Version 4.13 change log

View information of version changes for major, minor, and patch updates that are available for your Red Hat® OpenShift® on IBM Cloud® clusters that run version 4.13. Changes include updates to Red Hat OpenShift, Kubernetes, and IBM Cloud Provider components.

Overview

Unless otherwise noted in the change logs, the IBM Cloud provider version enables Red Hat OpenShift APIs and features that are at beta. Red Hat OpenShift alpha features are disabled and subject to change.

Check the Security Bulletins on IBM Cloud Status for security vulnerabilities that affect Red Hat OpenShift on IBM Cloud. You can filter the results to view only Kubernetes Service security bulletins that are relevant to Red Hat OpenShift on IBM Cloud. Change log entries that address other security vulnerabilities but don't include an IBM security bulletin are for vulnerabilities that are not known to affect Red Hat OpenShift on IBM Cloud in normal usage. If you run privileged containers, run commands on the workers, or execute untrusted code, then you might be at risk.

Master patch updates are applied automatically. Worker node patch updates can be applied by reloading or updating the worker nodes. For more information about major, minor, and patch versions and preparation actions between minor versions, see Red Hat OpenShift versions.

Change log for master fix pack 4.13.39_1568_openshift, released 24 April 2024

The following table shows the changes that are in the master fix pack 4.13.39_1568_openshift. Master patch updates are applied automatically.

Changes since version 4.13.36_1565_openshift
Component	Previous	Current	Description
Cluster health image	v1.4.8	v1.5.4	New version contains updates and security fixes.
etcd	v3.5.12	v3.5.13	See the etcd release notes.
IBM Cloud Controller Manager	v1.26.15-1	v1.26.15-10	New version contains updates and security fixes.
IBM Cloud RBAC Operator	bd30030	4c5d156	New version contains updates and security fixes.
Key Management Service provider	v2.8.8	v2.8.9	New version contains updates and security fixes.
Load balancer and load balancer monitor for IBM Cloud Provider	2831	2867	New version contains updates and security fixes.
OpenVPN client	2.6.8-r0-IKS-110	2.6.8-r0-IKS-114	New version contains updates and security fixes.
OpenVPN server	2.6.8-r0-IKS-109	2.6.8-r0-IKS-113	New version contains updates and security fixes.
OpenVPN Operator image	v1.5.13	v1.5.14	New version contains updates and security fixes.
Portieris admission controller	v0.13.12	v0.13.13	See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud.	4.13.36	4.13.39	See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit	4.13.0+20240208	4.13.0+20240412	See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.13.38_1567_openshift, released 8 April 2024

The following table shows the changes that are in the worker node fix pack 4.13.38_1567_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.13.37_1566_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.13.37	4.13.38	For more information, see the change logs.
RHEL 8 Packages	4.18.0-513.18.1.el8_9	4.18.0-513.24.1.el8_9	Worker node and kernel packages for RHSA-2024:1607, CVE-2021-33631, CVE-2022-38096, CVE-2023-51042, CVE-2023-6546, CVE-2023-6931, CVE-2024-0565, CVE-2024-1086, RHSA-2024:1601, CVE-2023-28322, CVE-2023-38546, CVE-2023-46218, RHSA-2024:1615, CVE-2023-52425, RHSA-2024:1610, CVE-2022-48624.
HAProxy	512b32a	295dba8	Security fixes for CVE-2023-28322, CVE-2023-38546, CVE-2023-46218, CVE-2023-52425.
CRI-O	1.26.5-2	1.26.5-2	N/A

Change log for master fix pack 4.13.36_1565_openshift, released 27 March 2024

The following table shows the changes that are in the master fix pack 4.13.36_1565_openshift. Master patch updates are applied automatically.

Changes since version 4.13.33_1562_openshift
Component	Previous	Current	Description
Cluster health image	v1.4.7	v1.4.8	New version contains updates and security fixes.
IBM Calico extension	1534	1537	New version contains security fixes.
IBM Cloud Block Storage driver and plug-in	v2.4.18	v2.4.19	New version contains updates and security fixes.
IBM Cloud Controller Manager	v1.26.14-2	v1.26.15-1	New version contains updates and security fixes.
IBM Cloud File Storage for Classic plug-in and monitor	441	442	New version contains updates and security fixes.
Key Management Service provider	v2.8.7	v2.8.8	New version contains updates and security fixes.
Load balancer and load balancer monitor for IBM Cloud Provider	2807	2831	New version contains updates and security fixes.
OpenVPN Operator image	v1.5.12	v1.5.13	New version contains updates and security fixes.
Portieris admission controller	v0.13.11	v0.13.12	See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud.	4.13.33	4.13.36	See the Red Hat OpenShift on IBM Cloud release notes.

