Back to index

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.20.0-rc.3-aarch64

Team Approvals:

Tests:

• Informing jobs
  • aws-ovn-arm64 Succeeded periodic-ci-openshift-multiarch-master-nightly-4.20-ocp-e2e-aws-ovn-arm64
  • ovn-upgrade Failed (1 retries) periodic-ci-openshift-multiarch-master-nightly-4.20-ocp-e2e-upgrade-aws-ovn-arm64

Upgrades from:

• 4.20.0-rc.2 - Failed Failed

Upgrades to:

• 4.20.0 (changes) - Success

---

Loading changelog, this may take a while ...

Changes from 4.20.0-rc.2

Created: 2025-09-29 06:01:21 +0000 UTC

Image Digest: sha256:0b6293e1721960f1449105d2197f2f6d06eed76a13642ce0db1659d2e7072c29

Components

• Kubectl 1.33.3
• Kubernetes upgraded from 1.33.4 to 1.33.5
• Kubernetes Tests upgraded from 1.33.3 to 1.33.4
• Red Hat Enterprise Linux CoreOS upgraded from 9.6.20250909-0 to 9.6.20250925-0

  The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
OpenShiftPodSecurityAdmission (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Enabled	Enabled

Rebuilt images without code change

• agent-installer-csr-approver git 3accbb7b sha256:3ccfbc39e97c5cc5bfd3d067be17f9b7db2a0cdfa87ff28f669119e0e0c2e543
• agent-installer-node-agent git 62dc63f1 sha256:9ead657779a23c2f2f35e8bc8ae6d0aa1b9f24152d987c9fb01700ce55c8a85f
• agent-installer-orchestrator git 3accbb7b sha256:72f2dd161da29257f7cfb98cf25deb61331e0d18c8af86c48899b42ffa8f54f8
• agent-installer-utils git b5330d86 sha256:0453210d53091b590ba69de67e7544ebed8c6e9d78132778c299de95f30eb148
• apiserver-network-proxy git 11b24a2c sha256:3e72a22cac4d1e7d5c67fe09a9c9e3b99bc2645af09652371bdec06fc1afca23
• aws-cloud-controller-manager git bb88da16 sha256:bbf1bd9572fb9821dbaa53ed67483259a47de2ef4283c92687d99365ab4354a4
• aws-cluster-api-controllers git 9467200c sha256:463839873323c52f92828e5b5379735794d27f83b33f0c3a4fe8a27ff6bde265
• aws-ebs-csi-driver git a8ef205c sha256:1beffd71c883522c955fed98e059b3e8a882d13e2e1e352aa38856957c6b29a8
• aws-ebs-csi-driver-operator git a92ebd03 sha256:d5a82e6d6bea4d5c10347c7310afbcb6748311d88913921c7624a2b730b90e3e
• aws-karpenter-provider-aws git b37141b0 sha256:1c90dfe31bb71ea22d9b1edfece83a67126fcdeb802f8c73cfb669f82afa7daf
• aws-kms-encryption-provider git 088dcaf7 sha256:0a47c1b24f1e1213a9bf0cf5556784f95c91324e4096e31f6d8fd6f0e1a3312e
• aws-machine-controllers git d1cc300e sha256:369d658da709c23e94f985070ed0ce0e55c233c1613d2884621c7b5f23990298
• aws-pod-identity-webhook git a2ecb150 sha256:13586b55f0ab7d69078290780082bb074e130c7fad841c41a3c2387e77f423a1
• azure-cloud-controller-manager git d469d04e sha256:9467461eba19b0d97ffbbe4d2464129b43bc9941730f6296c37b4b9804e065c4
• azure-cloud-node-manager git d469d04e sha256:5709d33f62b13ed3f9e1e4e4f28c3afac9a807dc734d1f822c466cbdf10965ce
• azure-cluster-api-controllers git cb8b5b6a sha256:84e8866988bcccdb91a916b3f193d369d9601b65b6bcb29e56ab0c802883fe8f
• azure-disk-csi-driver git 0b8e4d22 sha256:2a014b3bc5c6b900033e07ca0435b23c1dffcbf146777a11300ebfe6249bec83
• azure-disk-csi-driver-operator git a92ebd03 sha256:82005e94b96831da84bc283366987abeca3728ce6398c46abb4593588416dc16
• azure-file-csi-driver git 45d505bc sha256:2e7e17549aca8be7e8f021035e01263029d48e59f960d245f6a93da5e4b4ae78
• azure-file-csi-driver-operator git a92ebd03 sha256:2d1549704ef3759f233951d30452b9fdfec4dce0679574a9e06ec81ee556cbdc
• azure-kms-encryption-provider git ea0b9944 sha256:bf39943eb6ddcc12db70a63d79d343e1ecf0ab4da63f0ec5542f152766809540
• azure-machine-controllers git 4927cc2b sha256:b506e5622deddb721461908739b642d53c9654dadaa9c5f4c452f1fc971f38fd
• azure-service-operator git 6e2f3626 sha256:eef96becdf360171446ce10368557d23d46f1f15daa19e220c5fd0ae94989253
• azure-workload-identity-webhook git 88b18175 sha256:78a6dc952719c29dcece9667894170e869c746b923238fec08f34201317fc40a
• baremetal-cluster-api-controllers git f782ba74 sha256:bc51bb4a257abda09c56ee04dd53dc308be8fbdc30440f87548e8dd304d2ff52
• baremetal-machine-controllers git fb678fec sha256:6aa269725ff069b87b05264494821ca9ae7354f64cd5677bced79a61ce1d63b7
• baremetal-operator git a7d0035a sha256:d2e6b92fe386c7427b611881152b2313033800b7ee1d3220cca1328654135475
• baremetal-runtimecfg git 6553765e sha256:cece56241e48fa1543f855453554e07680ced01bd11c02e48af1575b2950aefc
• cli git a4342818 sha256:0b863c14018315b92dec323dafb13c4d5a4e1511a126de7aecce5a162abe8eb5
• cli-artifacts git a4342818 sha256:b667d7a84f3bb5f935600e3a8e0ec31f22c15aa5193008c569082b4e8034c058
• cloud-network-config-controller git 467e50fe sha256:0f27e51b516d1d42223506c4b1aaa35e42619ea47ae54506ab2009d7aeae1c3c
• cluster-authentication-operator git 11e57aa3 sha256:d5470fde0759ca085b10da4fcfd9f6bc0bba1c7b84a0f2f61d27ba660c9b1c9e
• cluster-autoscaler git d883d0e6 sha256:3e1f4cf60e3bd96da76360c3a7c88ab752b7ed249f35645d2e8c62d262b54415
• cluster-autoscaler-operator git 147e5a7f sha256:f06ca184bf88a6e3841a4a2da3d9bdeff36e44f2a8fcb5f9693f7a7412b11341
• cluster-baremetal-operator git 19d38730 sha256:99e96600e803774b9060ce3c5773040e361be310cf8f75c7f6881528ebb503af
• cluster-bootstrap git 74abc555 sha256:7eaa84954231992a682154c29b8d1f0986947d2d7f9aa4279e493b4ce197dbbd
• cluster-capi-controllers git de1db297 sha256:83d24c4a8420e5144320314ca59a44fa6cb43aef842c84f3442657b99f04965d
• cluster-cloud-controller-manager-operator git e355ad38 sha256:bc408f63fcbe2515d1ad122eea9aba7c0e343876ae031ac36609cf4a5e26b925
• cluster-config-operator git 657754e2 sha256:0476286ea7bfcdf3ab67a57c45c1b067f367496e46293ece64b478d4b5a2ea79
• cluster-control-plane-machine-set-operator git 0bbafe24 sha256:210a31edf0a5a28fbbe7fb6a2e875d1674d2d1ca70755e041aed11eb3382a886
• cluster-dns-operator git 82578923 sha256:572e1ea1fda9d794e1d3b862401cd37bb82ee550667a0f8f881b0cf543248d09
• cluster-etcd-operator git 9091149b sha256:adbbaf0edbaf1cfe82b9fea008d923c481acde1d50d35b4cbae3d75248d37b04
• cluster-image-registry-operator git b04c7c12 sha256:4a1724e668747cf045c8a7e116634ed8635edd0bbcb0458ada36041410d2f4b6
• cluster-ingress-operator git 2371120e sha256:e8a29ca54e6b3d36eb3eb17c87df92c4d2304e1925a77ec6a54e949c84b0ff60
• cluster-kube-apiserver-operator git cae310f1 sha256:f99597adf232fa3fb4e6c2b7ae10eb272da2b7207e53b6bddc917528940c8ad7
• cluster-kube-cluster-api-operator git 3ec30377 sha256:9459daf9ce5a3eab13ba03b8017d72259229ec48d37ae5cccf70cb5ba6705b2c
• cluster-kube-storage-version-migrator-operator git 5adc1429 sha256:c0b17c0286e8010305b44d4006d041a1189de340014d457524c14f250b906742
• cluster-machine-approver git ce275058 sha256:29a209fc70598c7c8e842358e74f79122084b138dda922ba2af17e3ee350bdc9
• cluster-olm-operator git e4917368 sha256:dfc1657702213b866a4308d60898adfc6f2fd508690511f5b92afcb7fffdcc48
• cluster-openshift-apiserver-operator git 9cfa5679 sha256:1434244460d1b84250e7e7f48e48811980aa888966d739087bdbcfcaa04132db
• cluster-samples-operator git 62b3623c sha256:e9b179f2d2389766736965b4ed470b63bf7795ed124214389b8bad99ff9501c3
• cluster-update-keys git c40e7b9b sha256:2f3a7fa43c8f9a00c4c08c8c82ef477d983fb23d1988caaabe2770cd29a8172c
• cluster-version-operator git 9de00ba8 sha256:4f868c40824c95d01e2c888a457fd3f9d5784faa4f5acfcb0c8886ccbefcf3de
• configmap-reloader git 2438d7c8 sha256:010c1fc97f6a62b96fbb8edecd957064dc8cfdcc353f28bd89b2807fd0337c63
• console-operator git 5e127e5f sha256:bd4096d2ecdfe1bf2c446268771c26d781f74979b9802bad6665ccf9531253ca
• container-networking-plugins git 184a9601 sha256:05473ce1ba59c776401a7baf0d94403073781086ab27e1d2e1c120d1088c16cd
• containernetworking-plugins-microshift git 184a9601 sha256:b93a77bcaaf518f24edfa5b36ccdcb17577adb33f9ba5a5fe8dc45af04f979b1
• coredns git 6f39336e sha256:e4f21bbcc1e20ce3666692d7081930ca44d8766a88b2287be2b8ad7a1b46729c
• csi-external-attacher git 45239149 sha256:a78f52910d1f2680225375e53b5b4a8ae380b0372d7c88ad875603341a567b5c
• csi-external-provisioner git 81fca036 sha256:f9e5f576d452723124c2c4b2144cae47630f00a31bcdf456ae0eb0d58584ebe7
• csi-external-snapshot-metadata git 693a8264 sha256:5fbf5446483fca6021d585044364325ee596c06511deabf62ab975fbec917c0e
