View information of version changes for major, minor, and patch updates that are available for your Red HatĀ® OpenShiftĀ® on IBM CloudĀ® clusters that run version 4.8. Changes include updates to Red Hat OpenShift, Kubernetes, and IBM Cloud Provider
components.
Change logs
Review the version 4.8 change log.
Change log for master fix pack 4.8.57_1600_openshift, released 27 April 2023
The following table shows the changes that are in the master fix pack 4.8.57_1600_openshift. Master patch updates are applied automatically.
Changes since version 4.8.57_1596_openshift
Component |
Previous |
Current |
Description |
Cluster health image |
v1.3.17 |
v1.3.19 |
Updated Go to version 1.19.8 and updated dependencies. |
IBM Calico extension |
1366-amd64 |
1390-amd64 |
Eliminate IP syscall. |
IBM Cloud Block Storage driver and plug-in |
v2.4.0 |
v2.4.5 |
Updated universal base image (UBI) to resolve CVEs. Updated Go to version 1.19.8 and updated dependencies. |
IBM Cloud Controller Manager |
v1.21.14-12 |
v1.21.14-14 |
Update Go dependencies. |
IBM Cloud File Storage for Classic plug-in and monitor |
429 |
431 |
Updated Go to version 1.19.8 and updated dependencies. Update UBI base image. |
Key Management Service provider |
v2.6.4 |
v2.6.5 |
Updated Go to version 1.19.7 and updated dependencies. |
Load balancer and load balancer monitor for IBM Cloud Provider |
2420 |
2486 |
Updated Go to version 1.19.7 and updated dependencies. |
OpenVPN Operator image |
v1.4.22 |
v1.4.23 |
Updated base image to resolve CVEs: CVE-2022-4304, CVE-2022-4450,
CVE-2023-0215, CVE-2023-0286, CVE-2023-0361. |
Portieris admission controller |
v0.13.3 |
v0.13.4 |
See the Portieris admission controller release notes. |
Red Hat OpenShift on IBM Cloud Control Plane Operator and Metrics Server |
4.8.0-20230314 |
4.8.0-20230417 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Red Hat OpenShift on IBM Cloud toolkit |
4.8.0+20230314 |
4.8.0+20230417 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Change log for worker node fix pack 4.8.57_1600_openshift, released 24 April 2023
The following table shows the changes that are in the worker node fix pack 4.8.57_1600_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker
node.
Changes since version 4.8.57_1598_openshift
Component |
Previous |
Current |
Description |
RHEL 7 Packages |
N/A |
N/A |
N/A |
Red Hat OpenShift on IBM Cloud |
N/A |
N/A |
N/A |
Haproxy |
N/A |
N/A |
N/A |
Change log for worker node fix pack 4.8.57_1598_openshift, released 11 April 2023
The following table shows the changes that are in the worker node fix pack 4.8.57_1598_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker
node.
Changes since version 4.8.57_1597_openshift
Component |
Previous |
Current |
Description |
RHEL 7 Packages |
N/A |
N/A |
Worker node package updates for CVE-2023-0286, CVE-2023-0767. |
Red Hat OpenShift on IBM Cloud. |
N/A |
N/A |
N/A |
Haproxy |
8398d1 |
8895ad |
CVE-2023-0361. |
Change log for master fix pack 4.8.57_1596_openshift, released 28 March 2023
The following table shows the changes that are in the master fix pack 4.8.57_1596_openshift. Master patch updates are applied automatically.
Changes since version 4.8.57_1593_openshift
Component |
Previous |
Current |
Description |
Cluster health image |
v1.3.16 |
v1.3.17 |
Updated Go to version 1.19.7 and updated dependencies. |
etcd |
v3.4.23 |
v3.4.24 |
See the etcd release notes. |
IBM Calico extension |
1308-amd64 |
1366-amd64 |
Updated to resolve CVE-2023-23916. |
IBM Cloud Block Storage driver and plug-in |
v2.3.7 |
v2.4.0 |
Removed ExpandInUsePersistentVolumes feature gate. |
IBM Cloud File Storage for Classic plug-in and monitor |
427 |
429 |
Updated universal base image (UBI) to resolve CVEs. Updated Go to version 1.19.6 and updated dependencies. |
Key Management Service provider |
v2.6.3 |
v2.6.4 |
Updated Go to version 1.19.7 and updated dependencies. |
Load balancer and load balancer monitor for IBM Cloud Provider |
2383 |
2420 |
Updated the image to resolve CVEs. |
OpenVPN Operator image |
v1.4.20 |
v1.4.22 |
Updated ansible-operator to v1.28.0 to fix CVEs. |
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit |
v4.8.0-20230220 |
v4.8.0-20230314 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Change log for worker node fix pack 4.8.57_1597_openshift, released 27 March 2023
The following table shows the changes that are in the worker node fix pack 4.8.57_1597_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker
node.
Changes since version 4.8.57_1594_openshift
Component |
Previous |
Current |
Description |
RHEL 7 Packages |
N/A |
N/A |
N/A |
Red Hat OpenShift on IBM Cloud. |
N/A |
N/A |
N/A |
Haproxy |
af5031 |
8398d1 |
CVE-2023-23916. |
Change log for worker node fix pack 4.8.57_1594_openshift, released 13 March 2023
The following table shows the changes that are in the worker node fix pack 4.8.57_1594_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker
node.
Change log for master fix pack 4.8.57_1593_openshift, released 2 March 2023
The following table shows the changes that are in the master fix pack 4.8.57_1593_openshift. Master patch updates are applied automatically.
Changes since version 4.8.55_1587_openshift
Component |
Previous |
Current |
Description |
Cluster health image |
v1.3.15 |
v1.3.16 |
Updated Go dependencies and to Go version 1.19.6 . Updated universal base image (UBI) to resolve CVEs. |
etcd |
v3.4.22 |
v3.4.23 |
See the etcd release notes. |
Gateway-enabled cluster controller |
1902 |
1987 |
Updated armada-utils to version v1.9.35 |
IBM Calico extension |
1305-amd64 |
1308-amd64 |
Updated universal base image (UBI) to resolve CVE-2022-47629. |
IBM Cloud Block Storage driver and plug-in |
v2.3.6 |
v2.3.7 |
Updated universal base image (UBI) to resolve CVEs. |
IBM Cloud Controller Manager |
v1.21.14-10 |
v1.21.14-12 |
Ignored Nancy dependency check failure. |
IBM Cloud File Storage for Classic plug-in and monitor |
425 |
427 |
Updated universal base image (UBI) to resolve CVEs. |
Key Management Service provider |
v2.5.13 |
v2.6.3 |
Updated Go dependencies and to Go version 1.19.6 . |
Load balancer and Load balancer monitor for IBM Cloud Provider |
2325 |
2383 |
Updated to armada-utils version 1.9.35 . |
OpenVPN client |
2.5.6-r1-IKS-648 |
2.5.8-r0-IKS-674-amd64 |
Remediate CVE-2023-0286, CVE-2022-4304, CVE-2022-4450, CVE-2023-0215. |
OpenVPN server |
2.5.6-r1-IKS-647 |
2.5.8-r0-IKS-673-amd64 |
Remediate CVE-2023-0286, CVE-2022-4304, CVE-2022-4450, CVE-2023-0215. |
OpenVPN Operator image |
v1.4.13 |
v1.4.20 |
Update ansible-operator to v1.26.1 to fix CVEs. |
Portieris admission controller |
v0.12.6 |
v0.13.3 |
See the Portieris admission controller release notes. |
Red Hat OpenShift on IBM Cloud. |
4.8.55 |
4.8.57 |
See the Red Hat OpenShift on IBM Cloud release notes. |
Red Hat OpenShift on IBM Cloud Control Plane Operator |
v4.8.0-20230123 |
v4.8.0-20230220 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Red Hat OpenShift on IBM Cloud Metrics Server |
v4.8.0-20230123 |
v4.8.0-20230220 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Red Hat OpenShift on IBM Cloud toolkit |
4.8.0+20230123 |
4.8.0+20230220 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Change log for worker node fix pack 4.8.57_1590_openshift, released 27 February 2023
The following table shows the changes that are in the worker node fix pack 4.8.57_1590_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker
node.
