Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.20.0-okd-scos.ec.9

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next
  • upgrade-minor Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next

Upgrades from:

• 4.20.0-okd-scos.ec.8 - Success
• 4.19.0-okd-scos.8 (changes) - Success

---

Loading changelog, this may take a while ...

Changes from 4.20.0-okd-scos.ec.8

Created: 2025-07-22 20:45:33 +0000 UTC

Image Digest: sha256:ae2390bcec7fda19936161c54b64500db159820dfc13da8e8e75da87b9c8e10b

Release 4.20.0-okd-scos.ec.9 was created from registry.ci.openshift.org/origin/release-scos:4.20.0-0.okd-scos-2025-07-22-135456

Components

• Kubectl upgraded from 1.32.1 to 1.33.3
• Kubernetes upgraded from 1.32.6 to 1.33.2
• Kubernetes Tests upgraded from 1.32.5 to 1.33.2
• CentOS Stream CoreOS upgraded from 10.0.20250713-0 to 10.0.20250715-0

  The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
PersistentIPsForVirtualization (12 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ExternalSnapshotMetadata (0 tests)			Enabled (New)	Enabled (New)

agent-installer-api-server

• MGMT-20608: Add more operators to the virtualization bundle: COO, NUMA resources and OADP (#7828) #7828
• NO-ISSUE: Set additionalTrustBundle boolean to false on ABI flow (#7868) #7868
• Add documentation for the bmh cluster reference annotation (#7864) #7864
• NO-ISSUE: [master] Bump OCP versions: 4.13, 4.18, 4.16 (#7866) #7866
• ACM-21309: Support ForceInsecurePolicy for overriding policy.json in discover ignition (#7807) #7807
• NO-ISSUE: Update rpm lockfiles for acm (hermetic) builds (#7863) #7863
• NO-ISSUE: [master] Bump OCP versions: 4.19 (#7858) #7858
• OCPBUGS-59300: Bump glog to v1.2.5 (#7855) #7855
• NO-ISSUE: [master] Bump OCP versions: 4.20 (#7853) #7853
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• NO-ISSUE: Update Konflux references (#1184) #1184
• Full changelog

agent-installer-node-agent

• NO-ISSUE: Update Konflux references (#1064) #1064
• NO-ISSUE: Update Konflux references (#1043) #1043
• OCPBUGS-59297: Bump glog to 1.25 (#1061) #1061
• Full changelog

aws-cluster-api-controllers

• OCPBUGS-59243, OCPBUGS-59244: UPSTREAM: 5590: Bump golog v1.2.5 #557
• Full changelog

aws-ebs-csi-driver

• STOR-2402: Rebase to upstream v1.45.0 for OCP 4.20 #289
• Full changelog

baremetal-installer, installer, installer-artifacts

• OCPBUGS-57527: Add descriptions back to the aws survey #9816
• MGMT-20992: feat: update determineTopologies function #9815
• OCPBUGS-59220: Refine check for supported SNO platforms to include IBMCloud #9836
• no-jira: Revert “Merge pull request #9736 from barbacbd/CORS-4058” #9837
• Full changelog

cli, cli-artifacts, deployer, tools

• CNTRLPLANE-1054: Update k8s dependencies to 1.33 with bumping the other dependencies #2058
• OCPBUGS-50992: Help with must-gather scheduling through suggesting preferance of nodes #2060
• Revert “WRKLDS-1713: Remove schema1” #2059
• OTA-1575: pkg/cli/admin/upgrade/recommend: “accepted … via ConditionalUpdateRisk” #2040
• CORENET-5412: adm, inspect, ns: Collect UserDefinedNetwork CRs #2011
• Full changelog

cloud-credential-operator

• CCO-682: Update to k8s v0.33.2 #885
• OCPBUGS-59511: add read only filesystem #884
• Full changelog

cloud-network-config-controller

• OCPBUGS-57778: Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.20 #175
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-57613: Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART for 4.20 #392
• Full changelog

cluster-config-api

• OCPBUGS-55668: ipam, virt: remove the PersistentIPsForVirt FG #2309
• OCPBUGS-59574: Revert #2398 “Revert \“Revert \“CNTRLPLANE-72: remove RoleBindingRestriction CRD from payload\”\“” #2414
• STOR-2462: Add ExternalSnapshotMetadata FeatureGate #2381
• Revert “Revert “CNTRLPLANE-72: remove RoleBindingRestriction CRD from payload”” #2398
• CONSOLE-4665: Disable serving of old v1alpha1 CRD version #2411
• Fix kubebuilder tools/envtest index for v1.33.2 (add v prefix) #2410
• makefile: bump-publish-kubebuilder-tools to 1.33.2 #2408
• envtest-releases: add 1.33.2 to index #2407
• Monitoring API: Add AlertmanagerMainConfig #2148
• Full changelog

cluster-etcd-operator

• OCPBUGS-50488: add missing ports to svc and pod spec #1444
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-58232: Don’t wait for 2 etcd members when the cluster is TNF installed with assisted-installer #1866
• OCPBUGS-43521: Set goaway chance to 0.001 #1863
• NO-JIRA: Update the deprecated API usage alerts for 1.33. #1871
• Revert “OCPBUGS-56551: certregenerationcontroller: start configInformers again” #1869
• Full changelog

cluster-kube-controller-manager-operator

• CNTRLPLANE-371: Update Kubernetes to v1.33.2 #840
• Full changelog

cluster-kube-scheduler-operator

• OCPSTRAT-2001: Add readOnlyRootFilesystem to kube-scheduler-operator #568
• OCPSTRAT-2001: Add readonlyRootFilesystem #564
• CNTRLPLANE-371: Update to Kubernetes v1.33.2 #562
• Full changelog

cluster-machine-approver

• OCPBUGS-57610: Updating ose-cluster-machine-approver-container image to be consistent with ART for 4.20 #271
• Full changelog

cluster-monitoring-operator

• MON-4255: Bump prometheus-operator dependencies to v0.84.0 #2619
• MON-4255: Bump prometheus-operator to v0.83 #2614
• OCPBUGS-57561: Updating cluster-monitoring-operator-container image to be consistent with ART for 4.20 #2611
• MON-4288: set up openshift-tests-extension and add a sanity test #2616
• MON-4282: Multi-tenant support for KSM’s CRS #2595
• Full changelog

