Version 4.14 change log

View information of version changes for major, minor, and patch updates that are available for your Red Hat® OpenShift® on IBM Cloud® clusters that run version 4.14. Changes include updates to Red Hat OpenShift, Kubernetes, and IBM Cloud Provider components.

Overview

Unless otherwise noted in the change logs, the IBM Cloud provider version enables Red Hat OpenShift APIs and features that are at beta. Red Hat OpenShift alpha features are disabled and subject to change.

Check the Security Bulletins on IBM Cloud Status for security vulnerabilities that affect Red Hat OpenShift on IBM Cloud. You can filter the results to view only Kubernetes Service security bulletins that are relevant to Red Hat OpenShift on IBM Cloud. Change log entries that address other security vulnerabilities but don't include an IBM security bulletin are for vulnerabilities that are not known to affect Red Hat OpenShift on IBM Cloud in normal usage. If you run privileged containers, run commands on the workers, or execute untrusted code, then you might be at risk.

Master patch updates are applied automatically. Worker node patch updates can be applied by reloading or updating the worker nodes. For more information about major, minor, and patch versions and preparation actions between minor versions, see Red Hat OpenShift versions.

Change log for master fix pack 4.14.20_1558_openshift, released 24 April 2024

The following table shows the changes that are in the master fix pack 4.14.20_1558_openshift. Master patch updates are applied automatically.

Changes since version 4.14.16_1555_openshift
Component	Previous	Current	Description
Cluster health image	v1.5.3	v1.5.4	New version contains updates and security fixes.
etcd	v3.5.12	v3.5.13	See the etcd release notes.
IBM Cloud Controller Manager	v1.27.12-1	v1.27.12-10	New version contains updates and security fixes.
IBM Cloud RBAC Operator	bd30030	4c5d156	New version contains updates and security fixes.
Key Management Service provider	v2.8.8	v2.8.9	New version contains updates and security fixes.
Load balancer and load balancer monitor for IBM Cloud Provider	2831	2867	New version contains updates and security fixes.
Portieris admission controller	v0.13.12	v0.13.13	See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud.	4.14.16	4.14.20	See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit	4.14.0+20240226	4.14.0+20240412	See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.14.19_1557_openshift, released 8 April 2024

The following table shows the changes that are in the worker node fix pack 4.14.19_1557_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.14.17_1556_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.14.17	4.14.19	For more information, see the change logs.
RHEL 8 Packages	4.18.0-513.18.1.el8_9	4.18.0-513.24.1.el8_9	Worker node and kernel packages for RHSA-2024:1607, CVE-2021-33631, CVE-2022-38096, CVE-2023-51042, CVE-2023-6546, CVE-2023-6931, CVE-2024-0565, CVE-2024-1086, RHSA-2024:1601, CVE-2023-28322, CVE-2023-38546, CVE-2023-46218, RHSA-2024:1615, CVE-2023-52425, RHSA-2024:1610, CVE-2022-48624.
HAProxy	512b32a	295dba8	Security fixes for CVE-2023-28322, CVE-2023-38546, CVE-2023-46218, CVE-2023-52425.

Change log for master fix pack 4.14.16_1555_openshift, released 27 March 2024

The following table shows the changes that are in the master fix pack 4.14.16_1555_openshift. Master patch updates are applied automatically.

Changes since version 4.14.12_1552_openshift
Component	Previous	Current	Description
Cluster health image	v1.5.2	v1.5.3	New version contains updates and security fixes.
IBM Calico extension	1534	1537	New version contains security fixes.
IBM Cloud Block Storage driver and plug-in	v2.5.7	v2.5.8	New version contains updates and security fixes.
IBM Cloud Controller Manager	v1.27.11-2	v1.27.12-1	New version contains updates and security fixes.
IBM Cloud File Storage for Classic plug-in and monitor	441	442	New version contains updates and security fixes.
Key Management Service provider	v2.8.7	v2.8.8	New version contains updates and security fixes.
Load balancer and load balancer monitor for IBM Cloud Provider	2807	2831	New version contains updates and security fixes.
Portieris admission controller	v0.13.11	v0.13.12	See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud.	4.14.12	4.14.16	See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit	4.14.0+20240209	4.14.0+20240226	See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.14.17_1556_openshift, released 25 March 2024