Changes since version 4.8.57_1589_openshift
Component |
Previous |
Current |
Description |
RHEL 7 Packages |
N/A |
N/A |
N/A |
RHEL 8 Packages |
4.18.0-425.10.1 |
4.18.0-425.13.1 |
Worker node & kernel package updates for CVE-2020-10735, CVE-2021-28861,
CVE-2022-2873, CVE-2022-40897, CVE-2022-41222, CVE-2022-43945, CVE-2022-4415, CVE-2022-45061, CVE-2022-48303. |
Red Hat OpenShift on IBM Cloud. |
N/A |
N/A |
N/A |
HAProxy |
d38f89 |
af5031 |
CVE-2022-40897, CVE-2022-4415, CVE-2020-10735, CVE-2021-28861, CVE-2022-45061. |
Change log for worker node fix pack 4.8.57_1589_openshift, released 13 February 2023
The following table shows the changes that are in the worker node fix pack 4.8.57_1589_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker
node.
Changes since version 4.8.57_1588_openshift
Component |
Previous |
Current |
Description |
RHEL 7 Packages |
N/A |
N/A |
N/A |
RHEL 8 Packages |
N/A |
N/A |
Worker node package updates for CVE-2022-23521, CVE-2022-41903,
CVE-2022-47629. |
Red Hat OpenShift on IBM Cloud. |
N/A |
N/A |
N/A |
HAProxy |
8d6ea6 |
08c969 |
CVE-2022-47629. |
Change log for master fix pack 4.8.55_1587_openshift, released 30 January 2023
The following table shows the changes that are in the master fix pack 4.8.55_1587_openshift. Master patch updates are applied automatically.
Change log for worker node fix pack 4.8.57_1588_openshift, released 30 January 2023
The following table shows the changes that are in the worker node fix pack 4.8.57_1588_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker
node.
Changes since version 4.8.55_1586_openshift
Component |
Previous |
Current |
Description |
RHEL 7 Packages |
3.10.0-1160.81 |
3.10.0-1160.83 |
Worker node kernel & package updates for CVE-2017-5715, CVE-2021-25220,
CVE-2021-26401, CVE-2022-2795, CVE-2022-2964, CVE-2023-22809. |
RHEL 8 Packages |
N/A |
N/A |
Worker node kernel & package updates for CVE-2022-40303, CVE-2022-40304,
CVE-2023-22809. |
Red Hat OpenShift on IBM Cloud. |
4.8.55 |
4.8.57 |
For more information, see the change log. |
HAProxy |
508bf6 |
8d6ea6 |
CVE-2022-42010, CVE-2022-42011, CVE-2022-42012, CVE-2022-40303, CVE-2022-40304, CVE-2022-3821, CVE-2022-35737,
CVE-2022-43680, CVE-2021-46848. |
Change log for worker node fix pack 4.8.55_1586_openshift, released 16 January 2023
The following table shows the changes that are in the worker node fix pack 4.8.55_1586_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker
node.
Changes since version 4.8.55_1585_openshift
Component |
Previous |
Current |
Description |
RHEL 7 Packages |
N/A |
N/A |
N/A |
RHEL 8 Packages |
4.18.0-425.3.1 |
4.18.0-425.10.1 |
Worker node kernel & package updates for CVE-2021-46848, CVE-2022-2601,
CVE-2022-2964, CVE-2022-35737, CVE-2022-3775, CVE-2022-3821, CVE-2022-4139, CVE-2022-42010, CVE-2022-42011,
CVE-2022-42012, CVE-2022-43680. |
Red Hat OpenShift on IBM Cloud. |
N/A |
N/A |
N/A |
Change log for worker node fix pack 4.8.55_1585_openshift, released 02 January 2023
The following table shows the changes that are in the worker node fix pack 4.8.55_1585_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker
node.
Changes since version 4.8.54_1584_openshift
Component |
Previous |
Current |
Description |
RHEL 7 Packages |
N/A |
N/A |
N/A |
RHEL 8 Packages |
N/A |
N/A |
N/A |
Red Hat OpenShift on IBM Cloud. |
4.8.54 |
4.8.55 |
For more information, see the change log. |
Change log for worker node fix pack 4.8.54_1584_openshift, released 19 December 2022
The following table shows the changes that are in the worker node fix pack 4.8.54_1584_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker
node.
Changes since version 4.8.54_1582_openshift
Component |
Previous |
Current |
Description |
RHEL 7 Packages |
3.10.0-1160.80 |
3.10.0-1160.81 |
Worker node kernel & package updates for CVE-2022-28733. |
RHEL 8 Packages |
N/A |
N/A |
N/A |
Red Hat OpenShift on IBM Cloud. |
N/A |
N/A |
N/A |
Change log for master fix pack 4.8.54_1583_openshift, released 14 December 2022
The following table shows the changes that are in the master fix pack 4.8.54_1583_openshift. Master patch updates are applied automatically.
Changes since version 4.8.52_1580_openshift
Component |
Previous |
Current |
Description |
Cluster health image |
v1.3.13 |
v1.3.14 |
Updated Go dependencies. Exclude ingress status from cluster status aggregation. |
etcd |
v3.4.21 |
v3.4.22 |
See the etcd release notes. |
IBM Calico extension |
1213 |
1257 |
Updated universal base image (UBI) to resolve: CVE-2022-1304, CVE-2016-3709,
CVE-2022-42898. |
IBM Cloud Block Storage driver and plug-in |
v2.3.3 |
v2.3.4 |
Update Go to version 1.18.8 and updated universal base image (UBI) to resolve CVEs. |
IBM Cloud File Storage for Classic plug-in and monitor |
420 |
421 |
Updated universal base image (UBI) to resolve CVE-2022-42898. Updated Go to version 1.18.8 |
Key Management Service provider |
v2.5.11 |
v2.5.12 |
Updated Go dependencies. |
Load balancer and load balancer monitor for IBM Cloud Provider |
2110 |
2325 |
Update Go to version 1.19.1 and update dependencies. |
OpenVPN Operator image |
v1.4.11 |
v1.4.13 |
Updated the ansible operator base image to v1.25.2 to resolve CVEs. |
Red Hat OpenShift on IBM Cloud Control Plane Operator |
v4.8.0-20221104 |
v4.8.0-20221205 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Red Hat OpenShift on IBM Cloud. |
4.8.52 |
4.8.54 |
See the Red Hat OpenShift on IBM Cloud Release Notes. |
Red Hat OpenShift on IBM Cloud Metrics Server and toolkit |
v4.8.0-20221104 |
v4.8.0-20221205 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Change log for worker node fix pack 4.8.54_1582_openshift, released 05 December 2022
The following table shows the changes that are in the worker node fix pack 4.8.54_1582_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker
node.
Change log for worker node fix pack 4.8.52_1581_openshift, released 21 November 2022
The following table shows the changes that are in the worker node fix pack 4.8.52_1581_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker
node.