cluster-network-operator

• CORENET-5881: Reconfigure NBDB for route advertisements in LGW #2735
• OCPBUGS-58448: fg, virt: remove FeatureGatePersistentIPsForVirtualization #2737
• OCPBUGS-58155: CNO must skip watching IngressController if Ingress capability is disabled in HyperShift #2731
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-59354: E2E add test to verify guaranteed pod is running after kubelet restart (#1361) #1361
• Full changelog

cluster-olm-operator

• OCPSTRAT-2075: add missing tmp mounting to fix write to read only fil… #129
• OPRUN-3999: Validate feature-gate arguments #128
• Full changelog

cluster-openshift-controller-manager-operator

• CNTRLPLANE-926: Add readonlyRootFilesystem #392
• CNTRLPLANE-1054: Update k8s deps to 1.33.2 #393
• Full changelog

cluster-samples-operator

• OCPBUGS-59324: Periodic sync of supported OCP samples #631
• Full changelog

cluster-storage-operator

• STOR-2330: Add labels to subscribe vSphere CSI driver operator to NPs #597
• Full changelog

cluster-update-keys

• NO-ISSUE: OWNERS: Add Mrunal, remove folks who are no longer active in OpenShift-core #77
• OCPNODE-3006: Drop openshift policy to DevPreviewNoUpgrade for ClusterImagePolicy to v1 #76
• Full changelog

console

• OCPBUGS-59550: add data-test attrs to console plugins table #15302
• OCPBUGS-58858: Update model flags when plugins load #15296
• CONSOLE-4633, CONSOLE-4672, CONSOLE-4682: Refactor JobActionFactory, ReplicationControllerFactory and remove global menuActions for job.tsx #15279
• CONSOLE-4491: Deanonymize Developer Sandbox users #15201
• CONSOLE-4499, CONSOLE-4654, CONSOLE-4656, CONSOLE-4657: Implement some CodeEditor RFEs #15254
• CONSOLE-4623: Add support for optional Console plugin dependencies #15183
• CONSOLE-4634: Refactor DeploymentActionFactory to hook form. #15209
• OCPBUGS-59195: Clicking on container dropdown button has no response when pod log is in fullscreen. #15278
• CONSOLE-4663: Replace Bootstrap .has-feedback with custom rule #15264
• CONSOLE-4659: Replace Bootstrap Responsive utilities with PatternFly … #15261
• ODC-7807: Migrate enzyme test to react testing library for helm-plugin #15244
• OCPBUGS-59277: update guided tour selector for Software catalog #15277
• CONSOLE-4655: Replace Bootstrap List group with PatternFly List #15259
• CONSOLE-4653: Allow custom icons in template annotation #15248
• Full changelog

console-operator

• OCPBUGS-45300: Fetch synced CM for the CertificateAuthority issuer #1017
• OCPBUGS-59099: Bump docs version #1015
• Full changelog

csi-external-attacher

• STOR-2392: Rebase to upstream v4.9.0 for OCP 4.20 #86
• Full changelog

csi-external-provisioner

• STOR-2392: Rebase to upstream v5.3.0 for OCP 4.20 #115
• Full changelog

csi-external-resizer

• STOR-2392: Rebase to upstream v1.14.0 for OCP 4.20 #171
• Full changelog

csi-external-snapshotter, csi-snapshot-controller

• STOR-2392: Rebase to upstream v8.3.0 for OCP 4.20 #181
• Full changelog

csi-livenessprobe

• STOR-2392: Rebase to upstream v2.16.0 for OCP 4.20 #75
• Full changelog

csi-node-driver-registrar

• STOR-2392: Rebase to upstream v2.14.0 for OCP 4.20 #82
• Full changelog

gcp-machine-controllers

• OCPBUGS-59376: Add max-concurrent-reconciles flag to machine actuator #124
• Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

• CNTRLPLANE-371: Update to Kubernetes v1.33.2 #2314
• Full changelog

hypershift

• NO-JIRA: chore(deps): update konflux references #6267
• OCPBUGS-59232: fix(test): resolve Azure DNS race condition in EnsureCustomAdminKubeconfigReachesTheKAS #6461
• MGMT-20826: Enable disabling of Ingress capability #6319
• NO-JIRA: unique clusterrole per hosted cluster for kubevirt CSI #6321
• CNTRLPLANE-952: New API to support specifying cluster-autoscaler flags #6236
• CNTRLPLANE-993: Skip azure 4.19 cp upgrade for now to let the 4.20 suite be covered. #6416
• CNTRLPLANE-204: feat(shared-ingress): Add socat tool to container image #6458
• OCPBUGS-43824: fix(test): reduce API call frequency to prevent rate limiting in NTO machineconfig test #6453
• OCPBUGS-58299: remove annotation is not working #6420
• MGMT-20793: Enable Disabling NodeTuning Capability #6356
• CNTRLPLANE-800: Remove code associated with Managed Identity v2 for ARO HCP #6105
• NO-JIRA: Update Created Azure Hosted Cluster on AKS doc #6451
• OCPBUGS-57742: Updating ose-hypershift-container image to be consistent with ART for 4.20 #6307
• CNTRLPLANE-1113: Add renovate configuration #6452
• Full changelog

ibmcloud-machine-controllers

• OCPBUGS-57837: Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART for 4.20 #65
• Full changelog

insights-operator

• RFE-4152: Add missing readonlyRootFilesystem (#1104) #1104
• CCXDEV-15041: update on-demand gathering docs (#1097) #1097
• CCXDEV-15045: update code to use v1alpha2 api version (#1093) #1093
• Full changelog

ironic

• OCPBUGS-55298: Bump ironic to unresponsive bmc commit #670
• METAL-1496: Force download and install from source #669
• METAL-1496: Revert “OCPBUGS-55298: Bump ironic to latest” #668
• Full changelog

