aca7da09c272dbef3abb6158bbe7fce2716950dd605ec7274ba61bbd6`
* [csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource) git [66aee5b0](https://github.com/openshift/csi-driver-shared-resource/commit/66aee5b045bf2b32f6ccbf7a62c1151b8889811a) `sha256:626d77de789df41dd1407bb3185bbda4a9d51c2c87aafca8adcf1cc21aa8155f`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [3dd2253e](https://github.com/openshift/csi-node-driver-registrar/commit/3dd2253ed70cb565a63a208fa667d55f3222fb19) `sha256:69fb67b5e2e637ac7ea9fad4ba471148a80b980a8e3e9f1b9cd326473ce7efd2`
* [docker-builder](https://github.com/openshift/builder) git [865c7982](https://github.com/openshift/builder/commit/865c79826e67f14dbce7cb0a21313bbb82b1fad0) `sha256:4a1da59a9e2e0ee6c2c72ddac6f205b8c1d286c6816fb58383cbf48f56972e7b`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [859518f6](https://github.com/openshift/driver-toolkit/commit/859518f6952407a56ddf7d0562c98fe27e9e0efe) `sha256:dd2a4da2e1ad634afc6bdfa296dd32e53f85d735aad84038b812432d9bf8291d`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [3193a756](https://github.com/openshift/egress-router-cni/commit/3193a756d60e14f7139992e2e42b7036955652e7) `sha256:aa0167377862422aa300b5a70bd83401100763de90ceaead08f0a8ac2e97a077`
* [etcd](https://github.com/openshift/etcd) git [0d9e0a90](https://github.com/openshift/etcd/commit/0d9e0a907c4aea7c4b2bff627478785fb99511f5) `sha256:ec9e673ad282c265995961bce5b5b3dae264d24bf6eaaa43f21ea2f163e3692d`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [8ce997d7](https://github.com/openshift/cloud-provider-gcp/commit/8ce997d7b2fc615ce23788512246fb9955c7c711) `sha256:cae2c2878e416ccd7ebe7f476cb9281217a9e6e23eac96fbc1b55afb75b01b9c`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [f2203376](https://github.com/openshift/cluster-api-provider-gcp/commit/f2203376a8a2d8eecec7b85dc28b756b49d8c469) `sha256:a052c47b1c0650fcaaa8d117be3afaf9a81356c17e3e59cb8d76d6dbdb59bb23`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [96fa4696](https://github.com/openshift/machine-api-provider-gcp/commit/96fa4696da4229c4ac5bccd392750725ca5c4dc8) `sha256:3ae1bf02b0a08e82f8816ee279df4b7da0aec6edd2ada41014ed2f8ee0e9a4d5`
* [ironic](https://github.com/openshift/ironic-image) git [005cfdf5](https://github.com/openshift/ironic-image/commit/005cfdf54b53f458283e3eae85f0c304cb8635fa) `sha256:00e79d07d6e2dab007451f6ef90e32163fd9e4d7005b2f06417ba9ae4cf44410`
* [ironic-agent](https://github.com/openshift/ironic-agent-image) git [3e4fd09f](https://github.com/openshift/ironic-agent-image/commit/3e4fd09f7e36a8eec82627ea1e0ebafa9649d5ea) `sha256:3e479350a68a5272352c6842a004c82995fa3454c0c9f414992c8e5c29b36398`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [9e6596c3](https://github.com/openshift/ironic-rhcos-downloader/commit/9e6596c3f9d239d91c358299a19871905fa914fe) `sha256:7ec93e87ea4450f2cd6abd824a2f47f8ea388894f5b318acb515d240b25ce3ff`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [bc5b8a2c](https://github.com/openshift/ironic-static-ip-manager/commit/bc5b8a2c3209873231a7eabd83ace578c8e182f7) `sha256:51467837358b9b86c64d96dfd07bce46ad9e00842763c200d09120b2fd8f58c0`
* [keepalived-ipfailover](https://github.com/openshift/images) git [e3879e9e](https://github.com/openshift/images/commit/e3879e9e36d64c6be08b621a50ad5d3ee343dc3e) `sha256:811dcb8bf6849bb054899d6b2086ed38e8de96bcc0c5e4d20caf6541c6b2f78a`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [df9ac952](https://github.com/openshift/kubernetes-metrics-server/commit/df9ac95276c08cff0b295c3eeb52c835abf95900) `sha256:9e7db61ee933fd8fca508d000ab333af84c931bd878472063b48e79aee94edba`
* [kube-proxy](https://github.com/openshift/sdn) git [fd50551b](https://github.com/openshift/sdn/commit/fd50551b5c640fb4bda787faaab32f8b641839e9) `sha256:352bd41bd9e64e72d7aa9473f70058937dc3345c6878c1fdbc906b27b773e655`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [f708b5ec](https://github.com/openshift/kube-rbac-proxy/commit/f708b5ecf87b948864e4f68d0724cda5de13a9d9) `sha256:c32163165eb9f2dfd5fe6dfba617d8ffe1d98e43cc4830e92085606935018a4e`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [69b07ae0](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/69b07ae04918806079f1a4fbc2f110453bc8db19) `sha256:d31ded4a6f36c9d79bfc2c157f8c5b56ed93a89dc85b0d8f9cd3cfaf2296b629`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [d7d7a591](https://github.com/openshift/cloud-provider-kubevirt/commit/d7d7a59127ef9020cbf6339a313e7eb7346c95f6) `sha256:f8a54adc298668a1e3ac6cdb6066bec123417924710e1023b9948355a622ae3f`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [b4ad2d68](https://github.com/openshift/kubevirt-csi-driver/commit/b4ad2d68d25572212ca92d42bb209d103d3589d6) `sha256:c47b113cf8e48126f8e230de5a69573a2c6738d1259054967e9f43a3f1650063`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [931afe11](https://github.com/openshift/cluster-api-provider-libvirt/commit/931afe11b155006f805d0b029e46416e632d1a14) `sha256:1c5f9ca55c7fa254092d2c4291aa3504578561147ea749af2a8056b008388369`
* [machine-api-operator](https://github.com/openshift/machine-api-operator) git [d3564c17](https://github.com/openshift/machine-api-operator/commit/d3564c17a7e52bdf5f92d78948ef814973ee126d) `sha256:0126da5132d1abd9646f7471a941ef1ad203ed1351fc7ed151e014f8ed995d97`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [cc250001](https://github.com/openshift/machine-os-images/commit/cc250001ddce8bd6342942f045ff7f9930c74040) `sha256:ebc5e161f921f45017a3d589ff32916ecbbf6649ccbdb1565c9ba7d6acb82df6`