Changes since version 4.8.52_1579_openshift
Component |
Previous |
Current |
Description |
RHEL 7 Packages |
N/A |
N/A |
Worker node package updates for CVE-2022-21233, CVE-2022-23816,
CVE-2022-23825, CVE-2022-2588, CVE-2022-26373, CVE-2022-29900, CVE-2022-29901, CVE-2022-41974. |
RHEL 8 Packages |
N/A |
N/A |
Worker node package updates for CVE-2015-20107, CVE-2016-3709,
CVE-2020-0256, CVE-2020-35525, CVE-2020-35527, CVE-2020-36516, CVE-2020-36558, CVE-2021-0308, CVE-2021-25220,
CVE-2021-30002, CVE-2021-36221, CVE-2021-3640, CVE-2021-41190, CVE-2022-0168, CVE-2022-0494, CVE-2022-0617,
CVE-2022-0854, CVE-2022-1016, CVE-2022-1048, CVE-2022-1055, CVE-2022-1184, CVE-2022-1304, CVE-2022-1353,
CVE-2022-1708, CVE-2022-1852, CVE-2022-20368, CVE-2022-2078, CVE-2022-21499, CVE-2022-22624, CVE-2022-22628,
CVE-2022-22629, CVE-2022-22662, CVE-2022-23816, CVE-2022-23825, CVE-2022-23960, CVE-2022-24448, CVE-2022-24795,
CVE-2022-2509, CVE-2022-2586, CVE-2022-2588, CVE-2022-26373, CVE-2022-2639, CVE-2022-26700, CVE-2022-26709,
CVE-2022-26710, CVE-2022-26716, CVE-2022-26717, CVE-2022-26719, CVE-2022-27191, CVE-2022-27404, CVE-2022-27405,
CVE-2022-27406, CVE-2022-27950, CVE-2022-28390, CVE-2022-28893, CVE-2022-29162, CVE-2022-2938, CVE-2022-29581,
CVE-2022-2989, CVE-2022-2990, CVE-2022-29900, CVE-2022-29901, CVE-2022-30293, CVE-2022-32746, CVE-2022-3515,
CVE-2022-36946, CVE-2022-37434, CVE-2022-3787, CVE-2022-40674, CVE-2022-41974. |
Red Hat OpenShift on IBM Cloud. |
N/A |
N/A |
N/A |
Change log for master fix pack 4.8.52_1580_openshift, released 16 November 2022
The following table shows the changes that are in the master fix pack 4.8.52_1580_openshift. Master patch updates are applied automatically.
Changes since version 4.8.51_1578_openshift
Component |
Previous |
Current |
Description |
Calico |
v3.21.6 |
v3.22.5 |
See the Calico release notes. |
Tigera Operator |
v1.23.8 |
v1.25.13 |
See the Tigera Operator release notes. |
Cluster health image |
v1.3.12 |
v1.3.13 |
Updated Go dependencies, golangci-lint , gosec , and to Go version 1.19.3. Updated base image version to 116. |
etcd |
v3.4.18 |
v3.4.21 |
See the etcd release notes. |
Gateway-enabled cluster controller |
1823 |
1902 |
Go module updates. |
IBM Calico extension |
1096 |
1213 |
Updated image to fix the following CVEs: CVE-2020-35525, CVE-2020-35527,
CVE-2022-3515, CVE-2022-37434,
CVE-2022-2509, CVE-2022-32149. |
IBM Cloud Block Storage driver and plug-in |
v2.3.1 |
v2.3.3 |
Updated universal base image (UBI) to version 8.7-923 to resolve CVEs. |
IBM Cloud Controller Manager |
v1.21.14-6 |
v1.21.14-10 |
Key rotation and updated Go dependencies. |
IBM Cloud File Storage for Classic plug-in and monitor |
416 |
420 |
Updated universal base image (UBI) to version 8.7-923 to resolve CVEs. |
Key Management Service provider |
v2.5.10 |
v2.5.11 |
Updated Go dependencies and to Go version 1.19.3 . |
OpenVPN Operator image |
v1.4.10 |
v1.4.11 |
Updated ansible operator base image to v1.24.0 to resolve CVEs. |
Red Hat OpenShift on IBM Cloud Control Plane Operator |
v4.8.0-20220920 |
v4.8.0-20221104 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Red Hat OpenShift on IBM Cloud. |
4.8.51 |
4.8.52 |
See the Red Hat OpenShift on IBM Cloud release notes. |
Red Hat OpenShift on IBM Cloud Metrics Server and toolkit |
v4.8.0-20220920 |
v4.8.0-20221104 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Change log for worker node fix pack 4.8.52_1579_openshift, released 07 November 2022
The following table shows the changes that are in the worker node fix pack 4.8.52_1579_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker
node.
Changes since version 4.8.51_1576_openshift
Component |
Previous |
Current |
Description |
RHEL 7 Packages |
3.10.0-1160.76.1 |
3.10.0-1160.80.1 |
Worker node kernel & package updates for CVE-2022-21233, CVE-2022-23816,
CVE-2022-23825, CVE-2022-2588, CVE-2022-26373, CVE-2022-29900, CVE-2022-29901, CVE-2022-41974. |
RHEL 8 Packages |
4.18.0-372.26.1 |
4.18.0-372.32.1 |
Worker node kernel & package updates for CVE-2020-35525, CVE-2020-35527,
CVE-2022-0494, CVE-2022-1353, CVE-2022-23816, CVE-2022-23825, CVE-2022-2509, CVE-2022-2588, CVE-2022-29900,
CVE-2022-29901, CVE-2022-3515, CVE-2022-37434, CVE-2022-41974. |
Red Hat OpenShift on IBM Cloud. |
4.8.51 |
4.8.52 |
For more information, see the change log. |
HAProxy |
b034b2 |
3a1392 |
CVE-2022-37434, CVE-2022-37434, CVE-2020-35525, CVE-2020-35527, CVE-2022-3515, CVE-2022-2509. |
Change log for master fix pack 4.8.51_1578_openshift, released 27 October 2022
The following table shows the changes that are in the master fix pack 4.8.51_1578_openshift. Master patch updates are applied automatically.
Changes since version 4.8.491573openshift
Component |
Previous |
Current |
Description |
Cluster health image |
v1.3.11 |
v1.3.12 |
Updated Go dependencies, golangci-lint, and to Go version 1.19.2. Updated base image version to 109. Excluded ingress status from cluster status calculation. |
IBM Cloud Controller Manager |
v1.21.14-4 |
v1.21.14-6 |
Updated to support the Kubernetes 1.21.14 release. |
IBM Cloud RBAC Operator |
dc1725a |
778ef2b |
Updated to Go version 1.18.6 . |
Key Management Service provider |
v2.5.9 |
v2.5.10 |
Updated Go dependencies and to Go version 1.19.2 . |
OpenVPN Operator image |
v1.4.9 |
v1.4.10 |
Updated ansible operator base image to v1.24.0 to resolve CVEs. |
Red Hat OpenShift on IBM Cloud. |
4.8.49 |
4.8.51 |
See the Red Hat OpenShift on IBM Cloud release notes. |
Change log for worker node fix pack 4.8.51_1576_openshift, released 25 October 2022
The following table shows the changes that are in the worker node fix pack 4.8.51_1576_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker
node.
Changes since version 4.8.50_1575_openshift
Component |
Previous |
Current |
Description |
RHEL 7 Packages |
N/A |
N/A |
N/A |
Red Hat OpenShift on IBM Cloud |
4.8.50 |
4.8.51 |
For more information, see the change log. |
Change log for worker node fix pack 4.8.50_1575_openshift, released 10 October 2022
The following table shows the changes that are in the worker node fix pack 4.8.50_1575_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker
node.
Changes since version 4.8.50_1574_openshift
Component |
Previous |
Current |
Description |
RHEL 7 Packages |
N/A |
N/A |
N/A |
RHEL 8 Packages |
N/A |
N/A |
N/A |
Red Hat OpenShift on IBM Cloud |
N/A |
N/A |
N/A |
Change log for master fix pack 4.8.49_1573_openshift, released 26 September 2022
The following table shows the changes that are in the master fix pack 4.8.49_1573_openshift. Master patch updates are applied automatically.
Changes since version 4.8.471571openshift
Component |
Previous |
Current |
Description |
Cluster health image |
v1.3.10 |
v1.3.11 |
Updated Go dependencies and to Go version 1.18.6 . |
IBM Calico extension |
1006 |
1096 |
Updated image for CVE-2022-2526. |
IBM Cloud Block Storage driver and plug-in |
v2.2.9 |
v2.3.1 |
Updated to Go version 1.18.6 . Updated universal base image (UBI) to version 8.6-941 to resolve CVEs. |
IBM Cloud File Storage for Classic plug-in and monitor |
414 |
416 |
Updated to Go version 1.18.6 . Updated universal base image (UBI) to version 8.6-941 to resolve CVEs. |
Red Hat OpenShift on IBM Cloud |
4.8.47 |
4.8.49 |
See the Red Hat OpenShift on IBM Cloud Release Notes. |
OpenVPN Operator image |
v1.4.8 |
v1.4.9 |
Updated ansible operator base image to v1.23.0 to resolve CVEs. |
Key Management Service Provider |
v2.5.8 |
v2.5.9 |
Updated Go dependencies and to Go version 1.18.6 . |
Red Hat OpenShift on IBM Cloud Control Plane Operator |
v4.8.0-20220816 |
v4.8.0-20220920 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Red Hat OpenShift on IBM Cloud Metrics Server |
v4.8.0-20220816 |
v4.8.0-20220920 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Red Hat OpenShift on IBM Cloud toolkit |
4.8.0+20220816 |
4.8.0+20220920 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Change log for worker node fix pack 4.8.50_1574_openshift, released 26 September 2022
The following table shows the changes that are in the worker node fix pack 4.8.50_1574_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker
node.
