IBM Cloud Docs
Version 4.12 change log

Version 4.12 change log

This version is deprecated. Update your cluster to a supported version as soon as possible.

View information of version changes for major, minor, and patch updates that are available for your Red HatĀ® OpenShiftĀ® on IBM CloudĀ® clusters that run version 4.12. Changes include updates to Red Hat OpenShift, Kubernetes, and IBM Cloud Provider components.

Overview

Unless otherwise noted in the change logs, the IBM Cloud provider version enables Red Hat OpenShift APIs and features that are at beta. Red Hat OpenShift alpha features are disabled and subject to change.

Check the Security Bulletins on IBM Cloud Status for security vulnerabilities that affect Red Hat OpenShift on IBM Cloud. You can filter the results to view only Kubernetes Service security bulletins that are relevant to Red Hat OpenShift on IBM Cloud. Change log entries that address other security vulnerabilities but don't include an IBM security bulletin are for vulnerabilities that are not known to affect Red Hat OpenShift on IBM Cloud in normal usage. If you run privileged containers, run commands on the workers, or execute untrusted code, then you might be at risk.

Master patch updates are applied automatically. Worker node patch updates can be applied by reloading or updating the worker nodes. For more information about major, minor, and patch versions and preparation actions between minor versions, see Red Hat OpenShift versions.

Change log for worker node fix pack 4.12.69_1617_openshift, released 18 November 2024

The following table shows the changes that are in the worker node fix pack 4.12.69_1617_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.67_1615_openshift
Component Previous Current Description
RHEL 8 Packages 4.18.0-553.22.1.el8_10 4.18.0-553.27.1.el8_10 Worker node kernel & package updates for RHSA-2024:8846, CVE-2024-9341, CVE-2024-9407, CVE-2024-9675, RHSA-2024:8860, CVE-2024-3596, RHSA-2024:9689, CVE-2018-12699, RHSA-2024:8922, CVE-2019-12900, RHSA-2024:3043, CVE-2024-0690, RHSA-2024:9502, CVE-2024-50602, RHSA-2024:8849, CVE-2023-45539, RHSA-2024:8856, CVE-2022-48773, CVE-2022-48936, CVE-2023-52492, CVE-2024-24857, CVE-2024-26851, CVE-2024-26924, CVE-2024-26976, CVE-2024-27017, CVE-2024-27062, CVE-2024-35839, CVE-2024-35898, CVE-2024-35939, CVE-2024-38540, CVE-2024-38541, CVE-2024-38586, CVE-2024-38608, CVE-2024-39503, CVE-2024-40924, CVE-2024-40961, CVE-2024-40983, CVE-2024-40984, CVE-2024-41009, CVE-2024-41042, CVE-2024-41066, CVE-2024-41092, CVE-2024-41093, CVE-2024-42070, CVE-2024-42079, CVE-2024-42244, CVE-2024-42284, CVE-2024-42292, CVE-2024-42301, CVE-2024-43854, CVE-2024-43880, CVE-2024-43889, CVE-2024-43892, CVE-2024-44935, CVE-2024-44989, CVE-2024-44990, CVE-2024-45018, CVE-2024-46826, CVE-2024-47668, CIS benchmark compliance: 1.4.3, 1.4.4, 1.6.2, 1.6.4.
HAProxy 885986 55c148 Security fixes for CVE-2023-45539, CVE-2024-3596, CVE-2019-12900, CVE-2024-50602.

Change log for master fix pack 4.12.67_1616_openshift, released 13 November 2024

The following table shows the changes that are in the master fix pack 4.12.67_1616_openshift. Master patch updates are applied automatically.

Changes since version 4.12.67_1614_openshift
Component Previous Current Description
IBM Cloud Block Storage driver and plug-in v2.4.26 v2.4.27 New version contains updates and security fixes.
IBM Cloud RBAC Operator 77dac6b c4a05b0 New version contains updates and security fixes.
OpenVPN Operator image v1.5.21 v1.5.22 New version contains updates and security fixes.

