Kubernetes version 1.31 change log
This version is no longer supported. Update your cluster to a supported version as soon as possible.
View information of version changes for major, minor, and patch updates that are available for your IBM Cloud® Kubernetes Service clusters that run this version. Changes include updates to Kubernetes and IBM Cloud Provider components.
Overview
In Kubernetes, most new beta features are disabled by default. Alpha features, which are subject to change, are disabled in all versions. For more information, see the Default service settings for Kubernetes components and the feature gates for each version.
For more information about major, minor, and patch versions and preparation actions between minor versions, see Kubernetes versions.
Check the Security Bulletins on IBM Cloud Status for security vulnerabilities that affect IBM Cloud Kubernetes Service. You can filter the results to view only Kubernetes Cluster security bulletins that are relevant to IBM Cloud Kubernetes Service. Change log entries that address other security vulnerabilities but don't also refer to an IBM security bulletin are for vulnerabilities that are not known to affect IBM Cloud Kubernetes Service in normal usage. If you run privileged containers, run commands on the workers, or execute untrusted code, then you might be at risk.
Some change logs are for worker node fix packs, and apply only to worker nodes. You must apply these patches to ensure security compliance for your worker nodes. These worker node fix packs can be at a higher version than the master because some build fix packs are specific to worker nodes. Other change logs are for master fix packs, and apply only to the cluster master. Master fix packs might not be automatically applied. You can choose to apply them manually. For more information about patch types, see Update types.
Version 1.31
Worker node fix pack 1.31.14_1600, released 06 April 2026
The following table shows the components included in the worker node fix pack 1.31.14_1600. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
Change log for Master fix pack 1.31.14_1599, released 02 April 2026
The following table shows the changes that are in the master fix pack 1.31.14_1599. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Cluster health image | v1.6.13 | v1.6.15 | New version contains updates and security fixes. |
| etcd | v3.5.26 | v3.5.27 | See the etcd release notes. |
| IBM Cloud Block Storage driver and plug-in | v2.5.22 | v2.5.25 | New version contains updates and security fixes. |
| IBM Cloud Controller Manager | v1.31.14-7 | v1.31.14-15 | New version contains updates and security fixes. |
| IBM Cloud File Storage for Classic for Classic plug-in and monitor | 452 | v454 | New version contains updates and security fixes. |
| IBM Cloud Metrics Server Config Watcher | v1.1.9 | v1.1.11 | New version contains updates and security fixes. |
| IBM Cloud RBAC Operator | 8a12251 | 6212368 | New version contains updates and security fixes. |
| Key Management Service provider | v2.10.20 | 2.10.22 | New version contains updates and security fixes. |
| Kubernetes add-on resizer | 1.8.22 | 1.8.23 | See the Kubernetes add-on resizer release notes. |
| Load balancer and load balancer monitor for IBM Cloud Provider | 3347 | 3563 | New version contains updates and security fixes. |
| Portieris admission controller | v0.13.33 | v0.13.36 | See the Portieris admission controller release notes. |
Worker node fix pack 1.31.14_1599, released 24 March 2026
The following table shows the components included in the worker node fix pack 1.31.14_1599. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU 24 (VPC) 6.8.0-101-generic | Resolves the following CVEs: CVE-2025-0167, CVE-2025-15366, CVE-2025-15367, CVE-2026-23865, CVE-2026-25749, CVE-2026-26007, CVE-2026-26269, CVE-2026-28417, CVE-2026-28418, CVE-2026-28419, CVE-2026-28420, CVE-2026-28421, CVE-2026-28422, CVE-2026-3497, and CVE-2026-3731. |
| UBUNTU 24 (Classic) 6.8.0-101-generic | Resolves the following CVEs: CVE-2025-0167, CVE-2025-15366, CVE-2025-15367, CVE-2026-23865, CVE-2026-25749, CVE-2026-26007, CVE-2026-26269, CVE-2026-28417, CVE-2026-28418, CVE-2026-28419, CVE-2026-28420, CVE-2026-28421, CVE-2026-28422, CVE-2026-3497, and CVE-2026-3731. |
| Kubernetes 1.31.14 | For more information, see the change logs. |
| containerd 1.7.30 | For more information, see the change logs. |
| HAProxy 10c8639e6b5829d0af51a22755e13756f34630cf | Resolves the following CVEs: CVE-2025-15281, and CVE-2026-0915. |
| GPU Device Plug-in and Installer 1c4faba733bd6bce95c85ead9a63e1ff0bbce86b | Resolves the following CVEs: CVE-2026-0915, CVE-2026-25749, and CVE-2025-15281. |
Worker node fix pack 1.31.14_1596, released 11 March 2026
The following table shows the components included in the worker node fix pack 1.31.14_1596. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU 24 (VPC) 6.8.0-100-generic | Resolves the following CVEs: CVE-2025-10148, CVE-2025-14017, CVE-2025-14524, CVE-2025-14819, CVE-2025-15079, CVE-2025-15224, CVE-2025-22037, CVE-2025-37899, and CVE-2026-2781. |
| UBUNTU 24 (Classic) 6.8.0-100-generic | Resolves the following CVEs: CVE-2025-10148, CVE-2025-14017, CVE-2025-14524, CVE-2025-14819, CVE-2025-15079, CVE-2025-15224, CVE-2025-22037, CVE-2025-37899, and CVE-2026-2781. |
| Kubernetes 1.31.14 | For more information, see the change logs. |
| containerd 1.7.30 | For more information, see the change logs. |
| HAProxy 965c403695b15b3410d87a3772002edbc5ed2569 | Resolves the following CVEs: CVE-2025-69419. |
| GPU Device Plug-in and Installer dc588cffda45a3831875a9236f7c34eb4aadb71c | Resolves the following CVEs: CVE-2025-69419. |
Worker node fix pack 1.31.14_1595, released 24 February 2026
The following table shows the components included in the worker node fix pack 1.31.14_1595. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU 24 (VPC) 6.8.0-100-generic | Resolves the following CVEs: CVE-2025-14831, CVE-2025-8277, CVE-2025-9820, CVE-2026-0964, CVE-2026-0965, CVE-2026-0966, CVE-2026-0967, CVE-2026-0968, CVE-2026-24515, CVE-2026-25210, and CVE-2026-25646. |