Changes since version 4.8.48_1572_openshift
Component |
Previous |
Current |
Description |
RHEL 7 Packages |
N/A |
N/A |
N/A |
RHEL 8 Packages |
4.18.0-372.19.1 |
4.18.0-372.26.1 |
N/A |
Red Hat OpenShift on IBM Cloud. |
4.8.48 |
4.8.50 |
For more information, see the change log. |
Change log for worker node fix pack 4.8.48_1572_openshift, released 12 September 2022
The following table shows the changes that are in the worker node fix pack 4.8.48_1572_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker
node.
Changes since version 4.8.47_1570_openshift
Component |
Previous |
Current |
Description |
RHEL 7 Packages |
N/A |
N/A |
N/A |
Red Hat OpenShift on IBM Cloud. |
4.8.47 |
4.8.48 |
For more information, see the change log. |
Change log for master fix pack 4.8.47_1571_openshift, released 1 September 2022
The following table shows the changes that are in the master fix pack 4.8.47_1571_openshift. Master patch updates are applied automatically.
Changes since version 4.8.46_1566_openshift
Component |
Previous |
Current |
Description |
Calico |
v3.21.5 |
v3.21.6 |
See the Calico release notes. Updated the Calico custom resource definitions to include preserveUnknownFields: false . |
Tigera Operator |
v1.23.7 |
v1.23.8 |
See the Tigera Operator release notes. |
Cluster health image |
v1.3.9 |
v1.3.10 |
Updated Go dependencies and to Go version 1.18.5 . |
Gateway-enabled cluster controller |
1792 |
1823 |
Updated to Go version 1.17.13 . |
IBM Calico extension |
997 |
1006 |
Updated to Go version 1.17.13 . |
IBM Cloud Block Storage driver and plug-in |
v2.2.8 |
v2.2.9 |
Updated to Go version 1.18.5 . |
IBM Cloud Controller Manager |
v1.21.14-3 |
v1.21.14-4 |
Updated vpcctl binary to version 3367 . |
IBM Cloud File Storage for Classic plug-in and monitor |
412 |
414 |
Updated to Go version 1.18.5 . Updated universal base image (UBI) to version 8.6-902 to resolve CVEs. |
IBM Cloud RBAC Operator |
0a187a4 |
dc1725a |
Updated Go dependencies and to Go version 1.18.3 . |
Key Management Service provider |
v2.5.7 |
v2.5.8 |
Updated Go dependencies. |
Load balancer and load balancer monitor for IBM Cloud Provider |
2058 |
2110 |
Updated Go dependencies and to Go version 1.17.13 . |
Red Hat OpenShift on IBM Cloud. |
4.8.46 |
4.8.47 |
See the Red Hat OpenShift on IBM Cloud Release Notes. |
OpenVPN client |
2.5.6-r1-IKS-629 |
2.5.6-r1-IKS-648 |
Update image for CVE-2022-2097 and CVE-2022-37434. |
OpenVPN Operator image |
v1.4.7 |
v1.4.8 |
Updated Ansible operator base image to version v1.22.2 to resolve CVEs. |
OpenVPN server |
2.5.6-r1-IKS-628 |
2.5.6-r1-IKS-647 |
Update image for CVE-2022-2097 and CVE-2022-37434. |
Portieris admission controller |
v0.12.5 |
v0.12.6 |
See the Portieris admission controller release notes. |
Red Hat OpenShift on IBM Cloud Control Plane Operator |
v4.8.0-20220712 |
v4.8.0-20220816 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Red Hat OpenShift on IBM Cloud Metrics Server |
v4.8.0-20220712 |
v4.8.0-20220816 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Red Hat OpenShift on IBM Cloud toolkit |
4.8.0+20220712 |
4.8.0+20220816 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Change log for worker node fix pack 4.8.47_1570_openshift, released 29 August 2022
The following table shows the changes that are in the worker node fix pack 4.8.47_1570_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker
node.
Changes since version 4.8.47_1568_openshift
Component |
Previous |
Current |
Description |
RHEL 7 Packages |
N/A |
N/A |
Worker node package updates for CVE-2022-2526. |
Red Hat OpenShift on IBM Cloud. |
N/A |
N/A |
N/A |
HAProxy |
6514a2 |
c1634f |
CVE-2022-32206, CVE-2022-32208 |
Change log for worker node fix pack 4.8.47_1568_openshift, released 16 August 2022
The following table shows the changes that are in the worker node fix pack 4.8.47_1568_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker
node.
Change log for worker node fix pack 4.8.46_1567_openshift, released 01 August 2022
The following table shows the changes that are in the worker node fix pack 4.8.46_1567_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker
node.
Changes since version 4.8.46_1565_openshift
Component |
Previous |
Current |
Description |
RHEL 7 Packages |
N/A |
N/A |
N/A |
Red Hat OpenShift on IBM Cloud |
N/A |
N/A |
N/A |
Change log for master fix pack 4.8.46_1566_openshift, released 26 July 2022
The following table shows the changes that are in the master fix pack 4.8.46_1566_openshift. Master patch updates are applied automatically.
Changes since version 4.8.42_1562_openshift
Component |
Previous |
Current |
Description |
Cluster health image |
v1.3.8 |
v1.3.9 |
Updated Go dependencies and to use Go version 1.18.4 . Fixed minor typographical error in the add-on daemonset not available health status. |
Gateway-enabled cluster controller |
1680 |
1792 |
Updated to use Go version 1.17.11 . Updated image for CVE-2022-2097 and CVE-2022-29458. |
IBM Calico extension |
980 |
997 |
Updated to use Go version 1.17.11 . Updated universal base image (UBI) to version 8.6-854 to resolve CVEs. |
IBM Cloud Block Storage driver and plug-in |
v2.2.6 |
v2.2.8 |
Updated to use Go version 1.18.3 . Updated universal base image (UBI) to version 8.6-854 to resolve CVEs. Updated to support RHEL 8 worker nodes. |
IBM Cloud Controller Manager |
v1.21.13-5 |
v1.21.14-3 |
Updated Go dependencies. Updated to support the Kubernetes 1.21.14 release. |
IBM Cloud File Storage for Classic plug-in and monitor |
410 |
412 |
Updated to use Go version 1.18.3 . Updated universal base image (UBI) to version 8.6-854 to resolve CVEs. Improved Kubernetes resource watch configuration. |
IBM Cloud RBAC Operator |
8c96932 |
0a187a4 |
Updated universal base image (UBI) to resolve CVEs. |
Key Management Service provider |
v2.5.6 |
v2.5.7 |
Updated Go dependencies and to use Go version 1.18.4 . |
Load balancer and load balancer monitor for IBM Cloud Provider |
1998 |
2058 |
Updated image for CVE-2022-2097. |
Red Hat OpenShift on IBM Cloud. |
4.8.42 |
4.8.46 |
See the Red Hat OpenShift on IBM Cloud release notes. |
OpenVPN client |
2.5.6-r0-IKS-592 |
2.5.6-r1-IKS-629 |
Updated Alpine base image to version 3.16 to resolve CVEs. Updated OpenVPN to version 2.5.6-r1 . |
OpenVPN Operator image |
v1.4.6 |
v1.4.7 |
Updated Ansible operator base image to version v1.22.1 to resolve CVEs. |
OpenVPN server |
2.5.6-r0-IKS-591 |
2.5.6-r1-IKS-628 |
Updated Alpine base image to version 3.16 to resolve CVEs. Updated OpenVPN to version 2.5.6-r1 . |
Portieris admission controller |
v0.12.4 |
v0.12.5 |
See the Portieris admission controller release notes. |
Red Hat OpenShift on IBM Cloud Control Plane Operator |
v4.8.0-20220614 |
v4.8.0-20220712 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Red Hat OpenShift on IBM Cloud Metrics Server |
v4.8.0-20220614 |
v4.8.0-20220712 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Red Hat OpenShift on IBM Cloud toolkit |
4.8.0+20220614 |
4.8.0+20220712 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Change log for worker node fix pack 4.8.46_1565_openshift, released 18 July 2022
The following table shows the changes that are in the worker node fix pack 4.8.46_1565_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker
node.