ironic-agent

• METAL-1496: Force download and install from source #192
• Full changelog

kube-storage-version-migrator

• OCPBUGS-38523: Reduce the page size on list requests to the Kube API server #211
• NO-JIRA: Add DOWNSTREAM_OWNERS. #219
• Full changelog

machine-api-operator

• OCPCLOUD-2941: Bump k8s dependencies to 1.33; go 1.24 #1393
• OCPBUGS-59376: Enabled 10 concurrent reconciles on GCP #1390
• Full changelog

machine-config-operator

• OCPBUGS-58238: Image Mode creates new MOSBs when osbuilder is drained and it results in degraded MCPs #5161
• OCPBUGS-59367: Set our test suite as global #5179
• OCPBUGS-56115: Understand and eliminate noisy logs for MCN #5136
• Full changelog

monitoring-plugin

• OU-930: use non-legacy store for accurate hideGraphs value #473
• NO-JIRA: Update README.md with how to development with local perses instance #442
• Full changelog

multus-admission-controller

• OCPBUGS-57749: Updating ose-multus-admission-controller-container image to be consistent with ART for 4.20 #98
• OCPBUGS-59304: Update the github.com/golang/glog module to v1.2.4 #99
• Full changelog

multus-whereabouts-ipam-cni

• OCPBUGS-58405: Ds merge 7/15/25 #372
• Full changelog

must-gather

• CORENET-5412: network: Gather OVN-Kubernetes CUDN CRs #486
• Full changelog

oauth-apiserver

• CNTRLPLANE-5: Accept client-go feature gates and unrecognized feature gates via –feature-gates. #136
• Full changelog

oc-mirror

• OCPBUGS-58956: bump helm for CVE fix (#1213) #1213
• Full changelog

olm-catalogd, olm-operator-controller

• OPRUN-4017: Synchronize From Upstream Repositories #408
• NO-ISSUE: Synchronize From Upstream Repositories #405
• Full changelog

openshift-apiserver

• OCPBUGS-59262: Revert “Drop support for image manifest schema 1” #533
• Full changelog

openshift-controller-manager

• CNTRLPLANE-1054: Update k8s dependencies to 1.33.2 #405
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• NO-ISSUE: Synchronize From Upstream Repositories #1041
• NO-ISSUE: Synchronize From Upstream Repositories #1039
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-57578: Updating ose-ovn-kubernetes-base-container image to be consistent with ART for 4.20 #2640
• OCPBUGS-49824, OCPBUGS-57179: DownStream Merge [07-09-2025] #2659
• NO-JIRA: Update OWNERS file: Add Patryk/Martin as approvers #2665
• Full changelog

prometheus-alertmanager

• OCPBUGS-59400: Include go-verify-deps expected files in gitignore #106
• OCPBUGS-57770: Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 4.20 #103
• OCPBUGS-57770: fix: inconsistency vendored dir due to Konflux migration #105
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• MON-4255: Bump openshift/prometheus-operator to v0.84.0 #333
• Full changelog

stream-coreos, stream-coreos-extensions

• NO-JIRA: Add PeaceRebel (Bipin) to approvers list #1812
• Full changelog

tests

• NO-JIRA: Skip cert collection tests on hypershift #28937
• OCPBUGS-59555: Add ubi10 images to image-ecosystem #30001
• OPRUN-3965: Enable OTE for Operator Controller (OLMv1) #29949
• NO-JIRA: fix: nil pointer reference in pod count #30002
• NO-JIRA: oc idle: Increase timeout of endpointslice status check #29994
• CNTRLPLANE-371: Update to Kubernetes v1.33.2 #29709
• MULTIARCH-5390: Reapply “Merge pull request #29808 from Prashanth684/4552-cvo-test” #29967
• Revert “Revert “Revert “trt-2163: return error”“” #30000
• OCPEDGE-1983: [TNF] Fix test suite filtering to include Disrupted tagged tests #29996
• OCPBUGS-59203: OCPBUGS-57524: Improve MCN test stability #29981
• OCPBUGS-59159: Adjust DNS success rate to 98.0% for SNO upgrade test. #29978
• MON-4288: register CMO tests extension #29974
• OCPBUGS-58354: disruptioninclusterapiserver: bump timeout to 10 mins #29970
• Revert “Revert “trt-2163: return error”” #29964
• OCPBUGS-59372: revert: remove openshift/two-node suite from tna tests #29991
• Revert “CNF-17748: Add a comparing between static entry test” #29993
• NO-JIRA: Improve performance of run-resourcewatch #29955
• Full changelog

---

Node Image Info

Loading node image info, this may take a while ...

Package List

• cri-o-1.33.1-2.el10s
• kernel-6.12.0-105.el10
• openshift-kubelet-4.20.0-202507171059.p0.gb94367c.assembly.stream.el9
• systemd-257-11.el10

Full list (577 packages)

