# 4.18.51 Created: 2026-07-30 12:26:12 +0000 UTC Image Digest: `sha256:44a25bbf10e6796842df3ff64d13e27ff5a942850eef28c1d3e0fb2bedf2b366` ## Changes from 4.18.50 ### Components * Kubectl 1.31.1 * Kubernetes 1.31.14 * Kubernetes Tests 1.31.12 * Red Hat Enterprise Linux CoreOS upgraded from 418.94.202607211754-0 to 418.94.202607272025-0 ### Rebuilt images without code change * [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [cb375d17](https://github.com/openshift/cluster-node-tuning-operator/commit/cb375d177811aa52b53124335de2f87f417136d8) `sha256:19806d3ba170fa6a9aaaf83b1c25dde1d20e7a07061dc04e931b37ce81996e3a` * [driver-toolkit](https://github.com/openshift/driver-toolkit) git [2e139edc](https://github.com/openshift/driver-toolkit/commit/2e139edc4aeefbbc41536eeeedc91f317f0835fd) `sha256:5ee44d986d12f117a4b78bdef0e015e9dea12e8d80a6d981c38934cf7587a36b` * [ironic](https://github.com/openshift/ironic-image) git [75856ee3](https://github.com/openshift/ironic-image/commit/75856ee3e738e9941b57881e31a307c1d79a4ee8) `sha256:9a59698fa26507d2dac42c9d5add511fcb224a25bbc2b8d6c24f443ee8c28410` * [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [50ca44fd](https://github.com/openshift/ironic-rhcos-downloader/commit/50ca44fd48943433d502e8bcff3804f5cac7cb5a) `sha256:6b500dcb1d4dd390820c45b6c53cf5edc822e49dacd525fb4530ce904c09d8f1` * [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [01882e9e](https://github.com/openshift/monitoring-plugin/commit/01882e9e933c81141b22d0095827ec5f0ec44ccf) `sha256:32455bd12de20c48a129c30001ee8dadb6583182df7797ee6ace06e3a4a09547` * rhel-coreos `sha256:be021d67c8c78f10e8683a8df916e4ffb7d3e4dee20862f48537572b8c60f7a4` * rhel-coreos-extensions `sha256:300368e506fa86ebd5279a24d0cfbfa7002b8e6bcd8f8ad2de6985e977040424` ### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/f0e7fae4b6b9a2777c498b23b818e306954aaf3e) * [OCPBUGS-80219](https://issues.redhat.com/browse/OCPBUGS-80219): Fix CVE-2026-33186 using openshift-sustaining grpc-go fork [#1041](https://github.com/openshift/cloud-credential-operator/pull/1041) * [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/363e98bd7ca3872072a8aad152525c61388b10a5...f0e7fae4b6b9a2777c498b23b818e306954aaf3e) ### [console](https://github.com/openshift/console/tree/e98893bd0feddafbd5dbe8b355cf85a0bd946271) * [OCPBUGS-91944](https://issues.redhat.com/browse/OCPBUGS-91944): Prevent binary secret data corruption when editing [#16673](https://github.com/openshift/console/pull/16673) * [OCPBUGS-99487](https://issues.redhat.com/browse/OCPBUGS-99487): Disable Knative e2e Cypress tests in CI [#16803](https://github.com/openshift/console/pull/16803) * [OCPBUGS-99648](https://issues.redhat.com/browse/OCPBUGS-99648): Disable shipwright e2e tests to unblock CI [#16818](https://github.com/openshift/console/pull/16818) * [OCPBUGS-86453](https://issues.redhat.com/browse/OCPBUGS-86453): [release-4.18] shell-quote: Arbitrary code execution via command injection due to unescaped line terminators [#16511](https://github.com/openshift/console/pull/16511) * Fix for OCPBUGS-81604: CVE-2026-4800 [#16563](https://github.com/openshift/console/pull/16563) * [Full changelog](https://github.com/openshift/console/compare/551206fcfd31f4a8d96314e73c5bf4a1f03bbf57...e98893bd0feddafbd5dbe8b355cf85a0bd946271) ### [hypershift](https://github.com/openshift/hypershift/tree/e503a20f6760cefcfc4d6987f1a0a908683d67b6) * [OCPBUGS-99142](https://issues.redhat.com/browse/OCPBUGS-99142): fix(backport): konnectivity agent auth [#9096](https://github.com/openshift/hypershift/pull/9096) * [Full changelog](https://github.com/openshift/hypershift/compare/aa97a7f2cb6f2cb4f783cc9719523c1809fc4d13...e503a20f6760cefcfc4d6987f1a0a908683d67b6) ### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/a362b5965c47d38e15cfe32f69e66a525819e45c) * [OCPBUGS-94116](https://issues.redhat.com/browse/OCPBUGS-94116): move cleanUpDuplicatedMC to avoid double reboot on first updated [#6249](https://github.com/openshift/machine-config-operator/pull/6249) * [Full changelog](https://github.com/openshift/machine-config-operator/compare/cb086bddfb6c687d4cc49cf86976bc34472ae04b...a362b5965c47d38e15cfe32f69e66a525819e45c) ### [prometheus](https://github.com/openshift/prometheus/tree/632e9bbd28f5aa8b2c8f88e564aadad5a752bc0f) * [OCPBUGS-88628](https://issues.redhat.com/browse/OCPBUGS-88628): remote: validate snappy decoded length before allocation in read endpoint [#346](https://github.com/openshift/prometheus/pull/346) * [Full changelog](https://github.com/openshift/prometheus/compare/988ce8bbdcaea76028aa84c6bbd2f6a1f08fd1a4...632e9bbd28f5aa8b2c8f88e564aadad5a752bc0f)