Change log for worker node fix pack 4.8.44_1564_openshift, released 11 July 2022
The following table shows the changes that are in the worker node fix pack 4.8.44_1564_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker
node.
Changes since version 4.8.44_1563_openshift
Component |
Previous |
Current |
Description |
General |
N/A |
N/A |
Fix to address a bug that occurred if you used the persistent volume claim NFS v3 storage. |
Change log for worker node fix pack 4.8.44_1563_openshift, released 05 July 2022
The following table shows the changes that are in the worker node fix pack 4.8.44_1563_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker
node.
Changes since version 4.8.42_1561_openshift
Component |
Previous |
Current |
Description |
Red Hat OpenShift on IBM Cloud. |
4.8.42 |
4.8.44 |
For more information, see the change log. |
Change log for master fix pack 4.8.42_1562_openshift, released 22 June 2022
The following table shows the changes that are in the master fix pack 4.8.42_1562_openshift. Master patch updates are applied automatically.
Changes since version 4.8.39_1558_openshift
Component |
Previous |
Current |
Description |
Cluster health image |
v1.3.7 |
v1.3.8 |
Updated Go to version 1.17.11 and also updated the dependencies. |
IBM Cloud Block Storage driver and plug-in |
v2.2.4 |
v2.2.6 |
Bug fixes for the driver installation. Block plug-in base images were updated to universal base image (UBI) 8.6-751.1655117800 for CVE-2022-1271 |
IBM Cloud Controller Manager |
v1.21.13-2 |
v1.21.13-5 |
Update prometheus/client_golang@v1.7.1 to v1.11.1 . |
Key Management Service provider |
v2.5.5 |
v2.5.6 |
Updated Go to version 1.17.11 and also updated the dependencies. |
OpenVPN Operator image |
v1.4.5 |
v1.4.6 |
Update base image to version v1.22.0 to resolve CVEs. |
Red Hat OpenShift on IBM Cloud. |
4.8.39 |
4.8.42 |
See the Red Hat OpenShift on IBM Cloud release notes. |
Red Hat OpenShift on IBM Cloud Control Plane Operator |
v4.8.0-20220509 |
v4.8.0-20220614 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Red Hat OpenShift on IBM Cloud Metrics Server and toolkit |
v4.8.0-20220509 |
v4.8.0-20220614 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Change log for worker node fix pack 4.8.42_1561_openshift, released 20 June 2022
The following table shows the changes that are in the worker node fix pack 4.8.42_1561_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker
node.
Changes since version 4.8.42_1559_openshift
Component |
Previous |
Current |
Description |
RHEL 7 Packages |
N/A |
N/A |
Worker node package updates for CVE-2022-1271. |
HAProxy |
468c09 |
04f862 |
CVE-2022-1271. |
Red Hat OpenShift on IBM Cloud. |
N/A |
N/A |
N/A |
Change log for worker node fix pack 4.8.42_1559_openshift, released 7 June 2022
The following table shows the changes that are in the worker node fix pack 4.8.42_1559_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker
node.
Changes since version 4.8.39_1557_openshift
Component |
Previous |
Current |
Description |
RHEL 7 Packages |
N/A |
N/A |
Worker node package updates for CVE-2022-24903. |
Red Hat OpenShift on IBM Cloud. |
4.8.39 |
4.8.42 |
For more information, see the change log. |
Change log for master fix pack 4.8.39_1558_openshift, released 3 June 2022
The following table shows the changes that are in the master fix pack 4.8.39_1558_openshift. Master patch updates are applied automatically.
Changes since version 4.8.36_1554_openshift
Component |
Previous |
Current |
Description |
Cluster health image |
v1.3.6 |
v1.3.7 |
Updated Go Ā to version 1.17.10 and also updated the dependencies. Update registry base image version to 104 |
IBM Calico extension |
954 |
980 |
Updated to use Go version 1.17.10 . Updated minimal universal base image (UBI) to version 8.5 . |
IBM Cloud Block Storage driver and plug-in |
v2.2.2 |
v2.2.4 |
Updated universal base image (UBI) to version 8.6-751 to resolve CVEs. |
IBM Cloud Controller Manager |
v1.21.11-6 |
v1.21.13-2 |
Updated to support the Kubernetes 1.21.13 release. |
IBM Cloud File Storage for Classic plug-in and monitor |
408 |
410 |
Updated universal base image (UBI) to version 8.6-751 to resolve CVEs. |
IBM Cloud RBAC Operator |
8c8c82b |
8c96932 |
Updated Go to version 1.18.1 |
Key Management Service provider |
v2.5.4 |
v2.5.5 |
Updated Go to version 1.17.10 and updated the golang dependencies. |
Load balancer and load balancer monitor for IBM Cloud Provider |
1916 |
1998 |
Updated Go to version 1.17.10 and updated dependencies. |
OpenVPN Operator image |
v1.4.3 |
v1.4.5 |
Updated base image to v1.21.0 for CVE remediation. |
Red Hat OpenShift on IBM Cloud. |
4.8.36 |
4.8.39 |
See the Red Hat OpenShift on IBM Cloud release notes. |
Red Hat OpenShift on IBM Cloud Control Plane Operator |
v4.8.0-20220412 |
v4.8.0-20220509 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Red Hat OpenShift on IBM Cloud Metrics Server |
v4.8.0-20220412 |
v4.8.0-20220509 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Red Hat OpenShift on IBM Cloud toolkit |
4.8.0+20220412 |
4.8.0+20220509 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Change log for worker node fix pack 4.8.39_1557_openshift, released 23 May 2022
The following table shows the changes that are in the worker node fix pack 4.8.39_1557_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker
node.
Change log for worker node fix pack 4.8.39_1556_openshift, released 09 May 2022
The following table shows the changes that are in the worker node fix pack 4.8.39_1556_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker
node.
Changes since version 4.8.37_1555_openshift
Component |
Previous |
Current |
Description |
RHEL 7 Packages |
N/A |
N/A |
N/A |
Red Hat OpenShift on IBM Cloud. |
4.8.37 |
4.8.39 |
For more information, see the change log. |
HAProxy |
f53b22 |
36b030 |
CVE-2022-1271, CVE-2022-1154, CVE-2018-25032. |
Change log for master fix pack 4.8.36_1554_openshift, released 26 April 2022
The following table shows the changes that are in the master fix pack 4.8.36_1554_openshift. Master patch updates are applied automatically.