• NetworkManager-1:1.53.92-1.el10
• NetworkManager-cloud-setup-1:1.53.92-1.el10
• NetworkManager-libnm-1:1.53.92-1.el10
• NetworkManager-ovs-1:1.53.92-1.el10
• NetworkManager-tui-1:1.53.92-1.el10
• WALinuxAgent-udev-2.13.1.1-1.el10
• aardvark-dns-2:1.15.0-1.el10
• acl-2.3.2-4.el10
• adcli-0.9.2-9.el10
• afterburn-5.8.2-1.el10
• afterburn-dracut-5.8.2-1.el10
• alternatives-1.30-2.el10
• amd-gpu-firmware-20250708-18.el10
• amd-ucode-firmware-20250708-18.el10
• atheros-firmware-20250708-18.el10
• attr-2.5.2-5.el10
• audit-4.0.3-4.el10
• audit-libs-4.0.3-4.el10
• audit-rules-4.0.3-4.el10
• authselect-1.5.0-8.el10
• authselect-libs-1.5.0-8.el10
• avahi-libs-0.9~rc2-1.el10
• basesystem-11-22.el10
• bash-5.2.26-6.el10
• bash-completion-1:2.11-16.el10
• bind-libs-32:9.18.33-4.el10
• bind-license-32:9.18.33-4.el10
• bind-utils-32:9.18.33-4.el10
• binutils-2.41-56.el10
• binutils-gold-2.41-56.el10
• bootc-1.3.0-2.el10
• bootupd-0.2.28-2.el10
• brcmfmac-firmware-20250708-18.el10
• bsdtar-3.7.7-3.el10
• bubblewrap-0.10.0-3.el10
• bzip2-1.0.8-25.el10
• bzip2-libs-1.0.8-25.el10
• c-ares-1.25.0-6.el10
• ca-certificates-2024.2.69_v8.0.303-102.3.el10
• catatonit-5:0.2.1-1.el10
• centos-gpg-keys-10.0-9.el10
• centos-release-cloud-1-1.el10s
• centos-release-nfv-common-1-5.el10s
• centos-release-virt-common-1-1.el10s
• centos-stream-release-10.0-9.el10
• centos-stream-repos-10.0-9.el10
• checkpolicy-3.8-1.el10
• chrony-4.6.1-2.el10
• cifs-utils-7.2-1.el10
• cirrus-audio-firmware-20250708-18.el10
• clevis-21-8.el10
• clevis-dracut-21-8.el10
• clevis-luks-21-8.el10
• clevis-pin-tpm2-0.5.3-8.el10
• clevis-systemd-21-8.el10
• cloud-utils-growpart-0.33-11.el10
• composefs-1.0.8-1.el10
• composefs-libs-1.0.8-1.el10
• conmon-3:2.1.13-1.el10
• conmon-rs-0.6.6-2.el10s
• conntrack-tools-1.4.8-3.el10
• console-login-helper-messages-0.21.3-10.el10
• console-login-helper-messages-issuegen-0.21.3-10.el10
• console-login-helper-messages-profile-0.21.3-10.el10
• container-selinux-4:2.239.0-1.el10
• containers-common-5:0.63.0-1.el10
• containers-common-extra-5:0.63.0-1.el10
• coreos-installer-0.24.0-1.el10
• coreos-installer-bootinfra-0.24.0-1.el10
• coreutils-9.5-6.el10
• coreutils-common-9.5-6.el10
• cpio-2.15-3.el10
• cracklib-2.9.11-8.el10
• cracklib-dicts-2.9.11-8.el10
• cri-o-1.33.1-2.el10s
• cri-tools-1.33.0-2.el10s
• criu-3.19-9.el10
• criu-libs-3.19-9.el10
• crun-1.22-1.el10
• crypto-policies-20250714-1.git95bf40e.el10
• crypto-policies-scripts-20250714-1.git95bf40e.el10
• cryptsetup-2.7.5-2.el10
• cryptsetup-libs-2.7.5-2.el10
• curl-8.12.1-2.el10
• cyrus-sasl-gssapi-2.1.28-27.el10
• cyrus-sasl-lib-2.1.28-27.el10
• dbus-1:1.14.10-5.el10
• dbus-broker-36-1.el10
• dbus-common-1:1.14.10-5.el10
• dbus-libs-1:1.14.10-5.el10
• dbus-tools-1:1.14.10-5.el10
• device-mapper-10:1.02.206-3.el10
• device-mapper-event-10:1.02.206-3.el10
• device-mapper-event-libs-10:1.02.206-3.el10
• device-mapper-libs-10:1.02.206-3.el10
• device-mapper-multipath-0.9.9-10.el10
• device-mapper-multipath-libs-0.9.9-10.el10
• device-mapper-persistent-data-1.1.0-2.el10
• diffutils-3.10-8.el10
• dmidecode-1:3.6-3.el10
• dnf-4.20.0-16.el10
• dnf-data-4.20.0-16.el10
• dnsmasq-2.90-4.el10
• dosfstools-4.2-12.el10
• dracut-105-4.el10
• dracut-network-105-4.el10
• dracut-squash-105-4.el10
• duktape-2.7.0-10.el10
• e2fsprogs-1.47.1-4.el10
• e2fsprogs-libs-1.47.1-4.el10
• efi-filesystem-6-6.el10
• efibootmgr-18-8.el10
• efivar-libs-39-3.el10
• elfutils-debuginfod-client-0.193-1.el10
• elfutils-default-yama-scope-0.193-1.el10
• elfutils-libelf-0.193-1.el10
• elfutils-libs-0.193-1.el10
• erofs-utils-1.8.4-3.el10
• ethtool-2:6.11-5.el10
• expat-2.7.1-1.el10
• file-5.45-7.el10
• file-libs-5.45-7.el10
• filesystem-3.18-17.el10
• findutils-1:4.10.0-5.el10
• firewalld-filesystem-2.3.0-2.el10
• flashrom-1.3.0-8.el10
• flatpak-session-helper-1.16.0-5.el10
• fstrm-0.6.1-12.el10
• fuse-common-3.16.2-5.el10
• fuse-libs-2.9.9-25.el10
• fuse3-3.16.2-5.el10
• fuse3-libs-3.16.2-5.el10
• fwupd-1.9.26-3.el10
• fwupd-efi-1.6-3.el10
• fwupd-plugin-flashrom-1.9.26-3.el10
• gawk-5.3.0-6.el10
• gawk-all-langpacks-5.3.0-6.el10
• gdbm-1:1.23-11.el10
• gdbm-libs-1:1.23-11.el10
• geolite2-city-20191217-14.el10
• geolite2-country-20191217-14.el10
• gettext-envsubst-0.22.5-6.el10
• gettext-libs-0.22.5-6.el10
• gettext-runtime-0.22.5-6.el10
• git-core-2.47.3-1.el10
• glib2-2.80.4-4.el10
• glibc-2.39-38.el10
• glibc-common-2.39-38.el10
• glibc-gconv-extra-2.39-38.el10
• glibc-minimal-langpack-2.39-38.el10
• gmp-1:6.2.1-12.el10
• gnupg2-2.4.5-2.el10
• gnupg2-smime-2.4.5-2.el10
• gnutls-3.8.10-1.el10
• gobject-introspection-1.79.1-6.el10
• gpgme-1.23.2-6.el10
• grep-3.11-10.el10
• groff-base-1.23.0-10.el10
• grub2-common-1:2.12-19.el10
• grub2-efi-x64-1:2.12-19.el10
• grub2-pc-1:2.12-19.el10
• grub2-pc-modules-1:2.12-19.el10
• grub2-tools-1:2.12-19.el10
• grub2-tools-minimal-1:2.12-19.el10
• gssproxy-0.9.2-10.el10
• gzip-1.13-3.el10
• hostname-3.23-14.el10
• hwdata-0.379-10.5.el10
• ignition-2.21.0-3.el10
• ignition-grub-2.21.0-3.el10
• ima-evm-utils-1.6.2-2.el10
• info-7.1-6.el10
• inih-58-3.el10
• initscripts-service-10.26-2.el10
• intel-audio-firmware-20250708-18.el10
• intel-gpu-firmware-20250708-18.el10
• ipcalc-1.0.3-12.el10
• iproute-6.14.0-1.el10
• iproute-tc-6.14.0-1.el10
• iptables-libs-1.8.11-9.el10
• iptables-nft-1.8.11-9.el10
• iputils-20240905-3.el10
• irqbalance-2:1.9.4-4.el10
• iscsi-initiator-utils-6.2.1.11-0.git4b3e853.el10
• iscsi-initiator-utils-iscsiuio-6.2.1.11-0.git4b3e853.el10
• isns-utils-libs-0.103-1.el10
• jansson-2.14-3.el10
• jose-14-102.el10
• jq-1.7.1-11.el10
• json-c-0.18-3.el10
• json-glib-1.8.0-5.el10
• kbd-2.6.4-7.el10