Change log for worker node fix pack 4.13.37_1566_openshift, released 25 March 2024

The following table shows the changes that are in the worker node fix pack 4.13.37_1566_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.13.36_1564_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.13.36	4.13.37	For more information, see the change logs.
RHEL 8 Packages	4.18.0-513.18.1.el8_9	4.18.0-513.18.1.el8_9	N/A
CRI-O	1.26.5-2	1.26.5-2	N/A
HAProxy	512b32	512b32	N/A

Change log for worker node fix pack 4.13.36_1564_openshift, released 13 March 2024

The following table shows the changes that are in the worker node fix pack 4.13.36_1564_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.13.34_1563_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.13.34	4.13.36	For more information, see the change logs.
RHEL 8 Packages	4.18.0-513.18.1.el8_9	4.18.0-513.18.1.el8_9	N/A
HAProxy	a13673	512b32	N/A
CRI-O	1.26.5-2	1.26.5-2	N/A

Change log for master fix pack 4.13.33_1562_openshift, released 28 February 2024

The following table shows the changes that are in the master fix pack 4.13.33_1562_openshift. Master patch updates are applied automatically.

Changes since version 4.13.28_1555_openshift
Component	Previous	Current	Description
Cluster health image	v1.4.6	v1.4.7	New version contains updates and security fixes.
etcd	v3.5.11	v3.5.12	See the etcd release notes.
IBM Calico extension	1525	1534	New version contains security fixes.
IBM Cloud Block Storage driver and plug-in	v2.4.14	v2.4.18	New version contains updates and security fixes.
IBM Cloud Controller Manager	v1.26.13-3	v1.26.14-2	New version contains updates and security fixes.
IBM Cloud File Storage for Classic plug-in and monitor	439	441	New version contains updates and security fixes.
IBM Cloud RBAC Operator	7185ea1	bd30030	New version contains updates and security fixes.
Key Management Service provider	v2.8.6	v2.8.7	New version contains updates and security fixes.
Load balancer and load balancer monitor for IBM Cloud Provider	2789	2807	New version contains updates and security fixes.
OpenVPN client	2.6.8-r0-IKS-108	2.6.8-r0-IKS-110	New version contains updates and security fixes.
OpenVPN server	2.6.8-r0-IKS-107	2.6.8-r0-IKS-109	New version contains updates and security fixes.
OpenVPN Operator image	v1.5.11	v1.5.12	New version contains updates and security fixes.
Red Hat OpenShift on IBM Cloud.	4.13.28	4.13.33	See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit	v4.13.0-20240104	v4.13.0-20240208	See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.13.34_1563_openshift, released 26 February 2024

The following table shows the changes that are in the worker node fix pack 4.13.34_1563_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.13.32_1557_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.13.32	4.13.34	For more information, see the change logs.
RHEL 8 Packages	4.18.0-513.11.1.el8_9	4.18.0-513.18.1.el8_9	Package updates for RHSA-2024:0897, CVE-2022-3545, CVE-2022-41858, CVE-2023-1073, CVE-2023-1838, CVE-2023-2166, CVE-2023-2176, CVE-2023-40283, CVE-2023-45871, CVE-2023-4623, CVE-2023-46813, CVE-2023-4921, CVE-2023-5717, CVE-2023-6356, CVE-2023-6535, CVE-2023-6536, CVE-2023-6606, CVE-2023-6610, CVE-2023-6817, CVE-2024-0646, RHSA-2024:0768, CVE-2020-28241, RHSA-2024:0889, CVE-2019-13224, CVE-2019-16163, CVE-2019-19012, CVE-2019-19203, CVE-2019-19204, RHSA-2024:0811, CVE-2023-28486, CVE-2023-28487, CVE-2023-42465.