Change log for worker node fix pack 4.12.67_1615_openshift, released 04 November 2024

The following table shows the changes that are in the worker node fix pack 4.12.67_1615_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.67_1613_openshift
Component Previous Current Description
RHEL 8 Packages N/A N/A Package updates for RHSA-2024:3043, CVE-2024-0690, RHSA-2024:8359, CVE-2024-6232
Red Hat OpenShift on IBM Cloud N/A N/A N/A

Change log for master fix pack 4.12.67_1614_openshift, released 30 October 2024

The following table shows the changes that are in the master fix pack 4.12.67_1614_openshift. Master patch updates are applied automatically.

Changes since version 4.12.64_1609_openshift
Component Previous Current Description
Cluster health image v1.5.8 v1.5.9 New version contains updates and security fixes.
etcd v3.5.15 v3.5.16 See the etcd release notes.
IBM Cloud File Storage for Classic for Classic plug-in and monitor 446 447 New version contains updates and security fixes.
IBM Cloud RBAC Operator 5b17dab 77dac6b New version contains updates and security fixes.
Key Management Service provider v2.8.14 v2.8.16 New version contains updates and security fixes.
OpenVPN client 2.6.11-r0-IKS-152 2.6.11-r0-IKS-155 New version contains updates and security fixes.
OpenVPN server 2.6.11-r0-IKS-151 2.6.11-r0-IKS-154 New version contains updates and security fixes.
OpenVPN Operator image v1.5.19 v1.5.21 New version contains updates and security fixes.
Portieris admission controller v0.13.18 v0.13.20 See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud. 4.12.64 4.12.67 See the Red Hat OpenShift on IBM Cloud release notes.

Change log for worker node fix pack 4.12.67_1613_openshift, released 21 October 2024

The following table shows the changes that are in the worker node fix pack 4.12.67_1613_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.66_1612_openshift
Component Previous Current Description
RHEL 8 Packages N/A N/A Package updates for RHSA-2024:8038, CVE-2023-45290, CVE-2024-34155, CVE-2024-34156, CVE-2024-34158, RHSA-2024:7848, CVE-2024-5535, RHSA-2024:3043, CVE-2024-0690.
RHEL 9 Packages 5.14.0-427.37.1.el9_4 5.14.0-427.40.1.el9_4 CIS benchmark compliance: 5.2.18.,2.1.2, 3.3.7, 2.2.14.
Red Hat OpenShift on IBM Cloud. 4.12.66 4.12.67 For more information, see the change logs.
Haproxy 67d03375 88598691 Security fixes for CVE-2024-5535.

Change log for worker node fix pack 4.12.66_1612_openshift, released 09 October 2024

