Version 4.10 change log
View information of version changes for major, minor, and patch updates that are available for your Red Hat® OpenShift® on IBM Cloud® clusters that run version 4.10. Changes include updates to Red Hat OpenShift, Kubernetes, and IBM Cloud Provider components.
Version 4.10 is no longer supported. Update your cluster to at least version 4.11 as soon as possible.
Overview
Unless otherwise noted in the change logs, the IBM Cloud provider version enables Red Hat OpenShift APIs and features that are at beta. Red Hat OpenShift alpha features, which are subject to change, are disabled.
Check the Security Bulletins on IBM Cloud Status for security vulnerabilities that affect Red Hat OpenShift on IBM Cloud. You can filter the results to view only Kubernetes Service security bulletins that are relevant to Red Hat OpenShift on IBM Cloud. Change log entries that address other security vulnerabilities but don't include an IBM security bulletin are for vulnerabilities that are not known to affect Red Hat OpenShift on IBM Cloud in normal usage. If you run privileged containers, run commands on the workers, or execute untrusted code, then you might be at risk.
Master patch updates are applied automatically. Worker node patch updates can be applied by reloading or updating the worker nodes. For more information about major, minor, and patch versions and preparation actions between minor versions, see Red Hat OpenShift versions.
Change logs
Review the version 4.10 change log.
Change log for worker node fix pack 4.10.67_1597_openshift, released 29 January 2024
The following table shows the changes that are in the worker node fix pack 4.10.67_1597_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| Red Hat OpenShift on IBM Cloud. | 4.10.67 | 4.10.67 | N/A |
| Rhel8 Packages | 4.18.0-477.27.1.el8_8 | 4.18.0-477.27.1.el8_8 | N/A |
| HAProxy | e105dc | a13673 | Security fixes for CVE-2023-7104, CVE-2023-27043. |
Change log for worker node fix pack 4.10.67_1596_openshift, released 16 January 2024
The following table shows the changes that are in the worker node fix pack 4.10.67_1596_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| Red Hat OpenShift on IBM Cloud | 4.10.67 | 4.10.67 | N/A |
| RHEL 8 Packages | N/A | N/A | N/A |
| Haproxy | 3060b0 | e105dc | CVE-2023-39615, CVE-2023-5981, CVE-2022-48560, CVE-2022-48564. |
Change log for worker node fix pack 4.10.67_1595_openshift, released 02 January 2024
The following table shows the changes that are in the worker node fix pack 4.10.67_1595_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| Red Hat OpenShift on IBM Cloud | 4.10.67 | 4.10.67 | N/A |
| RHEL 8 Packages | 4.18.0-477.27.1.el8_8 | 4.18.0-477.27.1.el8_8 | N/A |
Change log for worker node fix pack 4.10.67_1594_openshift, released 18 December 2023
The following table shows the changes that are in the worker node fix pack 4.10.67_1594_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| Red Hat OpenShift on IBM Cloud | N/A | N/A | N/A |
| RHEL 8 Packages | N/A | N/A | N/A |
Change log for worker node fix pack 4.10.67_1593_openshift, released 04 December 2023
The following table shows the changes that are in the worker node fix pack 4.10.67_1593_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| Red Hat OpenShift on IBM Cloud | 4.10.67 | 4.10.67 | N/A |
| RHEL 8 Packages | N/A | N/A | N/A |
Change log for worker node fix pack 4.10.67_1592_openshift, released 29 November 2023
The following table shows the changes that are in the worker node fix pack 4.10.67_1592_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| Red Hat OpenShift on IBM Cloud | 4.10.67 | 4.10.67 | N/A |
| CRI-O | 1.23.5 | 1.23.5 | Unqualified image registry aliases updated for address-parsing-service, admin-site, apache-tika, auto-update-service, config-service, data-integration-service,
dataprovider-manager-service, data-service, documents-service, gate-service, gateway-service, icij-db, identity-service, internet-access-service,
mongo, notes-service, public-api-service, router, and search-service. However, using short names are not supported due to security risks, https://access.redhat.com/solutions/6178442. |
| RHEL 8 Packages | N/A | N/A | N/A |
Change log for master fix pack 4.10.67_1591_openshift, released 15 November 2023
The following table shows the changes that are in the master fix pack 4.10.67_1591_openshift. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| IBM Cloud File Storage for Classic plug-in and monitor | 435 | 438 | New version contains updates and security fixes. |
| IBM Cloud RBAC Operator | f0d3265 | e544e35 | New version contains updates and security fixes. |
| Load balancer and load balancer monitor for IBM Cloud Provider | 2681 | 2731 | New version contains updates and security fixes. |
| OpenVPN client | 2.6.5-r0-IKS-66 | 2.6.5-r0-IKS-77 | New version contains updates and security fixes. |
| OpenVPN server | 2.6.5-r0-IKS-57 | 2.6.5-r0-IKS-76 | New version contains updates and security fixes. |
| OpenVPN Operator image | v1.4.28 | v1.4.30 | New version contains updates and security fixes. |
| Portieris admission controller | v0.13.8 | v0.13.10 | See the Portieris admission controller release notes. |
| Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit | v4.10.0-20231010 | v4.10.0-20231102 | See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Change log for worker node fix pack 4.10.67_1590_openshift, released 08 November 2023
The following table shows the changes that are in the worker node fix pack 4.10.67_1590_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| Red Hat OpenShift on IBM Cloud | N/A | N/A | N/A |
Change log for master fix pack 4.10.67_1588_openshift, released 25 October 2023
The following table shows the changes that are in the master fix pack 4.10.67_1588_openshift. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| IBM Calico extension | 1390 | 1487 | New version contains security fixes. |
| IBM Cloud Block Storage driver and plug-in | v2.4.10 | v2.4.12 | New version contains updates and security fixes. |
| IBM Cloud RBAC Operator | 4e2f346 | f0d3265 | New version contains updates and security fixes. |
| OpenVPN Operator image | v1.4.27 | v1.4.28 | New version contains updates and security fixes. |
| Portieris admission controller | v0.13.6 | v0.13.8 | See the Portieris admission controller release notes. |
| Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit | v4.10.0-20230811 | v4.10.0-20231010 | See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Change log for worker node fix pack 4.10.67_1589_openshift, released 23 October 2023
The following table shows the changes that are in the worker node fix pack 4.10.67_1589_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| Red Hat OpenShift on IBM Cloud. | N/A | N/A | N/A |
| RHEL 8 Packages | N/A | N/A | Worker node package update for CVE-2023-44487. |
Change log for worker node fix pack 4.10.67_1587_openshift, released 9 October 2023