Changes since version 4.8.35_1552_openshift
Component |
Previous |
Current |
Description |
Calico |
v3.20.4 |
v3.21.5 |
See the Calico release notes. |
Tigera Operator |
v1.20.6 |
v1.23.7 |
See the Tigera Operator release notes. |
Cluster health image |
v1.3.5 |
v1.3.6 |
Updated Go to version 1.17.9 and also updated the dependencies. Update registry base image version to 103 . |
Gateway-enabled cluster controller |
1669 |
1680 |
Updated metadata for a rotated key. |
IBM Calico extension |
950 |
954 |
Updated to latest minimal universal base image (UBI) to resolve CVE-2021-3999, CVE-2022-23218, CVE-2022-23219, CVE-2022-23308,
CVE-2021-23177, and CVE-2021-31566. |
IBM Cloud Block Storage driver and plug-in |
v2.2.1 |
v2.2.2 |
Updated universal base image (UBI) to 8.5-240.1648458092 |
IBM Cloud Controller Manager |
v1.21.11-3 |
v1.21.11-6 |
Updated vpcctl to the 3003 binary image. |
IBM Cloud File Storage for Classic plug-in and monitor |
407 |
408 |
Fixed CVE-2022-0778. |
IBM Cloud RBAC Operator |
6c43ef1 |
8c8c82b |
Updated Go to version 1.17.8 |
Key Management Service provider |
v2.5.3 |
v2.5.4 |
Moved to a different base image, version 102 , to reduce CVE footprint. Resolved CVE-2022-0778. |
Load balancer and Load balancer monitor for IBM Cloud Provider |
1899 |
1916 |
Updated the image to resolve CVEs. |
OpenVPN client |
2.5.4-r0-IKS-579 |
2.5.6-r0-IKS-592 |
Upgrade openvpn to version 2.5.6-r0 . |
OpenVPN server |
2.5.4-r0-IKS-578 |
2.5.6-r0-IKS-591 |
Upgrade openvpn to version 2.5.6-r0 . |
OpenVPN Operator image |
v1.4.2 |
v1.4.3 |
Updated ansible operator base image to version v1.19.0 to resolve CVEs. |
Portieris admission controller |
v0.12.3 |
v0.12.4 |
See the Portieris admission controller release notes. |
Red Hat OpenShift on IBM Cloud. |
4.8.35 |
4.8.36 |
See the Red Hat OpenShift on IBM Cloud release notes. |
Red Hat OpenShift on IBM Cloud Control Plane Operator |
v4.8.0-20220322 |
v4.8.0-20220412 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Red Hat OpenShift on IBM Cloud Metrics Server |
v4.8.0-20220322 |
v4.8.0-20220412 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Red Hat OpenShift on IBM Cloud toolkit |
4.8.0+20220322 |
4.8.0+20220412 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Change log for worker node fix pack 4.8.37_1555_openshift, released 25 April 2022
Changes since version 4.8.35_1553_openshift
Component |
Previous |
Current |
Description |
RHEL 7 Packages |
N/A |
N/A |
Package updates. |
Red Hat OpenShift on IBM Cloud. |
4.8.35 |
4.8.37 |
For more information, see the change log. |
Change log for worker node fix pack 4.8.35_1553_openshift, released 11 April 2022
The following table shows the changes that are in the worker node fix pack 4.8.35_1553_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker
node.
Changes since version 4.8.35_1550_openshift
Component |
Previous |
Current |
Description |
RHEL Packages |
3.10.0-1160.59.1 |
3.10.0-1160.62.1 |
Kernel and package updates for CVE-2021-45960, CVE-2021-46143, CVE-2022-22822,
CVE-2022-22823, CVE-2022-22824, CVE-2022-22825,
CVE-2022-22826 CVE-2022-22827, CVE-2022-23852,
CVE-2022-25235, CVE-2022-25236, CVE-2022-25315,
CVE-2021-4028, CVE-2021-4083 CVE-2022-0778. |
Change log for master fix pack 4.8.35_1552_openshift, released 6 April 2022
Changes since version 4.8.31_1546_openshift
Component |
Previous |
Current |
Description |
Cluster health image |
v1.3.3 |
v1.3.5 |
Update golang dependencies. Update image to version 102 to fix CVEs CVE-2021-3999, CVE-2022-23218, CVE-2022-23219 |
IBM Calico extension |
929 |
950 |
Updated to use Go version 1.17.8 . Updated universal base image (UBI) to resolve CVEs. |
IBM Cloud Block Storage driver and plug-in |
v2.1.7 |
v2.2.1 |
Bug fixes for driver installation issues. Updated universal base image (UBI) to 8.5-240 and updated Go to version to 1.16.15 . Fixes for CVEs. |
IBM Cloud Controller Manager |
v1.21.10-2 |
v1.21.11-3 |
Updated to support the Kubernetes 1.21.11 release and to use Go version 1.16.15. |
IBM Cloud File Storage plug-in and monitor |
405 |
407 |
Updated Go to version 1.16.14 . Updated universal base image (UBI)to version 8.5-240 . |
IBM Cloud RBAC Operator |
0fc9949 |
6c43ef1 |
Upgraded Go packages to resolve vulnerabilities |
Gateway-enabled cluster controller |
1653 |
1669 |
Updated to use Go version 1.17.8 . |
Key Management Service provider |
v2.4.3 |
v2.5.3 |
Updated to use Go version 1.17.8 . Updated golang dependencies. Fixed CVE CVE-2022-24407 |
Load balancer and Load balancer monitor for IBM Cloud Provider |
1747 |
1899 |
Revert setting gratuitous ARP on LBv1. Updated the image to resolve CVEs. Updated to use Go version 1.17.8 . |
OpenVPN client |
2.5.4-r0-IKS-556 |
2.5.4-r0-IKS-579 |
Updated Go to version 1.16.15 . |
OpenVPN server |
2.5.4-r0-IKS-562 |
2.5.4-r0-IKS-578 |
Updated Go to version 1.16.15 . |
OpenVPN Operator image |
v1.4.1 |
v1.4.2 |
Updated ansible operator base image to version v1.18.0 to resolve CVEs. |
Portieris admission controller |
v0.12.2 |
v0.12.3 |
See the Portieris admission controller release notes |
Red Hat OpenShift |
4.8.31 |
4.8.35 |
See the Red Hat OpenShift release notes |
Red Hat OpenShift Control Plane Operator |
v4.8.0-20220222 |
v4.8.0-20220322 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Red Hat OpenShift on IBM Cloud Metrics Server |
v4.8.0-20220222 |
v4.8.0-20220322 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Red Hat OpenShift on IBM Cloud toolkit |
4.8.0+20220222 |
4.8.0+20220322 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Change log for worker node pack 4.8.35_1550_openshift, released 28 March 2022
Changes since version 4.8.32_1548_openshift
Component |
Previous |
Current |
Description |
RHEL 7 Packages |
N/A |
N/A |
N/A |
HA proxy |
15198f |
b40c07 |
CVE-2021-45960, CVE-2021-46143, CVE-2022-22822, CVE-2022-22823, CVE-2022-22824, CVE-2022-22825, CVE-2022-22826,
CVE-2022-22827, CVE-2022-23852, CVE-2022-25235, CVE-2022-25236, CVE-2022-25315, CVE-2021-3999, CVE-2022-23218,
CVE-2022-23219, CVE-2022-23308, CVE-2021-23177, CVE-2021-31566. |
Red Hat OpenShift |
4.8.32 |
4.8.35 |
For more information, see the change logs. |
Change log for worker node pack 4.8.32_1548_openshift, released 14 March 2022
Changes since version 4.8.32_1547_openshift
Component |
Previous |
Current |
Description |
RHEL 7 Packages |
N/A |
N/A |
N/A |
Change log for master fix pack 4.8.31_1546_openshift, released 3 March 2022
Changes since version 4.8.26_1542_openshift
Component |
Previous |
Current |
Description |
Calico |
v3.20.3 |
v3.20.4 |
See the Calico release notes. |
Tigera Operator |
v1.20.5 |
v1.20.6 |
See the Tigera Operator release notes. |
Cluster health image |
v1.2.21 |
v1.3.3 |
Updated golang.org/x/crypto to v0.0.0-20220214200702-86341886e292 . Adds fix for CVE-2021-43565. Adds Golang
dependency updates. |
Gateway-enabled cluster controller |
1586 |
1653 |
Updated to use Go version 1.17.7 and updated Go modules to fix CVEs. |
IBM Calico extension |
923 |
929 |
Updated universal base image (UBI) to the 8.5-230 version to resolve CVEs. Updated to use Go version 1.16.13 . |