* [metallb-frr](https://github.com/openshift/frr) git [b575d5df](https://github.com/openshift/frr/commit/b575d5dfac5319d7d296922de69c73baea6d142d) `sha256:3b226aa6179ab42f949458bc00d8f06036b8d00e253c04b0c7b498fcb0bcd8a3`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [4d0b1703](https://github.com/openshift/multus-networkpolicy/commit/4d0b170379c4e158d976b4dd7bccbed5835fdede) `sha256:7448061a75a69cae1b200a8a57f50880b3850510ad19c717ac9ab11fc145dd5a`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:657accbd6b52af4faa8f7e16cfd8be3aa90c53b36f3efcd47f13106c20c6422a`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [40cfb3dc](https://github.com/openshift/whereabouts-cni/commit/40cfb3dca70a4d37dff426c0ec1c77efcb399e1b) `sha256:66d9cce8c8fed03d0ec2b35465f14dc0fa7946b74e68b15932c9af4304983921`
* [must-gather](https://github.com/openshift/must-gather) git [ea72c2eb](https://github.com/openshift/must-gather/commit/ea72c2eb404f9fe9282be70d1af7689f8f139fee) `sha256:c1328a5486ea9f25c49f04b785366a059b2b239c03588755621af66faadded79`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [8f7cc925](https://github.com/openshift/bond-cni/commit/8f7cc9253b83072c273c28cff64b00eb6ef3b38a) `sha256:41b7e2ebde367eec0b99d15af4196af248fee0318aaa9834d2185bfb54c92e24`
* [network-tools](https://github.com/openshift/network-tools) git [e59e7b25](https://github.com/openshift/network-tools/commit/e59e7b258e2baa5815bc13763804694615896ab0) `sha256:75d3fed21763672a1433281787fce114f7708b637fd78b1affc8b57f873e9152`
* [olm-catalogd](https://github.com/openshift/operator-framework-catalogd) git [c740e056](https://github.com/openshift/operator-framework-catalogd/commit/c740e05677bbeb20cbb601e8b261c07a81cf0a8a) `sha256:b32afe48dfcfa6abb296247136f7bd59cad13c5abdf050f62bb34f0957cc99fc`
* [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller) git [fa8d10c5](https://github.com/openshift/operator-framework-operator-controller/commit/fa8d10c53339688c290fe3e8867df7124de04c42) `sha256:a2800ac945be21dd1ed53dd888b683acbce31b5ea2227cf16ad0705f46dea93e`
* [openshift-apiserver](https://github.com/openshift/openshift-apiserver) git [79a42c56](https://github.com/openshift/openshift-apiserver/commit/79a42c566a8c7857d23623d296c80a70fc2b8148) `sha256:6f028da44bbb16f33a35c927a411e4f4fe116e5605cc193422bd87c8721228ef`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [5593c5f7](https://github.com/openshift/cluster-api-provider-openstack/commit/5593c5f7f70758cec5e9feac54eb248fbd6d75d8) `sha256:6c43c400f47eb605c4ed266137717f8814c01c18d26c879730d5d2bf0725b8c8`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [3b926d20](https://github.com/openshift/machine-api-provider-openstack/commit/3b926d2094bab3c6759252b7681cc36473b29021) `sha256:dd8fba291489921a8cce36527bcf79b93775b9457cce53bc7d5a6ef86896895c`
* [operator-framework-tools](https://github.com/openshift/operator-framework-olm) git [c9ad6fd8](https://github.com/openshift/operator-framework-olm/commit/c9ad6fd83727301129cfd1a2b165bf29949529a8) `sha256:b693e53e13f67d858ed2533aa066927cfcdc119095c2118267aeb46456cdf032`
* [operator-lifecycle-manager](https://github.com/openshift/operator-framework-olm) git [c9ad6fd8](https://github.com/openshift/operator-framework-olm/commit/c9ad6fd83727301129cfd1a2b165bf29949529a8) `sha256:53b4d15408815d6199665c6e3916f5f79b951cb74187546debb4010c9faf3d82`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [5cf36fde](https://github.com/operator-framework/operator-marketplace/commit/5cf36fde25cf22b7f58b0a3242f82cadd18acc6f) `sha256:ff41df8efe51daa1488d414b5dd30eafd5c6cd391bd996068285e1c7ee310e41`
* [operator-registry](https://github.com/openshift/operator-framework-olm) git [c9ad6fd8](https://github.com/openshift/operator-framework-olm/commit/c9ad6fd83727301129cfd1a2b165bf29949529a8) `sha256:59369ae4c7a0cd0e477322bbb78bb681be5c1a6b66433a27ba006a9d5f032aab`
* [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes) git [12f4e7e1](https://github.com/openshift/ovn-kubernetes/commit/12f4e7e12f583767c8e9549408e36bbf4000b1b4) `sha256:c9314b2d1ec3f51af2d42b69e6a245f6cbacec13318e33517a116ce0d8767247`
* [ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes) git [12f4e7e1](https://github.com/openshift/ovn-kubernetes/commit/12f4e7e12f583767c8e9549408e36bbf4000b1b4) `sha256:90026730bcba97305fbc38f175308b08cf1e230584aa45bf751f4f37f4abdb17`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [06ec4e3a](https://github.com/openshift/prom-label-proxy/commit/06ec4e3af0f27ae6e8ece0d31ff1e802b7d08a50) `sha256:0156dc865f6b69ec3566f9118f6e02bc0a2bbce372fe53e0f332d7fa421e1601`
* [prometheus](https://github.com/openshift/prometheus) git [8b2b7087](https://github.com/openshift/prometheus/commit/8b2b70879280211b7ebd0b44ea02bddc2cba825e) `sha256:7a696a10e3c1c2f1569628138f9bf8540566fa27a56303eb63687592ac30966a`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [bed9c9bd](https://github.com/openshift/prometheus-alertmanager/commit/bed9c9bd31940eeed0e082906a581bac40a3f7aa) `sha256:a32d76efbf51a5facc81da43cc42ea185d0e180f3d8bbad154c11fcf07279016`
* rhel-coreos `sha256:fe8d6f5a4338626dad1e77e11cb5231350a9956e369222c15da8dcb5b4a91295`
* rhel-coreos-extensions `sha256:655e535014c565cba7eb7b302ebe641b6cdbae6ed9514eeaf03baeb9e6680c55`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [2cb0a44d](https://github.com/openshift/service-ca-operator/commit/2cb0a44d1245cf2f5d7bdf2072484cdfdfa50eaa) `sha256:55647d5c61016bbad6926658ffe4823276b605b462803263362f297aed25cd7a`
* [telemeter](https://github.com/openshift/telemeter) git [15895a06](https://github.com/openshift/telemeter/commit/15895a068e7e89b14292fde4601208c3eeb3a715) `sha256:8408ad500aafa085ce141106c9bef2617ecdf503a411d9eddf08647a1f3f0eb0`
* [thanos](https://github.com/openshift/thanos) git [51fe5fa4](https://github.com/openshift/thanos/commit/51fe5fa45f6df55266ca874287b47b2825f01b32) `sha256:538ecea756d2549017ccc892cd3708a855e2d09222f86ca8542edc2cfda5e8cc`