• csi-external-snapshotter git 42604822 sha256:65c2ddaf13e349f3d16b215be0711bd358337126d16b71f5cb2aa7577d5c4dcb
• csi-livenessprobe git 1d6d6b27 sha256:0bbdc181843f5db0a350bd284834fdc759943ebb6a3a85313553c7c022112845
• csi-node-driver-registrar git 3a2c732e sha256:f339275a49cc24bb9760076d5be829a95d92d575c05717817cf900c4fd7381e1
• csi-snapshot-controller git 42604822 sha256:b0858dcc7dc11aec978d2905f85fd7cd52e545b98f63c185d20ee9a4ef8aae55
• deployer git a4342818 sha256:f5beb73389c408c570dc679238819ac7a6fce2b3e840c8bb34e4560c509cdaed
• docker-builder git ff595e4b sha256:9c6bbf74a3d47503b6582cd41218f4c7cfd47e058aecae5942138bd1c9a5485e
• driver-toolkit git 9d55fd1a sha256:b55dc28b2f717af2e5a76e029b596396c476ab6a55e64a1540da343b26f1e0bb
• egress-router-cni git 5e0f8d1b sha256:d1fdd3bd3a6419fd458b1ced2be9d9c3bc1852474624c489b7b99576ca1ca31f
• etcd git 9c065d4d sha256:90bc309593fd38446ff321a2c30f15508b98e0c1b9cc91997b81a06830a63206
• gcp-cloud-controller-manager git f940e72e sha256:5dc033fdc41faf544b2d06567b8f2aea99d8ce05e4200da0f168445f8d5ab5d8
• gcp-cluster-api-controllers git 65539c71 sha256:575386537a66ec411fe2b3ddbf482d11950f53e3c8ce262d3ccdfb732aaeed5b
• gcp-machine-controllers git 01515888 sha256:646796a969b88020fe5cb801b386e5b2d55c510cd8febeacfd925b2f4f97235d
• gcp-pd-csi-driver git 500ab5d3 sha256:4536b745ddac3a3382eddb328775552d80a8263b7707e9eaaa3f4c82d789bb7f
• gcp-pd-csi-driver-operator git e0ad050a sha256:14a7fba8b13f230465071813c71dc264e9f75219c3740df40ad03aa547832f70
• gcp-workload-identity-federation-webhook git b36788ed sha256:67f1a1372d01a246fbe7d4cc1a0b5e4123e96b32893ae7401cc75a7346c63238
• insights-runtime-exporter git 3d378369 sha256:710b4fc8130b30bbc3154a06aee38920a7487369367a71c28b49283a7ba6fb34
• insights-runtime-extractor git 3d378369 sha256:5998c52d275ff4be994be553e03767904a1bab6bb4b3098f7e791ddd5eae336b
• ironic-agent git ce01f3c1 sha256:f92f56af6c9348adb6dbc353178a519aaa161122bcedf49731525c6e62f4ecf0
• ironic-machine-os-downloader git 6c92e542 sha256:45910db5f10d894604afd0d1e6a8810554e66b0d7f7ff051c78654baa4860754
• ironic-static-ip-manager git fa5b8b8b sha256:510d7a610920c22dd291ea3c434896396f7f478f1dfb4c686dbbc0079822e9d2
• keepalived-ipfailover git bb4535b7 sha256:da1382b2fd22a06d33d057d6b590202c6124f55319e7dedfef5cfe503f4228c0
• kube-metrics-server git cfa5ee9f sha256:11de921b35ad5b3cf2fbcdb0ff0af4ac095b72c090da3885bb93f734f65eec36
• kube-rbac-proxy git b9134351 sha256:886858a1aa0d80ab0fc51812418ed26133068f083fb4567103da9346e0a30d4a
• kube-state-metrics git a8c9a5f0 sha256:30d4ab2eefe4ffb1d56486ae250f03b4ed31b16c722983058fb515ff17d1f902
• kube-storage-version-migrator git 0f8a4eb8 sha256:e73777a055029bfee53df55efe8abe541f22027404331ada5544003873150dbd
• kubevirt-cloud-controller-manager git 3f4542ec sha256:56af1e12b75cc082fc0370ae9d3b85ddc33a50506c0a25ab1f19b832f99fbe48
• kubevirt-csi-driver git 8b8dd30e sha256:c930f94d24ad38c2c905dedb328cf9c30a6a8194b5681f7000d2eb4b18257840
• libvirt-machine-controllers git a336f0b5 sha256:525ba4d8f6fc9f6b9f64202af29467e2515aaeea164c1b552710c4fc7d944b1c
• machine-image-customization-controller git 20f6d615 sha256:804303c605340d12df6a300565945252da3ad8c1ac938af1cb8aa9332993d7ce
• machine-os-images git 64bfec79 sha256:5a11d28566fa95ef13addb2d0fe442652afa2bb34375f9dcf8edf6504207fa65
• metallb-frr git fc0fe74f sha256:a7b0596c8c9e2e90d9fba354e1411fbb6771d4c59258ee7a0a7a7b2a90b6567c
• monitoring-plugin git 9a8dd0ee sha256:865128ff89f89610e484990cc1bc0c84bc71ea058a53592350c1e155b4c5276e
• multus-admission-controller git fc73c803 sha256:373cd8b1a42e438b463d29e01bb6fa655dcc2e58a1810889100c6052b5e0098b
• multus-cni git cf0f68ec sha256:1975c392bf12951ff82f1ad719ac2cdc2117dfa115ad2bb41a3f41f0c3f7586e
• multus-cni-microshift git cf0f68ec sha256:d5f4adfe22998287e769aa276a51e43c9e6d42e4a90d503fea630de1b05ae71e
• multus-networkpolicy git 278ec20e sha256:64274b2bebce108f50f5201a6c33c4b1d8fae12c508e531ea7ee9284db8ca276
• multus-route-override-cni git 391c1b03 sha256:a23399054a7ba10e4a2dfb7d31c5e0f20d11a4bdf151371207b1eb132cdb9b34
• multus-whereabouts-ipam-cni git 43c89591 sha256:cba92e6cea8e1458dbb886d52bf564a9025c1c1d4496d975bab4fa3bb1185a93
• must-gather git f0c64742 sha256:6476fb709284a7c235c8a71f84bfa44aae474d3aefd2f081c2847bcc7edc5ff6
• network-interface-bond-cni git dd3c4d0b sha256:6421cb3e5fd46257243e94aacef6d06e42beb75bd8648e57673b7d07b32195b1
• network-metrics-daemon git b81340a9 sha256:e663a63e6f11f0b929d4651e73ee223acf62a786a7269207f2534c4f6eaec8a5
• network-tools git 26d09174 sha256:17cfae654f9117c61ffd80132113a05ff1ce78626d0ea3ea436e8e41bf378628
• networking-console-plugin git f09c58b9 sha256:08bde5487195d0b565abb3555cbfed799a36681e71fb30404026be535a08863d
• oauth-proxy git 6649cb8a sha256:e53b7f648d202e972a9b8092e7d4d89b066612d6cd0e44655030485e00cb6f81
• oauth-server git 81098796 sha256:b15985921e7abc987da97e18ee37cc2b1de113e3dbe64053e798b4031ed00e27
• openshift-state-metrics git b04e2ef0 sha256:33f51850fa5e9c1076a94621a775b8e6c28e8678d6153f1bef3655e789131735
• openstack-cinder-csi-driver git c4fe3e8a sha256:143eaf1e276353f85c0dcda32b5979c706bc2c9f1127bfe622bf14d9671136ce
• openstack-cinder-csi-driver-operator git a92ebd03 sha256:097435d1ba21a9fd15dead79f47474dc30480e57b92c8fb70f7731c85413a5c1
• openstack-cloud-controller-manager git c4fe3e8a sha256:0befc5de2a0d7f67aaeb62eb40b16df546d6c1263de06da2e7e90795720262d9
• openstack-cluster-api-controllers git 30944900 sha256:77ca352f1f257a113d4cb383fe321aae96b44e506eef42911e77275e70db39dd
• openstack-machine-api-provider git 5085f184 sha256:40962ea7081df97704c7e6b73e77534d8aecbaf11968a1d65066a1f0aa2dc7dc
• openstack-resource-controller git bf0d2c88 sha256:169779c461e4954739c81556bc956ead5bf5e56a9f1dc3cdf93da488a914bac7
• operator-framework-tools git 10d327b3 sha256:cc1e02ab5145b22f373103e4395c47f98f417e77bd4b6e094161f8d1cbea6c09
• operator-lifecycle-manager git 10d327b3 sha256:d8b72efb1866d3e66c1ec0288d6867f2541b0dcb2a68dab622aa78906d3223af
• operator-marketplace git 3e102a57 sha256:1cc6a8c2c1c13df857882d2c189118342702fc75f1eeff24d46f1b247c3e2599
• operator-registry git 10d327b3 sha256:aa2fca7d58b78555d59a2f7069d6f77ac04fc5a21de3162e0c5a432534468448
• ovirt-csi-driver git 1db726a9 sha256:b04b8a94af79bb4061bd0d1dba8ffaa6c46ee9f0fd0dd901a9b9f02e071bed9d
• ovirt-csi-driver-operator git 76db379d sha256:824e58d9e790166317ffaacc815ae5608e814f47412f212987d3a93df1fbd63a
• prom-label-proxy git f2529aee sha256:45062c05bbdcc212083253238a87d4453083fd772e2375de2a441174a5b2c42a
• prometheus git 61b4510b sha256:c67d6afd7a4132ac918f041b4b48a121b1ef1f832319e40cefc9f789f101d94c
• prometheus-alertmanager git 419f2843 sha256:a857968c230db44a25452a8e7c6e6add69510fa177f30c3607d5acd2518f614e
• prometheus-config-reloader git e2bd260c sha256:ece72f9a0a2346cecadd0c0ac28ff9d824ad556d423ab80d52a82bfdafeaa452
• prometheus-node-exporter git 56f6158e sha256:a00ede8a1f03c392039fef68299c72cca8d88071fa48c501a0f7e985808f1bf8
• prometheus-operator git e2bd260c sha256:7e6cb1b8c118276e182fac70f2503637d0eef47e62bd207c170d07492aa0ede3
• prometheus-operator-admission-webhook git e2bd260c sha256:9e06020e3de22676d585f5b31f76a75ee6f97b9fd4c1af62b404c1e4b889e010
• rhel-coreos git 63e9aa40 sha256:a90d223c72ea420342a696befc9f060bebeceb84b96d11fd5e1f242afdb65ffe
• rhel-coreos-extensions git 63e9aa40 sha256:4dfe44de6bbc51824b27d53af126c09ce7fcc87103b61fbbe478fff198098c3e
• route-controller-manager git bf2fa662 sha256:2b9e0c506cb47a805f82d0a21b98a0a7dfa4985d2a1d34e001eb287b3c4a6815
• telemeter git 4c6036ee sha256:af7b64d80f93da5ab5cc7a6d4d114796f9d8ce3861e947818a1b43ada98720d6
• thanos git c0951032 sha256:661eedadbcf29ef9b2c5f7c5d9224c862f211234fbf2c121ecd39ca01b54ef1f
• tools git a4342818 sha256:b19c70e951e1389f202941229a5e941512deb31c1d0287dbeba6fde4dee24ab5
• volume-data-source-validator git 0e61642f sha256:06caff4f3c05660abb3f54e724f3068263e0b03a7d76cfab98e139b5b6953658