| UBUNTU 24 (Classic) 6.8.0-100-generic | Resolves the following CVEs: CVE-2025-14831, CVE-2025-8277, CVE-2025-9820, CVE-2026-0964, CVE-2026-0965, CVE-2026-0966, CVE-2026-0967, CVE-2026-0968, CVE-2026-24515, CVE-2026-25210, and CVE-2026-25646. |
| Kubernetes 1.31.14 | For more information, see the change logs. |
| containerd 1.7.30 | For more information, see the change logs. |
| HAProxy 2bf1aebe51a37cd9b4661656ce21e53f918166ea | Resolves the following CVEs: CVE-2025-6176. |
| GPU Device Plug-in and Installer 19ce461883e9fe115df89258f0b4568daff1795e | Resolves the following CVEs: CVE-2025-15367, CVE-2026-0865, CVE-2026-1299, CVE-2024-6923, CVE-2025-15366, and CVE-2025-6176. |
Change log for Master fix pack 1.31.14_1594, released 18 February 2026
The following table shows the changes that are in the master fix pack 1.31.14_1594. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Cluster health image | v1.6.13 | v1.6.14 | New version contains updates and security fixes. |
| IBM Cloud Block Storage driver and plug-in | v2.5.22 | v2.5.24 | New version contains updates and security fixes. |
| IBM Cloud Controller Manager | v1.31.14-7 | v1.31.14-11 | New version contains updates and security fixes. |
| IBM Cloud File Storage for Classic for Classic plug-in and monitor | 452 | v453 | New version contains updates and security fixes. |
| Key Management Service provider | v2.10.20 | 2.10.21 | New version contains updates and security fixes. |
| Portieris admission controller | v0.13.33 | v0.13.35 | See the Portieris admission controller release notes. |
Worker node fix pack 1.31.14_1593, released 09 February 2026
The following table shows the components included in the worker node fix pack 1.31.14_1593. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
Worker node fix pack 1.31.14_1592, released 27 January 2026
The following table shows the components included in the worker node fix pack 1.31.14_1592. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU 24 (VPC) 6.8.0-90-generic | Resolves the following CVEs: CVE-2025-11230, CVE-2025-8732, CVE-2026-0988, CVE-2026-0989, CVE-2026-0990, CVE-2026-0992, and CVE-2026-23490. |
| UBUNTU 24 (Classic) 6.8.0-90-generic | Resolves the following CVEs: CVE-2025-11230, CVE-2025-8732, CVE-2026-0988, CVE-2026-0989, CVE-2026-0990, CVE-2026-0992, and CVE-2026-23490. |
| Kubernetes 1.31.14 | For more information, see the change logs. |
| containerd 1.7.30 | For more information, see the change logs. |
| HAProxy c9cb5ad988e916d184d1c308d4f2e5c502d99523 | Resolves the following CVEs: CVE-2025-68973, CVE-2025-13601, and CVE-2025-9230. |
| GPU Device Plug-in and Installer 988adbf62747d86883413ca1773f4bc5141dd516 | Resolves the following CVEs: CVE-2025-13601, and CVE-2025-68973. |
Master fix pack 1.31.14_1590, released 21 January 2026
The following table shows the changes that are in the master fix pack 1.31.14_1590. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Calico | v3.29.6 | v3.29.7 | See the Calico release notes. |
| Cluster health image | v1.6.10 | v1.6.13 | New version contains updates and security fixes. |
| etcd | v3.5.24 | v3.5.26 | See the etcd release notes. |
| IBM Cloud Controller Manager | v1.31.13-6 | v1.31.14-7 | New version contains updates and security fixes. |
| Key Management Service provider | v2.10.17 | 2.10.20 | New version contains updates and security fixes. |
| Konnectivity agent and server | v0.31.3 | v0.31.4 | New version contains updates and security fixes. |
| Kubernetes | v1.31.13 | v1.31.14 | See the Kubernetes release notes. |
| Portieris admission controller | v0.13.31 | v0.13.33 | See the Portieris admission controller release notes. |
| Tigera Operator | v1.36.14 | v1.36.16 | See the Tigera Operator release notes. |
Worker node fix pack 1.31.14_1591, released 17 January 2026
The following table shows the components included in the worker node fix pack 1.31.14_1591. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU 24 6.8.0-90-generic | Resolves the following CVEs: CVE-2016-9843, CVE-2024-25269, CVE-2025-13151, CVE-2025-13836, CVE-2025-66293, CVE-2025-66471, CVE-2025-68431, CVE-2026-21441, CVE-2026-22695, and CVE-2026-22801. |
| Kubernetes 1.31.14 | For more information, see the change logs. |
| containerd 1.7.29 | For more information, see the change logs. |
| HAProxy d04e61c5b29aa5328bc72455edb95e08e8f6d85c | N/A |
| GPU Device Plug-in and Installer b47cd687497789860e50db2fb84d0b43a4b6d5a4 | N/A |
Worker node fix pack 1.31.14_1585, released 12 January 2026
The following table shows the components included in the worker node fix pack 1.31.14_1585. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU 24 6.8.0-90-generic | CIS benchmark compliance 1.1.1.1, 2.2.6, 4.4.3.1, 4.4.3.2, 5.3.2.2, 5.3.3.1.1, 5.3.3.1.2, 5.3.3.2.5, 5.3.3.2.8, 5.3.3.3.1, 5.3.3.3.2, 5.3.3.3.3, 5.3.3.4.1,5.4.1.5, 6.1.1.3, 6.1.4.1Resolves the following CVEs: CVE-2025-13601, CVE-2025-14087, CVE-2025-3360, CVE-2025-6052, CVE-2025-68973, CVE-2025-69277, CVE-2025-7039, and CVE-2025-7424. |
| Kubernetes 1.31.14 | For more information, see the change logs. |
| containerd 1.7.29 | For more information, see the change logs. |
| HAProxy d04e61c5b29aa5328bc72455edb95e08e8f6d85c | N/A |
| GPU Device Plug-in and Installer b47cd687497789860e50db2fb84d0b43a4b6d5a4 | Resolves the following CVEs: CVE-2025-45582. |
Worker node fix pack 1.31.14_1584, released 29 December 2025
The following table shows the components included in the worker node fix pack 1.31.14_1584. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU 24 6.8.0-90-generic | Resolves the following CVEs: CVE-2025-39993, CVE-2025-40018, CVE-2025-39964, CVE-2025-37958, and CVE-2025-38666. |
| Kubernetes 1.31.14 | For more information, see the change logs. |
| containerd 1.7.29 | For more information, see the change logs. |
| HAProxy d04e61c5b29aa5328bc72455edb95e08e8f6d85c | Resolves the following CVEs: CVE-2025-9086. |
| GPU Device Plug-in and Installer 0057dcb30bc3a8446f9a4eeef56228e56e935b66 | Resolves the following CVEs: CVE-2024-5642, CVE-2025-6075, CVE-2025-8291, and CVE-2025-6069. |
Worker node fix pack 1.31.14_1583, released 16 December 2025