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/bce95f410e44e504e8661d1dfb61832d223a0e4a)

* [OCPBUGS-103142](https://issues.redhat.com/browse/OCPBUGS-103142): replace golang.org/x/net with openshift-sustaining/net v0.35.0-sec.4 for CVE-2026-33814 [#653](https://github.com/openshift/cluster-api-provider-aws/pull/653)
* [OCPBUGS-130953](https://issues.redhat.com/browse/OCPBUGS-130953): Fix OIDC test certificate thumbprint [#663](https://github.com/openshift/cluster-api-provider-aws/pull/663)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/8d4bbf28adff59be819578f702cef29236bfbfb5...bce95f410e44e504e8661d1dfb61832d223a0e4a)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/4ac925d1ee33e5672030ff107c2200535d4fb9b2)

* [OCPBUGS-90292](https://issues.redhat.com/browse/OCPBUGS-90292): patching golang.org/x/crypto with sustaining/crypto@v0.33.0-sec.6 [#353](https://github.com/openshift/aws-ebs-csi-driver/pull/353)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/51a0563331da53390b3b2a493fa5251e716de890...4ac925d1ee33e5672030ff107c2200535d4fb9b2)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator](https://github.com/openshift/csi-operator/tree/0dd22fb996f873c9b5809d94698fa7dd6c0be4a1)

* [OCPBUGS-103305](https://issues.redhat.com/browse/OCPBUGS-103305): Use patched x/net fork v0.35.0-sec.4 [#631](https://github.com/openshift/csi-operator/pull/631)
* [Full changelog](https://github.com/openshift/csi-operator/compare/e67405981e4ceef37449f04c7b6a5b96e2735824...0dd22fb996f873c9b5809d94698fa7dd6c0be4a1)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/3b432f2ccad4c772bcfcf50df860a540836d52a3)

