Version 4.12 change log

View information of version changes for major, minor, and patch updates that are available for your Red Hat® OpenShift® on IBM Cloud® clusters that run version 4.12. Changes include updates to Red Hat OpenShift, Kubernetes, and IBM Cloud Provider components.

Overview

Unless otherwise noted in the change logs, the IBM Cloud provider version enables Red Hat OpenShift APIs and features that are at beta. Red Hat OpenShift alpha features are disabled and subject to change.

Check the Security Bulletins on IBM Cloud Status for security vulnerabilities that affect Red Hat OpenShift on IBM Cloud. You can filter the results to view only Kubernetes Service security bulletins that are relevant to Red Hat OpenShift on IBM Cloud. Change log entries that address other security vulnerabilities but don't include an IBM security bulletin are for vulnerabilities that are not known to affect Red Hat OpenShift on IBM Cloud in normal usage. If you run privileged containers, run commands on the workers, or execute untrusted code, then you might be at risk.

Master patch updates are applied automatically. Worker node patch updates can be applied by reloading or updating the worker nodes. For more information about major, minor, and patch versions and preparation actions between minor versions, see Red Hat OpenShift versions.

Change log for master fix pack 4.12.55_1588_openshift, released 24 April 2024

The following table shows the changes that are in the master fix pack 4.12.55_1588_openshift. Master patch updates are applied automatically.

Changes since version 4.12.51_1585_openshift
Component	Previous	Current	Description
Cluster health image	v1.4.8	v1.5.4	New version contains updates and security fixes.
etcd	v3.5.12	v3.5.13	See the etcd release notes.
IBM Cloud Controller Manager	v1.25.16-33	v1.25.16-42	New version contains updates and security fixes.
IBM Cloud RBAC Operator	bd30030	4c5d156	New version contains updates and security fixes.
Key Management Service provider	v2.8.8	v2.8.9	New version contains updates and security fixes.
Load balancer and load balancer monitor for IBM Cloud Provider	2831	2867	New version contains updates and security fixes.
OpenVPN client	2.6.8-r0-IKS-110	2.6.8-r0-IKS-114	New version contains updates and security fixes.
OpenVPN server	2.6.8-r0-IKS-109	2.6.8-r0-IKS-113	New version contains updates and security fixes.
OpenVPN Operator image	v1.5.13	v1.5.14	New version contains updates and security fixes.
Portieris admission controller	v0.13.12	v0.13.13	See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud.	4.12.51	4.12.55	See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit	4.12.0+20240208	4.12.0+20240412	See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.12.54_1587_openshift, released 8 April 2024

The following table shows the changes that are in the worker node fix pack 4.12.54_1587_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.53_1586_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.12.53	4.12.54	For more information, see the change logs.
RHEL 8 Packages	4.18.0-513.18.1.el8_9	4.18.0-513.24.1.el8_9	Worker node and kernel packages for RHSA-2024:1607, CVE-2021-33631, CVE-2022-38096, CVE-2023-51042, CVE-2023-6546, CVE-2023-6931, CVE-2024-0565, CVE-2024-1086, RHSA-2024:1601, CVE-2023-28322, CVE-2023-38546, CVE-2023-46218, RHSA-2024:1615, CVE-2023-52425, RHSA-2024:1610, CVE-2022-48624.
HAProxy	512b32a	295dba8	Security fixes for CVE-2023-28322, CVE-2023-38546, CVE-2023-46218, CVE-2023-52425.
CRI-O	1.25.5-8	1.25.5-8	N/A

Change log for master fix pack 4.12.51_1585_openshift, released 27 March 2024

The following table shows the changes that are in the master fix pack 4.12.51_1585_openshift. Master patch updates are applied automatically.

Changes since version 4.12.49_1581_openshift
Component	Previous	Current	Description
IBM Cloud Block Storage driver and plug-in	v2.4.18	v2.4.19	https://github.ibm.com/alchemy-containers/armada-storage-block-plugin
IBM Calico extension	1534	1537	New version contains security fixes.
Cluster health image	v1.4.7	v1.4.8	New version contains updates and security fixes.
IBM Cloud Controller Manager	v1.25.16-24	v1.25.16-33	New version contains updates and security fixes.
Key Management Service provider	v2.8.7	v2.8.8	New version contains updates and security fixes.
Load balancer and load balancer monitor for IBM Cloud Provider	2807	2831	https://github.ibm.com/alchemy-containers/armada-keepalived
Red Hat OpenShift on IBM Cloud.	4.12.49	4.12.51	https://docs.openshift.com/container-platform/
OpenVPN Operator image	v1.4.33	v1.5.13	New version contains updates and security fixes.
Portieris admission controller	v0.13.11	v0.13.12	See the Portieris admission controller release notes.
IBM Cloud File Storage for Classic plug-in and monitor	441	442	New version contains updates and security fixes.

Change log for worker node fix pack 4.12.53_1586_openshift, released 25 March 2024

The following table shows the changes that are in the worker node fix pack 4.12.53_1586_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.51_1583_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.12.51	4.12.53	For more information, see the change logs.
RHEL 8 Packages	4.18.0-513.18.1.el8_9	4.18.0-513.18.1.el8_9	N/A
CRI-O	1.25.5-8	1.25.5-8	N/A
HAProxy	512b32	512b32	N/A

Change log for worker node fix pack 4.12.51_1583_openshift, released 13 March 2024

The following table shows the changes that are in the worker node fix pack 4.12.51_1583_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.50_1582_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.12.50	4.12.51	For more information, see the change logs.
RHEL 8 Packages	4.18.0-513.18.1.el8_9	4.18.0-513.18.1.el8_9	N/A
HAProxy	a13673	512b32	N/A
CRI-O	1.25.5-8	1.25.5-8	N/A

Change log for master fix pack 4.12.49_1581_openshift, released 28 February 2024

The following table shows the changes that are in the master fix pack 4.12.49_1581_openshift. Master patch updates are applied automatically.