The following table shows the components included in the worker node fix pack 1.31.14_1583. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU 24 6.8.0-88-generic | Resolves the following CVEs: CVE-2025-11412, CVE-2025-11413, CVE-2025-11414, CVE-2025-11494, CVE-2025-11839, CVE-2025-11840, CVE-2025-37958, CVE-2025-38666, CVE-2025-39964, CVE-2025-39993, CVE-2025-40018, CVE-2025-64505, CVE-2025-64506, CVE-2025-64720, CVE-2025-65018, CVE-2025-66418, CVE-2025-66471, and CVE-2025-6966. |
| Kubernetes 1.31.14 | For more information, see the change logs. |
| containerd 1.7.29 | For more information, see the change logs. |
| HAProxy 03b74b82b63cd53403b6b587b84233c93edef18d | N/A |
| GPU Device Plug-in and Installer 1b40f92bf929456042c1f42ba54fa73cdaafb653 | Resolves the following CVEs: CVE-2025-8058. |
Master fix pack 1.31.14_1581, released 10 December 2025
The following table shows the changes that are in the master fix pack 1.31.14_1581. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Calico | v3.29.5 | v3.29.7 | See the Calico release notes. |
| Cluster health image | v1.6.10 | v1.6.13 | New version contains updates and security fixes. |
| etcd | v3.5.22 | v3.5.25 | See the etcd release notes. |
| IBM Cloud Block Storage driver and plug-in | v2.5.20 | v2.5.22 | New version contains updates and security fixes. |
| IBM Cloud Controller Manager | v1.31.13-1 | v1.31.14-2 | New version contains updates and security fixes. |
| Key Management Service provider | v2.10.17 | 2.10.19 | New version contains updates and security fixes. |
| Konnectivity agent and server | v0.31.3 | v0.31.4 | See the Konnectivity release notes. |
| Kubernetes | v1.31.13 | v1.31.14 | See the Kubernetes release notes. |
| Portieris admission controller | v0.13.30 | v0.13.33 | See the Portieris admission controller release notes. |
| Tigera Operator | v1.36.13 | v1.36.16 | See the Tigera Operator release notes. |
Worker node fix pack 1.31.13_1580, released 03 December 2025
The following table shows the components included in the worker node fix pack 1.31.13_1580. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU 24 6.8.0-87-generic | Resolves the following CVEs: CVE-2025-37838, CVE-2025-38118, CVE-2025-38352, CVE-2025-40300, CVE-2025-6075, and CVE-2025-8291. |
| Kubernetes 1.31.13 | For more information, see the change logs. |
| containerd 1.7.29 | For more information, see the change logs. |
| HAProxy 03b74b82b63cd53403b6b587b84233c93edef18d | Resolves the following CVEs: CVE-2025-59375, CVE-2025-5372, CVE-2024-28757, and CVE-2022-23990. |
| GPU Device Plug-in and Installer 184bbc2d05e029bb5b0c3c18798c10697e950967 | Resolves the following CVEs: CVE-2025-59375. |
Worker node fix pack 1.31.13_1579, released 17 November 2025
The following table shows the components included in the worker node fix pack 1.31.13_1579. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU_24_04 6.8.0-86-generic | CIS benchmark compliance 2.2.4, 2.3.2.1, 5.1.1Resolves the following CVEs: CVE-2024-53008, and CVE-2025-32464. |
| Kubernetes 1.31.13 | For more information, see the change logs. |
| containerd 1.7.29 | For more information, see the change logs. |
| HAProxy fbe9b8146f23bbd12b2566a79fa897d5981e7273 | N/A |
| GPU Device Plug-in and Installer 1e3d028d8b22980ae70339db3b7f41575fe5ee5f | Resolves the following CVEs: CVE-2025-5318. |
Master fix pack 1.31.13_1578, released 15 November 2025
The following table shows the changes that are in the master fix pack 1.31.13_1578. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Calico | v3.29.5 | v3.29.6 | See the Calico release notes. |
| etcd | v3.5.22 | v3.5.24 | See the etcd release notes. |
| IBM Cloud Block Storage driver and plug-in | v2.5.20 | v2.5.22 | New version contains updates and security fixes. |
| IBM Cloud Controller Manager | v1.31.13-1 | v1.31.13-6 | New version contains updates and security fixes. |
| Portieris admission controller | v0.13.30 | v0.13.31 | See the Portieris admission controller release notes. |
| Tigera Operator | v1.36.13 | v1.36.14 | See the Tigera Operator release notes. |
Worker node fix pack 1.31.13_1577, released 06 November 2025
The following table shows the components included in the worker node fix pack 1.31.13_1577. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU_24_04 6.8.0-85-generic | Resolves the following CVEs: CVE-2025-11082, CVE-2025-11083, CVE-2025-1147, CVE-2025-1148, CVE-2025-3198, CVE-2025-40778, CVE-2025-40780, CVE-2025-5244, CVE-2025-5245, CVE-2025-7425, CVE-2025-7545, CVE-2025-7546, CVE-2025-8114, CVE-2025-8225, and CVE-2025-8677. |
| Kubernetes 1.31.13 | For more information, see the change logs. |
| containerd 1.7.27 | For more information, see the change logs. |
| HAProxy fbe9b8146f23bbd12b2566a79fa897d5981e7273 | Resolves the following CVEs: CVE-2025-5318. |
| GPU Device Plug-in and Installer e15a40cb6d9e0ac0b9c345d302c629faad596b30 | N/A |
Worker node fix pack 1.31.13_1576, released 21 October 2025
The following table shows the components included in the worker node fix pack 1.31.13_1576. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU_24_04 6.8.0-85-generic | Resolves the following CVEs: CVE-2023-45803, CVE-2024-10963, CVE-2024-3651, CVE-2024-47081, CVE-2025-11230, CVE-2025-22247, CVE-2025-37756, CVE-2025-37785, CVE-2025-38477, CVE-2025-38500, CVE-2025-38617, CVE-2025-38618, CVE-2025-41244, CVE-2025-6297, CVE-2025-8058, CVE-2025-8961, CVE-2025-9165, CVE-2025-9230, and CVE-2025-9900. |
| Kubernetes 1.31.13 | For more information, see the change logs. |
| containerd 1.7.27 | For more information, see the change logs. |
| HAProxy c01cd5322cd5c284286c07fe9ad0cc0ef3ab5360 | Resolves the following CVEs: CVE-2025-32988, CVE-2025-6395, and CVE-2025-32990. |
| GPU Device Plug-in and Installer e15a40cb6d9e0ac0b9c345d302c629faad596b30 | Resolves the following CVEs: CVE-2025-53906, CVE-2025-53905, CVE-2025-32990, CVE-2025-32988, CVE-2025-6395, and CVE-2025-8058. |
Worker node fix pack 1.31.13_1575, released 08 October 2025
The following table shows the components included in the worker node fix pack 1.31.13_1575. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU_24_04 6.8.0-83-generic | N/A |
| Kubernetes 1.31.13 | For more information, see the change logs. |
| containerd 1.7.27 | For more information, see the change logs. |
| HAProxy e0a48fcf355d98dc769ea048d2fd02044b11ed62 | N/A |
| GPU Device Plug-in and Installer 45bd1f84378a5eb92041b5102ef21a5cfe8b36d5 | N/A |