The following table shows the changes that are in the worker node fix pack 4.12.66_1612_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.66_1610_openshift
Component Previous Current Description
RHEL 8 Packages 4.18.0-553.16.1.el8_10 4.18.0-553.22.1.el8_10 CIS benchmark compliance: 1.4.2.. Kernel and package updates for RHSA-2024:7000, CVE-2021-46984, CVE-2021-47097, CVE-2021-47101, CVE-2021-47287, CVE-2021-47289, CVE-2021-47321, CVE-2021-47338, CVE-2021-47352, CVE-2021-47383, CVE-2021-47384, CVE-2021-47385, CVE-2021-47386, CVE-2021-47393, CVE-2021-47412, CVE-2021-47432, CVE-2021-47441, CVE-2021-47455, CVE-2021-47466, CVE-2021-47497, CVE-2021-47527, CVE-2021-47560, CVE-2021-47582, CVE-2021-47609, CVE-2022-48619, CVE-2022-48754, CVE-2022-48760, CVE-2022-48804, CVE-2022-48836, CVE-2022-48866, CVE-2023-52470, CVE-2023-52476, CVE-2023-52478, CVE-2023-52522, CVE-2023-52605, CVE-2023-52683, CVE-2023-52798, CVE-2023-52800, CVE-2023-52809, CVE-2023-52817, CVE-2023-52840, CVE-2023-6040, CVE-2024-23848, CVE-2024-26595, CVE-2024-26600, CVE-2024-26638, CVE-2024-26645, CVE-2024-26649, CVE-2024-26665, CVE-2024-26717, CVE-2024-26720, CVE-2024-26769, CVE-2024-26846, CVE-2024-26855, CVE-2024-26880, CVE-2024-26894, CVE-2024-26923, CVE-2024-26939, CVE-2024-27013, CVE-2024-27042, CVE-2024-35809, CVE-2024-35877, CVE-2024-35884, CVE-2024-35944, CVE-2024-35989, CVE-2024-36883, CVE-2024-36901, CVE-2024-36902, CVE-2024-36919, CVE-2024-36920, CVE-2024-36922, CVE-2024-36939, CVE-2024-36953, CVE-2024-37356, CVE-2024-38558, CVE-2024-38559, CVE-2024-38570, CVE-2024-38579, CVE-2024-38581, CVE-2024-38619, CVE-2024-39471, CVE-2024-39499, CVE-2024-39501, CVE-2024-39506, CVE-2024-40901, CVE-2024-40904, CVE-2024-40911, CVE-2024-40912, CVE-2024-40929, CVE-2024-40931, CVE-2024-40941, CVE-2024-40954, CVE-2024-40958, CVE-2024-40959, CVE-2024-40960, CVE-2024-40972, CVE-2024-40977, CVE-2024-40978, CVE-2024-40988, CVE-2024-40989, CVE-2024-40995, CVE-2024-40997, CVE-2024-40998, CVE-2024-41005, CVE-2024-41007, CVE-2024-41008, CVE-2024-41012, CVE-2024-41013, CVE-2024-41014, CVE-2024-41023, CVE-2024-41035, CVE-2024-41038, CVE-2024-41039, CVE-2024-41040, CVE-2024-41041, CVE-2024-41044, CVE-2024-41055, CVE-2024-41056, CVE-2024-41060, CVE-2024-41064, CVE-2024-41065, CVE-2024-41071, CVE-2024-41076, CVE-2024-41090, CVE-2024-41091, CVE-2024-41097, CVE-2024-42084, CVE-2024-42090, CVE-2024-42094, CVE-2024-42096, CVE-2024-42114, CVE-2024-42124, CVE-2024-42131, CVE-2024-42152, CVE-2024-42154, CVE-2024-42225, CVE-2024-42226, CVE-2024-42228, CVE-2024-42237, CVE-2024-42238, CVE-2024-42240, CVE-2024-42246, CVE-2024-42265, CVE-2024-42322, CVE-2024-43830, CVE-2024-43871, RHSA-2024:7481, CVE-2023-20584, CVE-2023-31315, CVE-2023-31356, RHSA-2024:3043, CVE-2024-0690, RHSA-2024:6969, CVE-2023-45290, CVE-2024-24783, CVE-2024-24784, CVE-2024-24788, CVE-2024-24791, RHSA-2024:6989, CVE-2024-45490, CVE-2024-45491, CVE-2024-45492, RHSA-2024:6975, CVE-2024-4032, CVE-2024-6232, CVE-2024-6923.
Red Hat OpenShift on IBM Cloud. N/A N/A
Haproxy 546887ab 67d03375 Security fixes for CVE-2024-4032, CVE-2024-6232, CVE-2024-6923, CVE-2024-45490, CVE-2024-45491, CVE-2024-45492.

Change log for master fix pack 4.12.64_1609_openshift, released 25 September 2024

The following table shows the changes that are in the master fix pack 4.12.64_1609_openshift. Master patch updates are applied automatically.

Changes since version 4.12.61_1606_openshift
Component Previous Current Description
IBM Calico extension 1598 1607 New version contains security fixes.
IBM Cloud Block Storage driver and plug-in v2.4.24 v2.4.26 New version contains updates and security fixes.
IBM Cloud Controller Manager v1.25.16-61 v1.25.16-62 New version contains updates and security fixes.
IBM Cloud File Storage for Classic for Classic plug-in and monitor 445 446 New version contains updates and security fixes.
IBM Cloud RBAC Operator 897f067 5b17dab New version contains updates and security fixes.
Key Management Service provider v2.8.13 v2.8.14 New version contains updates and security fixes.
Load balancer and load balancer monitor for IBM Cloud Provider 3022 3051 New version contains updates and security fixes.
OpenVPN client 2.6.11-r0-IKS-145 2.6.11-r0-IKS-152 New version contains updates and security fixes.
OpenVPN server 2.6.11-r0-IKS-144 2.6.11-r0-IKS-151 New version contains updates and security fixes.
OpenVPN Operator image v1.5.18 v1.5.19 New version contains updates and security fixes.
Red Hat OpenShift on IBM Cloud. 4.12.61 4.12.64 See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit 4.12.0+20240814 4.12.0+20240913 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.12.66_1610_openshift, released 23 September 2024