Changes since version 4.12.46_1576_openshift
Component	Previous	Current	Description
Cluster health image	v1.4.6	v1.4.7	New version contains updates and security fixes.
etcd	v3.5.11	v3.5.12	See the etcd release notes.
IBM Calico extension	1525	1534	New version contains security fixes.
IBM Cloud Block Storage driver and plug-in	v2.4.14	v2.4.18	New version contains updates and security fixes.
IBM Cloud Controller Manager	v1.25.16-17	v1.25.16-24	New version contains updates and security fixes.
IBM Cloud File Storage for Classic plug-in and monitor	439	441	New version contains updates and security fixes.
IBM Cloud RBAC Operator	7185ea1	bd30030	New version contains updates and security fixes.
Key Management Service provider	v2.8.6	v2.8.7	New version contains updates and security fixes.
Load balancer and load balancer monitor for IBM Cloud Provider	2789	2807	New version contains updates and security fixes.
OpenVPN client	2.6.8-r0-IKS-108	2.6.8-r0-IKS-110	New version contains updates and security fixes.
OpenVPN server	2.6.8-r0-IKS-107	2.6.8-r0-IKS-109	New version contains updates and security fixes.
OpenVPN Operator image	v1.4.32	v1.4.33	New version contains updates and security fixes.
Red Hat OpenShift on IBM Cloud.	4.12.46	4.12.49	See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit	v4.12.0-20240104	v4.12.0-20240208	See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.12.50_1582_openshift, released 26 February 2024

The following table shows the changes that are in the worker node fix pack 4.12.50_1582_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.49_1578_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.12.49	4.12.50	For more information, see the change logs.
RHEL 8 Packages	4.18.0-513.11.1.el8_9	4.18.0-513.18.1.el8_9	Package updates for RHSA-2024:0897, CVE-2022-3545, CVE-2022-41858, CVE-2023-1073, CVE-2023-1838, CVE-2023-2166, CVE-2023-2176, CVE-2023-40283, CVE-2023-45871, CVE-2023-4623, CVE-2023-46813, CVE-2023-4921, CVE-2023-5717, CVE-2023-6356, CVE-2023-6535, CVE-2023-6536, CVE-2023-6606, CVE-2023-6610, CVE-2023-6817, CVE-2024-0646, RHSA-2024:0768, CVE-2020-28241, RHSA-2024:0889, CVE-2019-13224, CVE-2019-16163, CVE-2019-19012, CVE-2019-19203, CVE-2019-19204, RHSA-2024:0811, CVE-2023-28486, CVE-2023-28487, CVE-2023-42465.

Change log for worker node fix pack 4.12.49_1578_openshift, released 12 February 2024

The following table shows the changes that are in the worker node fix pack 4.12.49_1578_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.47_1577_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.12.47	4.12.49	For more information, see the change logs.
RHEL 8 Packages	4.18.0-477.27.1.el8_8	4.18.0-513.11.1.el8_9	Package updates for RHSA-2024:0752, CVE-2024-21626, RHSA-2023:7549, CVE-2022-45884, CVE-2022-45886, CVE-2022-45919, CVE-2023-1192, CVE-2023-2163, CVE-2023-3812, CVE-2023-5178, RHSA-2024:0113, CVE-2022-36402, CVE-2023-20569, CVE-2023-2162, CVE-2023-42753, CVE-2023-4622, CVE-2023-5633, RHSA-2023:7077, CVE-2021-43975, CVE-2022-28388, CVE-2022-3594, CVE-2022-3640, CVE-2022-38457, CVE-2022-40133, CVE-2022-40982, CVE-2022-42895, CVE-2022-45869, CVE-2022-45887, CVE-2022-4744, CVE-2023-0458, CVE-2023-0590, CVE-2023-0597, CVE-2023-1073, CVE-2023-1074, CVE-2023-1075, CVE-2023-1079, CVE-2023-1118, CVE-2023-1206, CVE-2023-1252, CVE-2023-1382, CVE-2023-1855, CVE-2023-1989, CVE-2023-1998, CVE-2023-2269, CVE-2023-23455, CVE-2023-2513, CVE-2023-26545, CVE-2023-28328, CVE-2023-28772, CVE-2023-30456, CVE-2023-31084, CVE-2023-3141, CVE-2023-31436, CVE-2023-3161, CVE-2023-3212, CVE-2023-3268, CVE-2023-33203, CVE-2023-33951, CVE-2023-33952, CVE-2023-35823, CVE-2023-35824, CVE-2023-35825, CVE-2023-3609, CVE-2023-3611, CVE-2023-3772, CVE-2023-4128, CVE-2023-4132, CVE-2023-4155, CVE-2023-4206, CVE-2023-4207, CVE-2023-4208, CVE-2023-4732, CVE-2024-0443, RHSA-2023:7877, CVE-2023-3446, CVE-2023-3817, CVE-2023-5678, RHSA-2023:7187, CVE-2023-4016, RHSA-2023:7112, CVE-2023-4641, RHSA-2023:7166, CVE-2023-22745, RHSA-2023:7177, CVE-2022-3094, RHSA-2023:7116, CVE-2022-4904, RHSA-2023:7207, CVE-2020-22217, CVE-2023-31130, RHSA-2023:6943, CVE-2023-1786, RHSA-2023:6939, CVE-2022-3064, CVE-2022-41723, CVE-2022-41724, CVE-2022-41725, CVE-2023-24534, CVE-2023-24536, CVE-2023-24537, CVE-2023-24538, CVE-2023-24539, CVE-2023-24540, CVE-2023-25173, CVE-2023-25809, CVE-2023-27561, CVE-2023-28642, CVE-2023-29400, CVE-2023-29406, CVE-2023-3978, RHSA-2024:0155, CVE-2023-5981, RHSA-2024:0627, CVE-2024-0553, RHSA-2023:6976, CVE-2020-12762, RHSA-2024:0628, CVE-2023-48795, RHSA-2024:0119, CVE-2023-39615, RHSA-2023:7109, CVE-2023-20569, RHSA-2024:0606, CVE-2023-48795, CVE-2023-51385, RHSA-2023:7174, CVE-2023-31486, RHSA-2023:6944, CVE-2022-48468, RHSA-2023:7096, CVE-2023-23931, RHSA-2023:7176, CVE-2007-4559, RHSA-2024:0116, CVE-2023-43804, CVE-2023-45803, RHSA-2023:7151, CVE-2007-4559, RHSA-2024:0114, CVE-2022-48560, CVE-2022-48564, RHSA-2024:0256, CVE-2023-27043, RHSA-2023:7034, CVE-2007-4559, CVE-2023-32681, RHSA-2023:7058, CVE-2022-41723, RHSA-2024:0647, CVE-2021-35937, CVE-2021-35938, CVE-2021-35939, RHSA-2024:0253, CVE-2023-7104, RHSA-2023:7057, CVE-2023-33460.