Change log for fix pack 1.31.13_1574, released 03 October 2025
The following table shows the changes that are in the master fix pack 1.31.13_1574. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Calico | v3.28.5 | v3.29.5 | See the Calico release notes. |
| IBM Cloud Controller Manager | v1.31.11-2 | v1.31.13-1 | New version contains updates and security fixes. |
| IBM Cloud File Storage for Classic for Classic plug-in and monitor | 451 | 452 | New version contains updates and security fixes. |
| Key Management Service provider | v2.10.16 | v2.10.17 | New version contains updates and security fixes. |
| Kubernetes | v1.31.12 | v1.31.13 | See the Kubernetes release notes. |
| Kubernetes NodeLocal DNS cache | 1.26.4 | 1.26.5 | See the Kubernetes NodeLocal DNS cache release notes. |
| Portieris admission controller | v0.13.29 | v0.13.30 | See the Portieris admission controller release notes. |
| Tigera Operator | v1.34.13 | v1.36.13 | See the Tigera Operator release notes. |
Worker node fix pack 1.31.12_1568, released 23 September 2025
The following table shows the components included in the worker node fix pack 1.31.12_1568. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU_24_04 6.8.0-83-generic | Resolves the following CVEs: CVE-2024-11187, CVE-2024-12705, CVE-2025-53905, CVE-2025-53906, CVE-2025-7709, and CVE-2025-9714. |
| Kubernetes 1.31.12 | For more information, see the change logs. |
| containerd 1.7.27 | For more information, see the change logs. |
| HAProxy e0a48fcf355d98dc769ea048d2fd02044b11ed62 | N/A |
| GPU Device Plug-in and Installer 45bd1f84378a5eb92041b5102ef21a5cfe8b36d5 | N/A |
Worker node fix pack 1.31.12_1566, released 09 September 2025
The following table shows the components included in the worker node fix pack 1.31.12_1566. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU_24_04 6.8.0-79-generic | Resolves the following CVEs: CVE-2024-57996, CVE-2025-21887, CVE-2025-37752, CVE-2025-38350, and CVE-2025-8067. |
| Kubernetes 1.31.12 | For more information, see the change logs. |
| containerd 1.7.27 | For more information, see the change logs. |
| HAProxy e0a48fcf355d98dc769ea048d2fd02044b11ed62 | Resolves the following CVEs: CVE-2025-6020, and CVE-2025-8941. |
| GPU Device Plug-in and Installer 95e0dbe6a9d2a09a11080e4bf18bc1e33e196ae0 | Resolves the following CVEs: CVE-2025-8941, CVE-2025-8194, and CVE-2025-6020. |
Worker node fix pack 1.31.12_1565, released 26 August 2025
The following table shows the components included in the worker node fix pack 1.31.12_1565. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU_24_04 6.8.0-71-generic | Resolves the following CVEs: CVE-2025-49796, CVE-2025-6021, CVE-2025-6069, CVE-2025-6170, CVE-2025-8176, CVE-2025-8194, CVE-2025-8534, and CVE-2025-8851. |
| Kubernetes 1.31.12 | For more information, see the change logs. |
| containerd 1.7.27 | For more information, see the change logs. |
| HAProxy 3293782c542587d0ce46be4d053036b75509f4ef | Resolves the following CVEs: CVE-2025-5914. |
| GPU Device Plug-in and Installer dc91132711527b5b44d0e89e563354769d3a4a0f | Resolves the following CVEs: CVE-2025-32415, CVE-2025-5914, CVE-2024-47081, and CVE-2025-8058. |
Master fix pack 1.31.12_1564, released 20 August 2025
The following table shows the changes that are in the master fix pack 1.31.12_1564. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| etcd | v3.5.21 | v3.5.22 | See the etcd release notes. |
| IBM Cloud Controller Manager | v1.31.10-4 | v1.31.11-2 | New version contains updates and security fixes. |
| IBM Cloud Metrics Server Config Watcher | v1.1.7 | v1.1.9 | New version contains updates and security fixes. |
| IBM Cloud RBAC Operator | 38dc95c | 8a12251 | New version contains updates and security fixes. |
| Key Management Service provider | v2.10.15 | v2.10.16 | New version contains updates and security fixes. |
| Kubernetes | v1.31.11 | v1.31.12 | See the Kubernetes release notes and the Security Bulletin for CVE-2025-5187. |
Worker node fix pack 1.31.11_1560, released 12 August 2025
The following table shows the components included in the worker node fix pack 1.31.11_1560. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU_24_04 6.8.0-64-generic | Resolves the following CVEs: CVE-2024-11584, CVE-2024-6174, CVE-2025-37797, CVE-2025-38083, CVE-2025-40909, and CVE-2025-6965. |
| Kubernetes 1.31.11 | For more information, see the change logs. |
| containerd 1.7.27 | For more information, see the change logs. |
| HAProxy 3a9451f4782fa8e8e9ed60b060dc4393c7e1e31a | Resolves the following CVEs: CVE-2025-6965, CVE-2025-8058, and CVE-2025-7425. |
| GPU Device Plug-in and Installer 51c51a011ee21f6dcb8c8143b688c34412f58405 | Resolves the following CVEs: CVE-2025-8058, CVE-2025-7425, CVE-2024-47081, CVE-2025-5994, CVE-2025-32415, and CVE-2025-6965. |
Master fix pack 1.31.11_1558, released 30 July 2025
The following table shows the changes that are in the master fix pack 1.31.11_1558. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Calico | v3.28.4 | v3.28.5 | See the Calico release notes. |
| Calico API server | v3.28.4 | v3.28.5 | See the Calico release notes. |
| Cluster health image | v1.6.9 | v1.6.10 | New version contains updates and security fixes. |
| IBM Cloud Block Storage driver and plug-in | v2.5.19 | v2.5.20 | New version contains updates and security fixes. |
| IBM Cloud Controller Manager | v1.31.9-4 | v1.31.10-4 | New version contains updates and security fixes. |
| IBM Cloud File Storage for Classic for Classic plug-in and monitor | 450 | 451 | New version contains updates and security fixes. |
| IBM Cloud Metrics Server Config Watcher | v1.1.6 | v1.1.7 | New version contains updates and security fixes. |
| Key Management Service provider | v2.10.14 | v2.10.15 | New version contains updates and security fixes. |
| Kubernetes | v1.31.9 | v1.31.11 | See the Kubernetes release notes. |
| Load balancer and load balancer monitor for IBM Cloud Provider | 3293 | 3347 | New version contains updates and security fixes. |
| Kubernetes NodeLocal DNS cache | 1.25.0 | 1.26.4 | See the Kubernetes NodeLocal DNS cache release notes. |
| Portieris admission controller | v0.13.28 | v0.13.29 | See the Portieris admission controller release notes. |