Change log for worker node fix pack 4.13.32_1557_openshift, released 12 February 2024

The following table shows the changes that are in the worker node fix pack 4.13.32_1557_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.13.30_1556_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.13.30	4.13.32	For more information, see the change logs.
RHEL 8 Packages	4.18.0-477.27.1.el8_8	4.18.0-513.11.1.el8_9	Package updates for RHSA-2024:0752, CVE-2024-21626, RHSA-2023:7549, CVE-2022-45884, CVE-2022-45886, CVE-2022-45919, CVE-2023-1192, CVE-2023-2163, CVE-2023-3812, CVE-2023-5178, RHSA-2024:0113, CVE-2022-36402, CVE-2023-20569, CVE-2023-2162, CVE-2023-42753, CVE-2023-4622, CVE-2023-5633, RHSA-2023:7077, CVE-2021-43975, CVE-2022-28388, CVE-2022-3594, CVE-2022-3640, CVE-2022-38457, CVE-2022-40133, CVE-2022-40982, CVE-2022-42895, CVE-2022-45869, CVE-2022-45887, CVE-2022-4744, CVE-2023-0458, CVE-2023-0590, CVE-2023-0597, CVE-2023-1073, CVE-2023-1074, CVE-2023-1075, CVE-2023-1079, CVE-2023-1118, CVE-2023-1206, CVE-2023-1252, CVE-2023-1382, CVE-2023-1855, CVE-2023-1989, CVE-2023-1998, CVE-2023-2269, CVE-2023-23455, CVE-2023-2513, CVE-2023-26545, CVE-2023-28328, CVE-2023-28772, CVE-2023-30456, CVE-2023-31084, CVE-2023-3141, CVE-2023-31436, CVE-2023-3161, CVE-2023-3212, CVE-2023-3268, CVE-2023-33203, CVE-2023-33951, CVE-2023-33952, CVE-2023-35823, CVE-2023-35824, CVE-2023-35825, CVE-2023-3609, CVE-2023-3611, CVE-2023-3772, CVE-2023-4128, CVE-2023-4132, CVE-2023-4155, CVE-2023-4206, CVE-2023-4207, CVE-2023-4208, CVE-2023-4732, CVE-2024-0443, RHSA-2023:7877, CVE-2023-3446, CVE-2023-3817, CVE-2023-5678, RHSA-2023:7187, CVE-2023-4016, RHSA-2023:7112, CVE-2023-4641, RHSA-2023:7166, CVE-2023-22745, RHSA-2023:7177, CVE-2022-3094, RHSA-2023:7116, CVE-2022-4904, RHSA-2023:7207, CVE-2020-22217, CVE-2023-31130, RHSA-2023:6943, CVE-2023-1786, RHSA-2023:6939, CVE-2022-3064, CVE-2022-41723, CVE-2022-41724, CVE-2022-41725, CVE-2023-24534, CVE-2023-24536, CVE-2023-24537, CVE-2023-24538, CVE-2023-24539, CVE-2023-24540, CVE-2023-25173, CVE-2023-25809, CVE-2023-27561, CVE-2023-28642, CVE-2023-29400, CVE-2023-29406, CVE-2023-3978, RHSA-2024:0155, CVE-2023-5981, RHSA-2024:0627, CVE-2024-0553, RHSA-2023:6976, CVE-2020-12762, RHSA-2024:0628, CVE-2023-48795, RHSA-2024:0119, CVE-2023-39615, RHSA-2023:7109, CVE-2023-20569, RHSA-2024:0606, CVE-2023-48795, CVE-2023-51385, RHSA-2023:7174, CVE-2023-31486, RHSA-2023:6944, CVE-2022-48468, RHSA-2023:7096, CVE-2023-23931, RHSA-2023:7176, CVE-2007-4559, RHSA-2024:0116, CVE-2023-43804, CVE-2023-45803, RHSA-2023:7151, CVE-2007-4559, RHSA-2024:0114, CVE-2022-48560, CVE-2022-48564, RHSA-2024:0256, CVE-2023-27043, RHSA-2023:7034, CVE-2007-4559, CVE-2023-32681, RHSA-2023:7058, CVE-2022-41723, RHSA-2024:0647, CVE-2021-35937, CVE-2021-35938, CVE-2021-35939, RHSA-2024:0253, CVE-2023-7104, RHSA-2023:7057, CVE-2023-33460.