Change log for master fix pack 4.12.46_1576_openshift, released 31 January 2024

The following table shows the changes that are in the master fix pack 4.12.46_1576_openshift. Master patch updates are applied automatically.

Changes since version 4.12.44_1571_openshift
Component	Previous	Current	Description
Calico	v3.26.3	v3.26.4	See the Calico release notes.
Tigera Operator	v1.30.7	v1.30.9	See the Tigera Operator release notes.
Cluster health image	v1.4.5	v1.4.6	New version contains security fixes.
etcd	v3.5.10	v3.5.11	See the etcd release notes.
IBM Calico extension	1487	1525	New version contains security fixes.
IBM Cloud Controller Manager	v1.25.16-4	v1.25.16-17	New version contains updates and security fixes.
IBM Cloud RBAC Operator	e544e35	7185ea1	New version contains updates and security fixes.
Key Management Service provider	v2.8.5	v2.8.6	New version contains updates and security fixes.
Load balancer and load balancer monitor for IBM Cloud Provider	2767	2789	New version contains updates and security fixes.
OpenVPN client	2.6.7-r0-IKS-93	2.6.8-r0-IKS-108	New version contains updates and security fixes.
OpenVPN server	2.6.7-r0-IKS-92	2.6.8-r0-IKS-107	New version contains updates and security fixes.
OpenVPN Operator image	v1.4.31	v1.4.32	New version contains updates and security fixes.
Portieris admission controller	v0.13.10	v0.13.11	See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud.	4.12.44	4.12.46	See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit	v4.12.0-20231102	v4.12.0-20240104	See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.12.47_1577_openshift, released 29 January 2024

The following table shows the changes that are in the worker node fix pack 4.12.47_1577_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.46_1575_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.12.46	4.12.47	For more information, see the change logs.
Rhel8 Packages	4.18.0-477.27.1.el8_8	4.18.0-477.27.1.el8_8	N/A
HAProxy	e105dc	a13673	Security fixes for CVE-2023-7104, CVE-2023-27043.

Change log for worker node fix pack 4.12.46_1575_openshift, released 16 January 2024

The following table shows the changes that are in the worker node fix pack 4.12.46_1575_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.45_1574_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud	4.12.45	4.12.46	For more information, see the change logs.
RHEL 8 Packages	N/A	N/A	N/A
Haproxy	3060b0	e105dc	CVE-2023-39615, CVE-2023-5981, CVE-2022-48560, CVE-2022-48564.

Change log for worker node fix pack 4.12.45_1574_openshift, released 02 January 2024

The following table shows the changes that are in the worker node fix pack 4.12.45_1574_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.45_1573_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud	4.12.45	4.12.45	N/A
RHEL 8 Packages	4.18.0-477.27.1.el8_8	4.18.0-477.27.1.el8_8	N/A

Change log for worker node fix pack 4.12.45_1573_openshift, released 18 December 2023

The following table shows the changes that are in the worker node fix pack 4.12.45_1573_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.44_1572_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud	4.12.44	4.12.45	For more information, see the change logs.
RHEL 8 Packages	N/A	N/A	N/A

Change log for master fix pack 4.12.44_1571_openshift, released 06 December 2023

The following table shows the changes that are in the master fix pack 4.12.44_1571_openshift. Master patch updates are applied automatically.

Changes since version 4.12.40_1568_openshift
Component	Previous	Current	Description
IBM Cloud Block Storage driver and plug-in	v2.4.12	v2.4.14	New version contains updates and security fixes.
IBM Cloud Controller Manager	v1.25.15-4	v1.25.16-4	New version contains updates and security fixes.
Load balancer and Load balancer monitor for IBM Cloud Provider	2731	2767	New version contains updates and security fixes.
OpenVPN client	2.6.5-r0-IKS-77	2.6.7-r0-IKS-93	New version contains updates and security fixes.
OpenVPN server	2.6.5-r0-IKS-76	2.6.7-r0-IKS-92	New version contains updates and security fixes.
OpenVPN Operator image	v1.4.30	v1.4.31	New version contains updates and security fixes.
IBM Cloud File Storage for Classic plug-in and monitor	438	439	New version contains updates and security fixes.
Red Hat OpenShift on IBM Cloud.	4.12.40	4.12.44	See the Red Hat OpenShift on IBM Cloud release notes. Resolves CVE-2023-5408. For more information, see the IBM security bulletin.

Change log for worker node fix pack 4.12.44_1572_openshift, released 04 December 2023

The following table shows the changes that are in the worker node fix pack 4.12.44_1572_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.42_1569_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.12.42	4.12.44	For more information, see the change logs.
RHEL 8 Packages	N/A	N/A	N/A

Change log for worker node fix pack 4.12.42_1569_openshift, released 29 November 2023

The following table shows the changes that are in the worker node fix pack 4.12.42_1569_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.41_1567_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.12.41	4.12.42	For more information, see the change logs.
CRI-O	1.25.4	1.25.4	Unqualified image registry aliases updated for `address-parsing-service`, `admin-site`, `apache-tika`, `auto-update-service`, `config-service`, `data-integration-service`, `dataprovider-manager-service`, `data-service`, `documents-service`, `gate-service`, `gateway-service`, `icij-db`, `identity-service`, `internet-access-service`, `mongo`, `notes-service`, `public-api-service`, `router`, and `search-service`.. However, using short names are not supported due to security risks, https://access.redhat.com/solutions/6178442.
RHEL 8 Packages	N/A	N/A	N/A

Change log for master fix pack 4.12.40_1568_openshift, released 15 November 2023

The following table shows the changes that are in the master fix pack 4.12.40_1568_openshift. Master patch updates are applied automatically.