• kbd-legacy-2.6.4-7.el10
• kbd-misc-2.6.4-7.el10
• kdump-utils-1.0.54-3.el10
• kernel-6.12.0-105.el10
• kernel-core-6.12.0-105.el10
• kernel-modules-6.12.0-105.el10
• kernel-modules-core-6.12.0-105.el10
• kernel-modules-extra-6.12.0-105.el10
• kexec-tools-2.0.31-1.el10
• keyutils-1.6.3-5.el10
• keyutils-libs-1.6.3-5.el10
• kmod-31-11.el10
• kmod-libs-31-11.el10
• kpartx-0.9.9-10.el10
• krb5-libs-1.21.3-8.el10
• less-661-3.el10
• libacl-2.3.2-4.el10
• libaio-0.3.111-22.el10
• libarchive-3.7.7-3.el10
• libassuan-2.5.6-6.el10
• libattr-2.5.2-5.el10
• libbasicobjects-0.1.1-58.el10
• libblkid-2.40.2-10.el10
• libbpf-2:1.6.0-2.el10
• libcap-2.69-7.el10
• libcap-ng-0.8.4-6.el10
• libcbor-0.11.0-3.el10
• libcollection-0.7.0-58.el10
• libcom_err-1.47.1-4.el10
• libcomps-0.1.21-3.el10
• libcurl-minimal-8.12.1-2.el10
• libdhash-0.5.0-58.el10
• libdnf-0.73.1-12.el10
• libdnf-plugin-subscription-manager-1.30.7-1.el10
• libdrm-2.4.123-1.el10
• libeconf-0.6.2-4.el10
• libedit-3.1-52.20230828cvs.el10
• libev-4.33-14.el10
• libevent-2.1.12-16.el10
• libfdisk-2.40.2-10.el10
• libffi-3.4.4-10.el10
• libfido2-1.14.0-7.el10
• libgcc-14.3.1-2.1.el10
• libgcrypt-1.11.0-6.el10
• libgomp-14.3.1-2.1.el10
• libgpg-error-1.50-2.el10
• libgudev-238-7.el10
• libgusb-0.4.9-4.el10
• libibverbs-57.0-1.el10
• libicu-74.2-4.el10
• libidn2-2.3.7-3.el10
• libini_config-1.3.1-58.el10
• libipa_hbac-2.11.0-3.el10
• libjcat-0.2.2-2.el10
• libjose-14-102.el10
• libkcapi-1.5.0-3.el10
• libkcapi-hasher-1.5.0-3.el10
• libkcapi-hmaccalc-1.5.0-3.el10
• libksba-1.6.7-2.el10
• libldb-4.22.3-101.el10
• libluksmeta-9-26.el10
• libmaxminddb-1.9.1-4.el10
• libmicrohttpd-1:1.0.0-3.el10
• libmnl-1.0.5-7.el10
• libmodulemd-2.15.0-12.el10
• libmount-2.40.2-10.el10
• libmspack-0.10.1-0.14.alpha.el10
• libndp-1.9-2.el10
• libnet-1.3-7.el10
• libnetfilter_conntrack-1.0.9-12.el10
• libnetfilter_cthelper-1.0.1-1.el10
• libnetfilter_cttimeout-1.0.0-27.el10
• libnetfilter_queue-1.0.5-9.el10
• libnfnetlink-1.0.2-3.el10
• libnfsidmap-1:2.8.3-0.el10
• libnftnl-1.2.8-2.el10
• libnghttp2-1.64.0-2.el10
• libnl3-3.11.0-1.el10
• libnvme-1.13-1.el10
• libpath_utils-0.2.1-58.el10
• libpcap-14:1.10.4-7.el10
• libpciaccess-0.16-16.el10
• libpkgconf-2.1.0-3.el10
• libpwquality-1.4.5-12.el10
• libref_array-0.1.5-58.el10
• librepo-1.18.0-5.el10
• libseccomp-2.5.6-1.el10
• libsecret-0.21.2-8.el10
• libselinux-3.8-2.el10
• libselinux-utils-3.8-2.el10
• libsemanage-3.8.1-1.el10
• libsepol-3.8-1.el10
• libsmartcols-2.40.2-10.el10
• libsmbclient-4.22.3-101.el10
• libsolv-0.7.29-8.el10
• libss-1.47.1-4.el10
• libsss_certmap-2.11.0-3.el10
• libsss_idmap-2.11.0-3.el10
• libsss_nss_idmap-2.11.0-3.el10
• libsss_sudo-2.11.0-3.el10
• libstdc++-14.3.1-2.1.el10
• libtalloc-2.4.3-100.el10
• libtasn1-4.20.0-1.el10
• libtdb-1.4.13-100.el10
• libtevent-0.16.2-100.el10
• libtirpc-1.3.5-1.el10
• libtool-ltdl-2.4.7-13.el10
• libunistring-1.1-10.el10
• liburing-2.5-5.el10
• libusb1-1.0.28-1.el10
• libutempter-1.2.1-15.el10
• libuuid-2.40.2-10.el10
• libuv-1:1.50.0-1.el10
• libverto-0.3.2-10.el10
• libverto-libev-0.3.2-10.el10
• libwbclient-4.22.3-101.el10
• libxcrypt-4.4.36-10.el10
• libxkbcommon-1.7.0-4.el10
• libxml2-2.12.5-7.el10
• libxmlb-0.3.15-7.el10
• libxslt-1.1.39-7.el10
• libyaml-0.2.5-16.el10
• libzstd-1.5.5-9.el10
• linux-firmware-20250708-18.el10
• linux-firmware-whence-20250708-18.el10
• lmdb-libs-0.9.32-4.el10
• logrotate-3.22.0-4.el10
• lsof-4.98.0-7.el10
• lua-libs-5.4.6-7.el10
• luksmeta-9-26.el10
• lvm2-10:2.03.32-3.el10
• lvm2-libs-10:2.03.32-3.el10
• lz4-libs-1.9.4-8.el10
• lzo-2.10-14.el10
• makedumpfile-1.7.7-1.el10
• mdadm-4.4-2.el10
• memstrack-0.2.5-6.el10
• microcode_ctl-4:20250512-1.el10
• mokutil-2:0.7.2-1.el10
• mpdecimal-2.5.1-12.el10
• mpfr-4.2.1-5.el10
• mt7xxx-firmware-20250708-18.el10
• nano-8.1-3.el10
• ncurses-6.4-14.20240127.el10
• ncurses-base-6.4-14.20240127.el10
• ncurses-libs-6.4-14.20240127.el10
• net-tools-2.0-0.73.20160912git.el10
• netavark-2:1.15.2-1.el10
• nettle-3.10.1-1.el10
• newt-0.52.24-5.el10
• nfs-utils-1:2.8.3-0.el10
• nftables-1:1.1.1-4.el10
• nmap-ncat-4:7.92-3.el10
• nmstate-2.2.48-1.el10
• npth-1.6-21.el10
• nss-altfiles-2.23.0-5.el10
• numactl-libs-2.0.19-1.el10
• nvidia-gpu-firmware-20250708-18.el10
• nvme-cli-2.13-2.el10
• nxpwireless-firmware-20250708-18.el10
• oniguruma-6.9.9-7.el10
• open-vm-tools-12.5.0-1.el10
• openldap-2.6.8-3.el10
• openshift-clients-4.20.0-202507031044.p0.gf0e1051.assembly.stream.el9
• openshift-kubelet-4.20.0-202507171059.p0.gb94367c.assembly.stream.el9
• openssh-9.9p1-9.el10
• openssh-clients-9.9p1-9.el10
• openssh-server-9.9p1-9.el10
• openssl-1:3.5.0-8.el10
• openssl-libs-1:3.5.0-8.el10
• openvswitch-selinux-extra-policy-1.0-36.el10s
• openvswitch3.5-3.5.0-6.el10s
• os-prober-1.81-9.el10
• ose-aws-ecr-image-credential-provider-4.20.0-202507092044.p0.g3408f0c.assembly.stream.el9
• ose-azure-acr-image-credential-provider-4.20.0-202507042143.p0.gd469d04.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider-4.20.0-202506181842.p0.gaabc000.assembly.stream.el9
• ostree-2025.3-1.el10
• ostree-grub2-2025.3-1.el10
• ostree-libs-2025.3-1.el10
• p11-kit-0.25.5-7.el10
• p11-kit-server-0.25.5-7.el10
• p11-kit-trust-0.25.5-7.el10
• pam-1.6.1-8.el10
• pam-libs-1.6.1-8.el10
• passt-0^20250415.g8ec1341-1.el10
• passt-selinux-0^20250415.g8ec1341-1.el10
• pciutils-3.13.0-5.el10
• pciutils-libs-3.13.0-5.el10
• pcre2-10.44-1.el10.3
• pcre2-syntax-10.44-1.el10.3
• pcsc-lite-2.2.3-2.el10
• pcsc-lite-ccid-1.6.0-2.el10
• pcsc-lite-libs-2.2.3-2.el10
• perl-AutoLoader-5.74-514.el10
• perl-B-1.89-514.el10
• perl-Carp-1.54-511.el10
• perl-Class-Struct-0.68-514.el10
• perl-Data-Dumper-2.189-512.el10