Change log for master fix pack 4.13.28_1555_openshift, released 31 January 2024

The following table shows the changes that are in the master fix pack 4.13.28_1555_openshift. Master patch updates are applied automatically.

Changes since version 4.13.23_1550_openshift
Component	Previous	Current	Description
Calico	v3.26.3	v3.26.4	See the Calico release notes.
Tigera Operator	v1.30.7	v1.30.9	See the Tigera Operator release notes.
Cluster health image	v1.4.5	v1.4.6	New version contains security fixes.
etcd	v3.5.10	v3.5.11	See the etcd release notes.
IBM Calico extension	1487	1525	New version contains security fixes.
IBM Cloud Controller Manager	v1.26.11-6	v1.26.13-3	New version contains updates and security fixes.
IBM Cloud RBAC Operator	e544e35	7185ea1	New version contains updates and security fixes.
Key Management Service provider	v2.8.5	v2.8.6	New version contains updates and security fixes.
Load balancer and load balancer monitor for IBM Cloud Provider	2767	2789	New version contains updates and security fixes.
OpenVPN client	2.6.7-r0-IKS-93	2.6.8-r0-IKS-108	New version contains updates and security fixes.
OpenVPN server	2.6.7-r0-IKS-92	2.6.8-r0-IKS-107	New version contains updates and security fixes.
OpenVPN Operator image	v1.5.10	v1.5.11	New version contains updates and security fixes.
Portieris admission controller	v0.13.10	v0.13.11	See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud.	4.13.23	4.13.28	See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit	v4.13.0-20231102	v4.13.0-20240104	See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.13.30_1556_openshift, released 29 January 2024

The following table shows the changes that are in the worker node fix pack 4.13.30_1556_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.13.28_1554_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.13.28	4.13.30	For more information, see the change logs.
Rhel8 Packages	4.18.0-477.27.1.el8_8	4.18.0-477.27.1.el8_8	N/A
HAProxy	e105dc	a13673	Security fixes for CVE-2023-7104, CVE-2023-27043.

Change log for worker node fix pack 4.13.28_1554_openshift, released 16 January 2024

The following table shows the changes that are in the worker node fix pack 4.13.28_1554_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.13.26_1553_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud	4.13.26	4.13.28	For more information, see the change logs.
RHEL 8 Packages	N/A	N/A	N/A
Haproxy	3060b0	e105dc	CVE-2023-39615, CVE-2023-5981, CVE-2022-48560, CVE-2022-48564.

Change log for worker node fix pack 4.13.26_1553_openshift, released 02 January 2024

The following table shows the changes that are in the worker node fix pack 4.13.26_1553_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.13.26_1552_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud	4.13.26	4.13.26	N/A
RHEL 8 Packages	4.18.0-477.27.1.el8_8	4.18.0-477.27.1.el8_8	N/A

Change log for worker node fix pack 4.13.26_1552_openshift, released 18 December 2023

The following table shows the changes that are in the worker node fix pack 4.13.26_1552_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.13.24_1551_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud	4.13.24	4.13.26	For more information, see the change logs.
RHEL 8 Packages	N/A	N/A	N/A

Change log for master fix pack 4.13.23_1550_openshift, released 06 December 2023

The following table shows the changes that are in the master fix pack 4.13.23_1550_openshift. Master patch updates are applied automatically.

Changes since version 4.13.19_1546_openshift
Component	Previous	Current	Description
IBM Cloud Block Storage driver and plug-in	v2.4.12	v2.4.14	New version contains updates and security fixes.
IBM Cloud Controller Manager	v1.26.10-4	v1.26.11-6	New version contains updates and security fixes.
Load balancer and Load balancer monitor for IBM Cloud Provider	2731	2767	New version contains updates and security fixes.
OpenVPN client	2.6.5-r0-IKS-77	2.6.7-r0-IKS-93	New version contains updates and security fixes.
OpenVPN server	2.6.5-r0-IKS-76	2.6.7-r0-IKS-92	New version contains updates and security fixes.
OpenVPN Operator image	v1.5.9	v1.5.10	New version contains updates and security fixes.
IBM Cloud File Storage for Classic plug-in and monitor	438	439	New version contains updates and security fixes.
Red Hat OpenShift on IBM Cloud.	4.13.19	4.13.23	See the Red Hat OpenShift on IBM Cloud release notes.