The following table shows the changes that are in the worker node fix pack 4.10.67_1587_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| Red Hat OpenShift on IBM Cloud. | N/A | N/A | N/A |
| RHEL 8 Packages | N/A | N/A | Worker node package updates for CVE-2023-3341, CVE-2023-4527, CVE-2007-4559, CVE-2023-4806, CVE-2023-4813, CVE-2023-4911. |
Change log for worker node fix pack 4.10.67_1586_openshift, released 27 September 2023
The following table shows the changes that are in the worker node fix pack 4.10.67_1586_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| Red Hat OpenShift on IBM Cloud. | 4.10.67 | 4.10.67 | No Change |
| RHEL 8 Packages | 4.18.0-477.21.1.el8_8 | 4.18.0-477.27.1.el8_8 | Worker node kernel & package updates for CVE-2023-2002, CVE-2023-3090, CVE-2023-3390, CVE-2023-3776, CVE-2023-4004, CVE-2023-20593, CVE-2023-29491, CVE-2023-30630, CVE-2023-35001, CVE-2023-35788. |
Change log for master fix pack 4.10.67_1585_openshift, released 20 September 2023
The following table shows the changes that are in the master fix pack 4.10.67_1585_openshift. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Calico | v3.25.1 | v3.25.2 | See the Calico release notes. |
| Tigera Operator | v1.29.4 | v1.29.6 | See the Tigera Operator release notes. |
| IBM Cloud Block Storage driver and plug-in | v2.4.5 | v2.4.10 | Updated Go dependencies. Updated to newer UBI base image. |
| IBM Cloud Controller Manager | v1.23.17-25 | v1.23.17-26 | Updated Go dependencies. |
| IBM Cloud File Storage for Classic plug-in and monitor | 434 | 435 | Updated Go to version 1.20.6 and updated dependencies. Updated to newer UBI base image. |
| Load balancer and load balancer monitor for IBM Cloud Provider | 2631 | 2681 | Updated Go to version 1.19.12 and updated Go dependencies. |
| Red Hat OpenShift on IBM Cloud | 4.10.65 | 4.10.67 | Resolves CVE-2023-1260. For more information, see the IBM security bulletin. See the Red Hat OpenShift on IBM Cloud release notes. |
Change log for worker node fix pack 4.10.67_1582_openshift, released 12 September 2023
The following table shows the changes that are in the worker node fix pack 4.10.67_1582_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| Red Hat OpenShift on IBM Cloud. | 4.10.66 | 4.10.67 | For more information, see the change log. |
| RHEL 8 Packages | N/A | N/A | Package updates for CVE-2022-40982, CVE-2022-41804, CVE-2023-23908. |
Change log for master fix pack 4.10.65_1580_openshift, released 30 August 2023
The following table shows the changes that are in the master fix pack 4.10.65_1580_openshift. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Cluster health image | v1.3.23 | v1.3.24 | Updated Go to version 1.19.12 and updated dependencies. Updated base image version to 378. |
| etcd | v3.4.26 | v3.4.27 | See the etcd release notes. |
| IBM Cloud Controller Manager | v1.23.17-22 | v1.23.17-25 | Updated Go dependencies to resolve a CVE. Updates to Travis build. |
| IBM Cloud File Storage for Classic plug-in and monitor | 433 | 434 | Updated Go to version 1.20.6 and updated dependencies. Updated to newer UBI base image. |
| Key Management Service provider | v2.7.2 | v2.7.3 | Updated Go dependencies. |
| OpenVPN client | 2.6.5-r0-IKS-41-amd64 | 2.6.5-r0-IKS-66-amd64 | Updated openvpn components to fix CVEs. |
| OpenVPN server | 2.6.5-r0-IKS-40-amd64 | 2.6.5-r0-IKS-57-amd64 | Updated openvpn components to fix CVEs. |
| OpenVPN Operator image | v1.4.26 | v1.4.27 | Updated ansible-operator version to 1.30.0 |
| Portieris admission controller | v0.13.5 | v0.13.6 | See the Portieris admission controller release notes. |
| Red Hat OpenShift on IBM Cloud. | 4.10.63 | 4.10.65 | https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html#ocp-4-10-65 |
| Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit | v4.10.0-20230710 | v4.10.0-20230811 | See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Change log for worker node fix pack 4.10.66_1581_openshift, released 28th August 2023
The following table shows the changes that are in the worker node fix pack 4.10.66_1581_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| Red Hat OpenShift on IBM Cloud. | 4.10.65 | 4.10.66 | For more information, see the change log. |
Change log for worker node fix pack 4.10.65_1579_openshift, released 15th August 2023
The following table shows the changes that are in the worker node fix pack 4.10.65_1579_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| Red Hat OpenShift on IBM Cloud. | 4.10.64 | 4.10.65 | For more information, see the change log. |
| RHEL 7 Packages | 3.10.0-1160.92.1.el7 | 3.10.0-1160.95.1.el7 | Worker node kernel & package updates for CVE-2023-38408, CVE-2022-3564. |
| RHEL 8 Packages | 4.18.0-477.15.1.el8_8 | 4.18.0-477.21.1.el8_8 | Worker node kernel & package updates for CVE-2022-42896, CVE-2023-1281, CVE-2023-1829, CVE-2023-2124, CVE-2023-2194, CVE-2023-2235, CVE-2023-2602, CVE-2023-2603, CVE-2023-27536, CVE-2023-28321, CVE-2023-28484, CVE-2023-29469, CVE-2023-32681, CVE-2023-34969, CVE-2023-38408. |
Change log for worker node fix pack 4.10.64_1578_openshift, released 1 August 2023
The following table shows the changes that are in the worker node fix pack 4.10.64_1578_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| Red Hat OpenShift on IBM Cloud. | 4.10.63 | 4.10.64 | For more information, see the change logs. |
| RHEL 7 Packages | N/A | N/A | Worker node package updates for CVE-2022-3564, CVE-2023-2828, CVE-2023-32233. |
| RHEL 8 Packages | N/A | N/A | Worker node package update for CVE-2023-2828. |
Change log for master fix pack 4.10.63_1577_openshift, released 28 July 2023
The following table shows the changes that are in the master fix pack 4.10.63_1577_openshift. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Cluster health image | v1.3.21 | v1.3.23 | Updated Go to version 1.19.11 and updated Go dependencies. Updated UBI base image. |
| IBM Cloud Controller Manager | v1.23.17-19 | v1.23.17-22 | Updated Go dependencies. |
| Key Management Service provider | v2.6.7 | v2.7.2 | Updated Go to version 1.19.11 and updated Go dependencies. Updated UBI base image. |
| Load balancer and load balancer monitor for IBM Cloud Provider | 2584 | 2631 | Updated Go to version 1.19.10 and updated Go dependencies. Updated Alpine base image. |
| OpenVPN client | 2.6.4-r0-IKS-34-amd64 | 2.6.5-r0-IKS-41-amd64 | Updated OpenVPN to version 2.6.5. |
| OpenVPN Operator image | v1.4.25 | v1.4.26 | Updated based image to resolve CVE-2023-24329, CVE-2020-24736, CVE-2023-26604, CVE-2023-1667, and CVE-2023-2283. |
| OpenVPN server | 2.6.4-r0-IKS-33-amd64 | 2.6.5-r0-IKS-40-amd64 | Updated OpenVPN to version 2.6.5. |
| Red Hat OpenShift on IBM Cloud. | 4.10.61 | 4.10.63 | See the Red Hat OpenShift on IBM Cloud release notes.. |
| Red Hat OpenShift on IBM Cloud Control Plane Operator and Metrics Server | v4.10.0-20230417 | v4.10.0-20230710 | See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
