Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.19.0-okd-scos.14

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-stable
  • upgrade-minor Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-stable

Upgrades from:

• 4.19.0-okd-scos.13 (changes) - Success
• 4.19.0-okd-scos.12 (changes) - Failed
• 4.19.0-okd-scos.11 (changes) - Success
• 4.19.0-okd-scos.10 (changes) - Success
• 4.19.0-okd-scos.9 (changes) - Success
• 4.19.0-okd-scos.8 (changes) - Success
• 4.19.0-okd-scos.7 (changes) - Success
• 4.19.0-okd-scos.6 (changes) - Failed
• 4.19.0-okd-scos.5 (changes) - Success
• 4.19.0-okd-scos.4 (changes) - Success
• 4.19.0-okd-scos.3 (changes) - Failed
• 4.19.0-okd-scos.2 (changes) - Failed Failed
• 4.19.0-okd-scos.1 - Success
• 4.18.0-okd-scos.10 (changes) - Success

Upgrades to:

• 4.20.0-okd-scos.ec.12 (changes) - Success
• 4.19.0-okd-scos.19 (changes) - Success
• 4.19.0-okd-scos.18 (changes) - Success
• 4.19.0-okd-scos.17 (changes) - Success
• 4.19.0-okd-scos.16 (changes) - Failed
• 4.19.0-okd-scos.15 (changes) - Success

---

Changes from 4.19.0-okd-scos.1

Created: 2025-08-10 04:01:40 +0000 UTC

Image Digest: sha256:897c26c2c5762b29b9b34f396e771003085c4c2077eb68965157c9562f469fcb

Release 4.19.0-okd-scos.14 was created from registry.ci.openshift.org/origin/release-scos:4.19.0-0.okd-scos-2025-08-09-215749

Components

• Kubectl 1.32.1
• Kubernetes upgraded from 1.32.4 to 1.32.7
• Kubernetes Tests upgraded from 1.32.4 to 1.32.6
• CentOS Stream CoreOS upgraded from 9.0.20250515-0 to 9.0.20250731-1

  The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
OpenShiftPodSecurityAdmission (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Enabled	Enabled

New images

• aws-karpenter-provider-aws git b37141b0 sha256:ec94a7b2d6c7cd96ae6e240c07735a08b450a33bbd1d103d9c9d218636276b24
• openstack-resource-controller git d00bab2b sha256:83a5c67cd3b2201997bbae393e7e23b9d84cbcd9eaaea126754c601a67d1bd57

Rebuilt images without code change

• cluster-autoscaler-operator git 227f7537 sha256:f539eb3cfebd4801084621a6fa0d07b64a946c98abd0a0aa60ed9bc4c406753e

agent-installer-api-server

• MGMT-21287: Remove NHO dependency in SNR (#7894) #7894
• NO-ISSUE: Add NHO and FAR back to the virtualization bundle (#7870) #7870
• MGMT-20893: Remove Remediation operators from virtualization bundle (#7814) #7814
• OCPBUGS-57361: Use hostname to match hosts to BMH ignition (#7794) #7794
• OCPBUGS-54319: mirror changes to openshift-installer with oci-eval-user-data (#7670) #7670
• OCPBUGS-56596: Include AdditionalTrustBundlePolicy in installConfig (#7747) #7747
• Full changelog

agent-installer-utils

• OCPBUGS-60107: Add ISOBuilder Release notes #137
• OCPBUGS-59731: add back NHR and FAR operators #131
• OCPBUGS-58285: OVE ISOBuilder works only if and when the script is ex… #121
• OCPBUGS-59254: invalid default channel configuration for package “mtv… #126
• OCPBUGS-59666: Enable ‘q’ and ‘c’ hotkeys for quit and configure network #129
• OCPBUGS-57922: Update operators list in ISOBuilder #118
• OCPBUGS-57420: Bump iso-builder appliance dependency #115
• OCPBUGS-57301: Update mtv-operator to version used in 4.19 catalog #112
• OCPBUGS-56991: OVE isobuilder fails on CentOS Stream 9 due to missing… #104
• ART-13081: append .0 to go.mod version #106
• OCPBUGS-56690: Fix nmtui redirection after quit #97
• OCPBUGS-56810: bump appliance to 936210 #99
• OCPBUGS-56759: ISOBuilder- Remove default password for nodes #100
• OCPBUGS-56490: Add operator CRs post-install in OVE build script #95
• Full changelog

apiserver-network-proxy

• ART-13081: append .0 to go.mod version #79
• Full changelog

aws-cluster-api-controllers

• OCPBUGS-59241, OCPBUGS-59242: bump github.com/golang/glog to v1.2.5 #558
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

• OCPBUGS-59893: Remove stale conditions #411
• OCPBUGS-56527: openstack-cinder: Set –with-topology flag for node driver also #384
• Full changelog

aws-machine-controllers

• OCPBUGS-56633: fix: make machineset annotation controller respect paused condition #130
• Full changelog

azure-cluster-api-controllers

• OCPBUGS-59888: Add support to disable CAPZ components through a manager flag #347
• OCPBUGS-56100: fix: reuse global TracerProvider #340
• OCPBUGS-56962: [release-4.19] Update manifests to remove dependency on admissionregistration v1beta1 #339
• Full changelog

azure-kms-encryption-provider

• ART-13081: append .0 to go.mod version #18
• Full changelog

azure-machine-controllers

• OCPBUGS-56163: [release-4.19] Update virtualmachines service to armcompute/v5 SDK #144
• OCPBUGS-56653: Fix failure when attempting to modify immutable availabilitySet #154
• Full changelog

azure-workload-identity-webhook

• ART-13081: append .0 to go.mod version #36
• Full changelog

baremetal-cluster-api-controllers

• OCPBUGS-56962: [release-4.19] Update manifests to remove dependency on admissionregistration v1beta1 #45
• Full changelog

baremetal-installer, installer, installer-artifacts

• OCPBUGS-56963: Make swift containers removal not fatal for UPI. #9765
• OCPBUGS-58403: When AWS_PROFILE is invalid ask for credentials #9829
• OCPBUGS-58073: Refactor removing loadbalancer in OpenStack. #9808
• OCPBUGS-58263: allow to deploy single nodes with UPI #9812
• OCPBUGS-57901: vSphere - remove unit tests using nip.io #9802
• OCPBUGS-58060: MCO: consider custom AMI for edge compute machine pool #9807
• OCPBUGS-56020: AWS Destroy use AWS SDK v2 #9703
• OCPBUGS-57394: Prompt User for AWS Creds when none are found #9782
• OCPBUGS-57137: Revert “CORS-3883: Remove user-assigned identity from ARM template” #9771
• OCPBUGS-57039: ensure ctrplane nodes can access bootstrap MCS #9768
• OCPBUGS-56826: update the punctuation #9755
• OCPBUGS-56372: Added better logging for vSphere destroy #9719
• OCPBUGS-56832: add unit tests for vsphere VIPS/machinenetworks population #9757
• OCPBUGS-56811: Update Control Plane replica validation for Single Node OpenShift #9756
• MGMT-20702, OCPBUGS-56762: Avoid duplicate machine networks #9745
• OCPBUGS-55995: [Nutanix] nil error displayed when setting a not exist value in preloadedOSImageName field #9701
• OCPBUGS-56712: add the VM types that the install pass into the tested_instance_types #9730
• OCPBUGS-56646: Update RHCOS 4.19 bootimage metadata to 9.6.20250523-0 #9742
• OCPBUGS-56595: [release-4.19] OCPBUGS-56567: default Azure to create VM user-assigned identities #9735
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

baremetal-operator

• OCPBUGS-59133: Unblock BMH direct deletion when detached annotation is present #423
• OCPBUGS-56765: Make firmware update handle only a subset of Spec.Updates #420
• Full changelog

baremetal-runtimecfg

• OCPBUGS-57781: iptables: Switch PREROUTING REDIRECT rule to DNAT instead #352
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-58077: Return error in case of error #2052
• OCPBUGS-56905: avoid transfering permissions when copying artifacts from node-joiner pod #2032
• OCPBUGS-56511: Replace colon to hypen in the filename while extracting tar on Windows #2024
• Full changelog

cloud-credential-operator

• OCPBUGS-59401: github.com/golang/glog v1.2.5 #890
• OCPBUGS-58246: ccoctl: only add owned tag to azure resources on create #881
• OCPBUGS-55798: Sync OpenStack CA Bundles from legacy location #866
• OCPBUGS-56978: Azure: resolve nil pointer exception when role assignment exists #870
• OCPBUGS-55903: Render: configure proxy on bootstrap static pod #857
• Full changelog

cluster-autoscaler

• OCPBUGS-59638: fix checkpoint gc of unknown recommenders #366
• Full changelog

cluster-baremetal-operator

• OCPBUGS-57504: Treat ResourceNotFound as non-fatal #484
• OCPBUGS-56644: Allow provisioningIP when network disabled #474
• Full changelog

cluster-capi-operator

• OCPBUGS-59228, OCPBUGS-59229: fix: clusteroperator: do not update status.relatedobjects if only order changed #332
• OCPBUGS-57449: mapi2capi: Create new machine template when changing MAPI providerSpec #317
• OCPBUGS-56776: fix: ensure CAPI machineset is created not paused when authoritative #304
• OCPBUGS-56714: fix: bump openshift/library-go to fix ValidatingAdmissionPolicyV1 apply in capiinstaller #305
• OCPBUGS-56633: fix: watch CAPI resources in the migration controllers #303
• OCPBUGS-56722: MachineSet deletion logic #302
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-59847: Adds service for cloud-controller-manager #402
• OCPBUGS-59847: Update service selector to match deployment label #401
• Full changelog

cluster-config-api

• OCPBUGS-56773: disable psa for 4.19 #2346
• OCPBUGS-56761: Revert v1alpha1 removal #2345
• OCPBUGS-56407: Fix validation for Resource field in MOSB API #2329
• Full changelog

cluster-etcd-operator

• OCPBUGS-59285: fix ordering on bootstrap IP selection #1446
• OCPBUGS-45731: Updating cluster-etcd-operator-container image to be consistent with ART for 4.19 #1376
• OCPBUGS-59313: add missing ports to svc and pod spec #1447
• OCPBUGS-57956: feat: update logic to list arbiter nodes #1437
• OCPBUGS-57490: Comply with OCP pod standards for TNF jobs #1434
• OCPBUGS-56806: increase tnf job timeouts #1427
• Full changelog

