RHBA-2026:0682 - Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform release 4.19.22 is now available with updates to packages and images that fix several bugs.

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.

This advisory contains the container images for Red Hat OpenShift Container Platform 4.19.22. See the following advisory for the RPM packages for this release:

https://access.redhat.com/errata/RHBA-2026:0673

Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:

https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/

Solution

For OpenShift Container Platform 4.19 see the following documentation, which will be updated shortly for this release, for important instructions
on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/

You can download the oc tool and use it to inspect release image metadata
for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests
can be found at
https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.

The sha values for the release are as follows:

(For x86_64 architecture)
The image digest is sha256:e4377ba202c97eccba15c3a428cd4e532a02d5420d5b8918cdd3284404abb1ba

(For s390x architecture)
The image digest is sha256:0a15e17381e77d0afdf331ae3c455e091ffd454cf69966f041abf28ad7494be9

(For ppc64le architecture)
The image digest is sha256:b7ec15e179936b7c832c59ee3e68c70151d16e5cb9270d1bd0f7fb6dd78e438c

(For aarch64 architecture)
The image digest is sha256:87fd3d95d4b0f67500c624b64a1bf69873a8ef361612fed314066f01b78677ec

All OpenShift Container Platform 4.19 users are advised to upgrade to these updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli.

Affected Products

• Red Hat OpenShift Container Platform

Fixes

• OCPBUGS-61662 - [4.19.z] Route spec.path that have space or # causes HaProxy error and ingress degraded
• OCPBUGS-62116 - [GCP-PD] Hyperdisk volume original size need to be larger than 6Gi when do resize/clone operation
• OCPBUGS-62830 - Metrics not visible in monitoring dashboard
• OCPBUGS-63437 - vSphere 7 Deprecation
• OCPBUGS-63455 - VPA recommendation dropped to minimal request due to upstream issue #7726
• OCPBUGS-63603 - Cluster AutoScaler + CAPI Provider incorrectly interferes with MachineDeployment Replicas
• OCPBUGS-64567 - OC 2 Port CI 4.19 & 4.18 failing to lock after soft reboot
• OCPBUGS-65552 - Bump to Kubernetes v1.32.10
• OCPBUGS-65610 - [Azure UPI] dropping support for field used in image gallery versions
• OCPBUGS-65723 - [release-4.19] IngressOperator not exposing some metrics for existing IngressController after Operator restart
• OCPBUGS-65829 - [release-4.19]The Containerfile in the repo has hypershift-no-cgo, but the published image quay.io/hypershift/hypershift-operator:latest doesn't
• OCPBUGS-65956 - [release-4.19] Packets not being forwarded from pod to edge interface (OVS_DROP_LAST_ACTION)
• OCPBUGS-65962 - [4.19] Pods in openshift-apiserver are unable to parse manifest due to unexpected end of JSON input
• OCPBUGS-66139 - deleted nodes still present in egressfirewalls managed fields
• OCPBUGS-66179 - [release-4.19] Terminal disconnected when pod YAML changes (without pod restart)
• OCPBUGS-66410 - Not able to mirror specific version of 'redis-enterprise-operator-cert' operator
• OCPBUGS-66920 - ValidatingAdmissionPolicy not working for openshift-apiserver resources
• OCPBUGS-66970 - backport ptp-operator to 4.19
• OCPBUGS-66971 - backport linuxptp-daemon to 4.19
• OCPBUGS-66999 - ABI vSphere Installation Failing Due to “No Space Left on Device”
• OCPBUGS-67003 - Block cluster upgrade to 4.20 is customer is using reserved key words in externalLabels
• OCPBUGS-67146 - `Should properly transition through MCN conditions on rebootless node update` test failing in two-node fencing
• OCPBUGS-67167 - [4.19] Backport of MTV telemetry MON-3940
• OCPBUGS-67198 - E2E Test `TestMCNScopeSadPath` is flaking
• OCPBUGS-67237 - backport cloud-event-proxy to 4.19
• OCPBUGS-67264 - MCS and kube-rbac-proxy ports require service endpoints for documentation
• OCPBUGS-67304 - [4.19] Test advertised ip reachability before assigning it
• OCPBUGS-67361 - Duplicate Pipelines nav option in console side navigation
• OCPBUGS-67365 - PPC64le upgrades have gotten 80+ minutes
• OCPBUGS-68378 - [release-4.19] OCP 4.16.43 - HAProxy MaxConn Limit reached/exceeded after upgrade from 4.14 with no change to workload
• OCPBUGS-69415 - network-dependent unit tests for image metadata causing failures
• OCPBUGS-69677 - [release-4.19] Operand details page not parsing operand status and grouping descriptors correctly
• OCPBUGS-70135 - [release-4.19] Console backend showing failed to get new config for olm client error
• OCPBUGS-70296 - Missing ports Field in Container Spec
• OCPBUGS-70328 - High CPU usage for iptables-alerter pods
• OCPBUGS-70345 - [OCP4.19][OVN-Kubernetes] stale conntrack UDP entry when deleting openshift-dns pod
• OCPBUGS-71210 - MCP is not correctly degraded when a pivotError happens
• OCPBUGS-71240 - PTP BC HA The phc2sys command concatenation format is malformed

CVEs

(none)

References

(none)