| Red Hat OpenShift on IBM Cloud toolkit | 4.10.0+20230417 | 4.10.0+20230710 | See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Change log for worker node fix pack 4.10.63_1576_openshift, released 17th July 2023
The following table shows the changes that are in the worker node fix pack 4.10.63_1576_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| Red Hat OpenShift on IBM Cloud | 4.10.62 | 4.10.63 | See change log. |
| RHEL 7 Packages | N/A | N/A | N/A |
| RHEL 8 Packages | N/A | N/A | N/A |
Change log for worker node fix pack 4.10.62_1575_openshift, released 03 July 2023
The following table shows the changes that are in the worker node fix pack 4.10.62_1575_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| Red Hat OpenShift on IBM Cloud. | 4.10.61 | 4.10.62 | see change log. |
Change log for master fix pack 4.10.61_1574_openshift, released 27 June 2023
The following table shows the changes that are in the master fix pack 4.10.61_1574_openshift. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Calico | v3.23.5 | v3.25.1 | See the Calico release notes. |
| Tigera Operator | v1.27.17 | v1.29.4 | See the Tigera Operator release notes. |
| Cluster health image | v1.3.20 | v1.3.21 | Updated Go dependencies and to Go version 1.19.10. |
| etcd | v3.4.25 | v3.4.26 | See the etcd release notes. |
| IBM Cloud Controller Manager | v1.23.17-16 | v1.23.17-19 | Updated to support the Kubernetes 1.23.17 release. Updated Go dependencies. |
| IBM Cloud File Storage for Classic plug-in and monitor | 431 | 433 | Updated Go to version 1.20.4. Updated UBI base image. |
| Key Management Service provider | v2.6.6 | v2.6.7 | Updated Go dependencies and to Go version 1.19.10. |
| Load balancer and load balancer monitor for IBM Cloud Provider | 2486 | 2584 | Updated Go dependencies and to Go version 1.19.9. Updated base image. |
| Red Hat OpenShift on IBM Cloud | 4.10.59 | 4.10.61 | https://docs.openshift.com/container-platform/ |
| OpenVPN client | 2.5.8-r0-IKS-674-amd64 | 2.6.4-r0-IKS-34-amd64 | Upgrade openvpn to version 2.6.4-r0. |
| OpenVPN server | 2.5.8-r0-IKS-673-amd64 | 2.6.4-r0-IKS-33-amd64 | Upgrade openvpn to version 2.6.4-r0. |
| OpenVPN Operator image | v1.4.23 | v1.4.25 | Updated OpenVPN configuration to provide shutdown grace period before terminating connections. |
Change log for worker node fix pack 4.10.61_1572_openshift, released 19 June 2023
The following table shows the changes that are in the worker node fix pack 4.10.61_1572_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| Red Hat OpenShift on IBM Cloud. | 4.10.60 | 4.10.61 | For more information, see the change logs. |
| RHEL 8 Packages | N/A | N/A | Worker node package updates for CVE-2023-32067,CVE-2023-24329. |
Change log for worker node fix pack 4.10.60_1571_openshift, released 5 June 2023
The following table shows the changes that are in the worker node fix pack 4.10.60_1571_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| Red Hat OpenShift on IBM Cloud. | 4.10.59 | 4.10.60 | For more information, see the change logs. |
| RHEL 7 Packages | N/A | N/A | N/A |
| RHEL 8 Packages | 4.18.0-477.10.1.el8_8 | 4.18.0-477.13.1.el8_8 | Worker node kernel & package updates for CVE-2023-22490, CVE-2023-23946, CVE-2023-25652, CVE-2023-25815, CVE-2023-29007, CVE-2023-32233. |
Change log for master fix pack 4.10.59_1570_openshift, released 25 May 2023
The following table shows the changes that are in the master fix pack 4.10.59_1570_openshift. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Cluster health image | v1.3.19 | v1.3.20 | Updated Go to version 1.19.9 and updated dependencies. Updated the base image. Resolved add-on health bugs. |
| etcd | v3.4.24 | v3.4.25 | See the etcd release notes. |
| IBM Cloud Controller Manager | v1.23.17-10 | v1.23.17-16 | Updated support of the Kubernetes 1.23.17 release. Updated Go dependencies. Key rotation. |
| IBM Cloud RBAC Operator | 778ef2b | 4e2f346 | Make armada-rbac-sync FIPS compliant |
| Key Management Service provider | v2.6.5 | v2.6.6 | Updated Go to version 1.19.9 and updated dependencies. |
| OpenVPN client | 2.6.4-r0-IKS-27 | 2.5.8-r0-IKS-674 | Reverted to previous version. |
| OpenVPN server | 2.6.4-r0-IKS-26 | 2.5.8-r0-IKS-673 | Reverted to previous version. |
| Portieris admission controller | v0.13.4 | v0.13.5 | See the Portieris admission controller release notes. |
| Red Hat OpenShift on IBM Cloud. | 4.10.56 | 4.10.59 | For more information, see the change log. |
Change log for worker node fix pack 4.10.59_1569_openshift, released 23 May 2023
The following table shows the changes that are in the worker node fix pack 4.10.59_1569_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
Change log for worker node fix pack 4.10.59_1566_openshift, released 10 May 2023
The following table shows the changes that are in the worker node fix pack 4.10.59_1566_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| RHEL 8 Packages | N/A | N/A | N/A |
| Red Hat OpenShift on IBM Cloud. | 4.10.57 | 4.10.59 | See change logs. |
| Haproxy | N/A | N/A | N/A |
Change log for master fix pack 4.10.56_1565_openshift, released 27 April 2023
The following table shows the changes that are in the master fix pack 4.10.56_1565_openshift. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Cluster health image | v1.3.17 | v1.3.19 | Updated Go to version 1.19.8 and updated dependencies. |
| IBM Calico extension | 1366-amd64 | 1390-amd64 | Eliminate IP syscall. |
| IBM Cloud Block Storage driver and plug-in | v2.4.0 | v2.4.5 | Updated universal base image (UBI) to resolve CVEs. Updated Go to version 1.19.8 and updated dependencies. |
| IBM Cloud Controller Manager | v1.23.17-5 | v1.23.17-10 | Updated Go dependencies. |
| IBM Cloud File Storage for Classic plug-in and monitor | 429 | 431 | Updated Go to version 1.19.8 and updated dependencies. Update UBI base image. |
| Key Management Service provider | v2.6.4 | v2.6.5 | Updated Go to version 1.19.7 and updated dependencies. |
| Load balancer and load balancer monitor for IBM Cloud Provider | 2420 | 2486 | Updated Go to version 1.19.7 and updated dependencies. |
| Red Hat OpenShift on IBM Cloud. | 4.10.53 | 4.10.56 | See the change log. Updated to resolve CVE-2022-3172. For more information, see the Security bulletin. |
| OpenVPN Operator image | v1.4.22 | v1.4.23 | Updated base image to resolve CVEs: CVE-2022-4304, CVE-2022-4450, CVE-2023-0215, CVE-2023-0286, CVE-2023-0361. |
| Portieris admission controller | v0.13.3 | v0.13.4 | See the Portieris admission controller release notes. |
| Red Hat OpenShift on IBM Cloud Control Plane Operator and Metrics Server | 4.10.0-20230314 | 4.10.0-20230417 | See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
| Red Hat OpenShift on IBM Cloud toolkit | 4.10.0+20230314 | 4.10.0+20230417 | See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Change log for worker node fix pack 4.10.57_1565_openshift, released 24 April 2023