Changes since version 4.12.37_1565_openshift
Component	Previous	Current	Description
Cluster health image	v1.4.4	v1.4.5	New version contains updates and security fixes.
etcd	v3.5.9	v3.5.10	See the etcd release notes.
IBM Cloud Controller Manager	v1.25.14-8	v1.25.15-4	New version contains updates and security fixes.
IBM Cloud File Storage for Classic plug-in and monitor	435	438	New version contains updates and security fixes.
IBM Cloud RBAC Operator	f0d3265	e544e35	New version contains updates and security fixes.
Key Management Service provider	v2.8.4	v2.8.5	New version contains updates and security fixes.
Load balancer and load balancer monitor for IBM Cloud Provider	2681	2731	New version contains updates and security fixes.
OpenVPN client	2.6.5-r0-IKS-66	2.6.5-r0-IKS-77	New version contains updates and security fixes.
OpenVPN server	2.6.5-r0-IKS-57	2.6.5-r0-IKS-76	New version contains updates and security fixes.
OpenVPN Operator image	v1.4.28	v1.4.30	New version contains updates and security fixes.
Portieris admission controller	v0.13.8	v0.13.10	See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud.	4.12.37	4.12.40	Resolves CVE-2023-39325 and CVE-2023-44487. For more information, see the IBM security bulletin. See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit	v4.12.0-20231010	v4.12.0-20231102	See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.12.41_1567_openshift, released 08 November 2023

The following table shows the changes that are in the worker node fix pack 4.12.41_1567_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.39_1566_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud	4.12.39	4.12.41	For more information, see the change logs.

Change log for master fix pack 4.12.37_1565_openshift, released 25 October 2023

The following table shows the changes that are in the master fix pack 4.12.37_1565_openshift. Master patch updates are applied automatically.

Changes since version 4.12.26_1562_openshift
Component	Previous	Current	Description
Calico	v3.26.1	v3.26.3	See the Calico release notes.
Tigera Operator	v1.30.5	v1.30.7	See the Tigera Operator release notes.
Cluster health image	v1.4.2	v1.4.4	New version contains updates and security fixes.
IBM Calico extension	1390	1487	New version contains security fixes.
IBM Cloud Block Storage driver and plug-in	v2.4.10	v2.4.12	New version contains updates and security fixes.
IBM Cloud Controller Manager	v1.25.14-1	v1.25.14-8	New version contains updates and security fixes. The logic for the `service.kubernetes.io/ibm-load-balancer-cloud-provider-vpc-idle-connection-timeout` annotation has changed. The default idle timeout is dependent on your account settings. Usually, this value is `50`. However, some allowlisted accounts have larger timeout settings. If you don't set the annotation, your load balancers use the timeout setting in your account. You can explicitly specify the timeout by setting this annotation.
IBM Cloud RBAC Operator	4e2f346	f0d3265	New version contains updates and security fixes.
Key Management Service provider	v2.8.2	v2.8.4	New version contains updates and security fixes.
OpenVPN Operator image	v1.4.27	v1.4.28	New version contains updates and security fixes.
Portieris admission controller	v0.13.6	v0.13.8	See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud.	4.12.26	4.12.37	See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit	v4.12.0-20230811	v4.12.0-20231010	See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.12.39_1566_openshift, released 23 October 2023

The following table shows the changes that are in the worker node fix pack 4.12.39_1566_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.36_1564_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.12.36	4.12.39	For more information, see the change logs.
RHEL 8 Packages	N/A	N/A	Worker node package update for CVE-2023-44487.

Change log for worker node fix pack 4.12.36_1564_openshift, released 9 October 2023

The following table shows the changes that are in the worker node fix pack 4.12.36_1564_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.34_1563_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.12.34	4.12.36	For more information, see the change log.
RHEL 8 Packages	N/A	N/A	Worker node package updates for CVE-2023-3341, CVE-2023-4527, CVE-2007-4559, CVE-2023-4806, CVE-2023-4813, CVE-2023-4911.

Change log for worker node fix pack 4.12.34_1563_openshift, released 27 September 2023

The following table shows the changes that are in the worker node fix pack 4.12.34_1563_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.34_1557_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.12.34	4.12.34	No Change
RHEL 8 Packages	4.18.0-477.21.1.el8_8	4.18.0-477.27.1.el8_8	Worker node kernel & package updates for CVE-2023-2002, CVE-2023-3090, CVE-2023-3390, CVE-2023-3776, CVE-2023-4004, CVE-2023-20593, CVE-2023-29491, CVE-2023-30630, CVE-2023-35001, CVE-2023-35788.

Change log for master fix pack 4.12.26_1562_openshift, released 20 September 2023

The following table shows the changes that are in the master fix pack 4.12.26_1562_openshift. Master patch updates are applied automatically.

Changes since version 4.12.26_1555_openshift
Component	Previous	Current	Description
Calico	v3.25.1	v3.26.1	See the Calico release notes.
Tigera Operator	v1.29.4	v1.30.5	See the Tigera Operator release notes.
Cluster health image	v1.3.24	v1.4.2	Updated `Go` to version `1.20.8` and updated dependencies. Updated to new base image.
IBM Cloud Block Storage driver and plug-in	v2.4.5	v2.4.10	Updated `Go dependencies`. Updated to newer UBI base image.
IBM Cloud Controller Manager	v1.25.14-4	v1.25.14-1	Updated to support the `Kubernetes 1.25.14` release. Updated `Go` to version `1.20.8` and updated `Go dependencies`.
IBM Cloud File Storage for Classic plug-in and monitor	434	435	Updated `Go` to version `1.20.6` and updated dependencies. Updated to newer UBI base image.
Key Management Service provider	v2.7.3	v2.8.2	Updated `Go dependencies`. Changed to new base image.
Load balancer and load balancer monitor for IBM Cloud Provider	2631	2681	Updated `Go` to version `1.19.12` and updated `Go dependencies`.