• perl-Digest-1.20-511.el10
• perl-Digest-MD5-2.59-6.el10
• perl-DynaLoader-1.56-514.el10
• perl-Encode-4:3.21-511.el10
• perl-Errno-1.38-514.el10
• perl-Exporter-5.78-511.el10
• perl-Fcntl-1.18-514.el10
• perl-File-Basename-2.86-514.el10
• perl-File-Path-2.18-511.el10
• perl-File-Temp-1:0.231.100-512.el10
• perl-File-stat-1.14-514.el10
• perl-FileHandle-2.05-514.el10
• perl-Getopt-Long-1:2.58-3.el10
• perl-Getopt-Std-1.14-514.el10
• perl-HTTP-Tiny-0.088-512.el10
• perl-IO-1.55-514.el10
• perl-IO-Socket-IP-0.42-512.el10
• perl-IO-Socket-SSL-2.085-3.el10
• perl-IPC-Open3-1.22-514.el10
• perl-MIME-Base64-3.16-511.el10
• perl-Mozilla-CA-20231213-5.el10
• perl-NDBM_File-1.17-514.el10
• perl-Net-SSLeay-1.94-8.el10
• perl-POSIX-2.20-514.el10
• perl-PathTools-3.91-512.el10
• perl-Pod-Escapes-1:1.07-511.el10
• perl-Pod-Perldoc-3.28.01-512.el10
• perl-Pod-Simple-1:3.45-511.el10
• perl-Pod-Usage-4:2.03-511.el10
• perl-Scalar-List-Utils-5:1.63-511.el10
• perl-SelectSaver-1.02-514.el10
• perl-Socket-4:2.038-511.el10
• perl-Storable-1:3.32-511.el10
• perl-Symbol-1.09-514.el10
• perl-Term-ANSIColor-5.01-512.el10
• perl-Term-Cap-1.18-511.el10
• perl-Text-ParseWords-3.31-511.el10
• perl-Text-Tabs+Wrap-2024.001-511.el10
• perl-Time-Local-2:1.350-511.el10
• perl-URI-5.27-3.el10
• perl-base-2.27-514.el10
• perl-constant-1.33-512.el10
• perl-if-0.61.000-514.el10
• perl-interpreter-4:5.40.2-514.el10
• perl-libnet-3.15-512.el10
• perl-libs-4:5.40.2-514.el10
• perl-locale-1.12-514.el10
• perl-mro-1.29-514.el10
• perl-overload-1.37-514.el10
• perl-overloading-0.02-514.el10
• perl-parent-1:0.241-512.el10
• perl-podlators-1:5.01-511.el10
• perl-vars-1.05-514.el10
• pigz-2.8-7.el10
• pinentry-1.3.1-1.el10
• pkgconf-2.1.0-3.el10
• pkgconf-m4-2.1.0-3.el10
• pkgconf-pkg-config-2.1.0-3.el10
• podman-6:5.5.1-1.el10
• policycoreutils-3.8-2.el10
• policycoreutils-python-utils-3.8-2.el10
• polkit-125-3.el10
• polkit-libs-125-3.el10
• polkit-pkla-compat-0.1-30.el10
• popt-1.19-8.el10
• procps-ng-4.0.4-7.el10
• protobuf-c-1.5.0-6.el10
• psmisc-23.6-8.el10
• python-unversioned-command-3.12.11-2.el10
• python3-3.12.11-2.el10
• python3-audit-4.0.3-4.el10
• python3-charset-normalizer-3.4.2-1.el10
• python3-cloud-what-1.30.7-1.el10
• python3-dateutil-1:2.8.2-15.el10
• python3-dbus-1.3.2-8.el10
• python3-decorator-5.1.1-12.el10
• python3-distro-1.9.0-5.el10
• python3-dnf-4.20.0-16.el10
• python3-dnf-plugin-versionlock-4.7.0-9.el10
• python3-dnf-plugins-core-4.7.0-9.el10
• python3-gobject-base-3.46.0-7.el10
• python3-gobject-base-noarch-3.46.0-7.el10
• python3-hawkey-0.73.1-12.el10
• python3-idna-3.7-4.el10
• python3-iniparse-0.5-10.el10
• python3-inotify-0.9.6-36.el10
• python3-libcomps-0.1.21-3.el10
• python3-libdnf-0.73.1-12.el10
• python3-librepo-1.18.0-5.el10
• python3-libs-3.12.11-2.el10
• python3-libselinux-3.8-2.el10
• python3-libsemanage-3.8.1-1.el10
• python3-pip-wheel-23.3.2-7.el10
• python3-policycoreutils-3.8-2.el10
• python3-requests-2.32.3-2.el10
• python3-rpm-4.19.1.1-17.el10
• python3-setools-4.5.1-4.el10
• python3-setuptools-69.0.3-12.el10
• python3-six-1.16.0-16.el10
• python3-subscription-manager-rhsm-1.30.7-1.el10
• python3-systemd-235-11.el10
• python3-urllib3-1.26.19-2.el10
• qemu-guest-agent-18:10.0.0-7.el10
• quota-1:4.09-9.el10
• quota-nls-1:4.09-9.el10
• rdma-core-57.0-1.el10
• readline-8.2-11.el10
• realtek-firmware-20250708-18.el10
• rpcbind-1.2.7-3.el10
• rpm-4.19.1.1-17.el10
• rpm-build-libs-4.19.1.1-17.el10
• rpm-libs-4.19.1.1-17.el10
• rpm-ostree-2025.9-1.el10
• rpm-ostree-libs-2025.9-1.el10
• rpm-plugin-audit-4.19.1.1-17.el10
• rpm-plugin-selinux-4.19.1.1-17.el10
• rpm-plugin-systemd-inhibit-4.19.1.1-17.el10
• rpm-sequoia-1.9.0.1-1.el10
• rpm-sign-libs-4.19.1.1-17.el10
• rsync-3.4.1-2.el10
• samba-client-libs-4.22.3-101.el10
• samba-common-4.22.3-101.el10
• samba-common-libs-4.22.3-101.el10
• sed-4.9-3.el10
• selinux-policy-40.13.35-1.el10
• selinux-policy-targeted-40.13.35-1.el10
• setup-2.14.5-7.el10
• sg3_utils-1.48-7.el10
• sg3_utils-libs-1.48-7.el10
• shadow-utils-2:4.15.0-6.el10
• shadow-utils-subid-2:4.15.0-6.el10
• shared-mime-info-2.3-8.el10
• shim-x64-15.8-5.el10
• skopeo-2:1.19.0-2.el10
• slang-2.3.3-8.el10
• snappy-1.1.10-7.el10
• socat-1.7.4.4-8.el10
• sqlite-libs-3.46.1-4.el10
• ssh-key-dir-0.1.4-9.el10
• sssd-2.11.0-3.el10
• sssd-ad-2.11.0-3.el10
• sssd-client-2.11.0-3.el10
• sssd-common-2.11.0-3.el10
• sssd-common-pac-2.11.0-3.el10
• sssd-ipa-2.11.0-3.el10
• sssd-krb5-2.11.0-3.el10
• sssd-krb5-common-2.11.0-3.el10
• sssd-ldap-2.11.0-3.el10
• sssd-nfs-idmap-2.11.0-3.el10
• sssd-proxy-2.11.0-3.el10
• stalld-1.19.8-2.el10
• strace-6.12-1.el10
• subscription-manager-1.30.7-1.el10
• subscription-manager-rhsm-certificates-20220623-6.el10
• sudo-1.9.15-9.p5.el10
• sudo-python-plugin-1.9.15-9.p5.el10
• systemd-257-11.el10
• systemd-journal-remote-257-11.el10
• systemd-libs-257-11.el10
• systemd-pam-257-11.el10
• systemd-udev-257-11.el10
• tar-2:1.35-7.el10
• tiwilink-firmware-20250708-18.el10
• tmux-3.3a-13.20230918gitb202a2f.el10
• toolbox-0.1.2-1.el10
• tpm2-tools-5.7-4.el10
• tpm2-tss-4.1.3-5.el10
• tpm2-tss-fapi-4.1.3-5.el10
• tzdata-2025b-1.el10
• unbound-anchor-1.20.0-10.el10
• unbound-libs-1.20.0-10.el10
• userspace-rcu-0.14.0-7.el10
• util-linux-2.40.2-10.el10
• util-linux-core-2.40.2-10.el10
• vim-data-2:9.1.083-5.el10
• vim-minimal-2:9.1.083-5.el10
• virt-what-1.27-3.el10
• which-2.21-44.el10
• xfsprogs-6.11.0-2.el10
• xkeyboard-config-2.41-3.el10
• xmlsec1-1:1.2.39-3.el10
• xmlsec1-openssl-1:1.2.39-3.el10
• xz-1:5.6.2-4.el10
• xz-libs-1:5.6.2-4.el10
• zlib-ng-compat-2.2.3-2.el10
• zram-generator-1.1.2-14.el10
• zstd-1.5.5-9.el10