agent-installer-api-server

• NO-ISSUE: pin gotestsum to v1.12.3 (#8020) #8020
• Full changelog

baremetal-installer, installer, installer-artifacts

• OCPBUGS-62297: Set default for PrivateDNSZone Project ID #9968
• OCPBUGS-61528: Allow user to BYO private zone without specifying name #9936
• OCPBUGS-61552: Shellcheck fix 4.20 #9938
• Full changelog

cloud-credential-operator

• OCPBUGS-61586: set cloud-credential-operator as default-container #916
• Full changelog

cluster-capi-operator

• OCPBUGS-61770: Fix conversion of Machines without MachineSet #362
• Full changelog

cluster-config-api

• OCPBUGS-61977: Add ‘AGE’ print column to MachineConfigNode object #2497
• OCPBUGS-56778: Disable PSA for 4.20 #2475
• Full changelog

cluster-csi-snapshot-controller-operator

• OCPBUGS-62258: add all-egress label to deployments on HCP and IBM #244
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-55217: Throttle resourcesynccontroller on pairs with dual writers. #882
• Full changelog

cluster-kube-scheduler-operator

• OCPBUGS-61544: add readonlyRootFilesystem #576
• Full changelog

cluster-monitoring-operator

• OCPBUGS-61680: add flag --watch-referenced-objects-in-all-namespaces to prometheus-operator #2667
• OCPBUGS-61207: chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind #2661
• Full changelog

cluster-network-operator

• OCPBUGS-61370: Set maxUnavailable 10% on MultiNetworkPolicy DS #2793
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-62023: release-4.20: e2e: set of fixes/changes to ovs pinning testing #1394
• OCPBUGS-62017: E2E: llc: Create testing namespace before Runtime tests #1393
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

cluster-openshift-controller-manager-operator

• OCPBUGS-61607: set up openshift-tests-extension for cluster-openshift-controller-manager-operator and add a sanity test #396
• Full changelog

cluster-policy-controller

• OCPBUGS-62053: fix(psalabelsyncer): return an error instead of panic when converting an unknown volume #168
• Full changelog

cluster-storage-operator

• OCPBUGS-62175: add all-egress label to deployments on HCP and IBM #622
• OCPBUGS-61249: Fix logging e2e also faster cleanup #613
• Full changelog

console

• OCPBUGS-62196: Add Missing Periods to Error Messages and update try again button link #15537
• OCPBUGS-62015: Help dropdown should be closed automatically after tour model opened #15519
• OCPBUGS-61990: Change default tab size from 4 to 2 #15515
• OCPBUGS-61671: i18n upload/download routine task for OCP version 4.20 #15485
• OCPBUGS-61777: Fix improper DescriptionList refactor #15499
• OCPBUGS-61327: Correct the ordering of Catalog categories to be alphabetized #15468
• OCPBUGS-61226: fix typo in update approval strategy label #15458
• Full changelog

csi-driver-manila, csi-driver-manila-operator, csi-driver-nfs, hyperkube, ibm-cloud-controller-manager, ibm-vpc-block-csi-driver, ibm-vpc-block-csi-driver-operator, ibmcloud-cluster-api-controllers, ibmcloud-machine-controllers, kube-proxy, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, powervs-block-csi-driver, powervs-block-csi-driver-operator, powervs-cloud-controller-manager, powervs-machine-controllers, vsphere-cloud-controller-manager, vsphere-cluster-api-controllers, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector

• OCPBUGS-61555: Bump 1.33.5 #2461
• OCPBUGS-61753: UPSTREAM: <carry>: Add retries for GetCurrentResourceVersion. #2469
• OCPBUGS-61720: Do not remove PVC ClaimRef to fix flaky VAC test #2463
• OCPBUGS-61197: UPSTREAM: 133425: Fix SELinux label comparison #2445
• OCPBUGS-61347: UPSTREAM: <carry>: backporting fix for concurrent map iteration and write #2450
• Full changelog

csi-external-resizer

• OCPBUGS-61546: Requeue PVC over PV creation #172
• Full changelog

docker-registry

• OCPBUGS-61638: update OWNERS #449
• Full changelog

haproxy-router

• OCPBUGS-61558: Revert Prevent startup failures due to name resolution” #674
• Full changelog

hypershift

• OCPBUGS-62182: fix(kas-bootstrap): increase wait timeouts to avoid KAS startup races #6887
• OCPBUGS-62005: Enable VolumeAttributesClass runtime config #6868
• OCPBUGS-62006: fix(ignition-server): Don’t delete user-managed cert secrets #6869
• OCPBUGS-61863: ci: Use the common MCE konflux pipeline #6847
• OCPBUGS-61066: fix: propagate AWSLoadBalancerTargetNodesAnnotation to HCP #6772
• OCPBUGS-61575: fix(kas): Set correct container port in postStart handler, 2 #6854
• OCPBUGS-61565: [release-4.20] fix(proxy): ensure URLs have scheme before proxy resolution #6791
• OCPBUGS-61746: fix(oauth): oauth-openshift deployment should be HA #6828
• OCPBUGS-56778: fix(kas): Disable PSA enforcement in 4.20 #6830
• CNTRLPLANE-1397: feat(konflux): tag MCE HO images with latest #6784
• OCPBUGS-61670: fix(control-plane): remove resource limits from kube-controller-manager #6804
• OCPBUGS-61667: resolve MIRRORED_RELEASE_IMAGE flapping #6803
• Full changelog