Change log for worker node fix pack 4.12.32_1557_openshift, released 12 September 2023

The following table shows the changes that are in the worker node fix pack 4.12.32_1557_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.30_1556_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.12.30	4.12.32	For more information, see the change log.
RHEL 8 Packages	N/A	N/A	Package updates for CVE-2022-40982, CVE-2022-41804, CVE-2023-23908.

Change log for master fix pack 4.12.26_1555_openshift, released 30 August 2023

The following table shows the changes that are in the master fix pack 4.12.26_1555_openshift. Master patch updates are applied automatically.

Changes since version 4.12.24_1552_openshift
Component	Previous	Current	Description
Cluster health image	v1.3.23	v1.3.24	Updated `Go` to version `1.19.12` and updated dependencies. Updated base image version to 378.
IBM Cloud Controller Manager	v1.25.12-1	v1.25.12-4	Updated `Go` dependencies to resolve a CVE.
IBM Cloud File Storage for Classic plug-in and monitor	433	434	Updated `Go` to version `1.20.6` and updated dependencies. Updated to newer UBI base image.
Key Management Service provider	v2.7.2	v2.7.3	Updated `Go` dependencies.
OpenVPN client	2.6.5-r0-IKS-41-amd64	2.6.5-r0-IKS-66-amd64	Updated `openvpn` components to fix CVEs.
OpenVPN server	2.6.5-r0-IKS-40-amd64	2.6.5-r0-IKS-57-amd64	Updated `openvpn` components to fix CVEs.
OpenVPN Operator image	v1.4.26	v1.4.27	Updated `ansible-operator` version to `1.30.0`
Portieris admission controller	v0.13.5	v0.13.6	See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud.	4.12.24	4.12.26	See the change log for more information.
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit	v4.12.0-20230710	v4.12.0-20230811	See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.12.30_1556_openshift, released 28th August 2023

The following table shows the changes that are in the worker node fix pack 4.12.30_1556_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.28_1554_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.12.28	4.12.30	For more information, see the change log.

Change log for worker node fix pack 4.12.28_1554_openshift, released 15th August 2023

The following table shows the changes that are in the worker node fix pack 4.12.28_1554_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.26_1553_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.12.26	4.12.28	For more information, see the change log.
RHEL 7 Packages	3.10.0-1160.92.1.el7	3.10.0-1160.95.1.el7	Worker node kernel & package updates for CVE-2023-38408, CVE-2022-3564.
RHEL 8 Packages	4.18.0-477.15.1.el8_8	4.18.0-477.21.1.el8_8	Worker node kernel & package updates for CVE-2022-42896, CVE-2023-1281, CVE-2023-1829, CVE-2023-2124, CVE-2023-2194, CVE-2023-2235, CVE-2023-2602, CVE-2023-2603, CVE-2023-27536, CVE-2023-28321, CVE-2023-28484, CVE-2023-29469, CVE-2023-32681, CVE-2023-34969, CVE-2023-38408.

Change log for worker node fix pack 4.12.26_1553_openshift, released 1 August 2023

The following table shows the changes that are in the worker node fix pack 4.12.26_1553_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.24_1551_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.12.24	4.12.26	For more information, see the change logs.
RHEL 7 Packages	N/A	N/A	Worker node package updates for CVE-2022-3564, CVE-2023-2828, CVE-2023-32233.
RHEL 8 Packages	N/A	N/A	Worker node package update for CVE-2023-2828.

Change log for master fix pack 4.12.24_1552_openshift, released 28 July 2023

The following table shows the changes that are in the master fix pack 4.12.24_1552_openshift. Master patch updates are applied automatically.

Changes since version 4.12.20_1549_openshift
Component	Previous	Current	Description
Cluster health image	v1.3.21	v1.3.23	Updated `Go` to version `1.19.11` and updated `Go` dependencies. Updated UBI base image.
IBM Cloud Controller Manager	v1.25.11-1	v1.25.12-1	Updated to support the Kubernetes `1.25.12` release. Updated `Go` dependencies and to `Go` version `1.20.6`.
Key Management Service provider	v2.6.7	v2.7.2	Updated `Go` to version `1.19.11` and updated `Go` dependencies. Updated UBI base image.
Load balancer and load balancer monitor for IBM Cloud Provider	2584	2631	Updated `Go` to version `1.19.10` and updated `Go` dependencies. Updated Alpine base image.
OpenVPN client	2.6.4-r0-IKS-34-amd64	2.6.5-r0-IKS-41-amd64	Updated `OpenVPN` to version `2.6.5`.
OpenVPN Operator image	v1.4.25	v1.4.26	Updated based image to resolve CVE-2023-24329, CVE-2020-24736, CVE-2023-26604, CVE-2023-1667, and CVE-2023-2283.
OpenVPN server	2.6.4-r0-IKS-33-amd64	2.6.5-r0-IKS-40-amd64	Updated `OpenVPN` to version `2.6.5`.
Red Hat OpenShift on IBM Cloud.	4.12.20	4.12.24	Resolves CVE-2023-1260. For more information, see the IBM security bulletin. See the Red Hat OpenShift on IBM Cloud release notes..
Red Hat OpenShift on IBM Cloud Control Plane Operator and Metrics Server	v4.12.0-20230417	v4.12.0-20230710	See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud toolkit	4.12.0+20230417	4.12.0+20230710	See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.12.24_1551_openshift, released 17th July 2023

The following table shows the changes that are in the worker node fix pack 4.12.24_1551_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.22_1550_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud	4.12.22	4.12.24	See change log.
RHEL 7 Packages	N/A	N/A	N/A
RHEL 8 Packages	N/A	N/A	N/A

Change log for worker node fix pack 4.12.22_1550_openshift, released 03 July 2023

The following table shows the changes that are in the worker node fix pack 4.12.22_1550_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.21_1547_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.12.21	4.12.22	see change log.