The following table shows the changes that are in the worker node fix pack 4.10.57_1565_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| RHEL 8 Packages | N/A | N/A | N/A |
| Red Hat OpenShift on IBM Cloud. | 4.10.55 | 4.10.57 | See change logs. |
| Haproxy | N/A | N/A | N/A |
Change log for worker node fix pack 4.10.55_1563_openshift, released 11 April 2023
The following table shows the changes that are in the worker node fix pack 4.10.55_1563_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| RHEL 8 Packages | 4.18.0-425.13.1 | 4.18.0-425.19.2 | Worker node kernel & package updates for CVE-2022-4269, CVE-2022-4304, CVE-2022-4378, CVE-2022-4450, CVE-2023-0215, CVE-2023-0266, CVE-2023-0286, CVE-2023-0361, CVE-2023-0386. |
| Red Hat OpenShift on IBM Cloud. | 4.10.54 | 4.10.55 | For more information, see the change log. |
| Haproxy | 8398d1 | 8895ad | CVE-2023-0361. |
Change log for master fix pack 4.10.53_1561_openshift, released 28 March 2023
The following table shows the changes that are in the master fix pack 4.10.53_1561_openshift. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Cluster health image | v1.3.16 | v1.3.17 | Updated Go to version 1.19.7 and updated dependencies. |
| etcd | v3.4.23 | v3.4.24 | See the etcd release notes. |
| IBM Calico extension | 1308-amd64 | 1366-amd64 | Updated to resolve CVE-2023-23916. |
| IBM Cloud Block Storage driver and plug-in | v2.3.7 | v2.4.0 | Removed ExpandInUsePersistentVolumes feature gate. |
| IBM Cloud Controller Manager | v1.23.16-11 | v1.23.17-5 | Updated to support the Kubernetes 1.23.17 release. |
| IBM Cloud File Storage for Classic plug-in and monitor | 427 | 429 | Updated universal base image (UBI) to resolve CVEs. Updated Go to version 1.19.6 and updated dependencies. |
| Key Management Service provider | v2.6.3 | v2.6.4 | Updated Go to version 1.19.7 and updated dependencies. |
| Load balancer and load balancer monitor for IBM Cloud Provider | 2383 | 2420 | Updated the image to resolve CVEs. |
| OpenVPN Operator image | v1.4.20 | v1.4.22 | Updated ansible-operator to v1.28.0 to fix CVEs. |
| Red Hat OpenShift on IBM Cloud. | 4.10.52 | 4.10.53 | See the Red Hat OpenShift on IBM Cloud release notes. |
| Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit | v4.10.0-20230220 | v4.10.0-20230314 | See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Change log for worker node fix pack 4.10.54_1562_openshift, released 27 March 2023
The following table shows the changes that are in the worker node fix pack 4.10.54_1562_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| RHEL 8 Packages | N/A | N/A | N/A |
| Red Hat OpenShift on IBM Cloud. | 4.10.53 | 4.10.54 | For more information, see the change log. |
| Haproxy | af5031 | 8398d1 | CVE-2023-23916. |
| CRI-O configuration | N/A | N/A | CRI-O configuration now sets container network sysctl tuning for net.ipv4.tcp_keepalive_intvl to 15, net.ipv4.tcp_keepalive_probes to 6 and net.ipv4.tcp_keepalive_time to 40. |
Change log for worker node fix pack 4.10.53_1559_openshift, released 13 March 2023
The following table shows the changes that are in the worker node fix pack 4.10.53_1559_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| RHEL 8 Packages | N/A | N/A | Worker node package updates for CVE-2023-23916. |
| Red Hat OpenShift on IBM Cloud. | 4.10.52 | 4.10.53 | See the change logs |
Change log for master fix pack 4.10.52_1558_openshift, released 2 March 2023
The following table shows the changes that are in the master fix pack 4.10.52_1558_openshift. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Cluster health image | v1.3.15 | v1.3.16 | Updated Go dependencies and to Go version 1.19.6. Updated universal base image (UBI) to resolve CVEs. |
| etcd | v3.4.22 | v3.4.23 | See the etcd release notes. |
| Gateway-enabled cluster controller | 1902 | 1987 | Updated armada-utils to version v1.9.35 |
| IBM Calico extension | 1305-amd64 | 1308-amd64 | Updated universal base image (UBI) to resolve CVE-2022-47629. |
| IBM Cloud Block Storage driver and plug-in | v2.3.6 | v2.3.7 | Updated universal base image (UBI) to resolve CVEs. |
| IBM Cloud Controller Manager | v1.23.16-3 | v1.23.16-11 | Updated Go dependencies. Updated k8s.io/utils digest to a5ecb01. Updated vpcctl binary to 3785. |
| IBM Cloud File Storage for Classic plug-in and monitor | 425 | 427 | Updated universal base image (UBI) to resolve CVEs. |
| Key Management Service provider | v2.5.13 | v2.6.3 | Updated Go dependencies and to Go version 1.19.6. |
| Load balancer and Load balancer monitor for IBM Cloud Provider | 2325 | 2383 | Updated to armada-utils version 1.9.35. |
| OpenVPN client | 2.5.6-r1-IKS-648 | 2.5.8-r0-IKS-674-amd64 | Remediate CVE-2023-0286, CVE-2022-4304, CVE-2022-4450, CVE-2023-0215. |
| OpenVPN server | 2.5.6-r1-IKS-647 | 2.5.8-r0-IKS-673-amd64 | Remediate CVE-2023-0286, CVE-2022-4304, CVE-2022-4450, CVE-2023-0215. |
| OpenVPN Operator image | v1.4.13 | v1.4.20 | Update ansible-operator to v1.26.1 to fix CVEs. |
| Portieris admission controller | v0.12.6 | v0.13.3 | See the Portieris admission controller release notes. |
| Red Hat OpenShift on IBM Cloud. | 4.10.47 | 4.10.52 | See the Red Hat OpenShift on IBM Cloud release notes. |
| Red Hat OpenShift on IBM Cloud Control Plane Operator | v4.10.0-20230123 | v4.10.0-20230220 | See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
| Red Hat OpenShift on IBM Cloud Metrics Server | v4.10.0-20230123 | v4.10.0-20230220 | See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
| Red Hat OpenShift on IBM Cloud toolkit | 4.10.0+20230123 | 4.10.0+20230220 | See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Change log for worker node fix pack 4.10.52_1556_openshift, released 27 February 2023
The following table shows the changes that are in the worker node fix pack 4.10.52_1556_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| RHEL 8 Packages | 4.18.0-425.10.1 | 4.18.0-425.13.1 | Worker node & kernel package updates for CVE-2020-10735, CVE-2021-28861, CVE-2022-2873, CVE-2022-40897, CVE-2022-41222, CVE-2022-43945, CVE-2022-4415, CVE-2022-45061, CVE-2022-48303. |
| Red Hat OpenShift on IBM Cloud. | 4.10.51 | 4.10.52 | For more information, see the change log. |
| HAProxy | d38f89 | af5031 | CVE-2022-40897, CVE-2022-4415, CVE-2020-10735, CVE-2021-28861, CVE-2022-45061. |
Change log for worker node fix pack 4.10.51_1555_openshift, released 13 February 2023
The following table shows the changes that are in the worker node fix pack 4.10.51_1555_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| RHEL 8 Packages | N/A | N/A | Worker node package updates for CVE-2022-23521, CVE-2022-41903, CVE-2022-47629. |
| Red Hat OpenShift on IBM Cloud. | 4.10.50 | 4.10.51 | For more information, see the change log. |
| HAProxy | 8d6ea6 | 08c969 | CVE-2022-47629. |
Change log for master fix pack 4.10.47_1553_openshift, released 30 January 2023
The following table shows the changes that are in the master fix pack 4.10.47_1553_openshift. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Tigera Operator | v1.27.16 | v1.27.17 | See the Tigera Operator release notes. |