* [OCPBUGS-103148](https://issues.redhat.com/browse/OCPBUGS-103148), [OCPBUGS-103330](https://issues.redhat.com/browse/OCPBUGS-103330): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 [#209](https://github.com/openshift/cloud-provider-azure/pull/209)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/5bcfbfdf5d4bccaa5954f852fe1540c3f9eb0f86...3b432f2ccad4c772bcfcf50df860a540836d52a3)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/dbdd192b5b8d2dc28bc7587a4e8943f2efe557b9)

* [OCPBUGS-103158](https://issues.redhat.com/browse/OCPBUGS-103158): Bump golang.org/x/net to v0.35.0-sec.4 [#173](https://github.com/openshift/azure-disk-csi-driver/pull/173)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/e620992ebf044bbc4f0f4d4cefcd7ef8aec0a86d...dbdd192b5b8d2dc28bc7587a4e8943f2efe557b9)


### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/132cf08cf64b691fb586698e7610cf20287bc9d6)

* [OCPBUGS-103156](https://issues.redhat.com/browse/OCPBUGS-103156): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 [#64](https://github.com/openshift/azure-workload-identity/pull/64)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/6707f899c269e98a102ac72900bb96fa826ba652...132cf08cf64b691fb586698e7610cf20287bc9d6)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/eeb42e14fa22ab7453fb9ce680122a6cbd31ad8e)

* [OCPBUGS-103154](https://issues.redhat.com/browse/OCPBUGS-103154): Bump golang.org/x/net to v0.35.0-sec.4 [#10972](https://github.com/openshift/installer/pull/10972)
* [Full changelog](https://github.com/openshift/installer/compare/de6c46c003a6c5fdffc950cb51f561087ac13964...eeb42e14fa22ab7453fb9ce680122a6cbd31ad8e)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/e03f273e515f919d14a718c1cb5e3b1dce236848)

* [OCPBUGS-103159](https://issues.redhat.com/browse/OCPBUGS-103159): Fix CVE-2026-33814 by adding patch for golang.org/x/net package [#409](https://github.com/openshift/baremetal-runtimecfg/pull/409)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/745189508eec80ee07a921d1b2c227812db37237...e03f273e515f919d14a718c1cb5e3b1dce236848)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/28d0040e8fb48bd4b2ca492e01ebd0f168487adb)

* [OCPBUGS-102061](https://issues.redhat.com/browse/OCPBUGS-102061), [OCPBUGS-103161](https://issues.redhat.com/browse/OCPBUGS-103161): Use patched x/net fork v0.35.0-sec.4 [#2417](https://github.com/openshift/oc/pull/2417)
* [Full changelog](https://github.com/openshift/oc/compare/7189593997f243911aeeb6e473e76d5ad0fd1e50...28d0040e8fb48bd4b2ca492e01ebd0f168487adb)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/251bf348b980326ae2edaf16f27e70d73cecb030)

* [OCPBUGS-103168](https://issues.redhat.com/browse/OCPBUGS-103168): replace golang.org/x/net with openshift-sustaining/net@v0.35.0-sec.4 [#989](https://github.com/openshift/cluster-authentication-operator/pull/989)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/9f93cafccca989417378a804f134f68fb4fea40d...251bf348b980326ae2edaf16f27e70d73cecb030)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/519676b249b496a573f6e28f34890420529c61e0)

* [OCPBUGS-103170](https://issues.redhat.com/browse/OCPBUGS-103170): Use patched x/net fork v0.35.0-sec.4 [#672](https://github.com/openshift/cluster-baremetal-operator/pull/672)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/16ed4727250a72342b3da7b280d3456f7055a6c9...519676b249b496a573f6e28f34890420529c61e0)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/fe105e6bc242b77274a9364de13a605402de5b0b)

* [OCPBUGS-103176](https://issues.redhat.com/browse/OCPBUGS-103176): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 [#514](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/514)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/6d4c0096477d7e15f31ef0492ad9382ea1be1ef1...fe105e6bc242b77274a9364de13a605402de5b0b)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/5b929d9b9f3c6c034cb90ddd405d8725fbac56d4)

* [OCPBUGS-103178](https://issues.redhat.com/browse/OCPBUGS-103178): Use patched x/net fork v0.35.0-sec.4 [#494](https://github.com/openshift/cluster-dns-operator/pull/494)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/81507f04686df3e16793b270084ead0a2a67fb38...5b929d9b9f3c6c034cb90ddd405d8725fbac56d4)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/1dc16edfad74463e003c473613672236ba0cf6f1)

* [OCPBUGS-103181](https://issues.redhat.com/browse/OCPBUGS-103181): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 [#1696](https://github.com/openshift/cluster-etcd-operator/pull/1696)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/bfffdcbac76071143cf554785ca2bde0ac69ac7e...1dc16edfad74463e003c473613672236ba0cf6f1)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/a7c640c2be82d1918dcf3ac91b0e6362e8e8864a)

* [OCPBUGS-103173](https://issues.redhat.com/browse/OCPBUGS-103173): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 [#2300](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2300)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/84e19b2149ab818a455b00717d790856c13ea387...a7c640c2be82d1918dcf3ac91b0e6362e8e8864a)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/91fe72a64d195b68b2c076f62e0513946a09e09b)

* [OCPBUGS-103172](https://issues.redhat.com/browse/OCPBUGS-103172): Fix CVE-2026-33814 by adding patch for golang.org/x/net package [#962](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/962)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/12f60539287eda85e99efbdcf85a1ecf59e021fa...91fe72a64d195b68b2c076f62e0513946a09e09b)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/64f0ede69f6e5afcfa47c96ce5b876c0ffbbb515)