Change log for master fix pack 4.12.20_1549_openshift, released 27 June 2023

The following table shows the changes that are in the master fix pack 4.12.20_1549_openshift. Master patch updates are applied automatically.

Changes since version 4.12.16_1545_openshift
Component	Previous	Current	Description
Tigera Operator	v1.29.3	v1.29.4	See the Tigera Operator release notes.
Cluster health image	v1.3.20	v1.3.21	Updated `Go` dependencies and to `Go` version `1.19.10`.
etcd	v3.5.8	v3.5.9	See the etcd release notes.
IBM Cloud Controller Manager	v1.25.9-7	v1.25.11-1	Updated to support the `Kubernetes 1.25.11` release. Updated `Go` dependencies and to `Go` version `1.19.10`. Updated `calicoctl` and `vpcctl`.
IBM Cloud File Storage for Classic plug-in and monitor	431	433	Updated `Go` to version `1.20.4`. Updated UBI base image.
Key Management Service provider	v2.6.6	v2.6.7	Updated `Go` dependencies and to `Go` version `1.19.10`.
Load balancer and load balancer monitor for IBM Cloud Provider	2486	2584	Updated `Go` dependencies and to `Go` version `1.19.9`. Updated base image.
Red Hat OpenShift on IBM Cloud	4.12.16	4.12.20	https://docs.openshift.com/container-platform/
OpenVPN client	2.5.8-r0-IKS-674-amd64	2.6.4-r0-IKS-34-amd64	Upgrade `openvpn` to version `2.6.4-r0`.
OpenVPN server	2.5.8-r0-IKS-673-amd64	2.6.4-r0-IKS-33-amd64	Upgrade `openvpn` to version `2.6.4-r0`.
OpenVPN Operator image	v1.4.23	v1.4.25	Updated OpenVPN configuration to provide shutdown grace period before terminating connections.

Change log for worker node fix pack 4.12.21_1547_openshift, released 19 June 2023

The following table shows the changes that are in the worker node fix pack 4.12.21_1547_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.19_1546_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.12.19	4.12.21	For more information, see the change logs.
RHEL 8 Packages	N/A	N/A	Worker node package updates for CVE-2023-32067,CVE-2023-24329.

Change log for worker node fix pack 4.12.19_1546_openshift, released 5 June 2023

The following table shows the changes that are in the worker node fix pack 4.12.19_1546_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.16_1544_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.12.16	4.12.19	For more information, see the change logs.
RHEL 7 Packages	N/A	N/A	N/A
RHEL 8 Packages	4.18.0-477.10.1.el8_8	4.18.0-477.13.1.el8_8	Worker node kernel & package updates for CVE-2023-22490, CVE-2023-23946, CVE-2023-25652, CVE-2023-25815, CVE-2023-29007, CVE-2023-32233.

Change log for master fix pack 4.12.16_1545_openshift, released 25 May 2023

The following table shows the changes that are in the master fix pack 4.12.16_1545_openshift. Master patch updates are applied automatically.

Changes since version 4.12.13_1541_openshift
Component	Previous	Current	Description
Cluster health image	v1.3.19	v1.3.20	Updated `Go` to version `1.19.9` and updated dependencies. Updated the base image. Resolved add-on health bugs.
IBM Cloud Controller Manager	v1.25.9-2	v1.25.9-7	Updated support of the Kubernetes 1.25.9 release. Updated Go dependencies. Key rotation.
Key Management Service provider	v2.6.5	v2.6.6	Updated `Go` to version `1.19.9` and updated dependencies.
OpenVPN client	2.6.4-r0-IKS-27	2.5.8-r0-IKS-674	Reverted to previous version.
OpenVPN server	2.6.4-r0-IKS-26	2.5.8-r0-IKS-673	Reverted to previous version.
Portieris admission controller	v0.13.4	v0.13.5	See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud.	4.12.13	4.12.16	For more information, see the change log.

Change log for worker node fix pack 4.12.16_1544_openshift, released 23 May 2023

The following table shows the changes that are in the worker node fix pack 4.12.16_1544_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.15_1542_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.12.15	4.12.16	For more information, see the change logs.
RHEL 8 Packages	4.18.0-425.19.2.el8_7	4.18.0-477.10.1.el8_8	Worker node kernel & package updates for CVE-2020-10735, CVE-2021-26341, CVE-2021-28861, CVE-2021-33655, CVE-2021-33656, CVE-2022-1462, CVE-2022-1679, CVE-2022-1705, CVE-2022-1789, CVE-2022-1962, CVE-2022-20141, CVE-2022-2196, CVE-2022-24765, CVE-2022-25265, CVE-2022-2663, CVE-2022-27664, CVE-2022-2795, CVE-2022-28131, CVE-2022-29187, CVE-2022-2928, CVE-2022-2929, CVE-2022-3028, CVE-2022-30594, CVE-2022-30629, CVE-2022-30630, CVE-2022-30631, CVE-2022-30632, CVE-2022-30633, CVE-2022-30635, CVE-2022-32148, CVE-2022-32189, CVE-2022-3239, CVE-2022-3522, CVE-2022-3524, CVE-2022-35252, CVE-2022-3564, CVE-2022-3566, CVE-2022-3567, CVE-2022-3619, CVE-2022-36227, CVE-2022-3623, CVE-2022-3625, CVE-2022-3628, CVE-2022-3707, CVE-2022-39188, CVE-2022-39189, CVE-2022-39253, CVE-2022-39260, CVE-2022-41218, CVE-2022-4129, CVE-2022-41674, CVE-2022-41717, CVE-2022-41973, CVE-2022-4269, CVE-2022-42703, CVE-2022-42720, CVE-2022-42721, CVE-2022-42722, CVE-2022-43552, CVE-2022-43750, CVE-2022-45061, CVE-2022-47929, CVE-2023-0394, CVE-2023-0461, CVE-2023-0778, CVE-2023-1195, CVE-2023-1582, CVE-2023-23454, CVE-2023-27535.
Haproxy	N/A	N/A	N/A

Change log for master fix pack 4.12.13_1541_openshift, released 2 May 2023

The following table shows the changes that are in the master fix pack 4.12.13_1540_openshift. Master patch updates are applied automatically.