cluster-image-registry-operator

• OCPBUGS-53872: bump github.com/golang-jwt/jwt #1214
• OCPBUGS-56363: bump golang.org/x/oauth2 #1207
• Full changelog

cluster-ingress-operator

• NO-JIRA: [release-4.19] docs - correct Istio version format in ossm-overrides.md #1255
• OCPBUGS-60204: Update GatewayAPI test to check if deployment has 1 or more pod #1260
• NE-2109: Add OSSM channel and version override annotations #1252
• NE-2105: desiredIstio: Enable GIE if InferencePool found #1251
• NE-2103: Bump to OSSM 3.0.1 and Istio 1.24.4 #1244
• OCPBUGS-58394: desiredIstio: Do not enable a default PDB #1241
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-59957: Add missing service ports to apiserver service #1880
• Revert “[release-4.19] OCPBUGS-58116: certregenerationcontroller: start configInformers again” #1867
• OCPBUGS-58116: certregenerationcontroller: start configInformers again #1861
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-60132: Missing endpoint slices for open ports the operator uses #853
• Full changelog

cluster-monitoring-operator

• OCPBUGS-59932: operator: increase wait time till degraded to max 4 times 5m #2629
• OCPBUGS-57185: chore(alerts): adjust PrometheusPossibleNarrowSelectors description and add link to to-be-added runbook #2609
• Full changelog

cluster-network-operator

• OCPBUGS-60095: Add release version annotation to whereabouts-controller/whereabouts-token-watcher #2762
• OCPBUGS-59645: [release-4.19] BGP related backports #2748
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-52853: Do not add iommu.passthrough to ARM by default (#1358) #1358
• OCPBUGS-58144: E2E: Additional Functional tests for align cpus by UncoreCache Feature (#1348) #1348
• OCPBUGS-57148: E2E: Functional tests for align cpus by UncoreCache Feature (#1336) #1336
• E2E: use 4 cpus for reserved from available cpus (#1337) #1337
• e2e: arm: fix ginkgo doesn’t recognize kernelPageSize suite (#1334) #1334
• Full changelog

cluster-olm-operator

• OCPBUGS-56825: fix olm.maxOpenShiftVersion float parsing #122
• Full changelog

cluster-storage-operator

• OCPBUGS-56253: sync Azure File permissions with upstream docs #2 #580
• Full changelog

cluster-version-operator

• OCPBUGS-60168: CVO protects /metrics with authorization #1222
• OCPBUGS-56771: Fix ImplicitlyEnabledCapabilities #1199
• Full changelog

configmap-reloader

• ART-13081: append .0 to go.mod version #68
• Full changelog

console

• OCPBUGS-60039: Fix i18n string for event stream #15355
• OCPBUGS-56651: Recognize Detached BMH status #15083
• OCPBUGS-58214: Incorrect i18n translations in 4.19 batch #15218
• OCPBUGS-59790: Move alertmanager settings route #15331
• OCPBUGS-59639: Fixing no resources found message can not be shown completely #15320
• OCPBUGS-59810: Default name is comprised of ‘-’ on ‘Add to favorites’ page when language is Korean/Japanese/Chinese. #15333
• OCPBUGS-56280: Follow-on fix. Add new “plugins-order” flag to bridge cli args #15168
• OCPBUGS-59199: Deleted objects remain in favorites and cause 404 errors #15267
• OCPBUGS-59557: add data-test attrs to console plugins table #15305
• OCPBUGS-59513: Update model flags when plugins load #15298
• OCPBUGS-58331: change ‘/metrics/usage’ endpoint to ‘/api/metrics/usage’ #15273
• OCPBUGS-58433: Add the Origin header to the HeaderBlacklist in the co… #15246
• OCPBUGS-59315: Not able to launch terminal window from OCP web console due to console plugin conflicts #15280
• OCPBUGS-58217: fix missing form styles in Create PVC page + Clone PVC… #15260
• OCPBUGS-58183: ContainerResource metric data for HPAs isn’t visible i… #15213
• OCPBUGS-58316: Implement sessions in openshift authenticator #15234
• OCPBUGS-58375: fix bug where / in console.tab/horizontalNav href breaks navigation #15239
• OCPBUGS-58377: fix runtime error when editing HPA using the form #15240
• OCPBUGS-58090: Cannot read properties of undefined (reading ‘node-role.kubernetes.io/master’) error while accessing node logs from console #15204
• NO-JIRA: Update Console plugin SDK changelogs #15212
• OCPBUGS-57390: i18n upload/download routine task - Sprint 270 #15175
• OCPBUGS-57755: Add the ability to launch multiple modals with useModal hook #15189
• OCPBUGS-57113: Cannot read properties of undefined (reading ‘filter’) error while accessing nodes from console. #15180
• OCPBUGS-57391: OpenShift console PVC clone cannot use B as the unit #15176
• OCPBUGS-57384: Update vSphere configuration form to support CM YAML f… #15174
• OCPBUGS-56950: UI for search by label is distorted in topology #15111
• OCPBUGS-56841: Fix TypeError Cannot read properties of null (reading ‘metadata’) #15100
• OCPBUGS-56779: Fix and enable web terminal tests #15097
• OCPBUGS-55928: Improving the DevExp for passing the CSP directives to console per flag #15076
• OCPBUGS-56693: Expose PodRingSet via Dynamic Plugin SDK #15086
• OCPBUGS-57180: Fix ‘/metrics’ endpoint token review to handle interna… #15152
• OCPBUGS-57207: Getting “Oh no something went wrong” error message in web console. #15159
• OCPBUGS-57319: Add Select project field in import forms #15171
• OCPBUGS-57110: fix VirtualizedTable runtime error if sortColumn is no… #15140
• OCPBUGS-57105: Fix runtime error when navigating alert actions #15138
• OCPBUGS-56470: fix bug where AlertItem is missing info icon #15071
• OCPBUGS-57200: Opening Edit Secret modal and saving without changes throws error #15157
• OCPBUGS-56764: Fix regression with drawers and modals #15094
• OCPBUGS-56475: Enable pipeline tests by installing operator version 1.17 #15073
• OCPBUGS-56882: Add initialization link annotation support to csv anno… #15104
• OCPBUGS-57183: clarify verbiage for Lightspeed hide button #15151
• OCPBUGS-57054: Should show default OpenShift Logo for a theme when there is not custom logo set for the theme. #15123
• OCPBUGS-57128: HorizontalPodAutoscalers via console require CPU resource limit even though HPAs use requests for scaling #15145
• OCPBUGS-56885: Helm resource list error in console #15105
• OCPBUGS-56888: Add flags in console static plugin for all the components of this epic #15106
• OCPBUGS-56837: Added developer getting started card in Admin project overview page #15098
• OCPBUGS-56987: fix bug where Roles list was displaying invalid data f… #15120
• OCPBUGS-56775: Layout of Welcome to the new OpenShift experience! buttons is wonky on mobile #15096
• OCPBUGS-56149: Refactor Kebab+ActionsMenu to use PF #15051
• OCPBUGS-56413: [knative] Self-provisioner user can not access or create event sources via ODC #15067
• OCPBUGS-55941, OCPBUGS-56107: get go mod tidy to pass, bump Console Helm dependencies to 3.17.3 #15032
• OCPBUGS-56362: improve description of the custom logos CLI args #15061
• OCPBUGS-55979: fix alignment of Getting Started item icons #15040
• OCPBUGS-55929: Sample segment sessions #15031
• NO-JIRA: Update plugin SDK docs #15074
• OCPBUGS-55987: Fix impersonate group action #15041
• Full changelog

console-operator

• OCPBUGS-59488: Update downloads deployment configuration to use master node selector #1016
• OCPBUGS-59618: Fetch synced CM for the CertificateAuthority issuer + Wire synced OIDC Auth CM to Console #1028
• OCPBUGS-56280: Add plugins order to console config #988
• OCPBUGS-56761: Revert v1alpha1 removal #991
• OCPBUGS-55716: Fix issue where console operator orphans custom logo configmaps in openshift-console namespace #985
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

coredns

• ART-13081: append .0 to go.mod version #133
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OCPBUGS-57799: Rebase release-4.19 onto release-1.31 #331
• Full changelog

docker-builder

• OCPBUGS-57173: S2I build cpu limits observed by assemble are limited to 1 cpu #471
• Full changelog

docker-registry

• OCPBUGS-53656: bump jwt and oauth dependencies #429
• Full changelog

gcp-cluster-api-controllers

• OCPBUGS-56962: [release-4.19] Update manifests to remove dependency on admissionregistration v1beta1 #243
• Full changelog

gcp-machine-controllers

• OCPBUGS-59386: Add max-concurrent-reconciles flag to machine actuator #125
• OCPBUGS-56924: allow instances with unknown quotas to be created #119
• Full changelog

gcp-pd-csi-driver

• OCPBUGS-59749: 4.19: UPSTREAM: 2116: Remove check on snapshot create support for multi-writer HyperDisk-HA and let such validations occur at the PD control plane layer #80
• Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

• OCPBUGS-59534: Rebase v1.32.7 to 4.19 #2367
• OCPBUGS-57886: Bump 4.19 1.32.6 #2340
• NO-JIRA: UPSTREAM: <carry>: Update rebase.sh to handle go versions major.minor.patch #2341
• OCPBUGS-58175: Fix flake caused by invalid detection of active policies in VAP integration tests #2347
• OCPBUGS-55937: UPSTREAM: <carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated. #2290
• OCPBUGS-56082: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2297
• OCPBUGS-56437: Bump 4.19 1.32.5 #2304
• OCPBUGS-56256: UPSTREAM: 131495: Handle unsupported node expansion for RWX volumes #2302
• Full changelog