* [OCPBUGS-103171](https://issues.redhat.com/browse/OCPBUGS-103171): [release-4.17] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#670](https://github.com/openshift/cluster-kube-scheduler-operator/pull/670)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/013ff606240919fcb46eb9a8b707598a9b049ee5...64f0ede69f6e5afcfa47c96ce5b876c0ffbbb515)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/1a4ef3b5a17cf1b018acbdf35c2055898d2d52fc)

* [OCPBUGS-129160](https://issues.redhat.com/browse/OCPBUGS-129160): don't delete admin-owned Alertmanager secrets on destroy [#3143](https://github.com/openshift/cluster-monitoring-operator/pull/3143)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/1179cda06fce0890dbd4529aadcbad77a82dd2ac...1a4ef3b5a17cf1b018acbdf35c2055898d2d52fc)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/9bdb00434f4b2977ad7d7868f3656c43abadece2)

* [OCPBUGS-103193](https://issues.redhat.com/browse/OCPBUGS-103193): bump golang.org/x/net to v0.35.0-sec.3 to fix CVE-2026-33814 [#246](https://github.com/openshift/cluster-olm-operator/pull/246)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/f289edc3bb99197984aa392b13dfef07b075bcce...9bdb00434f4b2977ad7d7868f3656c43abadece2)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/6fa6dfc70a6301451094b0e2f8f6be94d22816a2)

* [OCPBUGS-129480](https://issues.redhat.com/browse/OCPBUGS-129480): Restrict samples operator access to the global pull-secret [#733](https://github.com/openshift/cluster-samples-operator/pull/733)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/1d2ba42214637c7ed7e5e3e0aec257e9b949d061...6fa6dfc70a6301451094b0e2f8f6be94d22816a2)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/a3da8d647911554718b28762e5d2a9829acc4602)

* [OCPBUGS-103187](https://issues.redhat.com/browse/OCPBUGS-103187): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#734](https://github.com/openshift/cluster-storage-operator/pull/734)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/a039f8a2e73771f76e799ed497535705037f3bf5...a3da8d647911554718b28762e5d2a9829acc4602)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/367d573e56de4f3dbe88a97ec515bd5acecbe141)

* [OCPBUGS-103186](https://issues.redhat.com/browse/OCPBUGS-103186): Bump golang.org/x/net to v0.35.0-sec.3 [#1460](https://github.com/openshift/cluster-version-operator/pull/1460)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/b855c68099755979a053f60a49300d3502f44325...367d573e56de4f3dbe88a97ec515bd5acecbe141)


### [console](https://github.com/openshift/console/tree/c61250ec246c8990b9f8474fbf4ba30259143323)

* [OCPBUGS-127155](https://issues.redhat.com/browse/OCPBUGS-127155): [release-4.17] inkify-it: Denial of Service via crafted mailto: links [#17382](https://github.com/openshift/console/pull/17382)
* [Full changelog](https://github.com/openshift/console/compare/b61b5d90e1cd21fe13b05dc2d164c7d84627e358...c61250ec246c8990b9f8474fbf4ba30259143323)


### [console-operator](https://github.com/openshift/console-operator/tree/22228bba3d9289e11282f907e2278724df09b315)

* [OCPBUGS-103205](https://issues.redhat.com/browse/OCPBUGS-103205): Use github.com/openshift-sustaining/net patch to fix CVE-2026-33814 [#1224](https://github.com/openshift/console-operator/pull/1224)
* [Full changelog](https://github.com/openshift/console-operator/compare/e8032813321ac4c2daec869a7703c31cd9b2acf4...22228bba3d9289e11282f907e2278724df09b315)


### [coredns](https://github.com/openshift/coredns/tree/532fc381de0b06d1e11715ed16ffc4f4e263b078)

* [OCPBUGS-103200](https://issues.redhat.com/browse/OCPBUGS-103200): Fix CVE-2026-33814 by adding patch for golang.org/x/net package [#206](https://github.com/openshift/coredns/pull/206)
* [Full changelog](https://github.com/openshift/coredns/compare/fe89d27d6f2b27baf686c89c4c1c1ceb88fe3567...532fc381de0b06d1e11715ed16ffc4f4e263b078)


### [csi-driver-manila, csi-driver-manila-operator, csi-driver-nfs, hyperkube, ibm-cloud-controller-manager, ibm-vpc-block-csi-driver, ibm-vpc-block-csi-driver-operator, ibmcloud-cluster-api-controllers, ibmcloud-machine-controllers, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, powervs-block-csi-driver, powervs-block-csi-driver-operator, powervs-cloud-controller-manager, powervs-machine-controllers, vsphere-cloud-controller-manager, vsphere-cluster-api-controllers, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector](https://github.com/openshift/kubernetes/tree/cbb83c80af4c43d17eab5d8828706b67e4337294)

* [OCPBUGS-136162](https://issues.redhat.com/browse/OCPBUGS-136162): Fix kubeadm preflight host URL construction [#2842](https://github.com/openshift/kubernetes/pull/2842)
* [Full changelog](https://github.com/openshift/kubernetes/compare/4e295fa517e17429af4d8004e7a8028fe719e60f...cbb83c80af4c43d17eab5d8828706b67e4337294)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/26244f2233c9627bef9dd8c3ba87e9301bf02e4a)