Change log for worker node fix pack 4.13.24_1551_openshift, released 04 December 2023

The following table shows the changes that are in the worker node fix pack 4.13.24_1551_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.13.22_1547_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.13.22	4.13.24	For more information, see the change logs.
RHEL 8 Packages	N/A	N/A	N/A

Change log for worker node fix pack 4.13.22_1547_openshift, released 29 November 2023

The following table shows the changes that are in the worker node fix pack 4.13.22_1547_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.13.19_1545_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.13.19	4.13.22	For more information, see the change logs.
CRI-O	1.26.4	1.26.4	Unqualified image registry aliases updated for `address-parsing-service`, `admin-site`, `apache-tika`, `auto-update-service`, `config-service`, `data-integration-service`, `dataprovider-manager-service`, `data-service`, `documents-service`, `gate-service`, `gateway-service`, `icij-db`, `identity-service`, `internet-access-service`, `mongo`, `notes-service`, `public-api-service`, `router`, and `search-service`.. However, using short names are not supported due to security risks, https://access.redhat.com/solutions/6178442.
RHEL 8 Packages	N/A	N/A	N/A

Change log for master fix pack 4.13.19_1546_openshift, released 15 November 2023

The following table shows the changes that are in the master fix pack 4.13.19_1546_openshift. Master patch updates are applied automatically.

Changes since version 4.13.15_1543_openshift
Component	Previous	Current	Description
Cluster health image	v1.4.4	v1.4.5	New version contains updates and security fixes.
etcd	v3.5.9	v3.5.10	See the etcd release notes.
IBM Cloud Controller Manager	v1.26.9-8	v1.26.10-4	New version contains updates and security fixes.
IBM Cloud File Storage for Classic plug-in and monitor	435	438	New version contains updates and security fixes.
IBM Cloud RBAC Operator	f0d3265	e544e35	https://github.ibm.com/alchemy-containers/armada-rbac-sync/compare/f0d326565319e449efc1ace9347448b39c1c6800...e544e35d92bc34cf08ec7773a385ac2bfd3cbbbe
Key Management Service provider	v2.8.4	v2.8.5	New version contains updates and security fixes.
Load balancer and load balancer monitor for IBM Cloud Provider	2681	2731	New version contains updates and security fixes.
OpenVPN client	2.6.5-r0-IKS-66	2.6.5-r0-IKS-77	New version contains updates and security fixes.
OpenVPN server	2.6.5-r0-IKS-57	2.6.5-r0-IKS-76	New version contains updates and security fixes.
OpenVPN Operator image	v1.5.7	v1.5.9	New version contains updates and security fixes.
Portieris admission controller	v0.13.8	v0.13.10	See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud.	4.13.15	4.13.19	Review the changes in the Red Hat OpenShift on IBM Cloud release notes. Resolves CVE-2023-39325, CVE-2023-5408, and CVE-2023-44487. For more information, see IBM Security bulletin 7080059 and 7114006.
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit	v4.13.0-20231010	v4.13.0-20231102	See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.13.19_1545_openshift, released 08 November 2023

The following table shows the changes that are in the worker node fix pack 4.13.19_1545_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.13.17_1544_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud	4.13.17	4.13.19	For more information, see the change logs.

Change log for master fix pack 4.13.15_1543_openshift, released 25 October 2023

The following table shows the changes that are in the master fix pack 4.13.15_1543_openshift. Master patch updates are applied automatically.

Changes since version 4.13.11_1540_openshift
Component	Previous	Current	Description
Calico	v3.26.1	v3.26.3	See the Calico release notes.
Tigera Operator	v1.30.5	v1.30.7	See the Tigera Operator release notes.
Cluster health image	v1.4.2	v1.4.4	New version contains updates and security fixes.
IBM Calico extension	1390	1487	New version contains security fixes.
IBM Cloud Block Storage driver and plug-in	v2.4.10	v2.4.12	New version contains updates and security fixes.
IBM Cloud Controller Manager	v1.26.8-3	v1.26.9-8	New version contains updates and security fixes. The logic for the `service.kubernetes.io/ibm-load-balancer-cloud-provider-vpc-idle-connection-timeout` annotation has changed. The default idle timeout is dependent on your account settings. Usually, this value is `50`. However, some allowlisted accounts have larger timeout settings. If you don't set the annotation, your load balancers use the timeout setting in your account. You can explicitly specify the timeout by setting this annotation.
IBM Cloud RBAC Operator	4e2f346	f0d3265	New version contains updates and security fixes.
Key Management Service provider	v2.8.2	v2.8.4	New version contains updates and security fixes.
OpenVPN Operator image	v1.5.6	v1.5.7	New version contains updates and security fixes.
Portieris admission controller	v0.13.6	v0.13.8	See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud.	4.13.11	4.13.15	See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit	v4.13.0-20230811	v4.13.0-20231010	See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.13.17_1544_openshift, released 23 October 2023