| Cluster health image | v1.3.14 | v1.3.15 | Updated Go dependencies and to Go version 1.19.4. |
| IBM Calico extension | 1257 | 1280 | Publish s390x image. |
| IBM Cloud Block Storage driver and plug-in | v2.3.4 | v2.3.6 | Updated UBI images to 8.7-1031 |
| IBM Cloud Controller Manager | v1.23.14-2 | v1.23.16-3 | Updated to support the Kubernetes 1.23.16 release. Updated Go dependencies and to Go version 1.19.5. |
| IBM Cloud File Storage for Classic plug-in and monitor | 421 | 425 | Fixes for Fixing CVE-2022-40303 and CVE-2022-40304. |
| Key Management Service provider | v2.5.12 | v2.5.13 | Updated Go dependencies and to Go version 1.19.4. |
| Red Hat OpenShift on IBM Cloud Control Plane Operator | v4.10.0-20221205 | v4.10.0-20230123 | See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
| Red Hat OpenShift on IBM Cloud. | 4.10.43 | 4.10.47 | See the Red Hat OpenShift on IBM Cloud Release Notes. |
| Red Hat OpenShift on IBM Cloud Metrics Server | v4.10.0-20221205 | v4.10.0-20230123 | See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
| Red Hat OpenShift on IBM Cloud toolkit | 4.10.0+20221205 | 4.10.0+20230123 | See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Change log for worker node fix pack 4.10.50_1554_openshift, released 30 January 2023
The following table shows the changes that are in the worker node fix pack 4.10.50_1554_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| RHEL 7 Packages | 3.10.0-1160.81 | 3.10.0-1160.83 | Worker node kernel & package updates for CVE-2017-5715, CVE-2021-25220, CVE-2021-26401, CVE-2022-2795, CVE-2022-2964, CVE-2023-22809. |
| RHEL 8 Packages | N/A | N/A | Worker node kernel & package updates for CVE-2022-40303, CVE-2022-40304, CVE-2023-22809. |
| Red Hat OpenShift on IBM Cloud. | 4.10.47 | 4.10.50 | For more information, see the change log. |
| HAProxy | 508bf6 | 8d6ea6 | CVE-2022-42010, CVE-2022-42011, CVE-2022-42012, CVE-2022-40303, CVE-2022-40304, CVE-2022-3821, CVE-2022-35737, CVE-2022-43680, CVE-2021-46848. |
Change log for worker node fix pack 4.10.47_1551_openshift, released 16 January 2023
The following table shows the changes that are in the worker node fix pack 4.10.47_1551_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| RHEL 7 Packages | N/A | N/A | N/A |
| RHEL 8 Packages | 4.18.0-425.3.1 | 4.18.0-425.10.1 | Worker node kernel & package updates for CVE-2021-46848, CVE-2022-2601, CVE-2022-2964, CVE-2022-35737, CVE-2022-3775, CVE-2022-3821, CVE-2022-4139, CVE-2022-42010, CVE-2022-42011, CVE-2022-42012, CVE-2022-43680. |
| Red Hat OpenShift on IBM Cloud. | 4.10.45 | 4.10.47 | For more information, see the change log. |
Change log for worker node fix pack 4.10.45_1550_openshift, released 02 January 2023
The following table shows the changes that are in the worker node fix pack 4.10.45_1550_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| RHEL 7 Packages | N/A | N/A | N/A |
| RHEL 8 Packages | N/A | N/A | N/A |
| Red Hat OpenShift on IBM Cloud | N/A | N/A | N/A |
Change log for worker node fix pack 4.10.45_1549_openshift, released 19 December 2022
The following table shows the changes that are in the worker node fix pack 4.10.45_1549_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| RHEL 7 Packages | 3.10.0-1160.80 | 3.10.0-1160.81 | Worker node kernel & package updates for CVE-2022-28733. |
| RHEL 8 Packages | N/A | N/A | N/A |
| Red Hat OpenShift on IBM Cloud. | 4.10.43 | 4.10.45 | For more information, see the change log. |
Change log for master fix pack 4.10.43_1548_openshift, released 14 December 2022
The following table shows the changes that are in the master fix pack 4.10.43_1548_openshift. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Cluster health image | v1.3.13 | v1.3.14 | Updated Go dependencies. Exclude ingress status from cluster status aggregation. |
| etcd | v3.4.21 | v3.4.22 | See the etcd release notes. |
| IBM Calico extension | 1213 | 1257 | Updated universal base image (UBI) to resolve: CVE-2022-1304, CVE-2016-3709, CVE-2022-42898. |
| IBM Cloud Block Storage driver and plug-in | v2.3.3 | v2.3.4 | Update Go to version 1.18.8 and updated universal base image (UBI) to resolve CVEs. |
| IBM Cloud Controller Manager | v1.23.13-5 | v1.23.14-2 | Updated to support the Kubernetes 1.23.14 release. |
| IBM Cloud File Storage for Classic plug-in and monitor | 420 | 421 | Updated universal base image (UBI) to resolve CVE-2022-42898. Updated Go to version 1.18.8 |
| Key Management Service provider | v2.5.11 | v2.5.12 | Updated Go dependencies. |
| Load balancer and load balancer monitor for IBM Cloud Provider | 2110 | 2325 | Update Go to version 1.19.1 and update dependencies. |
| OpenVPN Operator image | v1.4.11 | v1.4.13 | Updated the ansible operator base image to v1.25.2 to resolve CVEs. |
| Red Hat OpenShift on IBM Cloud Control Plane Operator | v4.10.0-20221104 | v4.10.0-20221205 | See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
| Red Hat OpenShift on IBM Cloud. | 4.10.39 | 4.10.43 | See the Red Hat OpenShift on IBM Cloud Release Notes. |
| Red Hat OpenShift on IBM Cloud Metrics Server and toolkit | v4.10.0-20221104 | v4.10.0-20221205 | See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Change log for worker node fix pack 4.10.43_1547_openshift, released 05 December 2022
The following table shows the changes that are in the worker node fix pack 4.10.43_1547_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| RHEL 7 Packages | N/A | N/A | Worker node package updates for CVE-2022-42898. |
| RHEL 8 Packages | N/A | N/A | Worker node package updates for CVE-2022-42898. |
| Red Hat OpenShift on IBM Cloud. | 4.10.41 | 4.10.43 | For more information, see the change log. |
| HAProxy | c619f4 | 508bf6 | CVE-2016-3709, CVE-2022-42898, CVE-2022-1304. |
Change log for worker node fix pack 4.10.41_1546_openshift, released 21 November 2022
The following table shows the changes that are in the worker node fix pack 4.10.41_1546_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
Change log for master fix pack 4.10.39_1545_openshift, released 16 November 2022
The following table shows the changes that are in the master fix pack 4.10.39_1545_openshift. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Calico | v3.22.4 | v3.23.5 | See the Calico release notes. |
| Tigera Operator | v1.25.11 | v1.27.16 | See the Tigera Operator release notes. |
| Cluster health image | v1.3.12 | v1.3.13 | Updated Go dependencies, golangci-lint, gosec, and to Go version 1.19.3. Updated base image version to 116. |
| etcd | v3.4.18 | v3.4.21 | See the etcd release notes. |
| Gateway-enabled cluster controller | 1823 | 1902 | Go module updates. |
| IBM Calico extension | 1096 | 1213 | Updated image to fix the following CVEs: CVE-2020-35525, CVE-2020-35527, CVE-2022-3515, CVE-2022-37434, CVE-2022-2509, CVE-2022-32149. |