* [OCPBUGS-103210](https://issues.redhat.com/browse/OCPBUGS-103210): Bump golang.org/x/net to v0.35.0-sec.4 [#116](https://github.com/openshift/csi-external-attacher/pull/116)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/8d93b8a3560410cb2ff3dd6d285fea822720edd4...26244f2233c9627bef9dd8c3ba87e9301bf02e4a)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/4aef9e77fe00ca2665bd2ed4995109618f367369)

* [OCPBUGS-92864](https://issues.redhat.com/browse/OCPBUGS-92864): Replace golang.org/x/crypto with github.com/openshift-sustaining/crypto@v0.33.0-sec.5 to address CVE-2026-46597 [#162](https://github.com/openshift/csi-external-provisioner/pull/162)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/88d1fdf1716d5d69bc88fdab27677185b440e155...4aef9e77fe00ca2665bd2ed4995109618f367369)


### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/f1c3090c58ddc2c50a02c8427fb79b5c788b0ce9)

* [OCPBUGS-80084](https://issues.redhat.com/browse/OCPBUGS-80084): Patching openshift-sustaining/grpc-go v1.71.3-sec.1 [#204](https://github.com/openshift/csi-external-resizer/pull/204)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/96012dea4582fd44513410d90b6db640fce5613a...f1c3090c58ddc2c50a02c8427fb79b5c788b0ce9)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/cc5ce2e5028f15429772766f6a5f4a2f93d26505)

* [OCPBUGS-103212](https://issues.redhat.com/browse/OCPBUGS-103212), [OCPBUGS-103215](https://issues.redhat.com/browse/OCPBUGS-103215): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 [#229](https://github.com/openshift/csi-external-snapshotter/pull/229)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/59c396dfa5bd6f1cb42c42cbc3ad66dd5898348c...cc5ce2e5028f15429772766f6a5f4a2f93d26505)


### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/6e58d04f7b94e3bf3e070a665ffc1f6caf4a6c2b)

* [OCPBUGS-103203](https://issues.redhat.com/browse/OCPBUGS-103203): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.4 to address CVE-2026-33814 [#110](https://github.com/openshift/csi-livenessprobe/pull/110)
* [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/e7d841dc545b9fb3a8a3303b8cac62d35620905b...6e58d04f7b94e3bf3e070a665ffc1f6caf4a6c2b)


### [docker-registry](https://github.com/openshift/image-registry/tree/13618f00551d5dcf9fba8e902682171f6fa67cc1)

* [OCPBUGS-103223](https://issues.redhat.com/browse/OCPBUGS-103223): [release-4.17] Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#481](https://github.com/openshift/image-registry/pull/481)
* [Full changelog](https://github.com/openshift/image-registry/compare/d0595c9e720caa5489628e49ed45a8eb85fa7b69...13618f00551d5dcf9fba8e902682171f6fa67cc1)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/395139386026bba828ca05c8bfed666dad91fac5)

* [OCPBUGS-103235](https://issues.redhat.com/browse/OCPBUGS-103235): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#144](https://github.com/openshift/gcp-pd-csi-driver/pull/144)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/907b8422fcdcb0f895c5a92bb796a93d6aed23b1...395139386026bba828ca05c8bfed666dad91fac5)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/3dc9a86d0324e5ba5c6c28306cfc30405bd8f067)

* [OCPBUGS-103225](https://issues.redhat.com/browse/OCPBUGS-103225): Use patched x/net fork v0.35.0-sec.4 [#217](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/217)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/5f27231835491f40506353f04b5a895773a1b53a...3dc9a86d0324e5ba5c6c28306cfc30405bd8f067)


### [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook/tree/653b08cc6e4833118d13fc1a1862174030721451)

* [OCPBUGS-103230](https://issues.redhat.com/browse/OCPBUGS-103230): Replace golang.org/x/net with github.com/openshift-sustaining/net v0.35.0-sec.4 [#27](https://github.com/openshift/gcp-workload-identity-federation-webhook/pull/27)
* [Full changelog](https://github.com/openshift/gcp-workload-identity-federation-webhook/compare/08579e9f60ab7f5f6c57f7e507c66a7ff0cc6d62...653b08cc6e4833118d13fc1a1862174030721451)


### [haproxy-router](https://github.com/openshift/router/tree/2f5cbd9eee4856abceeace9be26b26f51f806157)

* [OCPBUGS-103220](https://issues.redhat.com/browse/OCPBUGS-103220): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 to address CVE-2026-33814 [#845](https://github.com/openshift/router/pull/845)
* [Full changelog](https://github.com/openshift/router/compare/216fb937c4d84bdad2c44e2659e4a69235d062fc...2f5cbd9eee4856abceeace9be26b26f51f806157)


### [hypershift](https://github.com/openshift/hypershift/tree/16a7b50a548e2f9951395ff64c6f0b0825401ed6)

* Sync approver aliases with main for release-4.17 [#10188](https://github.com/openshift/hypershift/pull/10188)
* [Full changelog](https://github.com/openshift/hypershift/compare/858722705e2f6d7e7b1cba5ba5ed9e6c32a7e1a2...16a7b50a548e2f9951395ff64c6f0b0825401ed6)