Changes since version 4.12.11_1538_openshift
Component	Previous	Current	Description
etcd	v3.5.7	v3.5.8	See the etcd release notes.
IBM Cloud Controller Manager	v1.25.9-1	v1.25.9-2	Update `Go` dependencies
Red Hat OpenShift on IBM Cloud.	4.12.11	4.12.13	For more information, see the change log.

Change log for master fix pack 4.12.11_1539_openshift, released 27 April 2023

The following table shows the changes that are in the master fix pack 4.12.11_1538_openshift. Master patch updates are applied automatically.

Changes since version 4.12.7_1534_openshift
Component	Previous	Current	Description
Calico	v3.25.0	v3.25.1	See the Calico release notes.
Tigera Operator	v1.29.0	v1.29.3	See the Tigera Operator release notes.
Cluster health image	v1.3.17	v1.3.19	Updated `Go` to version `1.19.8` and updated dependencies.
IBM Calico extension	1366-amd64	1390-amd64	Eliminate IP syscall.
IBM Cloud Block Storage driver and plug-in	v2.4.0	v2.4.5	Updated universal base image (UBI) to resolve CVEs. Updated `Go` to version `1.19.8` and updated dependencies.
IBM Cloud Controller Manager	v1.25.8-1	v1.25.9-1	Updated to support the Kubernetes `1.25.9` release. Updated `Go` dependencies and to `Go` version `1.19.8`.
IBM Cloud File Storage for Classic plug-in and monitor	429	431	Updated `Go` to version `1.19.8` and updated dependencies. Update UBI base image.
Key Management Service provider	v2.6.4	v2.6.5	Updated `Go` to version `1.19.7` and updated dependencies.
Load balancer and load balancer monitor for IBM Cloud Provider	2420	2486	Updated `Go` to version `1.19.7` and updated dependencies.
Red Hat OpenShift on IBM Cloud.	4.12.7	4.12.11	For more information, see the change log.
Red Hat OpenShift on IBM Cloud configuration	N/A	N/A	Set proper topology spread constraints for the default Red Hat OpenShift on IBM Cloud image registry configuration used by classic clusters.
OpenVPN Operator image	v1.4.22	v1.4.23	Updated base image to resolve CVEs: CVE-2022-4304, CVE-2022-4450, CVE-2023-0215, CVE-2023-0286, CVE-2023-0361.
Portieris admission controller	v0.13.3	v0.13.4	See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator and Metrics Server	4.12.0-20230314	4.12.0-20230417	See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud toolkit	4.12.0+20230314	4.12.0+20230417	See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.12.15_1542_openshift, released 24 April 2023

The following table shows the changes that are in the worker node fix pack 4.12.15_1542_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.13_1539_openshift
Component	Previous	Current	Description
RHEL 8 Packages	N/A	N/A	N/A
Red Hat OpenShift on IBM Cloud.	4.12.13	4.12.15	See change logs.
Haproxy	N/A	N/A	N/A

Change log for worker node fix pack 4.12.13_1539_openshift, released 24 April 2023

The following table shows the changes that are in the worker node fix pack 4.12.13_1539_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.10_1536_openshift
Component	Previous	Current	Description
RHEL 8 Packages	N/A	N/A	N/A
Red Hat OpenShift on IBM Cloud.	4.12.10	4.12.13	See change logs.
Haproxy	N/A	N/A	N/A

Change log for worker node fix pack 4.12.10_1536_openshift, released 11 April 2023

The following table shows the changes that are in the worker node fix pack 4.12.10_1536_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.8_1535_openshift
Component	Previous	Current	Description
RHEL 8 Packages	4.18.0-425.13.1	4.18.0-425.19.2	Worker node kernel & package updates for CVE-2022-4269, CVE-2022-4304, CVE-2022-4378, CVE-2022-4450, CVE-2023-0215, CVE-2023-0266, CVE-2023-0286, CVE-2023-0361, CVE-2023-0386.
Red Hat OpenShift on IBM Cloud.	4.12.8	4.12.10	For more information, see the change log.
Haproxy	8398d1	8895ad	CVE-2023-0361.

Change log for master fix pack 4.12.7_1534_openshift, released 28 March 2023

The following table shows the changes that are in the master fix pack 4.12.7_1534_openshift. Master patch updates are applied automatically.

Changes since version 4.12.3_1530_openshift
Component	Previous	Current	Description
Cluster health image	v1.3.16	v1.3.17	Updated `Go` to version `1.19.7` and updated dependencies.
IBM Calico extension	1308-amd64	1366-amd64	Updated to resolve CVE-2023-23916.
IBM Cloud Block Storage driver and plug-in	v2.3.7	v2.4.0	Removed ExpandInUsePersistentVolumes feature gate.
IBM Cloud Controller Manager	v1.25.6-10	v1.25.8-1	Updated to support the `Kubernetes 1.25.8` release.
IBM Cloud File Storage for Classic plug-in and monitor	427	429	Updated universal base image (UBI) to resolve CVEs. Updated `Go` to version `1.19.6` and updated dependencies.
Key Management Service provider	v2.6.3	v2.6.4	Updated `Go` to version `1.19.7` and updated dependencies.
Load balancer and load balancer monitor for IBM Cloud Provider	2383	2420	Updated the image to resolve CVEs.
OpenVPN Operator image	v1.5.3	v1.4.22	Updated `ansible-operator` to `v1.28.0` to fix CVEs.
Red Hat OpenShift on IBM Cloud.	4.12.3	4.12.7	See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit	v4.12.0-20230220	v4.12.0-20230314	See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.12.8_1535_openshift, released 27 March 2023

The following table shows the changes that are in the worker node fix pack 4.12.8_1535_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.6_1531_openshift
Component	Previous	Current	Description
RHEL 8 Packages	N/A	N/A	N/A
Red Hat OpenShift on IBM Cloud.	4.12.6	4.12.8	For more information, see the change log.
Haproxy	af5031	8398d1	CVE-2023-23916.

