Impact statement for the OCPBUGS-65899 series:

Which 4.y.z to 4.y'.z' updates increase vulnerability?

Updates from any version to 4.19.18. Only 4.19.18 is known to be exposed. 4.19.19 is not exposed.

Which types of clusters?

All clusters will be exposed to the thrashing coreos-bootimages ConfigMap content. We're still working out the downstream impacts to know where that's acceptable noise vs. more serious impact.

What is the impact? Is it serious enough to warrant removing update recommendations?

We're still working through this.

How involved is remediation?

To fix the issue, update to a fixed release, such as 4.19.19 or later.

Is this a regression?

Yes, the issue seems to be unique to 4.19.18.