The following table shows the changes that are in the worker node fix pack 4.14.17_1556_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.14.15_1554_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.14.15	4.14.17	For more information, see the change logs.
RHEL 8 Packages	4.18.0-513.18.1.el8_9	4.18.0-513.18.1.el8_9	N/A
CRI-O	1.27.4-2	1.27.4-3	N/A
HAProxy	512b32	512b32	N/A

Change log for worker node fix pack 4.14.15_1554_openshift, released 13 March 2024

The following table shows the changes that are in the worker node fix pack 4.14.15_1554_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.14.13_1553_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.14.13	4.14.15	For more information, see the change logs.
RHEL 8 Packages	4.18.0-513.18.1.el8_9	4.18.0-513.18.1.el8_9	N/A
HAProxy	a13673	512b32	N/A

Change log for master fix pack 4.14.12_1552_openshift, released 28 February 2024

The following table shows the changes that are in the master fix pack 4.14.12_1552_openshift. Master patch updates are applied automatically.

Changes since version 4.14.8_1545_openshift
Component	Previous	Current	Description
Cluster health image	v1.5.1	v1.5.2	New version contains updates and security fixes.
etcd	v3.5.11	v3.5.12	See the etcd release notes.
IBM Calico extension	1525	1534	New version contains security fixes.
IBM Cloud Block Storage driver and plug-in	v2.5.4	v2.5.7	New version contains updates and security fixes.
IBM Cloud Controller Manager	v1.27.10-3	v1.27.11-2	New version contains updates and security fixes.
IBM Cloud File Storage for Classic plug-in and monitor	439	441	New version contains updates and security fixes.
IBM Cloud RBAC Operator	7185ea1	bd30030	New version contains updates and security fixes.
Key Management Service provider	v2.8.6	v2.8.7	New version contains updates and security fixes.
Load balancer and load balancer monitor for IBM Cloud Provider	2789	2807	New version contains updates and security fixes.
Red Hat OpenShift on IBM Cloud.	4.14.8	4.14.12	See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit	v4.14.0-20240109	v4.14.0-20240209	See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.14.13_1553_openshift, released 26 February 2024

The following table shows the changes that are in the worker node fix pack 4.14.13_1553_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.14.11_1547_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.14.11	4.14.13	For more information, see the change logs.
RHEL 8 Packages	4.18.0-513.11.1.el8_9	4.18.0-513.18.1.el8_9	Package updates for RHSA-2024:0897, CVE-2022-3545, CVE-2022-41858, CVE-2023-1073, CVE-2023-1838, CVE-2023-2166, CVE-2023-2176, CVE-2023-40283, CVE-2023-45871, CVE-2023-4623, CVE-2023-46813, CVE-2023-4921, CVE-2023-5717, CVE-2023-6356, CVE-2023-6535, CVE-2023-6536, CVE-2023-6606, CVE-2023-6610, CVE-2023-6817, CVE-2024-0646, RHSA-2024:0768, CVE-2020-28241, RHSA-2024:0889, CVE-2019-13224, CVE-2019-16163, CVE-2019-19012, CVE-2019-19203, CVE-2019-19204, RHSA-2024:0811, CVE-2023-28486, CVE-2023-28487, CVE-2023-42465.