IBM Cloud Block Storage driver and plug-in |
v2.1.6 |
v2.1.7 |
Fix for CVE-2021-3538. |
IBM Cloud Controller Manager |
v1.21.9-1 |
v1.21.10-2 |
Updated to support the Kubernetes 1.21.10 release and to use Go version 1.16.14 . |
IBM Cloud File Storage for Classic plug-in and monitor |
404 |
405 |
Adds fix for CVE-2021-3538 and adds dependency updates. |
Key Management Service provider |
v2.4.0 |
v2.4.3 |
Updated golang.org/x/crypto to v0.0.0-20220214200702-86341886e292 . Adds CVE-2021-43565. Adds Golang dependency
updates. |
Red Hat OpenShift |
4.8.26 |
4.8.31 |
For more information, see the change logs. |
Red Hat OpenShift Control Plane Operator |
v4.8.0-20220107 |
v4.8.0-20220222 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Red Hat OpenShift on IBM Cloud Metrics Server |
v4.8.0-20220107 |
v4.8.0-20220222 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Red Hat OpenShift on IBM Cloud toolkit |
4.8.0+20220107 |
4.8.0+20220222 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
OpenVPN server |
2.5.4-r0-IKS-555 |
2.5.4-r0-IKS-562 |
Turns off CRL verification in the openvpn image. |
OpenVPN Operator image |
v1.4.0 |
v1.4.1 |
Turns off CRL verification in the opevpn-operator image. |
Change log for worker node fix pack 4.8.32_1547_openshift, released 28 February 2022
Changes since version 4.8.32_1547_openshift
Component |
Previous |
Current |
Description |
RHEL 7 Packages |
3.10.0-1160.53.1.el7 |
3.10.0-1160.59.1.el7 |
Kernel and package updates for CVE-2020-25709, CVE-2020-25710,
CVE-2022-24407, CVE-2020-0465, CVE-2020-0466, CVE-2021-0920, CVE-2021-3564, CVE-2021-3573, CVE-2021-3752,
CVE-2021-4155, CVE-2022-0330, CVE-2022-22942. |
Red Hat OpenShift |
4.8.29 |
4.8.32 |
For more information, see the change logs |
HA proxy |
f6a2b3 |
15198fb |
Contains fixes for CVE-2022-24407. |
Change log for worker node fix pack 4.8.29_1544_openshift, released 14 February 2022
Changes since version 4.8.28_1543_openshift
Component |
Previous |
Current |
Description |
RHEL 7 Packages |
N/A |
N/A |
N/A |
Red Hat OpenShift |
4.8.28 |
4.8.29 |
For more information, see the change log. |
HA proxy |
d38fa1 |
f6a2b3 |
CVE-2021-3521 CVE-2021-4122. |
Change log for worker node fix pack 4.8.28_1543_openshift, released 31 January 2022
The following table shows the changes that are in the worker node fix pack 4.8.28_1543_openshift
. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure)
the worker node.
Changes since version 4.8.26_1541_openshift
Component |
Previous |
Current |
Description |
RHEL 7 Packages |
N/A |
N/A |
Updated worker node images with package updates forĀ CVE-2021-4034. |
Red Hat OpenShift |
4.8.26 |
4.8.28 |
See the Red Hat OpenShift change logs. |
Change log for master fix pack 4.8.26_1542_openshift, released 26 January 2022
The following table shows the changes that are in the master fix pack patch update 4.8.26_1542_openshift
. Master patch updates are applied automatically.
Changes since version 4.8.21_1541_openshift
Component |
Previous |
Current |
Description |
Calico |
N/A |
N/A |
Changed to improve Calico availability during updates. |
IBM Cloud Block Storage for Classic driver and plug-in |
v2.1.3 |
v2.1.6 |
Updated to use Go version 1.16.13 . |
IBM Calico extension |
900 |
923 |
Updated universal base image (UBI) to the 8.5-218 version to resolve CVEs. Updated to use Go version 1.16.13 . |
Cluster health image |
v1.2.20 |
v1.2.21 |
Updated to use Go version 1.17.5 , updated Go dependencies and golangci-lint. |
IBM Cloud Controller Manager |
v1.21.7-3 |
v1.21.9-1 |
Updated to support the Kubernetes 1.21.9 release and to use Go version 1.16.12 . |
Key Management Service provider |
v2.3.12 |
v2.4.0 |
Decrypted data encryption key is persisted in memory until the root key is changed, disabled, or rotated. Update multiple go dependencies. |
Load balancer and load balancer monitor for IBM Cloud Provider |
1659 |
1747 |
Updated the Alpine base image to the 3.15 version to resolve CVEs. Updated to use Go version 1.17.6 . |
Red Hat OpenShift configuration |
N/A |
N/A |
Updated the feature gate configuration. |
Red Hat OpenShift Control Plane Operator |
v4.8.0-20211201 |
v4.8.0-20220107 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Red Hat OpenShift on IBM Cloud Metrics Server |
v4.8.0-20211201 |
v4.8.0-20220107 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Red Hat OpenShift |
4.8.21 |
4.8.26 |
Changed the duration of worker node certificates from 3 years to 2 years. See the Red Hat OpenShift release notes. |
Red Hat OpenShift on IBM Cloud toolkit |
4.8.0+20211201 |
4.8.0+20220107 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
OpenVPN client |
2.4.6-r3-IKS-463 |
2.5.4-r0-IKS-556 |
Update base image to alpine 3.15 to address CVEs, no longer set the --compress config option, updated scripts. |
OpenVPN server |
2.4.6-r3-IKS-462 |
2.5.4-r0-IKS-555 |
Update base image to alpine 3.15 to address CVEs, no longer set the --compress config option, updated scripts. |
OpenVPN Operator image |
v1.3.9 |
v1.4.0 |
Updated OpenVPN to version 2.5.4-r0 . Remove deprecated compression config option from VPN server. Set cipher explicitly to default value to avoid warning message in logs. |
Portieris admission controller |
v0.12.1 |
v0.12.2 |
See the Portieris admission controller release notes |
IBM Cloud RBAC Operator |
3430e03 |
0fc9949 |
Updated universal base image (UBI) to the 8.5-218 version to resolve CVEs. Updated to use Go version 1.16.13 . |
IBM Cloud File Storage for Classic plug-in and monitor |
402 |
404 |
Updated universal base image (UBI) to the 8.5-218 version to resolve CVEs. Updated to use Go version 1.16.13 . |
Change log for worker node fix pack 4.8.26_1541_openshift, released 18 January 2022
The following table shows the changes that are in the worker node fix pack 4.8.26_1541_openshift
. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure)
the worker node.
Change log for worker node fix pack 4.8.24_1540_openshift, released 4 January 2022
The following table shows the changes that are in the worker node fix pack patch update 4.8.24_1540_openshift
. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure)
the worker node.
Changes since version 4.8.24_1539_openshift
Component |
Previous |
Current |
Description |
HA proxy |
3b8663 |
d38fa1 |
Contains fixes for CVE-2021-3712. |
Change log for worker node fix pack 4.8.24_1539_openshift, released 20 December 2021
The following table shows the changes that are in the worker node fix pack patch update 4.8.24_1539_openshift
. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure)
the worker node.
Changes since version 4.8.22_1538_openshift
Component |
Previous |
Current |
Description |
Red Hat OpenShift node |
4.8.20 |
4.8.22 |
For more information, see the change logs |
Change log for master fix pack 4.8.21_1537_openshift, released 7 December 2021
The following table shows the changes that are in the master fix pack patch update 4.8.21_1537_openshift
. Master patch updates are applied automatically.