hypershift

• CNTRLPLANE-1034: chore: Relax the kas healthcheck for aro when AllowedCIDRBlocks #6617
• OCPBUGS-60100: feat: let ARO honour cp namespace annotation for default SC uids in 4.19 #6592
• CNTRLPLANE-1226: feat(konflux): Make CPO builds hermetic #6596
• CNTRLPLANE-1213: New API to support specifying cluster-autoscaler flags #6558
• OCPBUGS-57331: Set default security context on everything #6257
• OCPSTRAT-2173: feat(hcco): add support for hosted OIDC client secrets #6525
• OCPBUGS-58300: remove annotation is not working #6465
• CNTRLPLANE-1189: Global PullSecret daemonSet implementation #6507
• NO-JIRA: fix: set terminationMessagePolicy to FallbackToLogsOnError for olm-collect-profiles #6493
• CNTRLPLANE-1034: sharedingress: Add support for kube-apiserver whitelist CIDRs #6502
• OCPBUGS-58683: fix(hcco): Don’t use a default OIDC client secret name when no secret name is provided #6398
• OCPBUGS-59674: Initial Changes to Support Self-managed Azure #6481
• OCPBUGS-59547: Remove code associated with Managed Identity v2 for ARO HCP for 4.19 #6459
• OCPBUGS-59493: Remove unused jq and rsync rpms #6457
• OCPBUGS-59101: Configure ClusterServiceLoadBalancerHea… #6409
• NO-JIRA: chore(deps): update konflux references #6383
• NO-JIRA: [release-4.19] CNTRLPLANE-1042: Disable createClusterNone for azure and scope down verifyResourceGroupLocationsMatch check #6392
• OCPBUGS-57660: [release-4.19] CORENET-6094: CNO: add FRR-k8s image #6374
• OCPBUGS-58335: Support proxy authentication when user/pass is included in URL #6370
• CNTRLPLANE-1044: chore(deps): update konflux references #6342
• ACM-21713: adding .git in .dockerignore to fix version info #6318
• CNV-61396: Sync RBAC for expansion support in kubevirt CSI driver #6255
• CNTRLPLANE-374: hcco: handle post-install creation of OIDC client secrets #6296
• OCPBUGS-57485: Don’t use /version for haproxy health checks #6292
• chore(deps): update konflux references #6189
• ACM-21734 Fixing Konflux EC violations #6303
• NO-JIRA: cpov1: set TerminationMessagePolicy on oas-trust-anchor-generator #6295
• OCPBUGS-57299: Reuse hosted cluster release and metadata providers #6250
• OCPBUGS-56930: cpov1: set terminationMessagePolicy to FallbackToLogsOnError for all HCP containers #6245
• ARO-15626: Disallow users from setting .spec.managementState to Removed in the image registry operator config on Azure #6233
• OCPBUGS-56792: Fix CatalogSource image check when unauthorized #6198
• OCPBUGS-56910: util/version: Add Version420 #6215
• OCPBUGS-56910: Move EnsurePSANotPrivileged to AtLeast(t, Version420) #6212
• CNTRLPLANE-831: feat(konflux): add arm64 builds to cpo pipeline #6182
• OCPBUGS-56777: Disable PSA enforcement in 4.19 hosted cluster #6201
• OCPBUGS-56458: switch termination message policy to TerminationMessageFallbackToLogsOnError for debugability #6170
• OCPBUGS-56562: Do not validate OCP API Server SANS if PKI reconciliation is disabled #6178
• CNTRLPLANE-831: Red Had Konflux control-plane-operator-4-19 intial pipeline #6181
• CNTRLPLANE-916: Konflux build pipeline service account migration #6089
• CNTRLPLANE-915: chore(deps): update konflux references #6139
• OCPBUGS-55789: [release-4.19] Update KAS structured authentication configuration logic to use new uid and extras fields #6121
• Full changelog

ibmcloud-cluster-api-controllers

• OCPBUGS-52542: CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork #118
• OCPBUGS-56962: [release-4.19] Update manifests to remove dependency on admissionregistration v1beta1 #115
• Full changelog

insights-operator

• feat: copy proxy envs from IO pod to gathering pods (#1103) #1103
• OCPBUGS-56781: Enhance insights-runtime-extractor errors (#1089) #1089
• OCPBUGS-56780: Report an error when the insights-runtime-extractor is not running (#1088) #1088
• feat: ensure the etc-entitlement-pki secret exists (#1087) #1087
• Full changelog

ironic

• Bug OCPBUGS-56639: Bump sushy to include SuperMicro Cd boot device string workaround #660
• Full changelog

ironic-machine-os-downloader

• ART-13081: append .0 to go.mod version #102
• Full changelog

kube-storage-version-migrator

• NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-19). #223
• Fix verify job with build-machinery bump #215
• ART-13081: append .0 to go.mod version #213
• Full changelog

kubevirt-csi-driver

• ”[release-4.19] OCPBUGS-58239: Implement volume expansion” #64
• Full changelog

machine-api-operator

• OCPBUGS-59386: Enabled 10 concurrent reconciles on GCP #1391
• Full changelog

machine-config-operator

• OCPBUGS-60080: use channel to signal controller shutdown #5217
• OCPBUGS-59928, OPNET-681: Support migration to NMState #5208
• OCPBUGS-59899: Add workaround fix for static pod race #5204
• OCPBUGS-59978: ARO cert rotate fix #5210
• OCPBUGS-59720: TestMCNPoolNameCustom should clean up resources properly #5186
• OCPBUGS-56750: Support NODEIP_HINT in IPI deployments too #5082
• OCPBUGS-58894: Remove podman-etcd machine config source #5169
• OCPBUGS-59208: Backport QE ported test for OCL component readiness #5125
• OCPBUGS-58820: Add control-plane label for master nodes on legacy clusters #5168
• OCPBUGS-57327: Do not set cpu system reserve below the default value #5117
• OCPBUGS-57689: Ensure the build controller restarts on upgrade #5127
• OCPBUGS-57930: OCPBUGS-57506: Boot image controller should correctly handle marketplace boot images #5135
• OCPBUGS-57929: add MachineConfiguration to CO related objects #5132
• OCPBUGS-56623: Give keepalived container chroot cap #5074
• OCPBUGS-57064: Fix typo in MCN’s MachineConfigNodePinnedImageSetsDegraded message #5105
• OCPBUGS-56899: Fix dynamic-system-reserved-calc.sh when only true parameter is used #5094
• OCPBUGS-56829: Only update boot disks during GCP boot image updates #5088
• OCPBUGS-56445: Boot Image Controller should not degrade when golden configmap is slow to update #5063
• OCPBUGS-56632: daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers #5076
• OCPBUGS-56035: Only populate Status.PinnedImageSets.CurrentGeneration on valid generation value #5039
• Full changelog

monitoring-plugin

• NO-JIRA: improve consistency in tab string #496
• : NO-JIRA: update the i18n #495
• OCPBUGS-60129: feat: add alerting rules tab to dev console #488
• OU-943: remove broken useEffect #484
• OU-943: Manual Cherry Pick #474
• OU-594: Manual cherry pick incidents tab 4 19 #479
• OU-863: [release-4.19] Manual cherry pick add disconnect option #482
• OU-939: Fix virt persepective new silence link #478
• OU-928: reset showgraph state when unmounting button #462
• OU-744: [release-4.19]: fix: set correct pf color for gradient background on legacy dashboards legend #457
• OU-880: [release-4.19] Manual cherry pick ou 880 #458
• OU-842: [release-4.19] fix: override notistack dependency to avoid conflict #455
• Full changelog

multus-admission-controller

• OCPBUGS-58849: Update the github.com/golang/glog module to v1.2.4 #100
• ART-13081: append .0 to go.mod version #95
• Full changelog

multus-whereabouts-ipam-cni

• OCPBUGS-59640: Prevent accidental IP deallocation in statefulsets #375
• Full changelog

network-interface-bond-cni

• NO-JIRA:Add ci-operator yaml file #75
• OCPBUGS-57283: Bump github.com/containernetworking/plugins from to 1.7.1 #72
• Full changelog

network-metrics-daemon

• OCPBUGS-58851: Bump github.com/golang/glog to v1.2.4 (#110) #110
• OCPBUGS-60172: Replace e2e test image (#119) #119
• Full changelog

network-tools

• ART-13081: append .0 to go.mod version #146
• Full changelog

networking-console-plugin

• OCPBUGS-57266: Add fileupload translation #248
• OCPBUGS-57265: Fix pod context #247
• CNV-61827: fix styling issues #250
• CNV-61902: fetch description of terms for popovers #249
• Full changelog

oauth-proxy

• OCPBUGS-58836: 4.19 kube 1.32 #318
• OCPBUGS-58343: release 4.19 CVE fixes #326
• OCPBUGS-58276: fix e2e tests #323
• Full changelog

oauth-server

• OCPBUGS-57282: Updating oauth-server-container image to be consistent with ART for 4.19 #183
• Use newer build-machinery-go #178
• ART-13081: append .0 to go.mod version #176
• Full changelog

oc-mirror

• OCPBUGS-57362: v2/mirror: retry in case of ContextDeadlineExceeded (#1199) #1199
• OCPBUGS-54622: cli/delete: fix workflow mode name output (#1222) #1222
• OCPBUGS-59799: Detect images from a Helm Chart with an aliased chart dependency (#1225) #1225
• OCPBUGS-59396: v2/archive: handle 0b mirror archive files (#1223) #1223
• OCPBUGS-58193: v2/archive: error d2m when no tar files found (#1200) (#1207) #1200
• OCPBUGS-58279: v2/defaults Fix rate limiting issues by enabling exponential backoff retries (#1205) #1205
• OCPBUGS-58271: Fixes the tag when rebuilt catalog by digest only (#1203) #1203
• OCPBUGS-57387: v2/archive: fix sanitization of . (#1188) #1188
• OCPBUGS-57461: v2/operator: add rebuilt catalog to tar file (#1187) #1187
• upgrades distribution to v3.0.0 (#1194) #1194
• OCPBUGS-56117: Make v2 blockedImages use regular expressions (#1163) #1163
• OCPBUGS-57451: deletes cosign tag based signatures (#1180) #1180
• adds code to handle signature errors in the archive pkg (#1177) #1177
• OCPBUGS-56486: v2/config: allow delete and mirror words (#1166) #1166
• OCPBUGS-56890: Bug fix for no release signature found (#1168) #1168
• OCPBUGS-57007: skips signature mirroring for rebuilt operator catalogs (#1171) #1171
• OCPBUGS-55701: v2/imgbuilder: use –authfile when set (#1170) #1170
• OCPBUGS-56185: [release-4.19] v2: bump containers/common dep to 0.63.0 (#1148) #1148
• disables the signature verification on operator catalog collection (#1157) #1157
• OCPBUGS-56433: v2/cli: always remove past archives before m2d (#1152) #1152
• OCPBUGS-56563: v2/archive: print unarchive progress (#1158) #1158
• Full changelog

olm-catalogd, olm-operator-controller

• UPSTREAM: <carry>: Safely handle changes to description fields (#2023) #2023
• Full changelog

openshift-apiserver

• OCPBUGS-57206: Wire dry run option to Image API server operations #524
• OCPBUGS-56494: Fix image reference in TestImageStreamImportQuayIO #510
• Full changelog

openshift-controller-manager

• OCPBUGS-57951: ignore error failing to find pull/push secrets #401
• OCPBUGS-57193: Set node-pullsecrets volume to read-only to protect image pull credentials #390
• Full changelog