insights-operator

• OCPBUGS-61844: Run missing make update (#1143) #1143
• Full changelog

ironic

• OKD-290: (OKD4.20) Fix ironic-image errors and metal3 pod crashes on CentOS9 #696
• OCPBUGS-61461: revert the switch to local RPC #690
• Full changelog

machine-api-operator

• OCPBUGS-61853: Fixed multi nic e2e to wait for node removal after machineset tests #1418
• OCPBUGS-61853: Adjusted machine e2e tests to wait for nodes to clean up #1416
• Full changelog

machine-config-operator

• OCPBUGS-62080: Add mcd_local_unsupported_packages recording rule #5297
• OCPBUGS-61882: Add nil/null checks to image registry secret decode #5292
• OCPBUGS-62073: Improve MCN CRD clean-up script #5296
• OCPBUGS-61516: Machine-config controller should actively manage cordon while draining #5281
• OCPBUGS-61824: Override NMState service definition #5286
• OCPBUGS-61232: Recheck generatedByControllerVersion annotation prior to deleting a degraded MC #5273
• Full changelog

oauth-apiserver

• OCPBUGS-61753: Bump openshift/kubernetes-apiserver. #147
• Full changelog

oc-mirror

• OCPBUGS-62024: changes the warning message of 4.21 (#1270) #1270
• Adding r4f4 and Prashanth684 as approvers and removing contributors who are not working with oc-mirror anymore. (#1265) #1265
• ocpbugs-60999: fix issue when using full true in m2m (#1260) #1260
• OCPBUGS-61386: fixes permissions on rebuilt catalog (#1258) #1258
• Full changelog

olm-catalogd, olm-operator-controller

• OCPBUGS-61705: Revert “Handle service-ca cert availability/rotation” #474
• OCPBUGS-61563: [OTE] Update webhook ote tests to use latest webhook-operator #469
• Full changelog

openshift-apiserver

• OCPBUGS-61753: Bump openshift/kubernetes-apiserver. #557
• OCPBUGS-61494: ensure cache invalidation after a time #553
• Full changelog

openshift-controller-manager

• OCPBUGS-61900: Fix Dockerfile.rhel: Add OTE binary build and packaging for release-4.20 #420
• OCPBUGS-61790: CNTRLPLANE-1308: set up openshift-tests-extension for openshift-controller-manager and add a sanity test #418
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-61239: Skip node-encap-ips annotation in DPU host mode #2763
• OCPBUGS-61778: Adding ovndb-raft-functions.sh to ovnk image #2760
• Full changelog

service-ca-operator

• OCPBUGS-61966: don’t hotloop on secret creation errors #275
• Full changelog

tests

• OCPBUGS-62231: network test isolation and reduced parallelization to protect cpu #30300
• Revert “[release-4.20] OCPBUGS-62140:OCPSTRAT-2045:Automating OCPSTRAT-2045 feature in upstream” #30303
• OCPBUGS-62140: OCPSTRAT-2045:Automating OCPSTRAT-2045 feature in upstream #30299
• OCPBUGS-61757: test/extended/cli/adm_upgrade/recommend: Enable precheck and accept #30260
• OCPBUGS-62075: Temporarily remove commatrix documentation test for rework #30287
• OCPBUGS-62007: oidc: improve rollout wait times #30284
• CNF-18661: Update vendor with communication matrix bug fixes on 4.20 #30271
• OCPBUGS-61734: Restore retries for flaky port foward test #30266
• OCPBUGS-61540: chore(extended/prometheus): ²⁄₂: make ‘targets auth’ test more lenient and more resilient #30263
• OCPBUGS-61744: update machines scale test #30258
• OCPBUGS-61732: [release-4.20] CNTRLPLANE-945: oidc: add retry logic for Keycloak route creation #30251
• OCPBUGS-61731: [release-4.20] CNTRLPLANE-945: images: add keycloak images and use them in ExternalOIDC tests #30250
• OCPBUGS-61600: Skip config-operator checking when featureSet is DevPreviewNoUpgrade #30245
• OCPBUGS-61540: chore(extended/prometheus): make ‘targets auth’ test more lenient and more resilient. #30237
• OCPBUGS-61478: Add flaky kubectl logs test to the retry list to clean signal for release #30231
• OCPBUGS-61333: Bump to latest openshift/kubernetes (v1.33.4) #30228
• Full changelog

---

Node Image Info

Loading node image info, this may take a while ...

Package List

• cri-o-1.33.4-4.rhaos4.20.gitc8e7df2.el9
• kernel-5.14.0-570.49.1.el9_6
• openshift-kubelet-4.20.0-202509232257.p2.ge0d4216.assembly.stream.el9
• systemd-252-51.el9_6.2

Full list (551 packages)