Changes since version 4.8.18_1535_openshift
Component |
Previous |
Current |
Description |
Calico |
v3.20.2 |
v3.20.3 |
See the Calico release notes. |
Tigera Operator |
v1.20.4 |
v1.20.5 |
See the Tigera Operator release notes. |
Cluster health image |
v1.2.18 |
v1.2.20 |
Updated universal base image (UBI) to the latest 8.4 version to resolve CVEs. Updated to use Go version 1.16.10 . |
Gateway-enabled cluster controller |
1567 |
1586 |
Updated Alpine base image to the latest 3.14 version to resolve CVEs. Updated to use Go version 1.16.10 . |
IBM Calico extension |
864 |
900 |
Updated universal base image (UBI) to the 8.5-204 version to resolve CVEs. Updated to use Go version 1.16.10 . |
IBM Cloud Block Storage for Classic driver and plug-in |
v2.1.2 |
v2.1.3 |
Updated universal base image (UBI) to the 8.5-204 version to resolve CVEs. Updated to use Go version 1.16.10 . |
IBM Cloud Controller Manager |
v1.21.6-2 |
v1.21.7-3 |
Updated to support the Kubernetes 1.21.7 release and to use Go version 1.16.10 . |
IBM Cloud File Storage for Classic plug-in and monitor |
401 |
402 |
Updated universal base image (UBI) to the 8.5-204 version to resolve CVEs. Updated to use Go version 1.16.10 . |
IBM Cloud RBAC Operator |
4ca5637 |
3430e03 |
Updated universal base image (UBI) to the latest 8.5 version to resolve CVEs. Updated to use Go version 1.16.10 . |
Key Management Service provider |
v2.3.10 |
v2.3.12 |
Updated universal base image (UBI) to the latest 8.4 version to resolve CVEs. Updated to use Go version 1.16.10 . |
Load balancer and load balancer monitor for IBM Cloud Provider |
1590 |
1659 |
Updated Alpine base image to the latest 3.14 version to resolve CVEs. Updated to use Go version 1.16.10 . |
Red Hat OpenShift |
4.8.18 |
4.8.21 |
See the Red Hat OpenShift release notes. |
Red Hat OpenShift Control Plane Operator |
v4.8.0-20211109 |
v4.8.0-20211201 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
OpenVPN Operator image |
v1.3.8 |
v1.3.9 |
Updated ansible operator base image to version v1.14.0 to resolve CVEs. |
Portieris admission controller |
v0.12.0 |
v0.12.1 |
See the Portieris admission controller release notes. |
Red Hat OpenShift on IBM Cloud Metrics Server |
v4.8.0-20211109 |
v4.8.0-20211201 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Red Hat OpenShift on IBM Cloud toolkit |
4.8.0+20211109 |
4.8.0+20211201 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Change log for worker node fix pack 4.8.22_1538_openshift, released 6 December 2021
The following table shows the changes that are in the worker node fix pack patch update 4.8.22_1538_openshift
. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure)
the worker node.
Change log for worker node fix pack 4.8.20_1536_openshift, released 22 November 2021
The following table shows the changes that are in the worker node fix pack patch update 4.8.20_1536_openshift
. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure)
the worker node.
Changes since version 4.8.18_1533_openshift
Component |
Previous |
Current |
Description |
Red Hat OpenShift |
4.8.18 |
4.8.20 |
For more information, see the change log. |
HA proxy |
07f1e9e |
3b8663 |
Contains fixes for CVE-2021-20231, CVE-2021-20232,
CVE-2021-3580, CVE-2021-22946, CVE-2021-22947, CVE-2021-22876, CVE-2021-22898, CVE-2021-22925, CVE-2019-20838,
CVE-2020-14155, CVE-2018-20673, CVE-2021-42574, CVE-2019-17594, CVE-2019-17595, CVE-2020-12762, CVE-2020-16135,
CVE-2021-3445, CVE-2021-36084, CVE-2021-36085, CVE-2021-36086, CVE-2021-36087, CVE-2021-20266, CVE-2019-18218,
CVE-2021-23840, CVE-2021-23841, CVE-2021-27645, CVE-2021-33574, CVE-2021-35942, CVE-2021-33560, CVE-2019-13750,
CVE-2019-13751, CVE-2019-19603, CVE-2019-5827, CVE-2020-13435, CVE-2020-24370, CVE-2021-28153, CVE-2021-3800,
CVE-2021-33928, CVE-2021-33929, CVE-2021-33930, CVE-2021-33938, and CVE-2021-3200 |
Change log for master fix pack 4.8.18_1535_openshift, released 17 November 2021
The following table shows the changes that are in the master fix pack patch update 4.8.18_1535_openshift
. Master patch updates are applied automatically.
Changes since version 4.8.14_1531_openshift
Component |
Previous |
Current |
Description |
Calico |
v3.20.0 |
v3.20.2 |
See the Calico release notes. |
Tigera Operator |
v1.20.1 |
v1.20.4 |
See the Tigera Operator release notes. |
Cluster health image |
v1.2.16 |
v1.2.18 |
Updated Go module dependencies and to use Go version 1.16.9 . Updated image for CVE-2021-22946, CVE-2021-22947, CVE-2021-33928, CVE-2021-33929 and CVE-2021-33930. |
etcd |
v3.4.17 |
v3.4.18 |
See the etcd release notes. |
Gateway-enabled cluster controller |
1510 |
1567 |
Updated to use Go version 1.16.9 . |
IBM Cloud Controller Manager |
v1.21.5-2 |
v1.21.6-2 |
Updated to support the Kubernetes 1.21.6 release and to use Go version 1.16.9 . Updated image for DLA-2797-1. |
IBM Cloud RBAC Operator |
e3cb629 |
4ca5637 |
Updated universal base image (UBI) to the latest 8.4 version to resolve CVEs. |
Key Management Service provider |
v2.3.8 |
v2.3.10 |
Updated Go module dependencies and to use Go version 1.16.9 . Updated image for CVE-2021-22946. |
Load balancer and load balancer monitor for IBM Cloud Provider |
1547 |
1590 |
Updated to use Go version 1.16.9 . |
Red Hat OpenShift |
4.8.14 |
4.8.18 |
See the Red Hat OpenShift release notes. Changed the duration of the Kubernetes API
server certificate from 825 days to 365 days. Changed the duration of the cluster CA certificate from 30 to 10 years. |
Red Hat OpenShift Control Plane Operator |
v4.8.0-20211004 |
v4.8.0-20211109 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
OpenVPN client |
2.4.6-r3-IKS-386 |
2.4.6-r3-IKS-463 |
Updated image to implement additional IBM security controls. |
OpenVPN server |
2.4.6-r3-IKS-385 |
2.4.6-r3-IKS-462 |
Updated image to implement additional IBM security controls. |
OpenVPN Operator image |
v1.3.7 |
v1.3.8 |
Updated ansible operator base image to version v1.13.1 to resolve CVEs. |
Red Hat OpenShift on IBM Cloud Metrics Server |
v4.8.0-20211004 |
v4.8.0-20211109 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Red Hat OpenShift on IBM Cloud toolkit |
4.8.0+20211004 |
4.8.0+20211109 |
See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Change log for worker node fix pack 4.8.18_1533_openshift, released 10 November 2021
The following table shows the changes that are in the worker node fix pack patch update 4.8.18_1533_openshift
. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure)
the worker node.
Changes since version 4.8.15_1532_openshift
Component |
Previous |
Current |
Description |
RHEL 7 Packages |
N/A |
N/A |
Updated worker node image packages for CVE-2021-42574. |
Red Hat OpenShift |
4.8.15 |
4.8.18 |
See the Red Hat OpenShift release notes. |
Change log for master fix pack 4.8.14_1531_openshift, released 29 October 2021
The following table shows the changes that are in the master fix pack patch update 4.8.14_1531_openshift
. Master patch updates are applied automatically.
Change log for worker node fix pack 4.8.15_1532_openshift, released 25 October 2021
The following table shows the changes that are in the worker node fix pack patch update 4.8.15_1532_openshift
. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure)
the worker node.
Changes since version 4.8.13_1528_openshift
Component |
Previous |
Current |
Description |
Red Hat OpenShift |
4.8.13 |
4.8.15 |
See the Red Hat OpenShift change logs. |
RHEL 7 Packages |
3.10.0-1160.42.2.el7 |
3.10.0-1160.45.1.el7 |
Updated worker node images and kernel with package updates for CVE-2021-3778 and CVE-2021-3796. |
Worker-pool taint automation |
N/A |
N/A |
Fixes known issue related to worker-pool taint automation that prevents workers from getting providerID. |
Change log for worker node fix pack 4.8.13_1528_openshift, released 11 October 2021
The following table shows the changes that are in the worker node fix pack patch update 4.8.13_1528_openshift
. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure)
the worker node.
Changes since version 4.8.12_1527_openshift
Component |
Previous |
Current |
Description |
Red Hat OpenShift |
4.8.12 |
4.8.13 |
See the change logs. The update resolves CVE-2021-25741 (see the IBM security bulletin). |