openshift-state-metrics

• ART-13081: append .0 to go.mod version #122
• Full changelog

openstack-cluster-api-controllers

• OCPBUGS-57891: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into release-4.19 #366
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• OCPBUGS-59258: 🐛 add catalog-operator control-plane-specific tolerations to unpack jobs #1037
• OCPBUGS-58259: Reduce Frequency of Update Requests for Copied CSVs (#3597) [release-4.19] #1030
• OCPBUGS-57352: reduce cache expiry frequency [release-4.19] #1019
• OCPBUGS-57279: [release-4.19]: operatorgroup: ensure clusterroleselectors in clusterrole aggregation rules are sorted #1015
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-48709: DownStream Merge Sync from 4.20 [07-28-2025] #2688
• OCPBUGS-48709, OCPBUGS-59530: DownStream Merge Sync from 4.20 [07-17-2025] #2675
• OCPBUGS-48709: DownStream Merge Sync from 4.20 [07-09-2025] #2660
• OCPBUGS-59106: DownStream Merge Sync from 4.20 [06-18-2025] #2642
• OCPBUGS-57061, OCPBUGS-57062: DownStream Merge Sync from 4.20 [05-30-2025] #2596
• Full changelog

prom-label-proxy

• ART-13081: append .0 to go.mod version #382
• Full changelog

stream-coreos, stream-coreos-extensions

• Merge #1853
• Merge #1851
• OCPBUGS-58122: [TNF] OCP Two Node with Fencing symlink begone! #1827
• Full changelog

telemeter

• ART-13081: append .0 to go.mod version #560
• Full changelog

tests

• OCPBUGS-60092: feat(azure): skip metrics collection for ARO HCP hypershift #30051
• OCPBUGS-59398: Skip MCN’s node degrade test on 4.19 #29990
• OCPBUGS-59391: [release-4.19]: OVNK BGP: Sync ovn-kubernetes bgp e2e tests #29989
• OCPBUGS-59226: bump watch count limits #29982
• OCPBUGS-57886: Bump 4.19 1.32.6 #29933
• OCPBUGS-58470: Update IPsec e2e test to validate NAT-T encapsulation option #29957
• OCPBUGS-57206: Backport pr 29834 to release-4.19 #29903
• OCPBUGS-58204: Fix MCN test on agent compact FIPS jobs #29943
• OCPBUGS-58053: [release-4.19] MCO-1768: Enable PIS testing on Metal #29936
• OCPBUGS-57436: Add MCO test suite to 4.19 #29918
• OCPBUGS-57930: Boot image controller should correctly handle marketplace boot images #29935
• OCPBUGS-57217: Stabilize custom MCP cleanup on MCN tests #29902
• OCPBUGS-57303: Fix failed tests of e2e-aws-ovn-tls-13 #29906
• OCPBUGS-57020: Skip tests modifying cluster/network.config when it is not permitted #29884
• OCPBUGS-57189: RouteExternalCertificate : Add fix for None platform type #29899
• OCPBUGS-56187: OCPBUGS-55968: Fix PIS tests on SNO & Enable applicable MCN & PIS tests on SNO #29789
• OCPBUGS-56969, OCPBUGS-56970: Fix RouteExternalCertificate tests for few other on-prem jobs #29880
• OCPBUGS-56829: Only update boot disks during GCP boot image updates tests #29878
• OCPBUGS-56967: Do not set the MTU when using NetworkAttachementDefinition #29879
• OCPBUGS-56947: fix deployment rollout wait to wait for desired replicas #29877
• OCPBUGS-56886: Fix bearer token exposure in exit condition as well #29841
• OCPBUGS-56437: Update to kubernetes 1.32.5 #29875
• OCPBUGS-56796: Skip failing test [release-4.19] #29865
• OCPBUGS-56045: OLMv1: Update test bundles [release-4.19] #29836
• OCPBUGS-56662: Fix failed etcd test on arbiter ci run #29826
• OCPBUGS-56399: fix watch request counts #29799
• Full changelog

---

Node Image Info

Loading node image info, this may take a while ...

Package List

• cri-o-1.32.4-1.el9s
• kernel-5.14.0-601.el9
• openshift-kubelet-4.19.0-202508052241.p0.g138db52.assembly.stream.el9
• systemd-252-53.el9

Full list (572 packages)