• NetworkManager-1:1.52.0-7.el9_6
• NetworkManager-cloud-setup-1:1.52.0-7.el9_6
• NetworkManager-libnm-1:1.52.0-7.el9_6
• NetworkManager-ovs-1:1.52.0-7.el9_6
• NetworkManager-team-1:1.52.0-7.el9_6
• NetworkManager-tui-1:1.52.0-7.el9_6
• WALinuxAgent-udev-2.7.0.6-11.el9_6.1
• aardvark-dns-2:1.14.0-1.el9
• acl-2.3.1-4.el9
• adcli-0.9.2-1.el9
• afterburn-5.7.0-1.el9
• afterburn-dracut-5.7.0-1.el9
• alternatives-1.24-2.el9
• attr-2.5.1-3.el9
• audit-3.1.5-4.el9
• audit-libs-3.1.5-4.el9
• authselect-1.2.6-3.el9
• authselect-libs-1.2.6-3.el9
• avahi-libs-0.8-22.el9_6.1
• basesystem-11-13.el9
• bash-5.1.8-9.el9
• bash-completion-1:2.11-5.el9
• bind-libs-32:9.16.23-31.el9_6
• bind-license-32:9.16.23-31.el9_6
• bind-utils-32:9.16.23-31.el9_6
• binutils-2.35.2-63.el9
• binutils-gold-2.35.2-63.el9
• bootc-1.1.6-3.el9_6
• bootupd-0.2.27-4.el9_6
• bsdtar-3.5.3-6.el9_6
• bubblewrap-0.4.1-8.el9_5
• bzip2-1.0.8-10.el9_5
• bzip2-libs-1.0.8-10.el9_5
• c-ares-1.19.1-2.el9_4
• ca-certificates-2024.2.69_v8.0.303-91.4.el9_4
• checkpolicy-3.6-1.el9
• chrony-4.6.1-1.el9
• cifs-utils-7.1-2.el9
• clevis-21-208.el9
• clevis-dracut-21-208.el9
• clevis-luks-21-208.el9
• clevis-systemd-21-208.el9
• cloud-utils-growpart-0.33-1.el9
• composefs-1.0.8-1.el9
• composefs-libs-1.0.8-1.el9
• conmon-3:2.1.12-1.el9
• conmon-rs-0.6.6-0.rhaos4.18.el9.1
• console-login-helper-messages-0.21.3-1.el9
• console-login-helper-messages-issuegen-0.21.3-1.el9
• console-login-helper-messages-profile-0.21.3-1.el9
• container-selinux-4:2.237.0-2.el9_6
• containernetworking-plugins-1:1.6.2-2.el9_6
• containers-common-2:1-117.el9_6
• coreos-installer-0.24.0-3.el9_6
• coreos-installer-bootinfra-0.24.0-3.el9_6
• coreutils-8.32-39.el9
• coreutils-common-8.32-39.el9
• cpio-2.13-16.el9
• cracklib-2.9.6-27.el9
• cracklib-dicts-2.9.6-27.el9
• cri-o-1.33.4-4.rhaos4.20.gitc8e7df2.el9
• cri-tools-1.33.0-1.el9
• criu-3.19-1.el9
• criu-libs-3.19-1.el9
• crun-1.23.1-2.el9_6
• crypto-policies-20250128-1.git5269e22.el9
• crypto-policies-scripts-20250128-1.git5269e22.el9
• cryptsetup-2.7.2-3.el9_6.1
• cryptsetup-libs-2.7.2-3.el9_6.1
• curl-7.76.1-31.el9_6.1
• cyrus-sasl-gssapi-2.1.27-21.el9
• cyrus-sasl-lib-2.1.27-21.el9
• dbus-1:1.12.20-8.el9
• dbus-broker-28-7.el9
• dbus-common-1:1.12.20-8.el9
• dbus-libs-1:1.12.20-8.el9
• device-mapper-9:1.02.202-6.el9
• device-mapper-event-9:1.02.202-6.el9
• device-mapper-event-libs-9:1.02.202-6.el9
• device-mapper-libs-9:1.02.202-6.el9
• device-mapper-multipath-0.8.7-35.el9_6.1
• device-mapper-multipath-libs-0.8.7-35.el9_6.1
• device-mapper-persistent-data-1.1.0-1.el9
• diffutils-3.7-12.el9
• dmidecode-1:3.6-1.el9
• dnf-4.14.0-25.el9
• dnf-data-4.14.0-25.el9
• dnsmasq-2.85-17.el9_6
• dosfstools-4.2-3.el9
• dracut-057-88.git20250311.el9_6
• dracut-network-057-88.git20250311.el9_6
• dracut-squash-057-88.git20250311.el9_6
• e2fsprogs-1.46.5-7.el9
• e2fsprogs-libs-1.46.5-7.el9
• efi-filesystem-6-2.el9_0
• efibootmgr-16-12.el9
• efivar-libs-38-3.el9
• elfutils-debuginfod-client-0.192-6.el9_6
• elfutils-default-yama-scope-0.192-6.el9_6
• elfutils-libelf-0.192-6.el9_6
• elfutils-libs-0.192-6.el9_6
• ethtool-2:6.11-1.el9
• expat-2.5.0-5.el9_6
• file-5.39-16.el9
• file-libs-5.39-16.el9
• filesystem-3.16-5.el9
• findutils-1:4.8.0-7.el9
• firewalld-filesystem-1.3.4-9.el9_5
• flashrom-1.2-10.el9
• fstrm-0.6.1-3.el9
• fuse-2.9.9-17.el9
• fuse-common-3.10.2-9.el9
• fuse-libs-2.9.9-17.el9
• fuse-overlayfs-1.14-1.el9
• fuse3-3.10.2-9.el9
• fuse3-libs-3.10.2-9.el9
• fwupd-1.9.26-1.el9
• fwupd-plugin-flashrom-1.9.26-1.el9
• gawk-5.1.0-6.el9
• gawk-all-langpacks-5.1.0-6.el9
• gdbm-libs-1:1.23-1.el9
• gdisk-1.0.7-5.el9
• geolite2-city-20191217-6.el9
• geolite2-country-20191217-6.el9
• gettext-0.21-8.el9
• gettext-libs-0.21-8.el9
• git-core-2.47.3-1.el9_6
• glib2-2.68.4-16.el9_6.2
• glibc-2.34-168.el9_6.23
• glibc-common-2.34-168.el9_6.23
• glibc-gconv-extra-2.34-168.el9_6.23
• glibc-minimal-langpack-2.34-168.el9_6.23
• glusterfs-6.0-57.4.el9
• glusterfs-client-xlators-6.0-57.4.el9
• glusterfs-fuse-6.0-57.4.el9
• glusterfs-libs-6.0-57.4.el9
• gmp-1:6.2.0-13.el9
• gnupg2-2.3.3-4.el9
• gnutls-3.8.3-6.el9_6.2
• gobject-introspection-1.68.0-11.el9
• gpgme-1.15.1-6.el9
• grep-3.6-5.el9
• groff-base-1.22.4-10.el9
• grub2-common-1:2.06-104.el9_6
• grub2-efi-aa64-1:2.06-104.el9_6
• grub2-tools-1:2.06-104.el9_6
• grub2-tools-minimal-1:2.06-104.el9_6
• gssproxy-0.8.4-7.el9
• gzip-1.12-1.el9
• hostname-3.23-6.el9
• hwdata-0.348-9.18.el9
• ignition-2.21.0-4.rhaos4.19.el9
• ignition-grub-2.21.0-4.rhaos4.19.el9
• ima-evm-utils-1.5-3.el9
• info-6.7-15.el9
• inih-49-6.el9
• initscripts-service-10.11.8-4.el9
• ipcalc-1.0.0-5.el9
• iproute-6.11.0-1.el9
• iproute-tc-6.11.0-1.el9
• iptables-libs-1.8.10-11.el9_5
• iptables-nft-1.8.10-11.el9_5
• iputils-20210202-11.el9_6.1
• irqbalance-2:1.9.4-2.el9_6.2
• iscsi-initiator-utils-6.2.1.9-1.gita65a472.el9
• iscsi-initiator-utils-iscsiuio-6.2.1.9-1.gita65a472.el9
• isns-utils-libs-0.101-4.el9
• jansson-2.14-1.el9
• jose-14-1.el9
• jq-1.6-17.el9_6.2
• json-c-0.14-11.el9
• json-glib-1.6.6-1.el9
• kbd-2.4.0-11.el9
• kbd-legacy-2.4.0-11.el9
• kbd-misc-2.4.0-11.el9
• kernel-5.14.0-570.49.1.el9_6
• kernel-core-5.14.0-570.49.1.el9_6
• kernel-modules-5.14.0-570.49.1.el9_6
• kernel-modules-core-5.14.0-570.49.1.el9_6
• kernel-modules-extra-5.14.0-570.49.1.el9_6
• kexec-tools-2.0.29-5.el9_6.2
• keyutils-1.6.3-1.el9
• keyutils-libs-1.6.3-1.el9
• kmod-28-10.el9
• kmod-libs-28-10.el9
• kpartx-0.8.7-35.el9_6.1
• krb5-libs-1.21.1-8.el9_6
• less-590-5.el9
• libacl-2.3.1-4.el9
• libaio-0.3.111-13.el9
• libarchive-3.5.3-6.el9_6
• libassuan-2.5.5-3.el9
• libatomic-11.5.0-5.el9_5
• libattr-2.5.1-3.el9
• libbasicobjects-0.1.1-53.el9
• libblkid-2.37.4-21.el9
• libbpf-2:1.5.0-1.el9
• libbrotli-1.0.9-7.el9_5
• libcap-2.48-9.el9_2
• libcap-ng-0.8.2-7.el9
• libcbor-0.7.0-5.el9
• libcollection-0.7.0-53.el9
• libcom_err-1.46.5-7.el9
• libcomps-0.1.18-1.el9
• libcurl-7.76.1-31.el9_6.1
• libdaemon-0.14-23.el9
• libdb-5.3.28-57.el9_6
• libdhash-0.5.0-53.el9
• libdnf-0.69.0-13.el9
• libdnf-plugin-subscription-manager-1.29.45.1-1.el9_6
• libeconf-0.4.1-4.el9
• libedit-3.1-38.20210216cvs.el9
• libev-4.33-6.el9
• libevent-2.1.12-8.el9_4
• libfdisk-2.37.4-21.el9
• libffi-3.4.2-8.el9
• libfido2-1.13.0-2.el9
• libgcc-11.5.0-5.el9_5
• libgcrypt-1.10.0-11.el9
• libgomp-11.5.0-5.el9_5
• libgpg-error-1.42-5.el9
• libgudev-237-1.el9
• libgusb-0.3.8-2.el9
• libibverbs-54.0-1.el9
• libicu-67.1-10.el9_6
• libidn2-2.3.0-7.el9
• libini_config-1.3.1-53.el9
• libipa_hbac-2.9.6-4.el9_6.2
• libjcat-0.1.6-3.el9
• libjose-14-1.el9
• libkcapi-1.4.0-2.el9
• libkcapi-hmaccalc-1.4.0-2.el9
• libksba-1.5.1-7.el9
• libldb-4.21.3-14.el9_6
• libluksmeta-9-12.el9
• libmaxminddb-1.5.2-4.el9
• libmicrohttpd-1:0.9.72-5.el9
• libmnl-1.0.4-16.el9_4
• libmodulemd-2.13.0-2.el9
• libmount-2.37.4-21.el9
• libndp-1.9-1.el9
• libnet-1.2-7.el9
• libnetfilter_conntrack-1.0.9-1.el9
• libnfnetlink-1.0.1-23.el9_5
• libnfsidmap-1:2.5.4-34.el9
• libnftnl-1.2.6-4.el9_4
• libnghttp2-1.43.0-6.el9
• libnl3-3.11.0-1.el9
• libnl3-cli-3.11.0-1.el9
• libnvme-1.11.1-1.el9
• libpath_utils-0.2.1-53.el9
• libpcap-14:1.10.0-4.el9
• libpkgconf-1.7.3-10.el9
• libpsl-0.21.1-5.el9
• libpwquality-1.4.4-8.el9
• libref_array-0.1.5-53.el9
• librepo-1.14.5-2.el9
• libreport-filesystem-2.15.2-6.el9
• librhsm-0.0.3-9.el9
• libseccomp-2.5.2-2.el9
• libselinux-3.6-3.el9
• libselinux-utils-3.6-3.el9
• libsemanage-3.6-5.el9_6
• libsepol-3.6-2.el9
• libsigsegv-2.13-4.el9
• libslirp-4.4.0-8.el9
• libsmartcols-2.37.4-21.el9
• libsmbclient-4.21.3-14.el9_6
• libsolv-0.7.24-3.el9
• libss-1.46.5-7.el9
• libssh-0.10.4-13.el9
• libssh-config-0.10.4-13.el9
• libsss_certmap-2.9.6-4.el9_6.2
• libsss_idmap-2.9.6-4.el9_6.2
• libsss_nss_idmap-2.9.6-4.el9_6.2
• libsss_sudo-2.9.6-4.el9_6.2
• libstdc++-11.5.0-5.el9_5
• libtalloc-2.4.2-1.el9
• libtasn1-4.16.0-9.el9
• libtdb-1.4.12-1.el9
• libteam-1.31-16.el9_1
• libtevent-0.16.1-1.el9
• libtirpc-1.3.3-9.el9
• libtool-ltdl-2.4.6-46.el9
• libunistring-0.9.10-15.el9
• liburing-2.5-1.el9