| Tigera Operator | v1.34.11 | v1.34.13 | See the Tigera Operator release notes. |
Worker node fix pack 1.31.11_1559, released 28 July 2025
The following table shows the components included in the worker node fix pack 1.31.11_1559. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
Worker node fix pack 1.31.9_1557, released 14 July 2025
The following table shows the components included in the worker node fix pack 1.31.9_1557. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU_24_04 6.8.0-63-generic | Resolves the following CVEs: CVE-2025-22088, CVE-2025-27613, CVE-2025-27614, CVE-2025-30258, CVE-2025-32462, CVE-2025-32463, CVE-2025-37798, CVE-2025-37890, CVE-2025-37997, CVE-2025-46835, CVE-2025-48384, CVE-2025-48385, CVE-2025-48386, CVE-2025-4877, CVE-2025-4878, CVE-2025-5318, CVE-2025-5351, CVE-2025-5372, and CVE-2025-5987. |
| Kubernetes 1.31.9 | For more information, see the change logs. |
| containerd 1.7.27 | For more information, see the change logs. |
| HAProxy 3bb13ac682885a0885eacb7edd1ee7a36d54e2a8 | Resolves the following CVEs: CVE-2025-6021, CVE-2025-49796, CVE-2025-49794, and CVE-2025-6020. |
| GPU Device Plug-in and Installer 0c5c1f69809faf55f9375dd7eedde342c56cc63e | Resolves the following CVEs: CVE-2025-6020, CVE-2025-4330, CVE-2025-4138, CVE-2025-4435, CVE-2025-6021, CVE-2025-4517, CVE-2024-12718, CVE-2025-49796, and CVE-2025-49794. |
Worker node fix pack 1.31.9_1556, released 01 July 2025
The following table shows the components included in the worker node fix pack 1.31.9_1556. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
Master fix pack 1.31.9_1553, released 18 June 2025
The following table shows the changes that are in the master fix pack 1.31.9_1553. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Calico | v3.28.3 | v3.28.4 | See the Calico release notes. |
| IBM Cloud Block Storage driver and plug-in | v2.5.17 | v2.5.19 | New version contains updates and security fixes. |
| IBM Cloud Controller Manager | v1.31.9-1 | v1.31.9-4 | New version contains updates and security fixes. |
| IBM Cloud RBAC Operator | d1545bd | 38dc95c | New version contains updates and security fixes. |
| Key Management Service provider | v2.10.13 | v2.10.14 | New version contains updates and security fixes. |
| Tigera Operator | v1.34.8 | v1.34.11 | See the Tigera Operator release notes. |
Worker node fix pack 1.31.9_1554, released 16 June 2025
The following table shows the components included in the worker node fix pack 1.31.9_1554. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU_24_04 6.8.0-60-generic | Resolves the following CVEs: CVE-2025-4598. |
| Kubernetes 1.31.9 | For more information, see the change logs. |
| containerd 1.7.27 | For more information, see the change logs. |
| HAProxy 951efd90b46e95a54751966c644ac37c4c901f92 | Resolves the following CVEs: CVE-2025-4802, CVE-2025-32414, and CVE-2025-3576. |
| GPU Device Plug-in and Installer cbca3eaad7d585c0d1181e478f39bab25579fb9a | Resolves the following CVEs: CVE-2025-32414, CVE-2025-4802, and CVE-2025-3576. |
Worker node fix pack 1.31.9_1551, released 04 June 2025
The following table shows the components included in the worker node fix pack 1.31.9_1551. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU_24_04 6.8.0-60-generic | Resolves the following CVEs: CVE-2024-45774, CVE-2024-45775, CVE-2024-45776, CVE-2024-45777, CVE-2024-45778, CVE-2024-45779, CVE-2024-45780, CVE-2024-45781, CVE-2024-45782, CVE-2024-45783, CVE-2025-0622, CVE-2025-0624, CVE-2025-0677, CVE-2025-0678, CVE-2025-0684, CVE-2025-0685, CVE-2025-0686, CVE-2025-0689, CVE-2025-0690, CVE-2025-1118, CVE-2025-1125, CVE-2025-29087, CVE-2025-29088, CVE-2025-3277, CVE-2025-3576, CVE-2025-4373, CVE-2025-46836, and CVE-2025-47273. |
| Kubernetes 1.31.9 | For more information, see the change logs. |
| containerd 1.7.27 | For more information, see the change logs. |
| HAProxy 978e3c26ee7634e39a940696aaf57d9e374db5ce | N/A |
| GPU Device Plug-in and Installer 9c52a5f3c684d3da2808c70936332fd18493d0c7 | N/A |
Master fix pack 1.31.9_1550, released 28 May 2025
The following table shows the changes that are in the master fix pack 1.31.9_1550. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Cluster health image | v1.6.8 | v1.6.9 | New version contains updates and security fixes. |
| IBM Cloud Controller Manager | v1.31.7-6 | v1.31.9-1 | New version contains updates and security fixes. |
| IBM Cloud File Storage for Classic for Classic plug-in and monitor | 449 | 450 | New version contains updates and security fixes. |
| IBM Cloud Metrics Server Config Watcher | v1.1.5 | v1.1.6 | New version contains updates and security fixes. |
| Key Management Service provider | v2.10.12 | v2.10.13 | New version contains updates and security fixes. |
| Kubernetes | v1.31.7 | v1.31.9 | See the Kubernetes release notes. |
| Load balancer and load balancer monitor for IBM Cloud Provider | 3232 | 3293 | New version contains updates and security fixes. |
| Portieris admission controller | v0.13.26 | v0.13.28 | See the Portieris admission controller release notes. |
Worker node fix pack 1.31.7_1549, released 19 May 2025
The following table shows the components included in the worker node fix pack 1.31.7_1549. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
Worker node fix pack 1.31.7_1548, released 07 May 2025
The following table shows the components included in the worker node fix pack 1.31.7_1548. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU_24_04 6.8.0-58-generic | Resolves the following CVEs: CVE-2024-56653, CVE-2025-1632, CVE-2025-25724, CVE-2025-32414, CVE-2025-32415, and CVE-2025-32728. |
| UBUNTU_20_04 5.4.0-212-generic | Resolves the following CVEs: CVE-2023-52664, CVE-2023-52927, CVE-2024-26689, CVE-2025-25724, CVE-2025-32414, CVE-2025-32415, and CVE-2025-32728. |
| Kubernetes 1.31.7 | For more information, see the change logs. |
| containerd 1.7.27 | For more information, see the change logs. |
| HAProxy 978e3c26ee7634e39a940696aaf57d9e374db5ce | Resolves the following CVEs: CVE-2024-12243, and CVE-2024-12133. |
| GPU Device Plug-in and Installer 9c52a5f3c684d3da2808c70936332fd18493d0c7 | Resolves the following CVEs: CVE-2024-12243, and CVE-2024-12133. |