The following table shows the changes that are in the worker node fix pack 4.12.66_1610_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.64_1608_openshift
Component Previous Current Description
RHEL 8 Packages N/A N/A Package updates for RHSA-2024:3043, CVE-2024-0690.
Red Hat OpenShift on IBM Cloud. 4.12.64 4.12.66 For more information, see the change logs.

Change log for worker node fix pack 4.12.64_1608_openshift, released 10 September 2024

The following table shows the changes that are in the worker node fix pack 4.12.64_1608_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.63_1607_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.12.63 4.12.64 For more information, see the change logs.
RHEL 8 Packages N/A N/A Worker node package updates for RHSA-2024:3043, CVE-2024-0690, RHSA-2024:5962, CVE-2024-4032, CVE-2024-6345, CVE-2024-6923, CVE-2024-8088.

Change log for master fix pack 4.12.61_1606_openshift, released 28 August 2024

The following table shows the changes that are in the master fix pack 4.12.61_1606_openshift. Master patch updates are applied automatically.

Changes since version 4.12.60_1602_openshift
Component Previous Current Description
Cluster health image v1.5.7 v1.5.8 New version contains updates and security fixes.
etcd v3.5.14 v3.5.15 See the etcd release notes.
IBM Cloud Block Storage driver and plug-in v2.4.23 v2.4.24 New version contains updates and security fixes.
IBM Cloud Controller Manager v1.25.16-59 v1.25.16-61 New version contains updates and security fixes.
IBM Cloud RBAC Operator 312030f 897f067 New version contains updates and security fixes.
Key Management Service provider v2.8.12 v2.8.13 New version contains updates and security fixes.
Load balancer and load balancer monitor for IBM Cloud Provider 2967 3022 New version contains updates and security fixes.
Portieris admission controller v0.13.17 v0.13.18 See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud. 4.12.60 4.12.61 See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit 4.12.0+20240709 4.12.0+20240814 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.12.63_1607_openshift, released 26 August 2024

The following table shows the changes that are in the worker node fix pack 4.12.63_1607_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.61_1604_openshift
Component Previous Current Description
RHEL 8 Packages N/A N/A Package updates for RHSA-2024:5524, CVE-2024-1737, CVE-2024-1975, RHSA-2024:5258, CVE-2023-45290, CVE-2024-1394, CVE-2024-24783, CVE-2024-24784, CVE-2024-24789, CVE-2024-3727, CVE-2024-37298, CVE-2024-6104, RHSA-2024:5530, CVE-2024-6345, RHSA-2024:3043, CVE-2024-0690, RHSA-2024:5654, CVE-2024-2398, RHSA-2024:5312, CVE-2024-37370, CVE-2024-37371, RHSA-2024:5309, CVE-2024-37891, RHSA-2024:5299, CVE-2024-38428.
Haproxy c91c765 546887a Security fixes for CVE-2024-2398, CVE-2024-37370, CVE-2024-37371, CVE-2024-6345.
Red Hat OpenShift on IBM Cloud. 4.12.61 4.12.63 For more information, see the change logs.