• libusbx-1.0.26-1.el9
• libuser-0.63-16.el9
• libutempter-1.2.1-6.el9
• libuuid-2.37.4-21.el9
• libuv-1:1.42.0-2.el9_4
• libverto-0.3.2-3.el9
• libverto-libev-0.3.2-3.el9
• libwbclient-4.21.3-14.el9_6
• libxcrypt-4.4.18-3.el9
• libxml2-2.9.13-12.el9_6
• libxmlb-0.3.10-1.el9
• libyaml-0.2.5-7.el9
• libzstd-1.5.5-1.el9
• linux-firmware-20250812-151.4.el9_6
• linux-firmware-whence-20250812-151.4.el9_6
• lmdb-libs-0.9.29-3.el9
• logrotate-3.18.0-9.el9
• lsof-4.94.0-3.el9
• lua-libs-5.4.4-4.el9
• luksmeta-9-12.el9
• lvm2-9:2.03.28-6.el9
• lvm2-libs-9:2.03.28-6.el9
• lz4-libs-1.9.3-5.el9
• lzo-2.10-7.el9
• mdadm-4.3-4.el9_5
• mokutil-2:0.6.0-4.el9
• mpfr-4.1.0-7.el9
• nano-5.6.1-7.el9
• ncurses-6.2-10.20210508.el9_6.2
• ncurses-base-6.2-10.20210508.el9_6.2
• ncurses-libs-6.2-10.20210508.el9_6.2
• net-tools-2.0-0.64.20160912git.el9
• netavark-2:1.14.1-1.el9_6
• nettle-3.10.1-1.el9
• newt-0.52.21-11.el9
• nfs-utils-1:2.5.4-34.el9
• nftables-1:1.0.9-3.el9
• nmap-ncat-3:7.92-3.el9
• nmstate-2.2.48-2.el9_6
• npth-1.6-8.el9
• nss-altfiles-2.18.1-20.el9
• numactl-libs-2.0.19-1.el9
• nvme-cli-2.11-6.el9_6
• oniguruma-6.9.6-1.el9.6
• openldap-2.6.8-4.el9
• openshift-clients-4.20.0-202509051528.p2.ga434281.assembly.stream.el9
• openshift-kubelet-4.20.0-202509232257.p2.ge0d4216.assembly.stream.el9
• openssh-8.7p1-45.el9
• openssh-clients-8.7p1-45.el9
• openssh-server-8.7p1-45.el9
• openssl-1:3.2.2-6.el9_5.1
• openssl-fips-provider-3.0.7-6.el9_5
• openssl-fips-provider-so-3.0.7-6.el9_5
• openssl-libs-1:3.2.2-6.el9_5.1
• openvswitch-selinux-extra-policy-1.0-39.el9fdp
• openvswitch3.5-3.5.1-33.el9fdp
• os-prober-1.77-12.el9_5
• ose-aws-ecr-image-credential-provider-4.19.0-202508252101.p2.g425c1c5.assembly.stream.el9
• ose-azure-acr-image-credential-provider-4.20.0-202509051528.p2.gd469d04.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider-4.20.0-202509051528.p2.gf940e72.assembly.stream.el9
• ostree-2025.2-2.el9_6
• ostree-libs-2025.2-2.el9_6
• p11-kit-0.25.3-3.el9_5
• p11-kit-trust-0.25.3-3.el9_5
• pam-1.5.1-26.el9_6
• passt-0^20250217.ga1e48a0-10.el9_6
• passt-selinux-0^20250217.ga1e48a0-10.el9_6
• passwd-0.80-12.el9
• pciutils-3.7.0-7.el9
• pciutils-libs-3.7.0-7.el9
• pcre-8.44-4.el9
• pcre2-10.40-6.el9
• pcre2-syntax-10.40-6.el9
• perl-AutoLoader-5.74-481.1.el9_6
• perl-B-1.80-481.1.el9_6
• perl-Carp-1.50-460.el9
• perl-Class-Struct-0.66-481.1.el9_6
• perl-Data-Dumper-2.174-462.el9
• perl-Digest-1.19-4.el9
• perl-Digest-MD5-2.58-4.el9
• perl-Encode-4:3.08-462.el9
• perl-Errno-1.30-481.1.el9_6
• perl-Exporter-5.74-461.el9
• perl-Fcntl-1.13-481.1.el9_6
• perl-File-Basename-2.85-481.1.el9_6
• perl-File-Path-2.18-4.el9
• perl-File-Temp-1:0.231.100-4.el9
• perl-File-stat-1.09-481.1.el9_6
• perl-FileHandle-2.03-481.1.el9_6
• perl-Getopt-Long-1:2.52-4.el9
• perl-Getopt-Std-1.12-481.1.el9_6
• perl-HTTP-Tiny-0.076-462.el9
• perl-IO-1.43-481.1.el9_6
• perl-IO-Socket-IP-0.41-5.el9
• perl-IO-Socket-SSL-2.073-2.el9
• perl-IPC-Open3-1.21-481.1.el9_6
• perl-MIME-Base64-3.16-4.el9
• perl-Mozilla-CA-20200520-6.el9
• perl-NDBM_File-1.15-481.1.el9_6
• perl-Net-SSLeay-1.94-1.el9
• perl-POSIX-1.94-481.1.el9_6
• perl-PathTools-3.78-461.el9
• perl-Pod-Escapes-1:1.07-460.el9
• perl-Pod-Perldoc-3.28.01-461.el9
• perl-Pod-Simple-1:3.42-4.el9
• perl-Pod-Usage-4:2.01-4.el9
• perl-Scalar-List-Utils-4:1.56-462.el9
• perl-SelectSaver-1.02-481.1.el9_6
• perl-Socket-4:2.031-4.el9
• perl-Storable-1:3.21-460.el9
• perl-Symbol-1.08-481.1.el9_6
• perl-Term-ANSIColor-5.01-461.el9
• perl-Term-Cap-1.17-460.el9
• perl-Text-ParseWords-3.30-460.el9
• perl-Text-Tabs+Wrap-2013.0523-460.el9
• perl-Time-Local-2:1.300-7.el9
• perl-URI-5.09-3.el9
• perl-base-2.27-481.1.el9_6
• perl-constant-1.33-461.el9
• perl-if-0.60.800-481.1.el9_6
• perl-interpreter-4:5.32.1-481.1.el9_6
• perl-libnet-3.13-4.el9
• perl-libs-4:5.32.1-481.1.el9_6
• perl-mro-1.23-481.1.el9_6
• perl-overload-1.31-481.1.el9_6
• perl-overloading-0.02-481.1.el9_6
• perl-parent-1:0.238-460.el9
• perl-podlators-1:4.14-460.el9
• perl-subs-1.03-481.1.el9_6
• perl-vars-1.05-481.1.el9_6
• pigz-2.8-1.el9
• pkgconf-1.7.3-10.el9
• pkgconf-m4-1.7.3-10.el9
• pkgconf-pkg-config-1.7.3-10.el9
• podman-5:5.4.0-13.el9_6
• policycoreutils-3.6-2.1.el9
• policycoreutils-python-utils-3.6-2.1.el9
• polkit-0.117-13.el9
• polkit-libs-0.117-13.el9
• polkit-pkla-compat-0.1-21.el9
• popt-1.18-8.el9
• procps-ng-3.3.17-14.el9
• protobuf-c-1.3.3-13.el9
• psmisc-23.4-3.el9
• publicsuffix-list-dafsa-20210518-3.el9
• python-unversioned-command-3.9.21-2.el9_6.2
• python3-3.9.21-2.el9_6.2
• python3-audit-3.1.5-4.el9
• python3-chardet-4.0.0-5.el9
• python3-cloud-what-1.29.45.1-1.el9_6
• python3-dateutil-1:2.8.1-7.el9
• python3-dbus-1.2.18-2.el9
• python3-decorator-4.4.2-6.el9
• python3-distro-1.5.0-7.el9
• python3-dnf-4.14.0-25.el9
• python3-dnf-plugin-versionlock-4.3.0-20.el9
• python3-dnf-plugins-core-4.3.0-20.el9
• python3-gobject-base-3.40.1-6.el9
• python3-gobject-base-noarch-3.40.1-6.el9
• python3-gpg-1.15.1-6.el9
• python3-hawkey-0.69.0-13.el9
• python3-idna-2.10-7.el9_4.1
• python3-iniparse-0.4-45.el9
• python3-inotify-0.9.6-25.el9
• python3-libcomps-0.1.18-1.el9
• python3-libdnf-0.69.0-13.el9
• python3-librepo-1.14.5-2.el9
• python3-libs-3.9.21-2.el9_6.2
• python3-libselinux-3.6-3.el9
• python3-libsemanage-3.6-5.el9_6
• python3-pip-wheel-21.3.1-1.el9
• python3-policycoreutils-3.6-2.1.el9
• python3-pysocks-1.7.1-12.el9
• python3-pyyaml-5.4.1-6.el9
• python3-requests-2.25.1-10.el9_6
• python3-rpm-4.16.1.3-37.el9
• python3-setools-4.4.4-1.el9
• python3-setuptools-53.0.0-13.el9_6.1
• python3-setuptools-wheel-53.0.0-13.el9_6.1
• python3-six-1.15.0-9.el9
• python3-subscription-manager-rhsm-1.29.45.1-1.el9_6
• python3-systemd-234-19.el9
• python3-urllib3-1.26.5-6.el9
• qemu-guest-agent-17:9.1.0-15.el9_6.9
• quota-1:4.09-4.el9
• quota-nls-1:4.09-4.el9
• readline-8.1-4.el9
• redhat-release-9.6-0.1.el9
• redhat-release-eula-9.6-0.1.el9
• rpcbind-1.2.6-7.el9
• rpm-4.16.1.3-37.el9
• rpm-build-libs-4.16.1.3-37.el9
• rpm-libs-4.16.1.3-37.el9
• rpm-ostree-2025.6-5.el9_6
• rpm-ostree-libs-2025.6-5.el9_6
• rpm-plugin-selinux-4.16.1.3-37.el9
• rpm-plugin-systemd-inhibit-4.16.1.3-37.el9
• rpm-sign-libs-4.16.1.3-37.el9
• rsync-3.2.5-3.el9
• runc-4:1.2.4-2.el9
• samba-client-libs-4.21.3-14.el9_6
• samba-common-4.21.3-14.el9_6
• samba-common-libs-4.21.3-14.el9_6
• sed-4.8-9.el9
• selinux-policy-38.1.53-5.el9_6
• selinux-policy-targeted-38.1.53-5.el9_6
• setup-2.13.7-10.el9
• sg3_utils-1.47-10.el9
• sg3_utils-libs-1.47-10.el9
• shadow-utils-2:4.9-12.el9
• shadow-utils-subid-2:4.9-12.el9
• shared-mime-info-2.1-5.el9
• shim-aa64-15.8-4.el9_3
• skopeo-2:1.18.1-2.el9_6
• slang-2.3.2-11.el9
• slirp4netns-1.3.2-1.el9
• snappy-1.1.8-8.el9
• socat-1.7.4.1-6.el9_6.1
• sqlite-libs-3.34.1-8.el9_6
• squashfs-tools-4.4-10.git1.el9
• ssh-key-dir-0.1.4-1.el9
• sssd-2.9.6-4.el9_6.2
• sssd-ad-2.9.6-4.el9_6.2
• sssd-client-2.9.6-4.el9_6.2
• sssd-common-2.9.6-4.el9_6.2
• sssd-common-pac-2.9.6-4.el9_6.2
• sssd-ipa-2.9.6-4.el9_6.2
• sssd-krb5-2.9.6-4.el9_6.2
• sssd-krb5-common-2.9.6-4.el9_6.2
• sssd-ldap-2.9.6-4.el9_6.2
• sssd-nfs-idmap-2.9.6-4.el9_6.2
• sssd-proxy-2.9.6-4.el9_6.2
• stalld-1.20.4-1.el9_6
• strace-6.12-1.el9
• subscription-manager-1.29.45.1-1.el9_6
• subscription-manager-rhsm-certificates-20220623-1.el9
• sudo-1.9.5p2-10.el9_6.2
• systemd-252-51.el9_6.2
• systemd-journal-remote-252-51.el9_6.2
• systemd-libs-252-51.el9_6.2
• systemd-pam-252-51.el9_6.2
• systemd-rpm-macros-252-51.el9_6.2
• systemd-udev-252-51.el9_6.2
• tar-2:1.34-7.el9
• teamd-1.31-16.el9_1
• tmux-3.2a-5.el9
• toolbox-0.1.2-1.rhaos4.19.el9
• tpm2-tools-5.2-4.el9
• tpm2-tss-3.2.3-1.el9
• tzdata-2025b-1.el9
• unbound-libs-1.16.2-19.el9_6.1
• usermode-1.114-6.el9
• userspace-rcu-0.12.1-6.el9
• util-linux-2.37.4-21.el9
• util-linux-core-2.37.4-21.el9
• vim-minimal-2:8.2.2637-22.el9_6
• virt-what-1.27-1.el9
• which-2.21-30.el9_6
• xfsprogs-6.4.0-5.el9
• xz-5.2.5-8.el9_0
• xz-libs-5.2.5-8.el9_0
• yajl-2.1.0-25.el9
• zlib-1.2.11-40.el9
• zram-generator-0.3.2-7.el9
• zstd-1.5.5-1.el9