Master fix pack 1.31.7_1547, released 30 April 2025
The following table shows the changes that are in the master fix pack 1.31.7_1547. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Calico | v3.28.2 | v3.28.3 | See the Calico release notes. |
| Cluster health image | v1.6.7 | v1.6.8 | New version contains updates and security fixes. |
| etcd | v3.5.18 | v3.5.21 | See the etcd release notes. |
| IBM Cloud Controller Manager | v1.31.7-1 | v1.31.7-6 | New version contains updates and security fixes. |
| IBM Cloud RBAC Operator | cb4f333 | d1545bd | New version contains updates and security fixes. |
| Key Management Service provider | v2.10.11 | v2.10.12 | New version contains updates and security fixes. |
| Konnectivity agent and server | v0.31.1 | v0.31.3 | See the Konnectivity release notes. |
| Kubernetes DNS autoscaler | v1.8.9 | v1.9.0 | See the Kubernetes DNS autoscaler release notes. |
| Portieris admission controller | v0.13.25 | v0.13.26 | See the Portieris admission controller release notes. |
| Tigera Operator | v1.34.5 | v1.34.8 | See the Tigera Operator release notes. |
Worker node fix pack 1.31.7_1546, released 21 April 2025
The following table shows the components included in the worker node fix pack 1.31.7_1546. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
Worker node fix pack 1.31.7_1545, released 08 April 2025
The following table shows the components included in the worker node fix pack 1.31.7_1545. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU_24_04 6.8.0-55-generic | Resolves the following CVEs: CVE-2024-25260, CVE-2025-1365, CVE-2025-1371, CVE-2025-1372, CVE-2025-1377, CVE-2025-24014, CVE-2025-30258, and CVE-2025-31115. |
| UBUNTU_20_04 5.4.0-212-generic | Resolves the following CVEs: cve-2018-5803, CVE-2021-47219, CVE-2024-23848, CVE-2024-26928, CVE-2024-35864, CVE-2024-38588, CVE-2024-43900, CVE-2024-44938, CVE-2024-49925, CVE-2024-56614, CVE-2024-56658, CVE-2025-0938, and CVE-2025-30258. |
| Kubernetes 1.31.7 | For more information, see the change logs. |
| containerd 1.7.27 | For more information, see the change logs and the security bulletin for CVE-2024-40635. |
| HAProxy 997a4ab1e89a5c8ccf3a6823785d7ab5e34b0c83 | N/A |
| GPU Device Plug-in and Installer c9d9c47b1404651b3a3c022f288a6d90bb5a44b2 | N/A |
Master fix pack 1.31.7_1543, released 26 March 2025
The following table shows the changes that are in the master fix pack 1.31.7_1543. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Cluster health image | v1.6.4 | v1.6.7 | New version contains updates and security fixes. |
| etcd | v3.5.17 | v3.5.18 | See the etcd release notes. |
| IBM Cloud Controller Manager | v1.31.5-3 | v1.31.7-1 | New version contains updates and security fixes. |
| Key Management Service provider | v2.10.10 | v2.10.11 | New version contains updates and security fixes. |
| Kubernetes | v1.31.5 | v1.31.7 | See the Kubernetes release notes. |
| Kubernetes NodeLocal DNS cache | 1.24.0 | 1.25.0 | See the Kubernetes NodeLocal DNS cache release notes. |
| Load balancer and load balancer monitor for IBM Cloud Provider | 3178 | 3232 | New version contains updates and security fixes. |
| Portieris admission controller | v0.13.23 | v0.13.25 | See the Portieris admission controller release notes. |
Worker node fix pack 1.31.7_1544, released 24 March 2025
The following table shows the components included in the worker node fix pack 1.31.7_1544. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU_24_04 6.8.0-55-generic | Resolves the following CVEs: CVE-2024-55549, CVE-2025-24855, and CVE-2025-27516. |
| UBUNTU_20_04 5.4.0-208-generic | Resolves the following CVEs: CVE-2024-55549, CVE-2024-9287, CVE-2025-0938, CVE-2025-24855, CVE-2025-27363, and CVE-2025-27516. |
| Kubernetes 1.31.7 | For more information, see the change logs. |
| containerd 1.7.27 | For more information, see the change logs and the security bulletin for CVE-2024-40635. |
| HAProxy 997a4ab1e89a5c8ccf3a6823785d7ab5e34b0c83 | Resolves the following CVEs: CVE-2024-56171, CVE-2025-24528, and CVE-2025-24928. |
| GPU Device Plug-in and Installer c9d9c47b1404651b3a3c022f288a6d90bb5a44b2 | Resolves the following CVEs: CVE-2024-56171, CVE-2025-24928, and CVE-2025-24528. |
Worker node fix pack 1.31.5_1542, released 11 March 2025
The following table shows the components included in the worker node fix pack 1.31.5_1542. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
Worker node fix pack 1.31.5_1541, released 24 February 2025
The following table shows the components included in the worker node fix pack 1.31.5_1541. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU_24_04 6.8.0-52-generic | Resolves the following CVEs: CVE-2024-12133, CVE-2024-12243, CVE-2024-13176, CVE-2024-9143, CVE-2025-0938, CVE-2025-26465, and CVE-2025-26466. |
| UBUNTU_20_04 5.4.0-205-generic | Resolves the following CVEs: CVE-2024-12133, CVE-2024-12243, CVE-2024-13176, CVE-2024-9143, CVE-2025-0938, CVE-2025-24014, and CVE-2025-26465. |
| Kubernetes 1.31.5 | For more information, see the change logs. |
| containerd 1.7.25 | For more information, see the change logs. |
| HAProxy 1d72cc8c7d02da6ba0340191fa8d9a86550e5090 | Resolves the following CVEs: CVE-2020-11023, and CVE-2022-49043. |
| GPU Device Plug-in and Installer e41a0d57a0f7696dfa3698c6af3bcc8765e76cfd | Resolves the following CVEs: CVE-2024-8508, CVE-2022-49043, CVE-2024-1488, and CVE-2020-11023. |
Master fix pack 1.31.5_1540, released 19 February 2025
The following table shows the changes that are in the master fix pack 1.31.5_1540. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| IBM Cloud Controller Manager | v1.31.4-3 | v1.31.5-3 | New version contains updates and security fixes. |
| IBM Cloud File Storage for Classic for Classic plug-in and monitor | 447 | 449 | New version contains updates and security fixes. |
| Key Management Service provider | v2.10.9 | v2.10.10 | New version contains updates and security fixes. |
| Kubernetes NodeLocal DNS cache | 1.23.1 | 1.24.0 | See the Kubernetes NodeLocal DNS cache release notes. |
Worker node fix pack 1.31.5_1539, released 11 February 2025