Change log for worker node fix pack 4.14.11_1547_openshift, released 12 February 2024

The following table shows the changes that are in the worker node fix pack 4.14.11_1547_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.14.10_1546_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.14.10	4.14.11	For more information, see the change logs.
RHEL 8 Packages	4.18.0-477.27.1.el8_8	4.18.0-513.11.1.el8_9	Package updates for RHSA-2024:0752, CVE-2024-21626, RHSA-2023:7549, CVE-2022-45884, CVE-2022-45886, CVE-2022-45919, CVE-2023-1192, CVE-2023-2163, CVE-2023-3812, CVE-2023-5178, RHSA-2024:0113, CVE-2022-36402, CVE-2023-20569, CVE-2023-2162, CVE-2023-42753, CVE-2023-4622, CVE-2023-5633, RHSA-2023:7077, CVE-2021-43975, CVE-2022-28388, CVE-2022-3594, CVE-2022-3640, CVE-2022-38457, CVE-2022-40133, CVE-2022-40982, CVE-2022-42895, CVE-2022-45869, CVE-2022-45887, CVE-2022-4744, CVE-2023-0458, CVE-2023-0590, CVE-2023-0597, CVE-2023-1073, CVE-2023-1074, CVE-2023-1075, CVE-2023-1079, CVE-2023-1118, CVE-2023-1206, CVE-2023-1252, CVE-2023-1382, CVE-2023-1855, CVE-2023-1989, CVE-2023-1998, CVE-2023-2269, CVE-2023-23455, CVE-2023-2513, CVE-2023-26545, CVE-2023-28328, CVE-2023-28772, CVE-2023-30456, CVE-2023-31084, CVE-2023-3141, CVE-2023-31436, CVE-2023-3161, CVE-2023-3212, CVE-2023-3268, CVE-2023-33203, CVE-2023-33951, CVE-2023-33952, CVE-2023-35823, CVE-2023-35824, CVE-2023-35825, CVE-2023-3609, CVE-2023-3611, CVE-2023-3772, CVE-2023-4128, CVE-2023-4132, CVE-2023-4155, CVE-2023-4206, CVE-2023-4207, CVE-2023-4208, CVE-2023-4732, CVE-2024-0443, RHSA-2023:7877, CVE-2023-3446, CVE-2023-3817, CVE-2023-5678, RHSA-2023:7187, CVE-2023-4016, RHSA-2023:7112, CVE-2023-4641, RHSA-2023:7166, CVE-2023-22745, RHSA-2023:7177, CVE-2022-3094, RHSA-2023:7116, CVE-2022-4904, RHSA-2023:7207, CVE-2020-22217, CVE-2023-31130, RHSA-2023:6943, CVE-2023-1786, RHSA-2023:6939, CVE-2022-3064, CVE-2022-41723, CVE-2022-41724, CVE-2022-41725, CVE-2023-24534, CVE-2023-24536, CVE-2023-24537, CVE-2023-24538, CVE-2023-24539, CVE-2023-24540, CVE-2023-25173, CVE-2023-25809, CVE-2023-27561, CVE-2023-28642, CVE-2023-29400, CVE-2023-29406, CVE-2023-3978, RHSA-2024:0155, CVE-2023-5981, RHSA-2024:0627, CVE-2024-0553, RHSA-2023:6976, CVE-2020-12762, RHSA-2024:0628, CVE-2023-48795, RHSA-2024:0119, CVE-2023-39615, RHSA-2023:7109, CVE-2023-20569, RHSA-2024:0606, CVE-2023-48795, CVE-2023-51385, RHSA-2023:7174, CVE-2023-31486, RHSA-2023:6944, CVE-2022-48468, RHSA-2023:7096, CVE-2023-23931, RHSA-2023:7176, CVE-2007-4559, RHSA-2024:0116, CVE-2023-43804, CVE-2023-45803, RHSA-2023:7151, CVE-2007-4559, RHSA-2024:0114, CVE-2022-48560, CVE-2022-48564, RHSA-2024:0256, CVE-2023-27043, RHSA-2023:7034, CVE-2007-4559, CVE-2023-32681, RHSA-2023:7058, CVE-2022-41723, RHSA-2024:0647, CVE-2021-35937, CVE-2021-35938, CVE-2021-35939, RHSA-2024:0253, CVE-2023-7104, RHSA-2023:7057, CVE-2023-33460.