Changed:

• NetworkManager 1:1.52.0-5.el9_6 → 1:1.52.0-7.el9_6
• NetworkManager-cloud-setup 1:1.52.0-5.el9_6 → 1:1.52.0-7.el9_6
• NetworkManager-libnm 1:1.52.0-5.el9_6 → 1:1.52.0-7.el9_6
• NetworkManager-ovs 1:1.52.0-5.el9_6 → 1:1.52.0-7.el9_6
• NetworkManager-team 1:1.52.0-5.el9_6 → 1:1.52.0-7.el9_6
• NetworkManager-tui 1:1.52.0-5.el9_6 → 1:1.52.0-7.el9_6
• container-selinux 4:2.237.0-1.el9_6 → 4:2.237.0-2.el9_6
• coreos-installer 0.23.0-1.el9 → 0.24.0-3.el9_6
• coreos-installer-bootinfra 0.23.0-1.el9 → 0.24.0-3.el9_6
• cri-o 1.33.4-3.rhaos4.20.git4d2f569.el9 → 1.33.4-4.rhaos4.20.gitc8e7df2.el9
• crun 1.22-1.el9_6 → 1.23.1-2.el9_6
• dnsmasq 2.85-16.el9_4 → 2.85-17.el9_6
• gnutls 3.8.3-6.el9 → 3.8.3-6.el9_6.2
• irqbalance 2:1.9.4-2.el9 → 2:1.9.4-2.el9_6.2
• kernel 5.14.0-570.41.1.el9_6 → 5.14.0-570.49.1.el9_6
• kernel-core 5.14.0-570.41.1.el9_6 → 5.14.0-570.49.1.el9_6
• kernel-modules 5.14.0-570.41.1.el9_6 → 5.14.0-570.49.1.el9_6
• kernel-modules-core 5.14.0-570.41.1.el9_6 → 5.14.0-570.49.1.el9_6
• kernel-modules-extra 5.14.0-570.41.1.el9_6 → 5.14.0-570.49.1.el9_6
• libldb 4.21.3-7.el9_6 → 4.21.3-14.el9_6
• libsmbclient 4.21.3-7.el9_6 → 4.21.3-14.el9_6
• libwbclient 4.21.3-7.el9_6 → 4.21.3-14.el9_6
• linux-firmware 20250716-151.3.el9_6 → 20250812-151.4.el9_6
• linux-firmware-whence 20250716-151.3.el9_6 → 20250812-151.4.el9_6
• openshift-kubelet 4.20.0-202509082356.p2.g72a1bee.assembly.stream.el9 → 4.20.0-202509232257.p2.ge0d4216.assembly.stream.el9
• ostree 2025.1-1.el9 → 2025.2-2.el9_6
• ostree-libs 2025.1-1.el9 → 2025.2-2.el9_6
• podman 5:5.4.0-12.el9_6 → 5:5.4.0-13.el9_6
• qemu-guest-agent 17:9.1.0-15.el9_6.7 → 17:9.1.0-15.el9_6.9
• samba-client-libs 4.21.3-7.el9_6 → 4.21.3-14.el9_6
• samba-common 4.21.3-7.el9_6 → 4.21.3-14.el9_6
• samba-common-libs 4.21.3-7.el9_6 → 4.21.3-14.el9_6
• stalld 1.19.8-2.el9_6 → 1.20.4-1.el9_6
• sudo 1.9.5p2-10.el9_6.1 → 1.9.5p2-10.el9_6.2
• systemd 252-51.el9_6.1 → 252-51.el9_6.2
• systemd-journal-remote 252-51.el9_6.1 → 252-51.el9_6.2
• systemd-libs 252-51.el9_6.1 → 252-51.el9_6.2
• systemd-pam 252-51.el9_6.1 → 252-51.el9_6.2
• systemd-rpm-macros 252-51.el9_6.1 → 252-51.el9_6.2
• systemd-udev 252-51.el9_6.1 → 252-51.el9_6.2

Extensions

Full list (144 packages)