Change log for worker node fix pack 4.12.61_1604_openshift, released 12 August 2024

The following table shows the changes that are in the worker node fix pack 4.12.61_1604_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.61_1603_openshift
Component Previous Current Description
RHEL 8 Packages 4.18.0-553.8.1.el8_10 4.18.0-553.16.1.el8_10 Package updates for RHSA-2024:5101, CVE-2021-46939, CVE-2021-47018, CVE-2021-47257, CVE-2021-47284, CVE-2021-47304, CVE-2021-47373, CVE-2021-47408, CVE-2021-47461, CVE-2021-47468, CVE-2021-47491, CVE-2021-47548, CVE-2021-47579, CVE-2021-47624, CVE-2022-48632, CVE-2022-48743, CVE-2022-48747, CVE-2022-48757, CVE-2023-28746, CVE-2023-52451, CVE-2023-52463, CVE-2023-52469, CVE-2023-52471, CVE-2023-52486, CVE-2023-52530, CVE-2023-52619, CVE-2023-52622, CVE-2023-52623, CVE-2023-52648, CVE-2023-52653, CVE-2023-52658, CVE-2023-52662, CVE-2023-52679, CVE-2023-52707, CVE-2023-52730, CVE-2023-52756, CVE-2023-52762, CVE-2023-52764, CVE-2023-52775, CVE-2023-52777, CVE-2023-52784, CVE-2023-52791, CVE-2023-52796, CVE-2023-52803, CVE-2023-52811, CVE-2023-52832, CVE-2023-52834, CVE-2023-52845, CVE-2023-52847, CVE-2023-52864, CVE-2024-21823, CVE-2024-2201, CVE-2024-25739, CVE-2024-26586, CVE-2024-26614, CVE-2024-26640, CVE-2024-26660, CVE-2024-26669, CVE-2024-26686, CVE-2024-26698, CVE-2024-26704, CVE-2024-26733, CVE-2024-26740, CVE-2024-26772, CVE-2024-26773, CVE-2024-26802, CVE-2024-26810, CVE-2024-26837, CVE-2024-26840, CVE-2024-26843, CVE-2024-26852, CVE-2024-26853, CVE-2024-26870, CVE-2024-26878, CVE-2024-26908, CVE-2024-26921, CVE-2024-26925, CVE-2024-26940, CVE-2024-26958, CVE-2024-26960, CVE-2024-26961, CVE-2024-27010, CVE-2024-27011, CVE-2024-27019, CVE-2024-27020, CVE-2024-27025, CVE-2024-27065, CVE-2024-27388, CVE-2024-27395, CVE-2024-27434, CVE-2024-31076, CVE-2024-33621, CVE-2024-35790, CVE-2024-35801, CVE-2024-35807, CVE-2024-35810, CVE-2024-35814, CVE-2024-35823, CVE-2024-35824, CVE-2024-35847, CVE-2024-35876, CVE-2024-35893, CVE-2024-35896, CVE-2024-35897, CVE-2024-35899, CVE-2024-35900, CVE-2024-35910, CVE-2024-35912, CVE-2024-35924, CVE-2024-35925, CVE-2024-35930, CVE-2024-35937, CVE-2024-35938, CVE-2024-35946, CVE-2024-35947, CVE-2024-35952, CVE-2024-36000, CVE-2024-36005, CVE-2024-36006, CVE-2024-36010, CVE-2024-36016, CVE-2024-36017, CVE-2024-36020, CVE-2024-36025, CVE-2024-36270, CVE-2024-36286, CVE-2024-36489, CVE-2024-36886, CVE-2024-36889, CVE-2024-36896, CVE-2024-36904, CVE-2024-36905, CVE-2024-36917, CVE-2024-36921, CVE-2024-36927, CVE-2024-36929, CVE-2024-36933, CVE-2024-36940, CVE-2024-36941, CVE-2024-36945, CVE-2024-36950, CVE-2024-36954, CVE-2024-36960, CVE-2024-36971, CVE-2024-36978, CVE-2024-36979, CVE-2024-38538, CVE-2024-38555, CVE-2024-38573, CVE-2024-38575, CVE-2024-38596, CVE-2024-38598, CVE-2024-38615, CVE-2024-38627, CVE-2024-39276, CVE-2024-39472, CVE-2024-39476, CVE-2024-39487, CVE-2024-39502, CVE-2024-40927, CVE-2024-40974, RHSA-2024:3043, CVE-2024-0690.

Change log for master fix pack 4.12.60_1602_openshift, released 31 July 2024

The following table shows the changes that are in the master fix pack 4.12.60_1602_openshift. Master patch updates are applied automatically.