The following table shows the changes that are in the worker node fix pack 4.13.17_1544_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.13.14_1542_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.13.14	4.13.17	For more information, see the change logs.
RHEL 8 Packages	N/A	N/A	Worker node package update for CVE-2023-44487.

Change log for worker node fix pack 4.13.14_1542_openshift, released 9 October 2023

The following table shows the changes that are in the worker node fix pack 4.13.14_1542_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.13.13_1541_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.13.13	4.13.14	For more information, see the change log.
RHEL 8 Packages	N/A	N/A	Worker node package updates for CVE-2023-3341, CVE-2023-4527, CVE-2007-4559, CVE-2023-4806, CVE-2023-4813, CVE-2023-4911.

Change log for worker node fix pack 4.13.13_1541_openshift, released 27 September 2023

The following table shows the changes that are in the worker node fix pack 4.13.13_1541_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.13.11_1534_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.13.11	4.13.13	For more information, see the change log.
RHEL 8 Packages	4.18.0-477.21.1.el8_8	4.18.0-477.27.1.el8_8	Worker node kernel & package updates for CVE-2023-2002, CVE-2023-3090, CVE-2023-3390, CVE-2023-3776, CVE-2023-4004, CVE-2023-20593, CVE-2023-29491, CVE-2023-30630, CVE-2023-35001, CVE-2023-35788.

Change log for master fix pack 4.13.11_1540_openshift, released 20 September 2023

The following table shows the changes that are in the master fix pack 4.13.11_1540_openshift. Master patch updates are applied automatically.

Changes since version 4.13.6_1532_openshift
Component	Previous	Current	Description
Calico	v3.26.0	v3.26.1	See the Calico release notes.
Tigera Operator	v1.30.2	v1.30.5	See the Tigera Operator release notes.
Cluster health image	v1.4.1	v1.4.2	Updated `Go` to version `1.20.8` and updated dependencies.
IBM Cloud Block Storage driver and plug-in	v2.4.5	v2.4.10	Updated `Go dependencies`. Updated to newer UBI base image.
IBM Cloud Controller Manager	v1.26.7-4	v1.26.8-3	Updated to support the `Kubernetes 1.26.8` release. Updated `Go` to version `1.20.7` and updated `Go dependencies`.
IBM Cloud File Storage for Classic plug-in and monitor	434	435	Updated `Go` to version `1.20.6` and updated dependencies. Updated to newer UBI base image.
Key Management Service provider	v2.8.1	v2.8.2	Updated `Go dependencies`.
Load balancer and load balancer monitor for IBM Cloud Provider	2631	2681	Updated `Go` to version `1.19.12` and updated `Go dependencies`.
Red Hat OpenShift on IBM Cloud	4.13.6	4.13.11	See the Red Hat OpenShift on IBM Cloud release notes.

Change log for worker node fix pack 4.13.11_1534_openshift, released 12 September 2023

The following table shows the changes that are in the worker node fix pack 4.13.11_1534_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.13.9_1533_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.13.9	4.13.11	For more information, see the change log.
RHEL 8 Packages	N/A	N/A	Package updates for CVE-2022-40982, CVE-2022-41804, CVE-2023-23908.

Change log for master fix pack 4.13.6_1532_openshift, released 30 August 2023

The following table shows the changes that are in the master fix pack 4.13.6_1532_openshift. Master patch updates are applied automatically.