• NetworkManager-libreswan-1.2.24-1.el9.aarch64
• bison-3.7.4-5.el9.aarch64
• corosync-3.1.9-2.el9_6.aarch64
• corosynclib-3.1.9-2.el9_6.aarch64
• cpp-11.5.0-5.el9_5.aarch64
• crun-wasm-1.8.5-5.rhaos4.14.el9.aarch64
• elfutils-libelf-devel-0.192-6.el9_6.aarch64
• fence-agents-all-4.10.0-86.el9_6.9.aarch64
• fence-agents-amt-ws-4.10.0-86.el9_6.9.noarch
• fence-agents-apc-4.10.0-86.el9_6.9.noarch
• fence-agents-apc-snmp-4.10.0-86.el9_6.9.noarch
• fence-agents-bladecenter-4.10.0-86.el9_6.9.noarch
• fence-agents-brocade-4.10.0-86.el9_6.9.noarch
• fence-agents-cisco-mds-4.10.0-86.el9_6.9.noarch
• fence-agents-cisco-ucs-4.10.0-86.el9_6.9.noarch
• fence-agents-common-4.10.0-86.el9_6.9.noarch
• fence-agents-drac5-4.10.0-86.el9_6.9.noarch
• fence-agents-eaton-snmp-4.10.0-86.el9_6.9.noarch
• fence-agents-emerson-4.10.0-86.el9_6.9.noarch
• fence-agents-eps-4.10.0-86.el9_6.9.noarch
• fence-agents-heuristics-ping-4.10.0-86.el9_6.9.noarch
• fence-agents-hpblade-4.10.0-86.el9_6.9.noarch
• fence-agents-ibmblade-4.10.0-86.el9_6.9.noarch
• fence-agents-ifmib-4.10.0-86.el9_6.9.noarch
• fence-agents-ilo-moonshot-4.10.0-86.el9_6.9.noarch
• fence-agents-ilo-mp-4.10.0-86.el9_6.9.noarch
• fence-agents-ilo-ssh-4.10.0-86.el9_6.9.noarch
• fence-agents-ilo2-4.10.0-86.el9_6.9.noarch
• fence-agents-intelmodular-4.10.0-86.el9_6.9.noarch
• fence-agents-ipdu-4.10.0-86.el9_6.9.noarch
• fence-agents-ipmilan-4.10.0-86.el9_6.9.noarch
• fence-agents-kdump-4.10.0-86.el9_6.9.aarch64
• fence-agents-mpath-4.10.0-86.el9_6.9.noarch
• fence-agents-redfish-4.10.0-86.el9_6.9.aarch64
• fence-agents-rhevm-4.10.0-86.el9_6.9.noarch
• fence-agents-rsa-4.10.0-86.el9_6.9.noarch
• fence-agents-rsb-4.10.0-86.el9_6.9.noarch
• fence-agents-sbd-4.10.0-86.el9_6.9.noarch
• fence-agents-scsi-4.10.0-86.el9_6.9.noarch
• fence-agents-vmware-rest-4.10.0-86.el9_6.9.noarch
• fence-agents-vmware-soap-4.10.0-86.el9_6.9.noarch
• fence-agents-wti-4.10.0-86.el9_6.9.noarch
• flex-2.6.4-9.el9.aarch64
• fmt-9.1.0-1.el9.aarch64
• gcc-11.5.0-5.el9_5.aarch64
• glibc-devel-2.34-168.el9_6.23.aarch64
• gnutls-dane-3.8.3-6.el9_6.2.aarch64
• gnutls-utils-3.8.3-6.el9_6.2.aarch64
• ipmitool-1.8.18-27.el9.aarch64
• kernel-5.14.0-570.49.1.el9_6.aarch64
• kernel-64k-core-5.14.0-570.49.1.el9_6.aarch64
• kernel-64k-modules-5.14.0-570.49.1.el9_6.aarch64
• kernel-64k-modules-core-5.14.0-570.49.1.el9_6.aarch64
• kernel-64k-modules-extra-5.14.0-570.49.1.el9_6.aarch64
• kernel-core-5.14.0-570.49.1.el9_6.aarch64
• kernel-devel-5.14.0-570.49.1.el9_6.aarch64
• kernel-headers-5.14.0-570.49.1.el9_6.aarch64
• kernel-modules-5.14.0-570.49.1.el9_6.aarch64
• kernel-modules-extra-5.14.0-570.49.1.el9_6.aarch64
• krb5-pkinit-1.21.1-8.el9_6.aarch64
• krb5-workstation-1.21.1-8.el9_6.aarch64
• ldns-1.7.1-12.el9.aarch64
• libasan-11.5.0-5.el9_5.aarch64
• libkadm5-1.21.1-8.el9_6.aarch64
• libknet1-1.28-1.el9.aarch64
• libknet1-compress-bzip2-plugin-1.28-1.el9.aarch64
• libknet1-compress-lz4-plugin-1.28-1.el9.aarch64
• libknet1-compress-lzma-plugin-1.28-1.el9.aarch64
• libknet1-compress-lzo2-plugin-1.28-1.el9.aarch64
• libknet1-compress-plugins-all-1.28-1.el9.aarch64
• libknet1-compress-zlib-plugin-1.28-1.el9.aarch64
• libknet1-compress-zstd-plugin-1.28-1.el9.aarch64
• libknet1-crypto-nss-plugin-1.28-1.el9.aarch64
• libknet1-crypto-openssl-plugin-1.28-1.el9.aarch64
• libknet1-crypto-plugins-all-1.28-1.el9.aarch64
• libknet1-plugins-all-1.28-1.el9.aarch64
• libmpc-1.2.1-4.el9.aarch64
• libnozzle1-1.28-1.el9.aarch64
• libqb-2.0.8-1.el9.aarch64
• libreswan-5.2-1.el9fdp.aarch64
• libubsan-11.5.0-5.el9_5.aarch64
• libwsman1-2.6.8-23.el9.aarch64
• libxcrypt-devel-4.4.18-3.el9.aarch64
• libxslt-1.1.34-13.el9_6.aarch64
• libzstd-devel-1.5.5-1.el9.aarch64
• lld-17.0.6-1.el9.aarch64
• lld-libs-17.0.6-1.el9.aarch64
• llvm-17.0.6-5.el9.aarch64
• llvm-libs-17.0.6-5.el9.aarch64
• lm_sensors-libs-3.6.0-10.el9.aarch64
• m4-1.4.19-1.el9.aarch64
• make-1:4.3-8.el9.aarch64
• net-snmp-libs-1:5.9.1-17.el9.aarch64
• net-snmp-utils-1:5.9.1-17.el9.aarch64
• nspr-4.36.0-4.el9_4.aarch64
• nss-3.112.0-4.el9_4.aarch64
• nss-softokn-3.112.0-4.el9_4.aarch64
• nss-softokn-freebl-3.112.0-4.el9_4.aarch64
• nss-sysinit-3.112.0-4.el9_4.aarch64
• nss-tools-3.112.0-4.el9_4.aarch64
• nss-util-3.112.0-4.el9_4.aarch64
• openssl-devel-1:3.2.2-6.el9_5.1.aarch64
• openvswitch3.5-ipsec-3.5.1-33.el9fdp.aarch64
• openwsman-python3-2.6.8-23.el9.aarch64
• pacemaker-2.1.9-1.2.el9_6.aarch64
• pacemaker-cli-2.1.9-1.2.el9_6.aarch64
• pacemaker-cluster-libs-2.1.9-1.2.el9_6.aarch64
• pacemaker-libs-2.1.9-1.2.el9_6.aarch64
• pacemaker-schemas-2.1.9-1.2.el9_6.noarch
• pcp-conf-6.3.7-1.el9_6.aarch64
• pcp-libs-6.3.7-1.el9_6.aarch64
• pcs-0.11.9-2.el9_6.1.aarch64
• perl-TimeDate-1:2.33-6.el9.noarch
• protobuf-3.14.0-16.el9.aarch64
• python3-cffi-1.14.5-5.el9.aarch64
• python3-cryptography-36.0.1-5.el9_6.aarch64
• python3-lxml-4.6.5-3.el9.aarch64
• python3-openvswitch3.5-3.5.1-33.el9fdp.aarch64
• python3-ply-3.11-14.el9.noarch
• python3-pycparser-2.20-6.el9.noarch
• python3-pycurl-7.43.0.6-8.el9.aarch64
• python3-pyparsing-2.4.7-9.el9.noarch
• python3-tornado-6.4.2-2.el9_6.2.aarch64
• redhat-logos-90.5-1.el9_6.1.aarch64
• resource-agents-4.10.0-71.el9_6.6.aarch64
• ruby-3.0.7-165.el9_5.aarch64
• ruby-default-gems-3.0.7-165.el9_5.noarch
• ruby-libs-3.0.7-165.el9_5.aarch64
• rubygem-bigdecimal-3.0.0-165.el9_5.aarch64
• rubygem-bundler-2.2.33-165.el9_5.noarch
• rubygem-io-console-0.5.7-165.el9_5.aarch64
• rubygem-json-2.5.1-165.el9_5.aarch64
• rubygem-psych-3.3.2-165.el9_5.aarch64
• rubygem-rdoc-6.3.4.1-165.el9_5.noarch
• rubygem-rexml-3.2.5-165.el9_5.noarch
• rubygems-3.2.33-165.el9_5.noarch
• sbd-1.5.2-1.el9.aarch64
• spdlog-1.13.0-1.rhaos4.14.el9.aarch64
• sysstat-12.5.4-9.el9.aarch64
• telnet-1:0.17-85.el9.aarch64
• usbguard-1.0.0-16.el9.aarch64
• usbguard-selinux-1.0.0-16.el9.noarch
• wasmedge-0.14.0-2.rhaos4.20.el9.aarch64
• zlib-devel-1.2.11-40.el9.aarch64

Red Hat Enterprise Linux CoreOS base layer: 9.6.20250925-0