| IBM Cloud Block Storage driver and plug-in | v2.3.1 | v2.3.3 | Updated universal base image (UBI) to version 8.7-923 to resolve CVEs. |
| IBM Cloud Controller Manager | v1.23.13-1 | v1.23.13-5 | Key rotation and updated Go dependencies. |
| IBM Cloud File Storage for Classic plug-in and monitor | 416 | 420 | Updated universal base image (UBI) to version 8.7-923 to resolve CVEs. |
| Key Management Service provider | v2.5.10 | v2.5.11 | Updated Go dependencies and to Go version 1.19.3. |
| OpenVPN Operator image | v1.4.10 | v1.4.11 | Updated ansible operator base image to v1.24.0 to resolve CVEs. |
| Red Hat OpenShift on IBM Cloud Control Plane Operator | v4.10.0-20220920 | v4.10.0-20221104 | See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
| Red Hat OpenShift on IBM Cloud. | 4.10.36 | 4.10.39 | See the Red Hat OpenShift on IBM Cloud release notes. |
| Red Hat OpenShift on IBM Cloud Metrics Server and toolkit | v4.10.0-20220920 | v4.10.0-20221104 | See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Change log for worker node fix pack 4.10.39_1544_openshift, released 11 November 2022
The following table shows the changes that are in the worker node fix pack 4.10.39_1544_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| RHEL 7 Packages | N/A | N/A | N/A |
| RHEL 8 Packages | 4.18.0-372.32.1.el8_6 | 4.18.0-425.3.1.el8 | Worker node kernel & package updates for CVE-2021-36221, CVE-2022-1708, CVE-2022-27191, CVE-2021-41190, CVE-2022-2990, CVE-2022-29162, CVE-2022-2989, CVE-2022-2990, CVE-2020-36516, CVE-2020-36558, CVE-2021-3640, CVE-2021-30002, CVE-2022-0168, CVE-2022-0617, CVE-2022-0854, CVE-2022-1016, CVE-2022-1048, CVE-2022-1055, CVE-2022-1184, CVE-2022-1852, CVE-2022-2078, CVE-2022-2586, CVE-2022-2639, CVE-2022-2938, CVE-2022-20368, CVE-2022-21499, CVE-2022-23960, CVE-2022-26373, CVE-2022-27950, CVE-2022-28390, CVE-2022-28893, CVE-2022-29581, CVE-2022-36946, CVE-2022-24448. |
Change log for worker node fix pack 4.10.39_1543_openshift, released 07 November 2022
The following table shows the changes that are in the worker node fix pack 4.10.39_1543_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| RHEL 7 Packages | 3.10.0-1160.76.1 | 3.10.0-1160.80.1 | Worker node kernel & package updates for CVE-2022-21233, CVE-2022-23816, CVE-2022-23825, CVE-2022-2588, CVE-2022-26373, CVE-2022-29900, CVE-2022-29901, CVE-2022-41974. |
| RHEL 8 Packages | 4.18.0-372.26.1 | 4.18.0-372.32.1 | Worker node kernel & package updates for CVE-2020-35525, CVE-2020-35527, CVE-2022-0494, CVE-2022-1353, CVE-2022-23816, CVE-2022-23825, CVE-2022-2509, CVE-2022-2588, CVE-2022-29900, CVE-2022-29901, CVE-2022-3515, CVE-2022-37434, CVE-2022-41974. |
| Red Hat OpenShift on IBM Cloud. | 4.10.37 | 4.10.39 | For more information, see the change log. |
| HAProxy | b034b2 | 3a1392 | CVE-2022-37434, CVE-2022-37434, CVE-2020-35525, CVE-2020-35527, CVE-2022-3515, CVE-2022-2509. |
Change log for master fix pack 4.10.36_1541_openshift, released 27 October 2022
The following table shows the changes that are in the master fix pack 4.10.36_1541_openshift. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Cluster health image | v1.3.11 | v1.3.12 | Updated Go dependencies, golangci-lint, and to Go version 1.19.2. Updated base image version to 109. Excluded ingress status from cluster status calculation. |
| IBM Cloud Controller Manager | v1.23.11-1 | v1.23.13-1 | Updated to support the Kubernetes 1.23.13 release. |
| IBM Cloud RBAC Operator | dc1725a | 778ef2b | Updated to Go version 1.18.6. |
| Key Management Service provider | v2.5.9 | v2.5.10 | Updated Go dependencies and to Go version 1.19.2. |
| OpenVPN Operator image | v1.4.9 | v1.4.10 | Updated ansible operator base image to v1.24.0 to resolve CVEs. |
| Red Hat OpenShift on IBM Cloud. | 4.10.32 | 4.10.36 | See the Red Hat OpenShift on IBM Cloud release notes. |
Change log for worker node fix pack 4.10.37_1542_openshift, released 27 October 2022
The following table shows the changes that are in the worker node fix pack 4.10.37_1542_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| VPC Gen 2 RHEL 8 worker image disk size | N/A | N/A | Fixed regression on previous version where root filesystem partition was 25 GB instead of 100GB for VPC Gen 2 |
Change log for worker node fix pack 4.10.37_1539_openshift, released 25 October 2022
The following table shows the changes that are in the worker node fix pack 4.10.37_1539_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| RHEL 7 Packages | N/A | N/A | N/A |
| Red Hat OpenShift on IBM Cloud | 4.10.35 | 4.10.37 | For more information, see the change log. |
Change log for worker node fix pack 4.10.35_1538_openshift, released 10 October 2022
The following table shows the changes that are in the worker node fix pack 4.10.35_1538_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| RHEL 7 Packages | N/A | N/A | N/A |
| RHEL 8 Packages | N/A | N/A | N/A |
| Red Hat OpenShift on IBM Cloud. | 4.10.33 | 4.10.35 | For more information, see the change log. |
Change log for master fix pack 4.10.32_1536_openshift, released 26 September 2022
The following table shows the changes that are in the master fix pack 4.10.32_1536_openshift. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Cluster health image | v1.3.10 | v1.3.11 | Updated Go dependencies and to Go version 1.18.6. |
| IBM Calico extension | 1006 | 1096 | Updated image for CVE-2022-2526. |
| IBM Cloud Block Storage driver and plug-in | v2.2.9 | v2.3.1 | Updated to Go version 1.18.6. Updated universal base image (UBI) to version 8.6-941 to resolve CVEs. |
| IBM Cloud Controller Manager | v1.23.9-3 | v1.23.11-1 | Updated Go dependencies and to use Go version 1.17.13. Updated to support the Kubernetes 1.23.11 release. |
| IBM Cloud File Storage for Classic plug-in and monitor | 414 | 416 | Updated to Go version 1.18.6. Updated universal base image (UBI) to version 8.6-941 to resolve CVEs. |
| Key Management Service Provider | v2.5.8 | v2.5.9 | Updated Go dependencies and to Go version 1.18.6. |
| Red Hat OpenShift on IBM Cloud | 4.10.26 | 4.10.32 | See the Red Hat OpenShift on IBM Cloud Release Notes. |
| OpenVPN Operator image | v1.4.8 | v1.4.9 | Updated ansible operator base image to v1.23.0 to resolve CVEs. |
| Red Hat OpenShift on IBM Cloud Control Plane Operator | v4.10.0-20220822 | v4.10.0-20220920 | See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
| Red Hat OpenShift on IBM Cloud Metrics Server | v4.10.0-20220822 | v4.10.0-20220920 | See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
| Red Hat OpenShift on IBM Cloud toolkit | 4.10.0+20220822 | 4.10.0+20220920 | See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Change log for worker node fix pack 4.10.33_1537_openshift, released 26 September 2022
The following table shows the changes that are in the worker node fix pack 4.10.33_1537_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| RHEL 7 Packages | N/A | N/A | N/A |
| RHEL 8 Packages | 4.18.0-372.19.1 | 4.18.0-372.26.1 | N/A |