Changed:

• NetworkManager 1:1.53.91-1.el10 → 1:1.53.92-1.el10
• NetworkManager-cloud-setup 1:1.53.91-1.el10 → 1:1.53.92-1.el10
• NetworkManager-libnm 1:1.53.91-1.el10 → 1:1.53.92-1.el10
• NetworkManager-ovs 1:1.53.91-1.el10 → 1:1.53.92-1.el10
• NetworkManager-tui 1:1.53.91-1.el10 → 1:1.53.92-1.el10
• container-selinux 4:2.238.0-1.el10 → 4:2.239.0-1.el10
• crypto-policies 20250602-1.gita6d4d0c.el10 → 20250714-1.git95bf40e.el10
• crypto-policies-scripts 20250602-1.gita6d4d0c.el10 → 20250714-1.git95bf40e.el10
• openshift-kubelet 4.20.0-202507032145.p0.ge52b13b.assembly.stream.el9 → 4.20.0-202507171059.p0.gb94367c.assembly.stream.el9
• ostree 2025.2-1.el10 → 2025.3-1.el10
• ostree-grub2 2025.2-1.el10 → 2025.3-1.el10
• ostree-libs 2025.2-1.el10 → 2025.3-1.el10
• rpm-ostree 2025.8-1.el10 → 2025.9-1.el10
• rpm-ostree-libs 2025.8-1.el10 → 2025.9-1.el10