### [insights-operator](https://github.com/openshift/insights-operator/tree/99dfadcb53e5dd2944eed17d0d83829247142924)

* [OCPBUGS-103241](https://issues.redhat.com/browse/OCPBUGS-103241): Bump golang.org/x/net to v0.35.0-sec.3 [#1356](https://github.com/openshift/insights-operator/pull/1356)
* [Full changelog](https://github.com/openshift/insights-operator/compare/2e91ecb38e819b2b191553461ff5dc61359115c9...99dfadcb53e5dd2944eed17d0d83829247142924)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/748de1c0867b7b29b5a9cc00ef34d845c5554529)

* [OCPBUGS-103237](https://issues.redhat.com/browse/OCPBUGS-103237): Use patched x/net fork v0.35.0-sec.4 [#163](https://github.com/openshift/kube-state-metrics/pull/163)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/e88f1b27fd66ab75d9b5fde8419e9efba0923236...748de1c0867b7b29b5a9cc00ef34d845c5554529)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/dce858fb2ef61223e31d8c8c8548b841ff6e9d82)

* [OCPBUGS-103252](https://issues.redhat.com/browse/OCPBUGS-103252): Use patched x/net fork v0.35.0-sec.4 [#6578](https://github.com/openshift/machine-config-operator/pull/6578)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/3bdd678e83da52e0754b393b82435eea968af3ed...dce858fb2ef61223e31d8c8c8548b841ff6e9d82)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/d8ca7944618f2ecf08e5edfccf361e462e018147)

* [OCPBUGS-103246](https://issues.redhat.com/browse/OCPBUGS-103246): Use patched x/net fork v0.35.0-sec.4 [#192](https://github.com/openshift/image-customization-controller/pull/192)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/03af8514abbbd588bcc5514ff591b769d1241c09...d8ca7944618f2ecf08e5edfccf361e462e018147)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/581000c8b25998d88d8db83f593717a6d6562fd8)

* [OCPBUGS-118233](https://issues.redhat.com/browse/OCPBUGS-118233): [release-4.17] Bump fast-uri to 3.1.7 to fix CVE-2026-84292 [#1336](https://github.com/openshift/monitoring-plugin/pull/1336)
* [OCPBUGS-98777](https://issues.redhat.com/browse/OCPBUGS-98777): [release-4.17] replace outdated react-linkify dependency [#1343](https://github.com/openshift/monitoring-plugin/pull/1343)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/ffd758f816979228ae5f5d8ec526e74efcbf149a...581000c8b25998d88d8db83f593717a6d6562fd8)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/afc6978cc2f88eea447fc10aea47078df8093ed1)

* [OCPBUGS-103264](https://issues.redhat.com/browse/OCPBUGS-103264): bump golang.org/x/net to v0.35.0-sec.3 to fix CVE-2026-33814 [#135](https://github.com/openshift/multus-admission-controller/pull/135)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/041b743a1172af3c8ace0cf046fe95bda7a9d5a2...afc6978cc2f88eea447fc10aea47078df8093ed1)


### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/184062f842c56ca62bd6603aa77a89160a6b3e0f)

* [OCPBUGS-103255](https://issues.redhat.com/browse/OCPBUGS-103255), [OCPBUGS-103257](https://issues.redhat.com/browse/OCPBUGS-103257): [release-4.17]  Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame [#358](https://github.com/openshift/multus-cni/pull/358)
* [Full changelog](https://github.com/openshift/multus-cni/compare/659299d118afc196d66b16a7714e17e6d11d0669...184062f842c56ca62bd6603aa77a89160a6b3e0f)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/88dbfcd26d195b90fea2dca4200509a29a65ecee)

* [OCPBUGS-103254](https://issues.redhat.com/browse/OCPBUGS-103254): Replace golang.org/x/net with github.com/openshift-sustaining/net@v0.35.0-sec.3 to address CVE-2026-33814 [#154](https://github.com/openshift/network-metrics-daemon/pull/154)
* [OCPBUGS-130598](https://issues.redhat.com/browse/OCPBUGS-130598): add ./bin to PATH in check_golint.sh [#162](https://github.com/openshift/network-metrics-daemon/pull/162)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/f56bbf7af25fbae200c966378337db85c6b17126...88dbfcd26d195b90fea2dca4200509a29a65ecee)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/4412fa1f1222ef735cd4eed1cf0c28bed4d98cc0)

* [OCPNETUI-168](https://issues.redhat.com/browse/OCPNETUI-168): Update Owners file [#646](https://github.com/openshift/networking-console-plugin/pull/646)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/02524de642295b592ad52235f9e2d6e22edf92ff...4412fa1f1222ef735cd4eed1cf0c28bed4d98cc0)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/994f90899b6535140c535476f09aef88d4c1e8b6)

* [OCPBUGS-103267](https://issues.redhat.com/browse/OCPBUGS-103267): Replace golang.org/x/net with github.com/openshift-sustaining/net v0.35.0-sec.4 [#225](https://github.com/openshift/oauth-apiserver/pull/225)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/e078aeb29048d2b37e0b8e2657641a9207fd4d84...994f90899b6535140c535476f09aef88d4c1e8b6)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/62ea5f58fb0a844b23571e2dd928a7a1fe9bcd14)