Change log for master fix pack 4.14.8_1545_openshift, released 31 January 2024

The following table shows the changes that are in the master fix pack 4.14.8_1545_openshift. Master patch updates are applied automatically.

Changes since version 4.14.5_1539_openshift
Component	Previous	Current	Description
Calico	v3.26.3	v3.26.4	See the Calico release notes.
Tigera Operator	v1.30.7	v1.30.9	See the Tigera Operator release notes.
Calico policy controller	v3.26.3	v3.26.4	See the Calico release notes.
Cluster health image	v1.5.0	v1.5.1	New version contains security fixes.
etcd	v3.5.10	v3.5.11	See the etcd release notes.
IBM Calico extension	1512	1525	New version contains security fixes.
IBM Cloud Controller Manager	v1.27.8-6	v1.27.10-3	New version contains updates and security fixes.
IBM Cloud RBAC Operator	e544e35	7185ea1	New version contains updates and security fixes.
Key Management Service provider	v2.8.5	v2.8.6	New version contains updates and security fixes.
Load balancer and load balancer monitor for IBM Cloud Provider	2767	2789	New version contains updates and security fixes.
Portieris admission controller	v0.13.10	v0.13.11	See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud.	4.14.5	4.14.8	See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit	v4.14.0-20231128	v4.14.0-20240109	See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.14.10_1546_openshift, released 29 January 2024

The following table shows the changes that are in the worker node fix pack 4.14.10_1546_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.14.8_1544_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud.	4.14.8	4.14.10	For more information, see the change logs.
Rhel8 Packages	4.18.0-477.27.1.el8_8	4.18.0-477.27.1.el8_8	N/A
HAProxy	e105dc	a13673	Security fixes for CVE-2023-7104, CVE-2023-27043.

Change log for worker node fix pack 4.14.8_1544_openshift, released 16 January 2024

The following table shows the changes that are in the worker node fix pack 4.14.8_1544_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.14.6_1542_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud	4.14.6	4.14.8	For more information, see the change logs.
RHEL 8 Packages	N/A	N/A	N/A
Haproxy	3060b0	e105dc	CVE-2023-39615, CVE-2023-5981, CVE-2022-48560, CVE-2022-48564.

Change log for worker node fix pack 4.14.6_1542_openshift, released 02 January 2024

The following table shows the changes that are in the worker node fix pack 4.14.6_1542_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.14.6_1541_openshift
Component	Previous	Current	Description
Red Hat OpenShift on IBM Cloud	4.14.6	4.14.6	N/A
RHEL 8 Packages	4.18.0-477.27.1.el8_8	4.18.0-477.27.1.el8_8	N/A

Change log for master fix pack 4.14.5_1539_openshift and worker node fix pack 4.14.4_1538_openshift, released 13 December 2023

Changes since master fix pack 4.13.23_1550_openshift and worker fix pack 4.13.24_1551_openshift.
Component	Previous	Current	Description
Cluster health image	v1.4.5	v1.5.0	New version contains updates and security fixes.
etcd	N/A	N/A	etcd is now automatically defragmented when necessary.
HAProxy configuration	N/A	N/A	Updated master health probes to use the `/livez/ping` endpoint.
IBM Cloud Block Storage driver and plug-in	v2.4.14	v2.5.4	New version contains updates and security fixes.
IBM Cloud Controller Manager	v1.26.11-6	v1.27.8-6	New version contains updates and security fixes.
Removed: OpenVPN Operator, client, and server	N/A	N/A	Konnectivity components (part of Red Hat OpenShift) replace the OpenVPN components as the network proxy used to secure the communication of the Kubernetes API server master to worker nodes in the cluster.
Red Hat OpenShift (master)	4.13.23	4.14.5	See the Red Hat OpenShift release notes.
Red Hat OpenShift (worker node)	4.13.24	4.14.4	See the Red Hat OpenShift release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit	4.13.0+20231102	4.14.0+20231128	See the Red Hat OpenShift on IBM Cloud toolkit release notes.