Changes since version 4.12.58_1597_openshift.Change log for master fix pack 4.12.58_1597_openshift, released 19 June 2024
Component Previous Current Description
Calico v3.27.2 v3.27.4 See the Calico release notes.
Cluster health image v1.5.6 v1.5.7 New version contains updates and security fixes.
etcd v3.5.13 v3.5.14 See the etcd release notes.
IBM Calico extension 1595 1598 New version contains security fixes.
IBM Cloud Block Storage driver and plug-in v2.4.20 v2.4.23 New version contains updates and security fixes.
IBM Cloud Controller Manager v1.25.16-52 v1.25.16-59 New version contains updates and security fixes.
IBM Cloud File Storage for Classic for Classic plug-in and monitor 443 445 New version contains updates and security fixes.
IBM Cloud RBAC Operator 14d0ab5 312030f New version contains updates and security fixes.
Key Management Service provider v2.8.11 v2.8.12 New version contains updates and security fixes.
Load balancer and load balancer monitor for IBM Cloud Provider 2933 2967 New version contains updates and security fixes.
OpenVPN client 2.6.8-r0-IKS-130 2.6.11-r0-IKS-145 New version contains updates and security fixes.
OpenVPN server 2.6.8-r0-IKS-131 2.6.11-r0-IKS-144 New version contains updates and security fixes.
OpenVPN Operator image v1.5.16 v1.5.18 New version contains updates and security fixes.
Portieris admission controller v0.13.16 v0.13.17 See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud. 4.12.58 4.12.60 See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit 4.12.0+20240603 4.12.0+20240709 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Tigera Operator v1.32.5 v1.32.10 See the Tigera Operator release notes.

Change log for worker node fix pack 4.12.61_1603_openshift, released 29 July 2024

The following table shows the changes that are in the worker node fix pack 4.12.61_1603_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.60_1600_openshift
Component Previous Current Description
RHEL 8 Packages N/A N/A Package updates for RHSA-2024:4620, CVE-2024-5564, RHSA-2024:3043, CVE-2024-0690.
Haproxy N/A N/A N/A
Red Hat OpenShift on IBM Cloud. 4.12.60 4.12.61 For more information, see the change logs.

Change log for worker node fix pack 4.12.60_1600_openshift, released 15 July 2024

The following table shows the changes that are in the worker node fix pack 4.12.60_1600_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.60_1599_openshift
Component Previous Current Description
RHEL 8 Packages 4.18.0-553.5.1.el8_10 4.18.0-553.8.1.el8_10 Worker node kernel & package updates for RHSA-2024:4211, CVE-2020-26555, CVE-2021-46909, CVE-2021-46972, CVE-2021-47069, CVE-2021-47073, CVE-2021-47236, CVE-2021-47310, CVE-2021-47311, CVE-2021-47353, CVE-2021-47356, CVE-2021-47456, CVE-2021-47495, CVE-2023-5090, CVE-2023-52464, CVE-2023-52560, CVE-2023-52615, CVE-2023-52626, CVE-2023-52667, CVE-2023-52669, CVE-2023-52675, CVE-2023-52686, CVE-2023-52700, CVE-2023-52703, CVE-2023-52781, CVE-2023-52813, CVE-2023-52835, CVE-2023-52877, CVE-2023-52878, CVE-2023-52881, CVE-2024-26583, CVE-2024-26584, CVE-2024-26585, CVE-2024-26656, CVE-2024-26675, CVE-2024-26735, CVE-2024-26759, CVE-2024-26801, CVE-2024-26804, CVE-2024-26826, CVE-2024-26859, CVE-2024-26906, CVE-2024-26907, CVE-2024-26974, CVE-2024-26982, CVE-2024-27397, CVE-2024-27410, CVE-2024-35789, CVE-2024-35835, CVE-2024-35838, CVE-2024-35845, CVE-2024-35852, CVE-2024-35853, CVE-2024-35854, CVE-2024-35855, CVE-2024-35888, CVE-2024-35890, CVE-2024-35958, CVE-2024-35959, CVE-2024-35960, CVE-2024-36004, CVE-2024-36007, RHSA-2024:4256, CVE-2022-48624, CVE-2024-32487, RHSA-2024:4249, CVE-2024-25629, RHSA-2024:4264, CVE-2023-2953, RHSA-2024:3043, CVE-2024-0690, RHSA-2024:4262, CVE-2023-31346, RHSA-2024:4252, CVE-2024-28182, RHSA-2024:4260, CVE-2024-3651, RHSA-2024:4231, CVE-2024-34064.
HAProxy e77d4ca c91c765 Security fixes for CVE-2024-28182,CVE-2024-25062.