• NetworkManager-1:1.53.92-1.el9
• NetworkManager-cloud-setup-1:1.53.92-1.el9
• NetworkManager-libnm-1:1.53.92-1.el9
• NetworkManager-ovs-1:1.53.92-1.el9
• NetworkManager-team-1:1.53.92-1.el9
• NetworkManager-tui-1:1.53.92-1.el9
• WALinuxAgent-udev-2.13.1.1-1.el9
• aardvark-dns-2:1.15.0-1.el9
• acl-2.3.1-4.el9
• adcli-0.9.2-1.el9
• afterburn-5.9.0-1.el9
• afterburn-dracut-5.9.0-1.el9
• alternatives-1.24-2.el9
• attr-2.5.1-3.el9
• audit-3.1.5-7.el9
• audit-libs-3.1.5-7.el9
• authselect-1.2.6-3.el9
• authselect-libs-1.2.6-3.el9
• avahi-libs-0.8-23.el9
• basesystem-11-13.el9
• bash-5.1.8-9.el9
• bash-completion-1:2.11-5.el9
• bind-libs-32:9.16.23-31.el9
• bind-license-32:9.16.23-31.el9
• bind-utils-32:9.16.23-31.el9
• binutils-2.35.2-66.el9
• binutils-gold-2.35.2-66.el9
• bootc-1.4.0-1.el9
• bootupd-0.2.28-3.el9
• bsdtar-3.5.3-5.el9
• bubblewrap-0.4.1-8.el9
• bzip2-1.0.8-10.el9
• bzip2-libs-1.0.8-10.el9
• c-ares-1.19.1-2.el9
• ca-certificates-2024.2.69_v8.0.303-91.4.el9
• centos-gpg-keys-9.0-30.el9
• centos-release-cloud-1-1.el9s
• centos-release-nfv-common-1-5.el9s
• centos-release-virt-common-1-4.el9s
• centos-stream-release-9.0-30.el9
• centos-stream-repos-9.0-30.el9
• checkpolicy-3.6-1.el9
• chrony-4.6.1-2.el9
• cifs-utils-7.2-1.el9
• clevis-21-208.el9
• clevis-dracut-21-208.el9
• clevis-luks-21-208.el9
• clevis-systemd-21-208.el9
• cloud-utils-growpart-0.33-1.el9
• composefs-1.0.8-1.el9
• composefs-libs-1.0.8-1.el9
• conmon-3:2.1.13-1.el9
• conmon-rs-0.6.6-2.el9s
• conntrack-tools-1.4.7-4.el9
• console-login-helper-messages-0.21.3-1.el9
• console-login-helper-messages-issuegen-0.21.3-1.el9
• console-login-helper-messages-profile-0.21.3-1.el9
• container-selinux-4:2.239.0-1.el9
• containernetworking-plugins-1:1.7.1-1.el9
• containers-common-4:1-132.el9
• coreos-installer-0.24.0-1.el9
• coreos-installer-bootinfra-0.24.0-1.el9
• coreutils-8.32-39.el9
• coreutils-common-8.32-39.el9
• cpio-2.13-16.el9
• cracklib-2.9.6-27.el9
• cracklib-dicts-2.9.6-27.el9
• cri-o-1.32.4-1.el9s
• cri-tools-1.32.0-2.el9s
• criu-3.19-3.el9
• criu-libs-3.19-3.el9
• crun-1.23-1.el9
• crypto-policies-20250721-1.git162e4cb.el9
• crypto-policies-scripts-20250721-1.git162e4cb.el9
• cryptsetup-2.7.2-4.el9
• cryptsetup-libs-2.7.2-4.el9
• curl-7.76.1-31.el9
• cyrus-sasl-gssapi-2.1.27-21.el9
• cyrus-sasl-lib-2.1.27-21.el9
• dbus-1:1.12.20-8.el9
• dbus-broker-28-7.el9
• dbus-common-1:1.12.20-8.el9
• dbus-libs-1:1.12.20-8.el9
• dbus-tools-1:1.12.20-8.el9
• device-mapper-9:1.02.206-2.el9
• device-mapper-event-9:1.02.206-2.el9
• device-mapper-event-libs-9:1.02.206-2.el9
• device-mapper-libs-9:1.02.206-2.el9
• device-mapper-multipath-0.8.7-39.el9
• device-mapper-multipath-libs-0.8.7-39.el9
• device-mapper-persistent-data-1.1.0-1.el9
• diffutils-3.7-12.el9
• dmidecode-1:3.6-1.el9
• dnf-4.14.0-31.el9
• dnf-data-4.14.0-31.el9
• dnsmasq-2.85-16.el9
• dosfstools-4.2-3.el9
• dracut-057-90.git20250609.el9
• dracut-network-057-90.git20250609.el9
• dracut-squash-057-90.git20250609.el9
• e2fsprogs-1.46.5-8.el9
• e2fsprogs-libs-1.46.5-8.el9
• efi-filesystem-6-2.el9
• efibootmgr-16-12.el9
• efivar-libs-38-3.el9
• elfutils-debuginfod-client-0.193-1.el9
• elfutils-default-yama-scope-0.193-1.el9
• elfutils-libelf-0.193-1.el9
• elfutils-libs-0.193-1.el9
• ethtool-2:6.11-1.el9
• expat-2.5.0-5.el9
• file-5.39-16.el9
• file-libs-5.39-16.el9
• filesystem-3.16-5.el9
• findutils-1:4.8.0-7.el9
• firewalld-filesystem-1.3.4-15.el9
• flashrom-1.2-10.el9
• flatpak-session-helper-1.12.9-4.el9
• fstrm-0.6.1-3.el9
• fuse-2.9.9-17.el9
• fuse-common-3.10.2-9.el9
• fuse-libs-2.9.9-17.el9
• fuse-overlayfs-1.15-1.el9
• fuse3-3.10.2-9.el9
• fuse3-libs-3.10.2-9.el9
• fwupd-1.9.26-1.el9
• fwupd-plugin-flashrom-1.9.26-1.el9
• gawk-5.1.0-6.el9
• gawk-all-langpacks-5.1.0-6.el9
• gdbm-libs-1:1.23-1.el9
• gdisk-1.0.7-5.el9
• geolite2-city-20191217-6.el9
• geolite2-country-20191217-6.el9
• gettext-0.21-8.el9
• gettext-libs-0.21-8.el9
• git-core-2.47.3-1.el9
• glib2-2.68.4-16.el9
• glibc-2.34-217.el9
• glibc-common-2.34-217.el9
• glibc-gconv-extra-2.34-217.el9
• glibc-minimal-langpack-2.34-217.el9
• glusterfs-6.0-57.4.el9
• glusterfs-client-xlators-6.0-57.4.el9
• glusterfs-fuse-6.0-57.4.el9
• glusterfs-libs-6.0-57.4.el9
• gmp-1:6.2.0-13.el9
• gnupg2-2.3.3-4.el9
• gnutls-3.8.3-8.el9
• gobject-introspection-1.68.0-11.el9
• gpgme-1.15.1-6.el9
• grep-3.6-5.el9
• groff-base-1.22.4-10.el9
• grub2-common-1:2.06-107.el9
• grub2-efi-x64-1:2.06-107.el9
• grub2-pc-1:2.06-107.el9
• grub2-pc-modules-1:2.06-107.el9
• grub2-tools-1:2.06-107.el9
• grub2-tools-minimal-1:2.06-107.el9
• gssproxy-0.8.4-7.el9
• gzip-1.12-1.el9
• hostname-3.23-6.el9
• hwdata-0.348-9.19.el9
• ignition-2.22.0-2.el9
• ignition-grub-2.22.0-2.el9
• ima-evm-utils-1.6.2-1.el9
• info-6.7-15.el9
• inih-49-6.el9
• initscripts-service-10.11.8-4.el9
• ipcalc-1.0.0-5.el9
• iproute-6.14.0-1.el9
• iproute-tc-6.14.0-1.el9
• iptables-libs-1.8.10-11.el9
• iptables-nft-1.8.10-11.el9
• iputils-20210202-14.el9
• irqbalance-2:1.9.4-4.el9
• iscsi-initiator-utils-6.2.1.11-0.git4b3e853.el9
• iscsi-initiator-utils-iscsiuio-6.2.1.11-0.git4b3e853.el9
• isns-utils-libs-0.101-4.el9
• jansson-2.14-1.el9
• jose-14-1.el9
• jq-1.6-19.el9
• json-c-0.14-11.el9
• json-glib-1.6.6-1.el9
• kbd-2.4.0-11.el9
• kbd-legacy-2.4.0-11.el9
• kbd-misc-2.4.0-11.el9
• kernel-5.14.0-601.el9
• kernel-core-5.14.0-601.el9
• kernel-modules-5.14.0-601.el9
• kernel-modules-core-5.14.0-601.el9
• kernel-modules-extra-5.14.0-601.el9
• kexec-tools-2.0.29-8.el9
• keyutils-1.6.3-1.el9
• keyutils-libs-1.6.3-1.el9
• kmod-28-10.el9
• kmod-libs-28-10.el9
• kpartx-0.8.7-39.el9
• krb5-libs-1.21.1-8.el9
• less-590-6.el9
• libacl-2.3.1-4.el9
• libaio-0.3.111-13.el9
• libarchive-3.5.3-5.el9
• libassuan-2.5.5-3.el9
• libattr-2.5.1-3.el9
• libbasicobjects-0.1.1-53.el9
• libblkid-2.37.4-21.el9
• libbpf-2:1.5.0-2.el9
• libbrotli-1.0.9-7.el9
• libcap-2.48-10.el9
• libcap-ng-0.8.2-7.el9
• libcbor-0.7.0-5.el9
• libcollection-0.7.0-53.el9
• libcom_err-1.46.5-8.el9
• libcomps-0.1.18-1.el9
• libcurl-7.76.1-31.el9
• libdaemon-0.14-23.el9
• libdb-5.3.28-57.el9
• libdhash-0.5.0-53.el9
• libdnf-0.69.0-16.el9
• libdnf-plugin-subscription-manager-1.29.46-1.el9
• libdrm-2.4.123-2.el9
• libeconf-0.4.1-4.el9
• libedit-3.1-38.20210216cvs.el9
• libev-4.33-6.el9
• libevent-2.1.12-8.el9
• libfdisk-2.37.4-21.el9
• libffi-3.4.2-8.el9
• libfido2-1.13.0-2.el9
• libgcc-11.5.0-9.el9
• libgcrypt-1.10.0-11.el9
• libgomp-11.5.0-9.el9
• libgpg-error-1.42-5.el9
• libgudev-237-1.el9
• libgusb-0.3.8-2.el9
• libibverbs-57.0-1.el9
• libicu-67.1-10.el9
• libidn2-2.3.0-7.el9
• libini_config-1.3.1-53.el9
• libipa_hbac-2.9.7-3.el9
• libjcat-0.1.6-3.el9
• libjose-14-1.el9
• libkcapi-1.4.0-2.el9
• libkcapi-hmaccalc-1.4.0-2.el9
• libksba-1.5.1-7.el9
• libldb-4.22.3-2.el9
• libluksmeta-9-12.el9
• libmaxminddb-1.5.2-4.el9
• libmicrohttpd-1:0.9.72-5.el9
• libmnl-1.0.4-16.el9
• libmodulemd-2.13.0-2.el9
• libmount-2.37.4-21.el9
• libmspack-0.10.1-0.7.alpha.el9
• libndp-1.9-1.el9
• libnet-1.2-7.el9
• libnetfilter_conntrack-1.0.9-1.el9
• libnetfilter_cthelper-1.0.0-22.el9
• libnetfilter_cttimeout-1.0.0-19.el9
• libnetfilter_queue-1.0.5-1.el9
• libnfnetlink-1.0.1-23.el9
• libnfsidmap-1:2.5.4-38.el9
• libnftnl-1.2.6-4.el9
• libnghttp2-1.43.0-6.el9
• libnl3-3.11.0-1.el9
• libnl3-cli-3.11.0-1.el9
• libnvme-1.13-1.el9
• libpath_utils-0.2.1-53.el9
• libpcap-14:1.10.0-4.el9
• libpciaccess-0.16-7.el9
• libpkgconf-1.7.3-10.el9
• libpsl-0.21.1-5.el9
• libpwquality-1.4.4-8.el9
• libref_array-0.1.5-53.el9
• librepo-1.14.5-3.el9
• libreport-filesystem-2.15.2-6.el9
• libseccomp-2.5.2-2.el9
• libselinux-3.6-3.el9
• libselinux-utils-3.6-3.el9
• libsemanage-3.6-5.el9
• libsepol-3.6-3.el9
• libsigsegv-2.13-4.el9
• libslirp-4.4.0-8.el9
• libsmartcols-2.37.4-21.el9
• libsmbclient-4.22.3-2.el9
• libsolv-0.7.24-3.el9
• libss-1.46.5-8.el9
• libssh-0.10.4-13.el9
• libssh-config-0.10.4-13.el9
• libsss_certmap-2.9.7-3.el9
• libsss_idmap-2.9.7-3.el9
• libsss_nss_idmap-2.9.7-3.el9
• libsss_sudo-2.9.7-3.el9
• libstdc++-11.5.0-9.el9
• libtalloc-2.4.3-1.el9