* [OCPBUGS-136604](https://issues.redhat.com/browse/OCPBUGS-136604): [release-4.17] Sync OWNERS and OWNERS_ALIASES with master [#402](https://github.com/openshift/oauth-proxy/pull/402)
* [OCPBUGS-112108](https://issues.redhat.com/browse/OCPBUGS-112108): bugfix: rewrite open redirect strings to '/' [#385](https://github.com/openshift/oauth-proxy/pull/385)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/484a750a66e287c751116d4384b37281c9951a26...62ea5f58fb0a844b23571e2dd928a7a1fe9bcd14)


### [oauth-server](https://github.com/openshift/oauth-server/tree/0b4554d1a571ecf1659b821e337bd48bb048e297)

* [OCPBUGS-103265](https://issues.redhat.com/browse/OCPBUGS-103265): Replace golang.org/x/net with openshift-sustaining/net v0.35.0-sec.4 for CVE-2026-33814 [#280](https://github.com/openshift/oauth-server/pull/280)
* [OCPBUGS-87070](https://issues.redhat.com/browse/OCPBUGS-87070): bugfix: default to english when Accept-Language header contains more than 1000 underscores [#273](https://github.com/openshift/oauth-server/pull/273)
* [Full changelog](https://github.com/openshift/oauth-server/compare/be35f2dd002c1b655397207edf65c112aa59388c...0b4554d1a571ecf1659b821e337bd48bb048e297)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/88cc22ff4099e072fb771cf897c602ca15620330)

* [OCPBUGS-130910](https://issues.redhat.com/browse/OCPBUGS-130910): v1 accept catalog root entries and relative symlink targets [#1595](https://github.com/openshift/oc-mirror/pull/1595)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/58375b70881938be8a1e08750507e4a40943f6fd...88cc22ff4099e072fb771cf897c602ca15620330)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/9a4e2d4dac6c46c1046d6438e4048bf0df9b0bc9)

* [OCPBUGS-103272](https://issues.redhat.com/browse/OCPBUGS-103272): Use patched x/net fork v0.35.0-sec.4 [#456](https://github.com/openshift/openshift-controller-manager/pull/456)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/967faa66125ae77148df87d8394d07112c4c0b8c...9a4e2d4dac6c46c1046d6438e4048bf0df9b0bc9)


### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/ebe70417102d920f9c6b461c6885ddccd6939956)

* NO-ISSUE: synchronize OWNERS from main branch [#150](https://github.com/openshift/openshift-state-metrics/pull/150)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/adf649209467aef8d5da1d17851fa991285edbc2...ebe70417102d920f9c6b461c6885ddccd6939956)


### [openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/83846faf670b4d253debe6b6dbca996b605843b5)

* [OCPBUGS-103277](https://issues.redhat.com/browse/OCPBUGS-103277), [OCPBUGS-103279](https://issues.redhat.com/browse/OCPBUGS-103279): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork- #421 [#421](https://github.com/openshift/cloud-provider-openstack/pull/421)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/3358ea3f5ed8835aa760ee5cf02b9980bcdeb528...83846faf670b4d253debe6b6dbca996b605843b5)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/3fa74cb46c31d769c98ddb83ceb1f54ab91e9ba1)

* [OCPBUGS-103280](https://issues.redhat.com/browse/OCPBUGS-103280): CVE-2026-33814: replace golang.org/x/net with openshift-sustaining fork [#196](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/196)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/00ba71fd3736b00d019383fce2ec74a9c5f9414c...3fa74cb46c31d769c98ddb83ceb1f54ab91e9ba1)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/4db03df9eab1a25ff35839bb5f55b7302cf57620)

* NO-ISSUE: synchronize OWNERS from main branch [#416](https://github.com/openshift/prometheus-operator/pull/416)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/2c3a4e92762622587fe91f9f8d6de4f564a968e4...4db03df9eab1a25ff35839bb5f55b7302cf57620)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/a44c23e9d59e133d5572ef885edcf26e070b612d)

* [OCPBUGS-103292](https://issues.redhat.com/browse/OCPBUGS-103292): Use patched x/net fork v0.35.0-sec.4 [#195](https://github.com/openshift/node_exporter/pull/195)
* [Full changelog](https://github.com/openshift/node_exporter/compare/f9af0fe40cfdfc92d06ec1204e6d647c00d337b8...a44c23e9d59e133d5572ef885edcf26e070b612d)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/b5f700bef062d92668927de6817aeea62646fff6)

* [OCPBUGS-103135](https://issues.redhat.com/browse/OCPBUGS-103135): Fix CVE-2026-33814 by adding patch for golang.org/x/net package [#111](https://github.com/openshift/route-controller-manager/pull/111)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/1e53205fa2e239df3c39a78bb50fddce77b4f3e1...b5f700bef062d92668927de6817aeea62646fff6)


### [tests](https://github.com/openshift/origin/tree/187fdd8e58ad9b710d5d856a96e1c8f7b38b8cc5)

* [OCPBUGS-130857](https://issues.redhat.com/browse/OCPBUGS-130857): stage the creation of test pods to minimize etcd impact [#31741](https://github.com/openshift/origin/pull/31741)
* [Full changelog](https://github.com/openshift/origin/compare/5abe37f6f7844abc4d088595c0631734fb46864c...187fdd8e58ad9b710d5d856a96e1c8f7b38b8cc5)