Change log for worker node fix pack 4.12.6_1531_openshift, released 13 March 2023

The following table shows the changes that are in the worker node fix pack 4.12.6_1531_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.4_1528_openshift
Component	Previous	Current	Description
RHEL 8 Packages	N/A	N/A	Worker node package updates for CVE-2023-23916.
Red Hat OpenShift on IBM Cloud.	4.12.4	4.12.6	For more information, see the change log.

Change log for master fix pack 4.12.3_1530_openshift, released 2 March 2023

The following table shows the changes that are in the master fix pack 4.12.3_1530_openshift. Master patch updates are applied automatically.

Changes since version 4.12.2_1527_openshift
Component	Previous	Current	Description
Cluster health image	v1.3.15	v1.3.16	Updated `Go` dependencies and to `Go` version `1.19.6`. Updated universal base image (UBI) to resolve CVEs.
etcd	v3.5.6	v3.5.7	See the etcd release notes.
IBM Calico extension	1305-amd64	1308-amd64	Updated universal base image (UBI) to resolve CVE-2022-47629.
IBM Cloud Controller Manager	v1.25.6-8	v1.25.6-10	Updated `Go` dependencies. Updated `k8s.io/utils` digest to `a5ecb01`.
OpenVPN client	2.5.6-r1-IKS-648	2.5.8-r0-IKS-674-amd64	Remediate CVE-2023-0286, CVE-2022-4304, CVE-2022-4450, CVE-2023-0215.
OpenVPN server	2.5.6-r1-IKS-647	2.5.8-r0-IKS-673-amd64	Remediate CVE-2023-0286, CVE-2022-4304, CVE-2022-4450, CVE-2023-0215.
OpenVPN Operator image	v1.4.20	v1.5.2	Resolve issue with openvpn container restarts
Red Hat OpenShift on IBM Cloud.	4.12.2	4.12.3	See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator	v4.12.0-20230124	v4.12.0-20230220	See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud Metrics Server	v4.12.0-20230124	v4.12.0-20230220	See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud toolkit	4.12.0+20230124	4.12.0+20230220	See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.12.4_1528_openshift, released 27 February 2023

The following table shows the changes that are in the worker node fix pack 4.12.4_1528_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.2_1526_openshift
Component	Previous	Current	Description
RHEL 8 Packages	4.18.0-425.10.1	4.18.0-425.13.1	Worker node & kernel package updates for CVE-2020-10735, CVE-2021-28861, CVE-2022-2873, CVE-2022-40897, CVE-2022-41222, CVE-2022-43945, CVE-2022-4415, CVE-2022-45061, CVE-2022-48303.
Red Hat OpenShift	4.12.2	4.12.4	For more information, see the change log.
HAProxy	d38f89	af5031	CVE-2022-40897, CVE-2022-4415, CVE-2020-10735, CVE-2021-28861, CVE-2022-45061.

Change log for master fix pack 4.12.2_1527_openshift and worker node fix pack 4.12.2_1526_openshift, released 23 February 2023

The following table shows the changes that are in the master fix pack 4.12.2_1627_openshift and worker node fix pack 4.12.2_1526_openshift. Master patch updates are applied automatically. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since master fix pack 4.11.22_1540_openshift and worker fix pack 4.11.26_1542_openshift
Component	Previous	Current	Description
Calico	v3.23.5	v3.25.0	See the Calico release notes. Calico configuration now sets a BGP password. In addition, the `default` `FelixConfiguration` resource is updated to set `natPortRange` to `32768:65535` if not already set. For more information, see Why am I seeing SNAT port issues and egress connection failures?.
Tigera Operator	v1.27.17	v1.29.0	See the Tigera Operator release notes.
Gateway-enabled cluster controller	1902	1987	Image updated to resolve CVE-2022-41721, CVE-2022-41717, CVE-2022-4304, CVE-2022-4450, CVE-2023-0215, and CVE-2023-0286.
IBM Calico extension	1280-amd64	1305-amd64	Updated `Go` version to `1.19.5`.
IBM Cloud Block Storage driver and plug-in	v2.3.6	v2.3.7	Updated `Go` version to `1.18.9`. Updated universal base image (`UBI`) to version `8.7-1031.1675784874`.
IBM Cloud Controller Manager	v1.24.10-2	v1.25.6-8	Updated to support the Kubernetes `1.25.6` release. Updated `Go` dependencies and to `Go` version `1.19.5`.
IBM Cloud File Storage plug-in and monitor	425	427	Image updated to resolve CVE-2022-47629.
Key Management Service provider	v2.5.13	v2.6.3	Key Management Service (KMS) pod termination is delayed until the Kubernetes API server terminates. Updated `Go` dependencies and to `Go` version `1.19.6`.
Load balancer and load balancer monitor for IBM Cloud Provider	2325	2383	Updated `Go` dependencies and to `Go` version `1.19.5`.
Red Hat OpenShift (master)	4.11.22	4.12.2	See the Red Hat OpenShift release notes. Updated to resolve CVE-2022-3172. For more information, see the Security bulletin.
Red Hat OpenShift (worker node)	4.11.26	4.12.2	See the Red Hat OpenShift release notes.
Red Hat OpenShift Control Plane Operator	v4.11.0-20230123	v4.12.0-20230124	See the Red Hat OpenShift on IBM Cloud toolkit release notes.
OpenVPN Operator image	v1.4.13	v1.4.20	Updated `ansible-operator` base image to version `v1.26.1` to resolve CVEs.
Pause container image	3.8	3.9	See the pause container image release notes.
Portieris admission controller	v0.12.6	v0.13.3	See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud Metrics Server	v4.11.0-20230123	v4.12.0-20230124	See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud toolkit	4.11.0+20230123	4.12.0+20230124	See the Red Hat OpenShift on IBM Cloud toolkit release notes.