The following table shows the components included in the worker node fix pack 1.31.5_1539. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU_24_04 6.8.0-52-generic | Resolves the following CVEs: CVE-2022-49043, CVE-2024-11187, CVE-2024-12705, CVE-2024-34459, CVE-2024-3596, CVE-2024-53103, CVE-2024-53141, CVE-2024-53164, CVE-2024-56201, CVE-2024-56201, CVE-2024-56326, CVE-2024-56326, and CVE-2025-0395. |
| UBUNTU_20_04 5.4.0-205-generic | Resolves the following CVEs: CVE-2022-49043, CVE-2023-21400, CVE-2024-11187, CVE-2024-12705, CVE-2024-34459, CVE-2024-3596, CVE-2024-40967, CVE-2024-53103, CVE-2024-53141, CVE-2024-53164, CVE-2024-56201, CVE-2024-56201, CVE-2024-56326, CVE-2024-56326, and CVE-2025-0395. |
| Kubernetes 1.31.5 | For more information, see the change logs. |
| containerd 1.7.25 | For more information, see the change logs. |
| HAProxy 03d1ee01e9241d0e5ec93b9eb8986feb2771a01a | Resolves the following CVEs: CVE-2019-12900. |
| GPU Device Plug-in and Installer 639e505cf0c0f21d6a0a09d157ac7be7f16a77c8 | Resolves the following CVEs: CVE-2024-1488, and CVE-2024-8508. |
Worker node fix pack 1.31.5_1538, released 29 January 2025
The following table shows the components included in the worker node fix pack 1.31.5_1538. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU_20_04 5.4.0-204-generic | Resolves the following CVEs: CVE-2024-11168, and CVE-2025-22134. |
| UBUNTU_24_04 6.8.0-51-generic | Resolves the following CVEs: CVE-2024-12254, CVE-2024-50349, CVE-2024-52006, and CVE-2025-22134. |
| Kubernetes 1.31.5 | For more information, see the change logs. |
| containerd 1.7.25 | For more information, see the change logs. |
| HAProxy 14daa781a66ca5ed5754656ce53c3cca4af580b5 | N/A |
| GPU Device Plug-in and Installer 6563a84c30f22dd511f6e2d80227040a12c3af9a | Resolves the following CVEs: CVE-2019-12900. |
Master fix pack 1.31.5_1537, released 22 January 2025
The following table shows the changes that are in the master fix pack 1.31.5_1537. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Cluster health image | v1.6.3 | v1.6.4 | New version contains updates and security fixes. |
| CoreDNS | 1.11.3 | v1.11.4 | See the CoreDNS release notes. |
| etcd | v3.5.16 | v3.5.17 | See the etcd release notes. |
| IBM Cloud Block Storage driver and plug-in | v2.5.16 | v2.5.17 | New version contains updates and security fixes. |
| IBM Cloud Controller Manager | v1.31.2-4 | v1.31.4-3 | New version contains updates and security fixes. |
| IBM Cloud RBAC Operator | 743ed58 | cb4f333 | New version contains updates and security fixes. |
| Key Management Service provider | v2.10.8 | v2.10.9 | New version contains updates and security fixes. |
| Konnectivity agent and server | v0.30.3 | v0.31.1 | See the Konnectivity release notes. |
| Kubernetes | v1.31.3 | v1.31.5 | See the Kubernetes release notes. |
| Load balancer and load balancer monitor for IBM Cloud Provider | 3079 | 3178 | New version contains updates and security fixes. |
| Portieris admission controller | v0.13.21 | v0.13.23 | See the Portieris admission controller release notes. |
Worker node fix pack 1.31.3_1535, released 13 January 2025
The following table shows the components included in the worker node fix pack 1.31.3_1535. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Description |
|---|---|
| UBUNTU_20_04 5.4.0-204-generic | N/A |
| UBUNTU_24_04 6.8.0-51-generic | N/A |
| Kubernetes 1.31.3 | For more information, see the change logs. |
| containerd 1.7.23 | For more information, see the change logs. |
| HAProxy 14daa781a66ca5ed5754656ce53c3cca4af580b5 | N/A |
| GPU Device Plug-in and Installer dc0ff3ad7a22a45390d050aa7d3ab23968870a14 | Resolves the following CVEs: CVE-2024-35195, CVE-2024-53088, and CVE-2024-53122. |
Worker node fix pack 1.31.3_1534, released 30 December 2024
The following table shows the changes that are in the worker node fix pack 1.31.3_1534. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 Packages | 5.4.0-202-generic | 5.4.0-204-generic | Worker node kernel & package updates for CVE-2021-47001, CVE-2021-47101, CVE-2022-38096, CVE-2023-52821, CVE-2024-11053, CVE-2024-35963, CVE-2024-35965, CVE-2024-35966, CVE-2024-35967, CVE-2024-36952, CVE-2024-38553, CVE-2024-38597, CVE-2024-40910, CVE-2024-43892, CVE-2024-47606, CVE-2024-49967, CVE-2024-50264, CVE-2024-53057. |
| Ubuntu 24.04 Packages | 6.8.0-50-generic | 6.8.0-51-generic | Worker node kernel & package updates for CVE-2024-11053, CVE-2024-47606, CVE-2024-49967, CVE-2024-50264, CVE-2024-53057. |
Worker node fix pack 1.31.3_1533, released 16 December 2024
The following table shows the changes that are in the worker node fix pack 1.31.3_1533. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
Worker node fix pack 1.31.3_1532, released 05 December 2024
The following table shows the changes that are in the worker node fix pack 1.31.3_1531. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 Packages | 5.4.0-200-generic | 5.4.0-200-generic | Worker node kernel & package updates for CVE-2024-41671, CVE-2024-52530, CVE-2024-52531, CVE-2024-52532, CVE-2024-52533, CVE-2024-9287. |
| Ubuntu 24.04 Packages | 6.8.0-48-generic | 6.8.0-48-generic | Worker node kernel & package updates for CVE-2024-10224, CVE-2024-11003, CVE-2024-43882, CVE-2024-46800, CVE-2024-48990, CVE-2024-48991, CVE-2024-48992, CVE-2024-52533, CVE-2024-9287, CVE-2024-9681. |
| HAProxy | N/A | N/A | N/A |
| Containerd | N/A | N/A | N/A |
| Kubernetes | 1.31.2 | 1.31.3 | For more information, see the change logs. |
| GPU Device Plug-in and Installer | 96f9b63 | 995bd7 | Security fixes for CVE-2024-10041, CVE-2024-10963, CVE-2024-27043, CVE-2024-27399, CVE-2024-38564, CVE-2024-46858. |
Master fix pack 1.31.3_1530, released 04 December 2024
The following table shows the changes that are in the master fix pack 1.31.3_1530. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| IBM Cloud Controller Manager | v1.31.2-2 | v1.31.2-4 | New version contains updates and security fixes. |
| IBM Cloud RBAC Operator | c4a05b0 | 743ed58 | New version contains updates and security fixes. |
| Key Management Service provider | v2.10.7 | v2.10.8 | New version contains updates and security fixes. |
| Kubernetes | v1.31.2 | v1.31.3 | See the Kubernetes release notes. |
| Load balancer and load balancer monitor for IBM Cloud Provider | 3051 | 3079 | New version contains updates and security fixes. |