• libtasn1-4.16.0-9.el9
• libtdb-1.4.13-1.el9
• libteam-1.31-16.el9
• libtevent-0.16.2-1.el9
• libtirpc-1.3.3-9.el9
• libtool-ltdl-2.4.6-46.el9
• libunistring-0.9.10-15.el9
• liburing-2.5-1.el9
• libusbx-1.0.26-1.el9
• libuser-0.63-17.el9
• libutempter-1.2.1-6.el9
• libuuid-2.37.4-21.el9
• libuv-1:1.42.0-2.el9
• libverto-0.3.2-3.el9
• libverto-libev-0.3.2-3.el9
• libwbclient-4.22.3-2.el9
• libxcrypt-4.4.18-3.el9
• libxcrypt-compat-4.4.18-3.el9
• libxml2-2.9.13-10.el9
• libxmlb-0.3.10-1.el9
• libxslt-1.1.34-12.el9
• libyaml-0.2.5-7.el9
• libzstd-1.5.5-1.el9
• linux-firmware-20250716-154.el9
• linux-firmware-whence-20250716-154.el9
• lmdb-libs-0.9.29-3.el9
• logrotate-3.18.0-12.el9
• lsof-4.94.0-3.el9
• lua-libs-5.4.4-4.el9
• luksmeta-9-12.el9
• lvm2-9:2.03.32-2.el9
• lvm2-libs-9:2.03.32-2.el9
• lz4-libs-1.9.3-5.el9
• lzo-2.10-7.el9
• mdadm-4.4-2.el9
• microcode_ctl-4:20250512-1.el9
• mokutil-2:0.7.2-1.el9
• mpfr-4.1.0-7.el9
• nano-5.6.1-7.el9
• ncurses-6.2-12.20210508.el9
• ncurses-base-6.2-12.20210508.el9
• ncurses-libs-6.2-12.20210508.el9
• net-tools-2.0-0.64.20160912git.el9
• netavark-2:1.15.1-1.el9
• nettle-3.10.1-1.el9
• newt-0.52.21-11.el9
• nfs-utils-1:2.5.4-38.el9
• nftables-1:1.0.9-4.el9
• nmap-ncat-3:7.92-3.el9
• nmstate-2.2.48-1.el9
• npth-1.6-8.el9
• nss-altfiles-2.18.1-20.el9
• numactl-libs-2.0.19-1.el9
• nvme-cli-2.13-1.el9
• oniguruma-6.9.6-1.el9.6
• open-vm-tools-13.0.0-1.el9
• openldap-2.6.8-4.el9
• openshift-clients-4.19.0-202506301438.p0.g298429b.assembly.stream.el9
• openshift-kubelet-4.19.0-202508052241.p0.g138db52.assembly.stream.el9
• openssh-8.7p1-46.el9
• openssh-clients-8.7p1-46.el9
• openssh-server-8.7p1-46.el9
• openssl-1:3.5.1-3.el9
• openssl-fips-provider-1:3.5.1-3.el9
• openssl-libs-1:3.5.1-3.el9
• openvswitch-selinux-extra-policy-1.0-36.el9s
• openvswitch3.5-3.5.1-31.el9s
• os-prober-1.77-12.el9
• ose-aws-ecr-image-credential-provider-4.19.0-202506111541.p0.g425c1c5.assembly.stream.el9
• ose-azure-acr-image-credential-provider-4.19.0-202506111541.p0.g7109d6b.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider-4.19.0-202506111541.p0.gd8d3aeb.assembly.stream.el9
• ostree-2025.4-1.el9
• ostree-grub2-2025.4-1.el9
• ostree-libs-2025.4-1.el9
• p11-kit-0.25.3-3.el9
• p11-kit-server-0.25.3-3.el9
• p11-kit-trust-0.25.3-3.el9
• pam-1.5.1-26.el9
• passt-0^20250512.g8ec1341-1.el9
• passt-selinux-0^20250512.g8ec1341-1.el9
• passwd-0.80-12.el9
• pciutils-3.7.0-7.el9
• pciutils-libs-3.7.0-7.el9
• pcre-8.44-4.el9
• pcre2-10.40-6.el9
• pcre2-syntax-10.40-6.el9
• perl-AutoLoader-5.74-483.el9
• perl-B-1.80-483.el9
• perl-Carp-1.50-460.el9
• perl-Class-Struct-0.66-483.el9
• perl-Data-Dumper-2.174-462.el9
• perl-Digest-1.19-4.el9
• perl-Digest-MD5-2.58-4.el9
• perl-Encode-4:3.08-462.el9
• perl-Errno-1.30-483.el9
• perl-Exporter-5.74-461.el9
• perl-Fcntl-1.13-483.el9
• perl-File-Basename-2.85-483.el9
• perl-File-Path-2.18-4.el9
• perl-File-Temp-1:0.231.100-4.el9
• perl-File-stat-1.09-483.el9
• perl-FileHandle-2.03-483.el9
• perl-Getopt-Long-1:2.52-4.el9
• perl-Getopt-Std-1.12-483.el9
• perl-HTTP-Tiny-0.076-462.el9
• perl-IO-1.43-483.el9
• perl-IO-Socket-IP-0.41-5.el9
• perl-IO-Socket-SSL-2.073-2.el9
• perl-IPC-Open3-1.21-483.el9
• perl-MIME-Base64-3.16-4.el9
• perl-Mozilla-CA-20200520-6.el9
• perl-NDBM_File-1.15-483.el9
• perl-Net-SSLeay-1.94-3.el9
• perl-POSIX-1.94-483.el9
• perl-PathTools-3.78-461.el9
• perl-Pod-Escapes-1:1.07-460.el9
• perl-Pod-Perldoc-3.28.01-461.el9
• perl-Pod-Simple-1:3.42-4.el9
• perl-Pod-Usage-4:2.01-4.el9
• perl-Scalar-List-Utils-4:1.56-462.el9
• perl-SelectSaver-1.02-483.el9
• perl-Socket-4:2.031-4.el9
• perl-Storable-1:3.21-460.el9
• perl-Symbol-1.08-483.el9
• perl-Term-ANSIColor-5.01-461.el9
• perl-Term-Cap-1.17-460.el9
• perl-Text-ParseWords-3.30-460.el9
• perl-Text-Tabs+Wrap-2013.0523-460.el9
• perl-Time-Local-2:1.300-7.el9
• perl-URI-5.09-3.el9
• perl-base-2.27-483.el9
• perl-constant-1.33-461.el9
• perl-if-0.60.800-483.el9
• perl-interpreter-4:5.32.1-483.el9
• perl-libnet-3.13-4.el9
• perl-libs-4:5.32.1-483.el9
• perl-mro-1.23-483.el9
• perl-overload-1.31-483.el9
• perl-overloading-0.02-483.el9
• perl-parent-1:0.238-460.el9
• perl-podlators-1:4.14-460.el9
• perl-subs-1.03-483.el9
• perl-vars-1.05-483.el9
• pigz-2.5-4.el9
• pkgconf-1.7.3-10.el9
• pkgconf-m4-1.7.3-10.el9
• pkgconf-pkg-config-1.7.3-10.el9
• podman-5:5.5.1-1.el9
• policycoreutils-3.6-3.el9
• policycoreutils-python-utils-3.6-3.el9
• polkit-0.117-13.el9
• polkit-libs-0.117-13.el9
• polkit-pkla-compat-0.1-21.el9
• popt-1.18-8.el9
• procps-ng-3.3.17-14.el9
• protobuf-c-1.3.3-13.el9
• psmisc-23.4-3.el9
• publicsuffix-list-dafsa-20210518-3.el9
• python-unversioned-command-3.9.23-1.el9
• python3-3.9.23-1.el9
• python3-audit-3.1.5-7.el9
• python3-chardet-4.0.0-5.el9
• python3-cloud-what-1.29.46-1.el9
• python3-dateutil-1:2.8.1-7.el9
• python3-dbus-1.2.18-2.el9
• python3-decorator-4.4.2-6.el9
• python3-distro-1.5.0-7.el9
• python3-dnf-4.14.0-31.el9
• python3-dnf-plugin-versionlock-4.3.0-21.el9
• python3-dnf-plugins-core-4.3.0-21.el9
• python3-gobject-base-3.40.1-6.el9
• python3-gobject-base-noarch-3.40.1-6.el9
• python3-gpg-1.15.1-6.el9
• python3-hawkey-0.69.0-16.el9
• python3-idna-2.10-7.el9.1
• python3-iniparse-0.4-45.el9
• python3-inotify-0.9.6-25.el9
• python3-libcomps-0.1.18-1.el9
• python3-libdnf-0.69.0-16.el9
• python3-librepo-1.14.5-3.el9
• python3-libs-3.9.23-1.el9
• python3-libselinux-3.6-3.el9
• python3-libsemanage-3.6-5.el9
• python3-pip-wheel-21.3.1-1.el9
• python3-policycoreutils-3.6-3.el9
• python3-pysocks-1.7.1-12.el9
• python3-pyyaml-5.4.1-6.el9
• python3-requests-2.25.1-9.el9
• python3-rpm-4.16.1.3-38.el9
• python3-setools-4.4.4-1.el9
• python3-setuptools-53.0.0-15.el9
• python3-setuptools-wheel-53.0.0-15.el9
• python3-six-1.15.0-9.el9
• python3-subscription-manager-rhsm-1.29.46-1.el9
• python3-systemd-234-19.el9
• python3-urllib3-1.26.5-6.el9
• qemu-guest-agent-17:9.1.0-25.el9
• quota-1:4.09-4.el9
• quota-nls-1:4.09-4.el9
• rdma-core-57.0-1.el9
• readline-8.1-4.el9
• rpcbind-1.2.6-7.el9
• rpm-4.16.1.3-38.el9
• rpm-build-libs-4.16.1.3-38.el9
• rpm-libs-4.16.1.3-38.el9
• rpm-ostree-2025.9-1.el9
• rpm-ostree-libs-2025.9-1.el9
• rpm-plugin-selinux-4.16.1.3-38.el9
• rpm-plugin-systemd-inhibit-4.16.1.3-38.el9
• rpm-sign-libs-4.16.1.3-38.el9
• rsync-3.2.5-3.el9
• runc-4:1.3.0-1.el9
• samba-client-libs-4.22.3-2.el9
• samba-common-4.22.3-2.el9
• samba-common-libs-4.22.3-2.el9
• sed-4.8-9.el9
• selinux-policy-38.1.62-1.el9
• selinux-policy-targeted-38.1.62-1.el9
• setup-2.13.7-10.el9
• sg3_utils-1.47-10.el9
• sg3_utils-libs-1.47-10.el9
• shadow-utils-2:4.9-13.el9
• shadow-utils-subid-2:4.9-13.el9
• shared-mime-info-2.1-5.el9
• shim-x64-15-15.el8_2
• skopeo-2:1.19.0-2.el9
• slang-2.3.2-11.el9
• slirp4netns-1.3.3-1.el9
• snappy-1.1.8-8.el9
• socat-1.7.4.1-7.el9
• sqlite-libs-3.34.1-8.el9
• squashfs-tools-4.4-10.git1.el9
• ssh-key-dir-0.1.4-1.el9
• sssd-2.9.7-3.el9
• sssd-ad-2.9.7-3.el9
• sssd-client-2.9.7-3.el9
• sssd-common-2.9.7-3.el9
• sssd-common-pac-2.9.7-3.el9
• sssd-ipa-2.9.7-3.el9
• sssd-krb5-2.9.7-3.el9
• sssd-krb5-common-2.9.7-3.el9
• sssd-ldap-2.9.7-3.el9
• sssd-nfs-idmap-2.9.7-3.el9
• sssd-proxy-2.9.7-3.el9
• stalld-1.20.2-2.el9
• strace-6.12-1.el9
• subscription-manager-1.29.46-1.el9
• subscription-manager-rhsm-certificates-20220623-1.el9
• sudo-1.9.5p2-13.el9
• systemd-252-53.el9
• systemd-journal-remote-252-53.el9
• systemd-libs-252-53.el9
• systemd-pam-252-53.el9
• systemd-rpm-macros-252-53.el9
• systemd-udev-252-53.el9
• tar-2:1.34-7.el9
• teamd-1.31-16.el9
• tmux-3.2a-5.el9
• toolbox-0.1.2-1.el9
• tpm2-tools-5.2-6.el9
• tpm2-tss-3.2.3-1.el9
• tzdata-2025b-1.el9
• unbound-libs-1.16.2-19.el9
• usermode-1.114-7.el9
• userspace-rcu-0.12.1-6.el9
• util-linux-2.37.4-21.el9
• util-linux-core-2.37.4-21.el9
• vim-minimal-2:8.2.2637-22.el9
• virt-what-1.27-2.el9
• which-2.21-30.el9
• xfsprogs-6.4.0-7.el9
• xmlsec1-1.2.29-13.el9
• xmlsec1-openssl-1.2.29-13.el9
• xz-5.2.5-8.el9
• xz-libs-5.2.5-8.el9
• yajl-2.1.0-25.el9
• zlib-1.2.11-41.el9
• zram-generator-0.3.2-7.el9
• zstd-1.5.5-1.el9