| Red Hat OpenShift on IBM Cloud. | 4.10.31 | 4.10.33 | For more information, see the change log. |
Change log for worker node fix pack 4.10.31_1535_openshift, released 12 September 2022
The following table shows the changes that are in the worker node fix pack 4.10.31_1535_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| RHEL 7 Packages | N/A | N/A | N/A |
| Red Hat OpenShift on IBM Cloud. | 4.10.28 | 4.10.31 | For more information, see the change log. |
Change log for master fix pack 4.10.26_1534_openshift, released 1 September 2022
The following table shows the changes that are in the master fix pack 4.10.26_1534_openshift. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Calico | v3.22.2 | v3.22.4 | See the Calico release notes. Updated the Calico custom resource definitions to include preserveUnknownFields: false. |
| Tigera Operator | v1.25.7 | v1.25.11 | See the Tigera Operator release notes. |
| Cluster health image | v1.3.9 | v1.3.10 | Updated Go dependencies and to Go version 1.18.5. |
| Gateway-enabled cluster controller | 1792 | 1823 | Updated to Go version 1.17.13. |
| IBM Calico extension | 997 | 1006 | Updated to Go version 1.17.13. |
| IBM Cloud Block Storage driver and plug-in | v2.2.8 | v2.2.9 | Updated to Go version 1.18.5. |
| IBM Cloud Controller Manager | v1.23.8-7 | v1.23.9-3 | Updated vpcctl binary to version 3367. Updated to support the Kubernetes 1.23.10 release. |
| IBM Cloud File Storage for Classic plug-in and monitor | 412 | 414 | Updated to Go version 1.18.5. Updated universal base image (UBI) to version 8.6-902 to resolve CVEs. |
| IBM Cloud RBAC Operator | 0a187a4 | dc1725a | Updated Go dependencies and to Go version 1.18.3. |
| Key Management Service provider | v2.5.7 | v2.5.8 | Updated Go dependencies. |
| Load balancer and load balancer monitor for IBM Cloud Provider | 2058 | 2110 | Updated Go dependencies and to Go version 1.17.13. |
| Red Hat OpenShift on IBM Cloud. | 4.10.22 | 4.10.26 | See the Red Hat OpenShift on IBM Cloud Release Notes. |
| OpenVPN client | 2.5.6-r1-IKS-629 | 2.5.6-r1-IKS-648 | Update image for CVE-2022-2097 and CVE-2022-37434. |
| OpenVPN Operator image | v1.4.7 | v1.4.8 | Updated Ansible operator base image to version v1.22.2 to resolve CVEs. |
| OpenVPN server | 2.5.6-r1-IKS-628 | 2.5.6-r1-IKS-647 | Update image for CVE-2022-2097 and CVE-2022-37434. |
| Portieris admission controller | v0.12.5 | v0.12.6 | See the Portieris admission controller release notes. |
| Red Hat OpenShift on IBM Cloud Control Plane Operator | v4.10.0-20220712 | v4.10.0-20220822 | See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
| Red Hat OpenShift on IBM Cloud Metrics Server | v4.10.0-20220712 | v4.10.0-20220822 | See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
| Red Hat OpenShift on IBM Cloud toolkit | 4.10.0+20220712 | 4.10.0+20220822 | See the Red Hat OpenShift on IBM Cloud toolkit release notes. |
Change log for worker node fix pack 4.10.28_1533_openshift, released 29 August 2022
The following table shows the changes that are in the worker node fix pack 4.10.28_1533_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| RHEL 7 Packages | N/A | N/A | Worker node package updates for CVE-2022-2526. |
| Red Hat OpenShift on IBM Cloud. | 4.10.26 | 4.10.28 | For more information, see the change log. |
| HAProxy | 6514a2 | c1634f | CVE-2022-32206, CVE-2022-32208 |
Change log for worker node fix pack 4.10.26_1530_openshift, released 16 August 2022
The following table shows the changes that are in the worker node fix pack 4.10.26_1530_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| RHEL 7 Packages | 3.10.0-1160.71.1 | 3.10.0-1160.76.1 | Worker node package updates for CVE-2022-0005, CVE-2022-21123, CVE-2022-21125, CVE-2022-21127, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151, CVE-2022-21166. |
| Red Hat OpenShift on IBM Cloud. | 4.10.24 | 4.10.26 | For more information, see the change log. |
Change log for worker node fix pack 4.10.24_1529_openshift, released 01 August 2022
The following table shows the changes that are in the worker node fix pack 4.10.24_1529_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| RHEL 7 Packages | N/A | N/A | N/A |
| Red Hat OpenShift on IBM Cloud. | 4.10.21 | 4.10.24 | For more information, see the change log. |
Change log for master fix pack 4.10.22_1528_openshift, released 26 July 2022
The following table shows the changes that are in the master fix pack 4.10.22_1528_openshift. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Cluster health image | v1.3.8 | v1.3.9 | Updated Go dependencies and to use Go version 1.18.4. Fixed minor typographical error in the add-on daemonset not available health status. |
| Gateway-enabled cluster controller | 1680 | 1792 | Updated to use Go version 1.17.11. Updated image for CVE-2022-2097 and CVE-2022-29458. |
| IBM Calico extension | 980 | 997 | Updated to use Go version 1.17.11. Updated universal base image (UBI) to version 8.6-854 to resolve CVEs. |
| IBM Cloud Block Storage driver and plug-in | v2.2.6 | v2.2.8 | Updated to use Go version 1.18.3. Updated universal base image (UBI) to version 8.6-854 to resolve CVEs. Updated to support RHEL 8 worker nodes. |
| IBM Cloud Controller Manager | v1.23.7-7 | v1.23.8-7 | Updated Go dependencies and to use Go version 1.17.11. Updated to support the Kubernetes 1.23.8 release. |
| IBM Cloud File Storage for Classic plug-in and monitor | 410 | 412 | Updated to use Go version 1.18.3. Updated universal base image (UBI) to version 8.6-854 to resolve CVEs. Improved Kubernetes resource watch configuration. |
| IBM Cloud RBAC Operator | 8c96932 | 0a187a4 | Updated universal base image (UBI) to resolve CVEs. |
| Key Management Service provider | v2.5.6 | v2.5.7 | Updated Go dependencies and to use Go version 1.18.4. |
| Load balancer and load balancer monitor for IBM Cloud Provider | 1998 | 2058 | Updated image for CVE-2022-2097. |
| Red Hat OpenShift on IBM Cloud. | 4.10.17 | 4.10.22 | See the Red Hat OpenShift on IBM Cloud release notes. |
| OpenVPN client | 2.5.6-r0-IKS-592 | 2.5.6-r1-IKS-629 | Updated Alpine base image to version 3.16 to resolve CVEs. Updated OpenVPN to version 2.5.6-r1. |
| OpenVPN Operator image | v1.4.6 | v1.4.7 | Updated Ansible operator base image to version v1.22.1 to resolve CVEs. |
| OpenVPN server | 2.5.6-r0-IKS-591 | 2.5.6-r1-IKS-628 | Updated Alpine base image to version 3.16 to resolve CVEs. Updated OpenVPN to version 2.5.6-r1. |
| Portieris admission controller | v0.12.4 | v0.12.5 | See the Portieris admission controller release notes. |
| Red Hat OpenShift Control Plane Operator | v4.10.0-20220614 | v4.10.0-20220712 | See the Red Hat OpenShift toolkit release notes. |
| Red Hat OpenShift Metrics Server | v4.10.0-20220614 | v4.10.0-20220712 | See the Red Hat OpenShift toolkit release notes. |
| Red Hat OpenShift toolkit | 4.10.0+20220614 | 4.10.0+20220712 | See the Red Hat OpenShift toolkit release notes. |