Extensions

Full list (48 packages)

• NetworkManager-libreswan-1.2.24-2.el10.x86_64
• bison-3.8.2-9.el10.x86_64
• cmake-filesystem-3.30.5-3.el10.x86_64
• cpp-14.3.1-2.1.el10.x86_64
• elfutils-libelf-devel-0.193-1.el10.x86_64
• flex-2.6.4-19.el10.x86_64
• gcc-14.3.1-2.1.el10.x86_64
• glibc-devel-2.39-38.el10.x86_64
• kernel-6.12.0-105.el10.x86_64
• kernel-core-6.12.0-105.el10.x86_64
• kernel-devel-6.12.0-105.el10.x86_64
• kernel-headers-6.12.0-105.el10.x86_64
• kernel-modules-6.12.0-105.el10.x86_64
• kernel-modules-extra-6.12.0-105.el10.x86_64
• kernel-rt-core-6.12.0-105.el10.x86_64
• kernel-rt-devel-6.12.0-105.el10.x86_64
• kernel-rt-modules-6.12.0-105.el10.x86_64
• kernel-rt-modules-core-6.12.0-105.el10.x86_64
• kernel-rt-modules-extra-6.12.0-105.el10.x86_64
• krb5-pkinit-1.21.3-8.el10.x86_64
• krb5-workstation-1.21.3-8.el10.x86_64
• ldns-1.8.3-18.el10.x86_64
• libkadm5-1.21.3-8.el10.x86_64
• libmpc-1.3.1-7.el10.x86_64
• libqb-2.0.8-6.el10.x86_64
• libreswan-5.3-1.el10.x86_64
• libxcrypt-devel-4.4.36-10.el10.x86_64
• libzstd-devel-1.5.5-9.el10.x86_64
• lm_sensors-libs-3.6.0-20.el10.x86_64
• m4-1.4.19-11.el10.x86_64
• make-1:4.4.1-9.el10.x86_64
• nspr-4.36.0-1.el10.x86_64
• nss-3.112.0-1.el10.x86_64
• nss-softokn-3.112.0-1.el10.x86_64
• nss-softokn-freebl-3.112.0-1.el10.x86_64
• nss-sysinit-3.112.0-1.el10.x86_64
• nss-tools-3.112.0-1.el10.x86_64
• nss-util-3.112.0-1.el10.x86_64
• openssl-devel-1:3.5.0-8.el10.x86_64
• openvswitch3.5-ipsec-3.5.0-6.el10s.x86_64
• pcp-conf-6.3.7-5.el10.x86_64
• pcp-libs-6.3.7-5.el10.x86_64
• protobuf-3.19.6-11.el10.x86_64
• python3-openvswitch3.5-3.5.0-6.el10s.x86_64
• sysstat-12.7.6-2.el10.x86_64
• usbguard-1.1.3-6.el10.x86_64
• usbguard-selinux-1.1.3-6.el10.noarch
• zlib-ng-compat-devel-2.2.3-2.el10.x86_64

CentOS Stream CoreOS base layer: 10.0.20250715-0