Changes since version 4.13.5_1528_openshift
Component	Previous	Current	Description
Cluster health image	v1.4.0	v1.4.1	Updated `Go` to version `1.19.12` and updated dependencies.
IBM Cloud Controller Manager	v1.26.7-1	v1.26.7-4	Updated `Go` dependencies to resolve a CVE.
IBM Cloud File Storage for Classic plug-in and monitor	433	434	Updated `Go` to version `1.20.6` and updated dependencies. Updated to newer UBI base image.
Key Management Service provider	v2.8.0	v2.8.1	Updated `Go` dependencies.
OpenVPN client	2.6.5-r0-IKS-41-amd64	2.6.5-r0-IKS-66-amd64	Updated `openvpn` components to fix CVEs.
OpenVPN server	2.6.5-r0-IKS-40-amd64	2.6.5-r0-IKS-57-amd64	Updated `openvpn` components to fix CVEs.
OpenVPN Operator image	v1.4.26	v1.5.6	Signal handler fix.
Portieris admission controller	v0.13.5	v0.13.6	See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud.	4.13.5	4.13.6	See the change log for more information.
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit	v4.13.0-20230710	v4.13.0-20230811	See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.13.9_1533_openshift, released 28th August 2023

The following table shows the changes that are in the worker node fix pack 4.13.9_1533_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.13.8_1530_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.13.8	4.13.9	For more information, see the change log.

Change log for worker node fix pack 4.13.8_1530_openshift, released 15th August 2023

The following table shows the changes that are in the worker node fix pack 4.13.8_1530_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.13.6_1529_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.13.6	4.13.8	For more information, see the change log.
RHEL 7 Packages	3.10.0-1160.92.1.el7	3.10.0-1160.95.1.el7	Worker node kernel & package updates for CVE-2023-38408, CVE-2022-3564.
RHEL 8 Packages	4.18.0-477.15.1.el8_8	4.18.0-477.21.1.el8_8	Worker node kernel & package updates for CVE-2022-42896, CVE-2023-1281, CVE-2023-1829, CVE-2023-2124, CVE-2023-2194, CVE-2023-2235, CVE-2023-2602, CVE-2023-2603, CVE-2023-27536, CVE-2023-28321, CVE-2023-28484, CVE-2023-29469, CVE-2023-32681, CVE-2023-34969, CVE-2023-38408.

Change log for worker node fix pack 4.13.6_1529_openshift, released 1 August 2023

The following table shows the changes that are in the worker node fix pack 4.13.6_1529_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.13.4_1526_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.13.4	4.13.6	For more information, see the change logs.
RHEL 7 Packages	N/A	N/A	Worker node package updates for CVE-2022-3564, CVE-2023-2828, CVE-2023-32233.
RHEL 8 Packages	N/A	N/A	Worker node package update for CVE-2023-2828.

Change log for master fix pack 4.13.5_1528_openshift, released 28 July 2023

The following table shows the changes that are in the master fix pack 4.13.5_1528_openshift. Master patch updates are applied automatically.

Changes since version 4.13.0_1524_openshift
Component	Previous	Current	Description
Cluster health image	v1.3.21	v1.4.0	Updated `Go` to version `1.19.11` and updated `Go` dependencies. Updated UBI base image with FedRAMP enablement support.
IBM Cloud Controller Manager	v1.26.6-1	v1.26.7-1	Updated to support the Kubernetes `1.26.4` release. Updated `Go` dependencies and to `Go` version `1.20.6`.
Key Management Service provider	v2.6.7	v2.8.0	Updated `Go` to version `1.19.11` and updated `Go` dependencies. Updated UBI base image with FedRAMP enablement support.
Load balancer and load balancer monitor for IBM Cloud Provider	2584	2631	Updated `Go` to version `1.19.10` and updated `Go` dependencies. Updated Alpine base image.
OpenVPN client	2.6.4-r0-IKS-34-amd64	2.6.5-r0-IKS-41-amd64	Updated `OpenVPN` to version `2.6.5`.
OpenVPN Operator image	v1.4.25	v1.4.26	Updated based image to resolve CVE-2023-24329, CVE-2020-24736, CVE-2023-26604, CVE-2023-1667, and CVE-2023-2283.
OpenVPN server	2.6.4-r0-IKS-33-amd64	2.6.5-r0-IKS-40-amd64	Updated `OpenVPN` to version `2.6.5`.
Red Hat OpenShift on IBM Cloud.	4.13.0	4.13.5	Resolves CVE-2023-1260. For more information, see the IBM security bulletin. See the Red Hat OpenShift on IBM Cloud release notes..
Red Hat OpenShift on IBM Cloud Control Plane Operator and Metrics Server	v4.13.0-20230515	v4.13.0-20230710	See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud toolkit	4.13.0+20230515	4.13.0+20230710	See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.13.4_1526_openshift, released 17th July 2023