Changed:

• NetworkManager 1:1.53.4-1.el9 → 1:1.53.92-1.el9
• NetworkManager-cloud-setup 1:1.53.4-1.el9 → 1:1.53.92-1.el9
• NetworkManager-libnm 1:1.53.4-1.el9 → 1:1.53.92-1.el9
• NetworkManager-ovs 1:1.53.4-1.el9 → 1:1.53.92-1.el9
• NetworkManager-team 1:1.53.4-1.el9 → 1:1.53.92-1.el9
• NetworkManager-tui 1:1.53.4-1.el9 → 1:1.53.92-1.el9
• WALinuxAgent-udev 2.7.0.6-13.el9 → 2.13.1.1-1.el9
• aardvark-dns 2:1.14.0-3.el9 → 2:1.15.0-1.el9
• afterburn 5.7.0-1.el9 → 5.9.0-1.el9
• afterburn-dracut 5.7.0-1.el9 → 5.9.0-1.el9
• avahi-libs 0.8-22.el9 → 0.8-23.el9
• bind-libs 32:9.16.23-28.el9 → 32:9.16.23-31.el9
• bind-license 32:9.16.23-28.el9 → 32:9.16.23-31.el9
• bind-utils 32:9.16.23-28.el9 → 32:9.16.23-31.el9
• binutils 2.35.2-63.el9 → 2.35.2-66.el9
• binutils-gold 2.35.2-63.el9 → 2.35.2-66.el9
• bootc 1.1.7-1.el9 → 1.4.0-1.el9
• bootupd 0.2.27-3.el9 → 0.2.28-3.el9
• bsdtar 3.5.3-4.el9 → 3.5.3-5.el9
• centos-gpg-keys 9.0-28.el9 → 9.0-30.el9
• centos-stream-release 9.0-28.el9 → 9.0-30.el9
• centos-stream-repos 9.0-28.el9 → 9.0-30.el9
• chrony 4.6.1-1.el9 → 4.6.1-2.el9
• container-selinux 4:2.237.0-1.el9 → 4:2.239.0-1.el9
• containers-common 2:1-130.el9 → 4:1-132.el9
• cri-o 1.32.2-1.el9s → 1.32.4-1.el9s
• crun 1.21-1.el9 → 1.23-1.el9
• crypto-policies 20250128-1.git5269e22.el9 → 20250721-1.git162e4cb.el9
• crypto-policies-scripts 20250128-1.git5269e22.el9 → 20250721-1.git162e4cb.el9
• cryptsetup 2.7.2-3.el9 → 2.7.2-4.el9
• cryptsetup-libs 2.7.2-3.el9 → 2.7.2-4.el9
• device-mapper 9:1.02.202-6.el9 → 9:1.02.206-2.el9
• device-mapper-event 9:1.02.202-6.el9 → 9:1.02.206-2.el9
• device-mapper-event-libs 9:1.02.202-6.el9 → 9:1.02.206-2.el9
• device-mapper-libs 9:1.02.202-6.el9 → 9:1.02.206-2.el9
• device-mapper-multipath 0.8.7-37.el9 → 0.8.7-39.el9
• device-mapper-multipath-libs 0.8.7-37.el9 → 0.8.7-39.el9
• dnf 4.14.0-29.el9 → 4.14.0-31.el9
• dnf-data 4.14.0-29.el9 → 4.14.0-31.el9
• dracut 057-87.git20250311.el9 → 057-90.git20250609.el9
• dracut-network 057-87.git20250311.el9 → 057-90.git20250609.el9
• dracut-squash 057-87.git20250311.el9 → 057-90.git20250609.el9
• e2fsprogs 1.46.5-7.el9 → 1.46.5-8.el9
• e2fsprogs-libs 1.46.5-7.el9 → 1.46.5-8.el9
• firewalld-filesystem 1.3.4-9.el9 → 1.3.4-15.el9
• git-core 2.47.1-2.el9 → 2.47.3-1.el9
• glibc 2.34-189.el9 → 2.34-217.el9
• glibc-common 2.34-189.el9 → 2.34-217.el9
• glibc-gconv-extra 2.34-189.el9 → 2.34-217.el9
• glibc-minimal-langpack 2.34-189.el9 → 2.34-217.el9
• gnutls 3.8.3-6.el9 → 3.8.3-8.el9
• grub2-common 1:2.06-105.el9 → 1:2.06-107.el9
• grub2-efi-x64 1:2.06-105.el9 → 1:2.06-107.el9
• grub2-pc 1:2.06-105.el9 → 1:2.06-107.el9
• grub2-pc-modules 1:2.06-105.el9 → 1:2.06-107.el9
• grub2-tools 1:2.06-105.el9 → 1:2.06-107.el9
• grub2-tools-minimal 1:2.06-105.el9 → 1:2.06-107.el9
• hwdata 0.348-9.18.el9 → 0.348-9.19.el9
• ignition 2.21.0-1.el9 → 2.22.0-2.el9
• ignition-grub 2.21.0-1.el9 → 2.22.0-2.el9
• iproute 6.11.0-1.el9 → 6.14.0-1.el9
• iproute-tc 6.11.0-1.el9 → 6.14.0-1.el9
• iputils 20210202-11.el9 → 20210202-14.el9
• irqbalance 2:1.9.4-2.el9 → 2:1.9.4-4.el9
• iscsi-initiator-utils 6.2.1.9-1.gita65a472.el9 → 6.2.1.11-0.git4b3e853.el9
• iscsi-initiator-utils-iscsiuio 6.2.1.9-1.gita65a472.el9 → 6.2.1.11-0.git4b3e853.el9
• jq 1.6-17.el9 → 1.6-19.el9
• kernel 5.14.0-584.el9 → 5.14.0-601.el9
• kernel-core 5.14.0-584.el9 → 5.14.0-601.el9
• kernel-modules 5.14.0-584.el9 → 5.14.0-601.el9
• kernel-modules-core 5.14.0-584.el9 → 5.14.0-601.el9
• kernel-modules-extra 5.14.0-584.el9 → 5.14.0-601.el9
• kexec-tools 2.0.29-7.el9 → 2.0.29-8.el9
• kpartx 0.8.7-37.el9 → 0.8.7-39.el9
• krb5-libs 1.21.1-6.el9 → 1.21.1-8.el9
• less 590-5.el9 → 590-6.el9
• libarchive 3.5.3-4.el9 → 3.5.3-5.el9
• libbpf 2:1.5.0-1.el9 → 2:1.5.0-2.el9
• libcap 2.48-9.el9 → 2.48-10.el9
• libcom_err 1.46.5-7.el9 → 1.46.5-8.el9
• libdnf 0.69.0-14.el9 → 0.69.0-16.el9
• libdnf-plugin-subscription-manager 1.29.45-1.el9 → 1.29.46-1.el9
• libgcc 11.5.0-5.el9 → 11.5.0-9.el9
• libgomp 11.5.0-5.el9 → 11.5.0-9.el9
• libibverbs 54.0-1.el9 → 57.0-1.el9
• libicu 67.1-9.el9 → 67.1-10.el9
• libipa_hbac 2.9.6-4.el9.2 → 2.9.7-3.el9
• libldb 4.21.3-3.el9 → 4.22.3-2.el9
• libnfsidmap 1:2.5.4-37.el9 → 1:2.5.4-38.el9
• librepo 1.14.5-2.el9 → 1.14.5-3.el9
• libsmbclient 4.21.3-3.el9 → 4.22.3-2.el9
• libss 1.46.5-7.el9 → 1.46.5-8.el9
• libsss_certmap 2.9.6-4.el9.2 → 2.9.7-3.el9
• libsss_idmap 2.9.6-4.el9.2 → 2.9.7-3.el9
• libsss_nss_idmap 2.9.6-4.el9.2 → 2.9.7-3.el9
• libsss_sudo 2.9.6-4.el9.2 → 2.9.7-3.el9
• libstdc++ 11.5.0-5.el9 → 11.5.0-9.el9
• libtalloc 2.4.2-1.el9 → 2.4.3-1.el9
• libtdb 1.4.12-1.el9 → 1.4.13-1.el9
• libtevent 0.16.1-1.el9 → 0.16.2-1.el9
• libuser 0.63-16.el9 → 0.63-17.el9
• libwbclient 4.21.3-3.el9 → 4.22.3-2.el9
• libxml2 2.9.13-9.el9 → 2.9.13-10.el9
• linux-firmware 20250314-151.el9 → 20250716-154.el9
• linux-firmware-whence 20250314-151.el9 → 20250716-154.el9
• logrotate 3.18.0-9.el9 → 3.18.0-12.el9
• lvm2 9:2.03.28-6.el9 → 9:2.03.32-2.el9
• lvm2-libs 9:2.03.28-6.el9 → 9:2.03.32-2.el9
• mdadm 4.3-4.el9 → 4.4-2.el9
• microcode_ctl 4:20250211-1.el9 → 4:20250512-1.el9
• ncurses 6.2-10.20210508.el9 → 6.2-12.20210508.el9
• ncurses-base 6.2-10.20210508.el9 → 6.2-12.20210508.el9
• ncurses-libs 6.2-10.20210508.el9 → 6.2-12.20210508.el9
• netavark 2:1.14.0-1.el9 → 2:1.15.1-1.el9
• nfs-utils 1:2.5.4-37.el9 → 1:2.5.4-38.el9
• nftables 1:1.0.9-3.el9 → 1:1.0.9-4.el9
• nmstate 2.2.44-1.el9 → 2.2.48-1.el9
• open-vm-tools 12.5.0-1.el9 → 13.0.0-1.el9
• openshift-clients 4.19.0-202505150818.p0.gc88fd60.assembly.stream.el9 → 4.19.0-202506301438.p0.g298429b.assembly.stream.el9
• openshift-kubelet 4.19.0-202505151347.p0.g9fe7dfd.assembly.stream.el9 → 4.19.0-202508052241.p0.g138db52.assembly.stream.el9
• openssh 8.7p1-45.el9 → 8.7p1-46.el9
• openssh-clients 8.7p1-45.el9 → 8.7p1-46.el9
• openssh-server 8.7p1-45.el9 → 8.7p1-46.el9
• openssl 1:3.5.0-1.el9 → 1:3.5.1-3.el9
• openssl-libs 1:3.5.0-1.el9 → 1:3.5.1-3.el9
• openvswitch3.5 3.5.0-22.el9s → 3.5.1-31.el9s
• ose-aws-ecr-image-credential-provider 4.19.0-202505121540.p0.g425c1c5.assembly.stream.el9 → 4.19.0-202506111541.p0.g425c1c5.assembly.stream.el9
• ose-azure-acr-image-credential-provider 4.19.0-202505121540.p0.g7109d6b.assembly.stream.el9 → 4.19.0-202506111541.p0.g7109d6b.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider 4.19.0-202505121540.p0.gd8d3aeb.assembly.stream.el9 → 4.19.0-202506111541.p0.gd8d3aeb.assembly.stream.el9
• ostree 2025.2-1.el9 → 2025.4-1.el9
• ostree-grub2 2025.2-1.el9 → 2025.4-1.el9
• ostree-libs 2025.2-1.el9 → 2025.4-1.el9
• pam 1.5.1-23.el9 → 1.5.1-26.el9
• passt 0^20250320.g32f6212-1.el9 → 0^20250512.g8ec1341-1.el9
• passt-selinux 0^20250320.g32f6212-1.el9 → 0^20250512.g8ec1341-1.el9
• perl-AutoLoader 5.74-481.el9 → 5.74-483.el9
• perl-B 1.80-481.el9 → 1.80-483.el9
• perl-Class-Struct 0.66-481.el9 → 0.66-483.el9
• perl-Errno 1.30-481.el9 → 1.30-483.el9
• perl-Fcntl 1.13-481.el9 → 1.13-483.el9
• perl-File-Basename 2.85-481.el9 → 2.85-483.el9
• perl-File-stat 1.09-481.el9 → 1.09-483.el9
• perl-FileHandle 2.03-481.el9 → 2.03-483.el9
• perl-Getopt-Std 1.12-481.el9 → 1.12-483.el9
• perl-IO 1.43-481.el9 → 1.43-483.el9
• perl-IPC-Open3 1.21-481.el9 → 1.21-483.el9
• perl-NDBM_File 1.15-481.el9 → 1.15-483.el9
• perl-Net-SSLeay 1.94-1.el9 → 1.94-3.el9
• perl-POSIX 1.94-481.el9 → 1.94-483.el9
• perl-SelectSaver 1.02-481.el9 → 1.02-483.el9
• perl-Symbol 1.08-481.el9 → 1.08-483.el9
• perl-base 2.27-481.el9 → 2.27-483.el9
• perl-if 0.60.800-481.el9 → 0.60.800-483.el9
• perl-interpreter 4:5.32.1-481.el9 → 4:5.32.1-483.el9
• perl-libs 4:5.32.1-481.el9 → 4:5.32.1-483.el9
• perl-mro 1.23-481.el9 → 1.23-483.el9
• perl-overload 1.31-481.el9 → 1.31-483.el9
• perl-overloading 0.02-481.el9 → 0.02-483.el9
• perl-subs 1.03-481.el9 → 1.03-483.el9
• perl-vars 1.05-481.el9 → 1.05-483.el9
• podman 5:5.4.0-7.el9 → 5:5.5.1-1.el9
• python-unversioned-command 3.9.21-2.el9 → 3.9.23-1.el9
• python3 3.9.21-2.el9 → 3.9.23-1.el9
• python3-cloud-what 1.29.45-1.el9 → 1.29.46-1.el9
• python3-dnf 4.14.0-29.el9 → 4.14.0-31.el9
• python3-hawkey 0.69.0-14.el9 → 0.69.0-16.el9
• python3-libdnf 0.69.0-14.el9 → 0.69.0-16.el9
• python3-librepo 1.14.5-2.el9 → 1.14.5-3.el9
• python3-libs 3.9.21-2.el9 → 3.9.23-1.el9
• python3-rpm 4.16.1.3-37.el9 → 4.16.1.3-38.el9
• python3-setuptools 53.0.0-14.el9 → 53.0.0-15.el9
• python3-setuptools-wheel 53.0.0-14.el9 → 53.0.0-15.el9
• python3-subscription-manager-rhsm 1.29.45-1.el9 → 1.29.46-1.el9
• qemu-guest-agent 17:9.1.0-19.el9 → 17:9.1.0-25.el9
• rdma-core 54.0-1.el9 → 57.0-1.el9
• rpm 4.16.1.3-37.el9 → 4.16.1.3-38.el9
• rpm-build-libs 4.16.1.3-37.el9 → 4.16.1.3-38.el9
• rpm-libs 4.16.1.3-37.el9 → 4.16.1.3-38.el9
• rpm-ostree 2025.8-1.el9 → 2025.9-1.el9
• rpm-ostree-libs 2025.8-1.el9 → 2025.9-1.el9
• rpm-plugin-selinux 4.16.1.3-37.el9 → 4.16.1.3-38.el9
• rpm-plugin-systemd-inhibit 4.16.1.3-37.el9 → 4.16.1.3-38.el9
• rpm-sign-libs 4.16.1.3-37.el9 → 4.16.1.3-38.el9
• samba-client-libs 4.21.3-3.el9 → 4.22.3-2.el9
• samba-common 4.21.3-3.el9 → 4.22.3-2.el9
• samba-common-libs 4.21.3-3.el9 → 4.22.3-2.el9
• selinux-policy 38.1.56-1.el9 → 38.1.62-1.el9
• selinux-policy-targeted 38.1.56-1.el9 → 38.1.62-1.el9
• shadow-utils 2:4.9-12.el9 → 2:4.9-13.el9
• shadow-utils-subid 2:4.9-12.el9 → 2:4.9-13.el9
• skopeo 2:1.18.1-3.el9 → 2:1.19.0-2.el9
• slirp4netns 1.3.2-1.el9 → 1.3.3-1.el9
• socat 1.7.4.1-6.el9 → 1.7.4.1-7.el9
• sqlite-libs 3.34.1-7.el9 → 3.34.1-8.el9
• sssd 2.9.6-4.el9.2 → 2.9.7-3.el9
• sssd-ad 2.9.6-4.el9.2 → 2.9.7-3.el9
• sssd-client 2.9.6-4.el9.2 → 2.9.7-3.el9
• sssd-common 2.9.6-4.el9.2 → 2.9.7-3.el9
• sssd-common-pac 2.9.6-4.el9.2 → 2.9.7-3.el9
• sssd-ipa 2.9.6-4.el9.2 → 2.9.7-3.el9
• sssd-krb5 2.9.6-4.el9.2 → 2.9.7-3.el9
• sssd-krb5-common 2.9.6-4.el9.2 → 2.9.7-3.el9
• sssd-ldap 2.9.6-4.el9.2 → 2.9.7-3.el9
• sssd-nfs-idmap 2.9.6-4.el9.2 → 2.9.7-3.el9
• sssd-proxy 2.9.6-4.el9.2 → 2.9.7-3.el9
• stalld 1.19.6-1.el9 → 1.20.2-2.el9
• subscription-manager 1.29.45-1.el9 → 1.29.46-1.el9
• sudo 1.9.5p2-12.el9 → 1.9.5p2-13.el9
• toolbox 0.1.1-1.el9 → 0.1.2-1.el9
• unbound-libs 1.16.2-17.el9 → 1.16.2-19.el9
• usermode 1.114-6.el9 → 1.114-7.el9
• which 2.21-29.el9 → 2.21-30.el9
• xfsprogs 6.4.0-5.el9 → 6.4.0-7.el9