Change log for worker node fix pack 4.10.21_1527_openshift, released 18 July 2022
The following table shows the changes that are in the worker node fix pack 4.10.21_1527_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| RHEL 7 Packages | 3.10.0-1160.66.1 | 3.10.0-1160.71.1 | Worker node package updates for CVE-2020-26116, CVE-2020-26137, CVE-2021-3177, CVE-2022-0391, CVE-2022-1729, CVE-2022-1966. |
| Red Hat OpenShift on IBM Cloud. | 4.10.20 | 4.10.21 | For more information, see the change log. |
Change log for worker node fix pack 4.10.20_1526_openshift, released 11 July 2022
The following table shows the changes that are in the worker node fix pack 4.10.20_1526_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| General | N/A | N/A | Fix to address a bug that occurred if you used the persistent volume claim NFS v3 storage. |
Change log for worker node fix pack 4.10.20_1525_openshift, released 05 July 2022
The following table shows the changes that are in the worker node fix pack 4.10.20_1525_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| Red Hat OpenShift on IBM Cloud. | 4.10.18 | 4.10.20 | For more information, see the change log. |
Change log for master fix pack 4.10.17_1524_openshift, released 22 June 2022
The following table shows the changes that are in the master fix pack 4.10.17_1524_openshift. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Cluster health image | v1.3.7 | v1.3.8 | Updated Go to version 1.17.11 and also updated the dependencies. |
| IBM Cloud Block Storage driver and plug-in | v2.2.4 | v2.2.6 | Bug fixes for the driver installation. Block plugin base images were updated to ubi: 8.6-751.1655117800 for CVE-2022-1271 |
| IBM Cloud Controller Manager | v1.23.7-4 | v1.23.7-7 | Update module github.com/IBM/vpc-go-sdk to v0.20.0. Update module github.com/stretchr/testify to v1.7.2. |
| Key Management Service provider | v2.5.5 | v2.5.6 | Updated Go to version 1.17.11 and also updated the dependencies. |
| OpenVPN Operator image | v1.4.5 | v1.4.6 | Update base image to version v1.22.0 to resolve CVEs. |
| Red Hat OpenShift on IBM Cloud. | 4.10.15 | 4.10.17 | See the Red Hat OpenShift on IBM Cloud release notes. |
| Red Hat OpenShift on IBM Cloud Control Plane Operator | v4.10.0-20220509 | v4.10.0-20220614 | See the Red Hat OpenShift toolkit release notes. |
| Red Hat OpenShift Metrics Server and toolkit | v4.10.0-20220509 | v4.10.0-20220614 | See the Red Hat OpenShift toolkit release notes. |
Change log for worker node fix pack 4.10.18_1523_openshift, released 20 June 2022
The following table shows the changes that are in the worker node fix pack 4.10.18_1523_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| RHEL 7 Packages | N/A | N/A | Worker node package updates for CVE-2022-1271. |
| HAProxy | 468c09 | 04f862 | CVE-2022-1271. |
| Red Hat OpenShift on IBM Cloud. | 4.10.16 | 4.10.18 | For more information, see the change log. |
Change log for worker node fix pack 4.10.16_1521_openshift, released 7 June 2022
The following table shows the changes that are in the worker node fix pack 4.10.16_1521_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| RHEL 7 Packages | N/A | N/A | Worker node package updates for CVE-2022-24903. |
| Red Hat OpenShift on IBM Cloud. | 4.10.14 | 4.10.16 | For more information, see the change log. |
Change log for master fix pack 4.10.15_1520_openshift, released 3 June 2022
The following table shows the changes that are in the master fix pack 4.10.15_1520_openshift. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Cluster health image | v1.3.6 | v1.3.7 | Updated Go to version 1.17.10 and also updated the dependencies. Update registry base image version to 104 |
| IBM Calico extension | 976 | 980 | Updated to use Go version 1.17.10. Updated minimal UBI to version 8.5. |
| IBM Cloud Block Storage driver and plug-in | v2.2.3 | v2.2.4 | Updated universal base image (UBI) to version 8.6-751 to resolve CVEs. |
| IBM Cloud Controller Manager | v1.23.6-2 | v1.23.7-4 | Updated to support the Kubernetes 1.23.7 release and Go version 1.17.10 |
| IBM Cloud File Storage for Classic plug-in and monitor | 408 | 410 | Updated universal base image (UBI) to version 8.6-751 to resolve CVEs. |
| IBM Cloud RBAC Operator | 8c8c82b | 8c96932 | Updated Go to version 1.18.1 |
| Key Management Service provider | v2.5.4 | v2.5.5 | Updated Go to version 1.17.10 and updated the golang dependencies. |
| Load balancer and load balancer monitor for IBM Cloud Provider | 1916 | 1998 | Updated Go to version 1.17.10 and updated dependencies. |
| OpenVPN Operator image | v1.4.4 | v1.4.5 | Updated base image to v1.21.0 for CVE remediation. |
| Red Hat OpenShift on IBM Cloud. | 4.10.12 | 4.10.15 | See the Red Hat OpenShift on IBM Cloud release notes. |
Change log for worker node fix pack 4.10.14_1519_openshift, released 23 May 2022
The following table shows the changes that are in the worker node fix pack 4.10.14_1519_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| RHEL 7 Packages | 3.10.0-1160.62.1 | 3.10.0-1160.66.1 | Worker node kernel & package updates for CVE-2018-25032, CVE-2022-1271, CVE-2022-0492. |
| Red Hat OpenShift on IBM Cloud. | 4.10.12 | 4.10.14 | For more information, see the change log. |
| HA proxy | 36b0307 | 468c09 | CVE-2021-3634. |
Change log for worker node fix pack 4.10.12_1517_openshift, released 09 May 2022
The following table shows the changes that are in the worker node fix pack 4.10.12_1517_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| RHEL 7 Packages | N/A | N/A | N/A |
| Red Hat OpenShift on IBM Cloud. | 4.10.10 | 4.10.12 | For more information, see the change log. |
| HAProxy | f53b22 | 36b030 | CVE-2022-1271, CVE-2022-1154, CVE-2018-25032. |
Change log for fix pack 4.10.9_1515_openshift (master) and 4.10.10_1516_openshift (worker node), released 27 April 2022
| Component | Previous | Current | Description |
|---|---|---|---|
| Calico | v3.21.5 | v3.22.2 | See the Calico release notes. |
| Tigera Operator | v1.23.7 | v1.25.7 | See the Tigera Operator release notes. |
| IBM Cloud Controller Manager | v1.22.8-7 | v1.23.5-9 | Updated to support the Kubernetes 1.23.5 release and to use Go version 1.17.8. Classic load balancers are updated to improve availability during updates. In addition, creating a mixed protocol load balancer
is not supported. |
| OpenShift (master) | 4.9.28 | 4.10.9 | See the OpenShift release notes. |
| OpenShift (worker) | 4.9.29 | 4.10.10 | See the OpenShift release notes. Worker nodes are configured to pull images in parallel. |
| Red Hat OpenShift Control Plane Operator | v4.9.0-20220412 | v4.10.0-20220420 | See the Red Hat OpenShift toolkit release notes. |
| Red Hat OpenShift configuration | N/A | N/A | Updated the feature gate configuration. |
| Red Hat OpenShift Metrics Server | v4.9.0-20220412 | v4.10.0-20220420 | See the Red Hat OpenShift toolkit release notes. |
| Red Hat OpenShift toolkit | 4.9.0+20220412 | 4.10.0+20220420 | See the Red Hat OpenShift toolkit release notes. |