The following table shows the changes that are in the worker node fix pack 4.13.4_1526_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.13.4_1525_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud	N/A	N/A	N/A
RHEL 7 Packages	N/A	N/A	N/A
RHEL 8 Packages	N/A	N/A	N/A

Change log for worker node fix pack 4.13.4_1525_openshift, released 03 July 2023

The following table shows the changes that are in the worker node fix pack 4.13.4_1525_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.13.3_1523_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.13.3	4.13.4	see change log.

Change log for master fix pack 4.13.0_1524_openshift, released 27 June 2023

The following table shows the changes that are in the master fix pack 4.13.0_1524_openshift. Master patch updates are applied automatically.

Changes since version 4.13.0_1522_openshift
Component	Previous	Current	Description
Cluster health image	v1.3.20	v1.3.21	Updated `Go` dependencies and to `Go` version `1.19.10`.
IBM Cloud Controller Manager	v1.26.5-5	v1.26.6-1	Updated to support the `Kubernetes 1.26.6` release. Updated `Go` dependencies and to `Go` version `1.19.10`. Updated `calicoctl` and `vpcctl`.
IBM Cloud File Storage for Classic plug-in and monitor	431	433	Updated `Go` to version `1.20.4`. Updated UBI base image.
Load balancer and load balancer monitor for IBM Cloud Provider	2486	2584	Updated `Go` dependencies and to `Go` version `1.19.9`. Updated base image.
OpenVPN client	2.5.8-r0-IKS-674-amd64	2.6.4-r0-IKS-34-amd64	Upgrade `openvpn` to version `2.6.4-r0`.
OpenVPN server	2.5.8-r0-IKS-673-amd64	2.6.4-r0-IKS-33-amd64	Upgrade `openvpn` to version `2.6.4-r0`.
OpenVPN Operator image	v1.4.23	v1.4.25	Updated OpenVPN configuration to provide shutdown grace period before terminating connections.

Change log for worker node fix pack 4.13.3_1523_openshift, released 19 June 2023

The following table shows the changes that are in the worker node fix pack 4.13.3_1523_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.13.1_1521_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.13.1	4.13.3	For more information, see the change logs.
RHEL 8 Packages	N/A	N/A	Worker node package updates for CVE-2023-32067,CVE-2023-24329.

Change log for master fix pack 4.13.0_1522_openshift and worker node fix pack 4.13.1_1521_openshift, released 14 June 2023

Changes since master fix pack 4.12.16_1545_openshift and worker fix pack 4.12.19_1546_openshift.
Component	Previous	Current	Description
Calico	v3.25.1	v3.26.0	See the Calico release notes.
Tigera Operator	v1.29.3	v1.30.2	See the Tigera Operator release notes.
etcd	v3.5.8	v3.5.9	See the etcd release notes.
IBM Cloud Controller Manager	v1.25.9-7	v1.26.5-5	Updated to support the Kubernetes `1.26.5` release. Updated `Go` dependencies and to `Go` version `1.19.9`. Updated `calicoctl` to version `v3.25.1` and `vpcctl` to version `v0.15.0`.
Key Management Service provider	v2.6.6	v2.7.0	Secret encryption support added for clusters in Satellite locations with CoreOS enabled. Updated `Go` dependencies.
Red Hat OpenShift (master)	4.12.16	4.13.0	See the Red Hat OpenShift release notes.
Red Hat OpenShift (worker node)	4.12.19	4.13.1	See the Red Hat OpenShift release notes.
Red Hat OpenShift configuration	N/A	N/A	Updated the feature gate configuration.
Red Hat OpenShift on IBM Cloud Control Plane Operator and Metrics Server	v4.12.0-20230417	v4.13.0-20230515	See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud toolkit	4.12.0+20230417	4.13.0+20230515	See the Red Hat OpenShift on IBM Cloud toolkit release notes.