Added:

• flatpak-session-helper 1.12.9-4.el9
• openssl-fips-provider 1:3.5.1-3.el9
• p11-kit-server 0.25.3-3.el9

Extensions

Full list (64 packages)

• NetworkManager-libreswan-1.2.24-1.el9.x86_64
• bison-3.7.4-5.el9.x86_64
• capstone-4.0.2-10.el9.x86_64
• cpp-11.5.0-9.el9.x86_64
• daxctl-libs-78-2.el9.x86_64
• edk2-ovmf-20241117-4.el9.noarch
• elfutils-libelf-devel-0.193-1.el9.x86_64
• flex-2.6.4-9.el9.x86_64
• gcc-11.5.0-9.el9.x86_64
• glibc-devel-2.34-217.el9.x86_64
• glibc-headers-2.34-217.el9.x86_64
• ipxe-roms-qemu-20200823-9.git4bd064de.el9.noarch
• kata-containers-2.5.2-1.el9s.x86_64
• kernel-5.14.0-601.el9.x86_64
• kernel-core-5.14.0-601.el9.x86_64
• kernel-devel-5.14.0-601.el9.x86_64
• kernel-headers-5.14.0-601.el9.x86_64
• kernel-modules-5.14.0-601.el9.x86_64
• kernel-modules-extra-5.14.0-601.el9.x86_64
• kernel-rt-core-5.14.0-601.el9.x86_64
• kernel-rt-devel-5.14.0-601.el9.x86_64
• kernel-rt-modules-5.14.0-601.el9.x86_64
• kernel-rt-modules-core-5.14.0-601.el9.x86_64
• kernel-rt-modules-extra-5.14.0-601.el9.x86_64
• krb5-pkinit-1.21.1-8.el9.x86_64
• krb5-workstation-1.21.1-8.el9.x86_64
• ldns-1.7.1-12.el9.x86_64
• libfdt-1.6.0-7.el9.x86_64
• libkadm5-1.21.1-8.el9.x86_64
• libmpc-1.2.1-4.el9.x86_64
• libpmem-1.12.1-1.el9.x86_64
• libpng-2:1.6.37-12.el9.x86_64
• libqb-2.0.8-1.el9.x86_64
• librdmacm-57.0-1.el9.x86_64
• libreswan-4.15-8.el9.x86_64
• libxcrypt-devel-4.4.18-3.el9.x86_64
• libzstd-devel-1.5.5-1.el9.x86_64
• lm_sensors-libs-3.6.0-10.el9.x86_64
• m4-1.4.19-1.el9.x86_64
• make-1:4.3-8.el9.x86_64
• ndctl-libs-78-2.el9.x86_64
• nspr-4.36.0-1.el9.x86_64
• nss-3.112.0-1.el9.x86_64
• nss-softokn-3.112.0-1.el9.x86_64
• nss-softokn-freebl-3.112.0-1.el9.x86_64
• nss-sysinit-3.112.0-1.el9.x86_64
• nss-tools-3.112.0-1.el9.x86_64
• nss-util-3.112.0-1.el9.x86_64
• openssl-devel-1:3.5.1-3.el9.x86_64
• openvswitch3.5-ipsec-3.5.1-31.el9s.x86_64
• pcp-conf-6.3.7-5.el9.x86_64
• pcp-libs-6.3.7-5.el9.x86_64
• pixman-0.40.0-6.el9.x86_64
• protobuf-3.14.0-16.el9.x86_64
• python3-openvswitch3.5-3.5.1-31.el9s.x86_64
• qemu-img-17:9.1.0-25.el9.x86_64
• qemu-kvm-common-17:9.1.0-25.el9.x86_64
• qemu-kvm-core-17:9.1.0-25.el9.x86_64
• seabios-bin-1.16.3-4.el9.noarch
• seavgabios-bin-1.16.3-4.el9.noarch
• sysstat-12.5.4-9.el9.x86_64
• usbguard-1.0.0-16.el9.x86_64
• usbguard-selinux-1.0.0-16.el9.noarch
• zlib-devel-1.2.11-41.el9.x86_64

CentOS Stream CoreOS base layer: 9.0.20250731-1