| Portieris admission controller | v0.13.20 | v0.13.21 | See the Portieris admission controller release notes. |
Worker node fix pack 1.31.2_1529, released 18 November 2024
The following table shows the changes that are in the worker node fix pack 1.31.2_1529. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
Master fix pack 1.31.2_1528, released 13 November 2024
The following table shows the changes that are in the master fix pack 1.31.2_1528. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| IBM Cloud Block Storage driver and plug-in | v2.5.15 | v2.5.16 | New version contains updates and security fixes. |
| IBM Cloud Controller Manager | v1.31.1-6 | v1.31.2-2 | New version contains updates and security fixes. |
| IBM Cloud RBAC Operator | 77dac6b | c4a05b0 | New version contains updates and security fixes. |
| Kubernetes | v1.31.1 | v1.31.2 | See the Kubernetes release notes. |
Worker node fix pack 1.31.1_1527, released 04 November 2024
The following table shows the changes that are in the worker node fix pack 1.31.1_1527. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 Packages | 5.4.0-198-generic | 5.4.0-200-generic | Kernel and package updates for CVE-2021-47212, CVE-2022-36402, CVE-2023-52531, CVE-2023-52614, CVE-2024-20696, CVE-2024-26607, CVE-2024-26640, CVE-2024-26641, CVE-2024-26668, CVE-2024-26669, CVE-2024-26800, CVE-2024-26885, CVE-2024-26891, CVE-2024-26960, CVE-2024-27051, CVE-2024-27397, CVE-2024-35848, CVE-2024-37891, CVE-2024-38602, CVE-2024-38611, CVE-2024-38630, CVE-2024-40929, CVE-2024-41071, CVE-2024-41073, CVE-2024-42229, CVE-2024-42244, CVE-2024-45016 |
| Ubuntu 24.04 Packages | 6.8.0-47-generic | 6.8.0-48-generic | Kernel and package updates for CVE-2024-20696, CVE-2024-27022, CVE-2024-37891, CVE-2024-41022, CVE-2024-41311, CVE-2024-42271, CVE-2024-42280, CVE-2024-43858, CVE-2024-45016 |
| GPU Device Plug-in and Installer | 68e8137 | 33c70dd | Driver update and security fixes for CVE-2024-5535, CVE-2024-6232 |
Master fix pack 1.31.1_1526, released 30 October 2024
The following table shows the changes that are in the master fix pack 1.31.1_1526. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Calico | v3.28.1 | v3.28.2 | See the Calico release notes. |
| Cluster health image | v1.6.2 | v1.6.3 | New version contains updates and security fixes. |
| etcd | v3.5.15 | v3.5.16 | See the etcd release notes. |
| IBM Cloud Controller Manager | v1.31.1-1 | v1.31.1-6 | New version contains updates and security fixes. |
| IBM Cloud File Storage for Classic plug-in and monitor | 446 | 447 | New version contains updates and security fixes. |
| IBM Cloud RBAC Operator | 5b17dab | 77dac6b | New version contains updates and security fixes. |
| Key Management Service provider | v2.10.5 | v2.10.7 | New version contains updates and security fixes. |
| Portieris admission controller | v0.13.18 | v0.13.20 | See the Portieris admission controller release notes. |
| Tigera Operator | v1.34.3 | v1.34.5 | See the Tigera Operator release notes. |
Worker node fix pack 1.31.1_1524, released 21 October 2024
The following table shows the changes that are in the worker node fix pack 1.31.1_1524. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 Packages | 5.4.0-196-generic | 5.4.0-198-generic | Kernel and package updates for CVE-2022-36227, CVE-2024-26960, CVE-2024-27397, CVE-2024-38630, CVE-2024-45016, CVE-2024-5742. |
| Haproxy | 67d03375 | 88598691 | Security fixes for CVE-2024-5535. |
Worker node fix pack 1.31.1_1523, released 09 October 2024
The following table shows the changes that are in the worker node fix pack 1.31.1_1523. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
Master fix pack 1.31.1_1521, released 25 September 2024
The following table shows the changes that are in the master fix pack 1.31.1_1521. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| IBM Cloud Block Storage driver and plug-in | v2.5.14 | v2.5.15 | New version contains updates and security fixes. |
| IBM Cloud Controller Manager | v1.31.0-3 | v1.31.1-1 | New version contains updates and security fixes. |
| Key Management Service provider | v2.10.4 | v2.10.5 | New version contains updates and security fixes. |
| Kubernetes | v1.31.0 | v1.31.1 | See the Kubernetes release notes. |
Worker node fix pack 1.31.1_1522, released 23 September 2024
The following table shows the changes that are in the worker node fix pack 1.31.1_1522. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
Master fix pack 1.31.0_1520 and worker node fix pack 1.31.0_1518, released 18 September 2024
| Component | Previous | Current | Description |
|---|---|---|---|
| Calico | v3.27.4 | v3.28.1 | See the Calico release notes. |
| Cluster health image | v1.5.8 | v1.6.2 | New version contains updates and security fixes. |
| IBM Cloud Block Storage driver and plug-in | v2.5.13 | v2.5.14 | New version contains updates and security fixes. |
| IBM Cloud Controller Manager | v1.30.4-1 | v1.31.0-3 | New version contains updates and security fixes. |
| IBM Cloud File Storage for Classic plug-in and monitor | 445 | 446 | New version contains updates and security fixes. |
| IBM Cloud Metrics Server Config Watcher | v1.1.4 | v1.1.5 | New version contains updates and security fixes. |
| IBM Cloud RBAC Operator | 897f067 | 5b17dab | New version contains updates and security fixes. |
| Konnectivity agent and server | v0.30.2 | v0.30.3 | See the Konnectivity release notes. |
| Kubernetes | v1.30.4 | v1.31.0 | See the Kubernetes release notes. |
| Kubernetes add-on resizer | 1.8.20 | 1.8.22 | See the Kubernetes add-on resizer release notes. |
| Kubernetes configuration | N/A | N/A | See Default service settings for Kubernetes components. |
| Kubernetes Metrics Server | v0.7.1 | v0.7.2 | See the Kubernetes Metrics Server release notes. |
| Kubernetes snapshot controller | v6.3.3 | v8.0.1 | See the Kubernetes snapshot controller release notes. |
| Load balancer and load balancer monitor for IBM Cloud Provider | 3022 | 3051 | New version contains updates and security fixes. |
| Pause container image | 3.9 | 3.10 | See the pause container image release notes. |
| Tigera Operator | v1.32.10-124-iks | v1.34.3 | See the Tigera Operator release notes. |