Change log for worker node fix pack 4.12.60_1599_openshift, released 09 July 2024

The following table shows the changes that are in the worker node fix pack 4.12.60_1599_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.59_1598_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.12.59 4.12.60 For more information, see the change logs.
RHEL 8 Packages 4.18.0-513.24.1.el8_9 4.18.0-553.5.1.el8_10 RHSA-2024:3271, CVE-2023-4408, CVE-2023-50387, CVE-2023-50868, RHSA-2024:3254, CVE-2022-2880, CVE-2022-41715, CVE-2024-1753, CVE-2024-24786, CVE-2024-28180, RHSA-2024:4084, CVE-2024-32002, CVE-2024-32004, CVE-2024-32020, CVE-2024-32021, CVE-2024-32465, RHSA-2024:3269, CVE-2024-2961, RHSA-2024:3344, CVE-2024-33599, CVE-2024-33600, CVE-2024-33601, CVE-2024-33602, RHSA-2024:3178, CVE-2022-46329, CVE-2023-20592, RHSA-2024:3347, CVE-2023-6597, CVE-2024-0450, RHSA-2024:3466, CVE-2023-6597, CVE-2024-0450, CVE-2024-3651, RHSA-2024:3268, CVE-2024-26458, CVE-2024-26461, RHSA-2024:3233, CVE-2023-6004, CVE-2023-6918, RHSA-2024:3043, CVE-2024-0690, RHSA-2024:3968, CVE-2024-28176, CVE-2024-28180, RHSA-2024:2988, CVE-2018-25091, CVE-2021-33198, CVE-2021-34558, CVE-2022-2879, CVE-2022-2880, CVE-2022-41715, CVE-2023-29409, CVE-2023-39318, CVE-2023-39319, CVE-2023-39321, CVE-2023-39322, CVE-2023-39326, CVE-2023-45287, CVE-2023-45803, CVE-2023-48795, CVE-2024-23650, RHSA-2024:3214, CVE-2021-43618, RHSA-2024:3184, CVE-2023-4692, CVE-2023-4693, CVE-2024-1048, RHSA-2024:3138, CVE-2019-13631, CVE-2019-15505, CVE-2020-25656, CVE-2021-3753, CVE-2021-4204, CVE-2022-0500, CVE-2022-23222, CVE-2022-3565, CVE-2022-45934, CVE-2023-1513, CVE-2023-24023, CVE-2023-25775, CVE-2023-28464, CVE-2023-31083, CVE-2023-3567, CVE-2023-37453, CVE-2023-38409, CVE-2023-39189, CVE-2023-39192, CVE-2023-39193, CVE-2023-39194, CVE-2023-39198, CVE-2023-4133, CVE-2023-4244, CVE-2023-42754, CVE-2023-42755, CVE-2023-45863, CVE-2023-51779, CVE-2023-51780, CVE-2023-52340, CVE-2023-52434, CVE-2023-52448, CVE-2023-52489, CVE-2023-52574, CVE-2023-52580, CVE-2023-52581, CVE-2023-52597, CVE-2023-52620, CVE-2023-6121, CVE-2023-6176, CVE-2023-6622, CVE-2023-6915, CVE-2023-6932, CVE-2024-0841, CVE-2024-25742, CVE-2024-25743, CVE-2024-26602, CVE-2024-26609, CVE-2024-26671, RHSA-2024:3618, CVE-2019-25162, CVE-2020-36777, CVE-2021-46934, CVE-2021-47013, CVE-2021-47055, CVE-2021-47118, CVE-2021-47153, CVE-2021-47171, CVE-2021-47185, CVE-2022-48627, CVE-2022-48669, CVE-2023-52439, CVE-2023-52445, CVE-2023-52477, CVE-2023-52513, CVE-2023-52520, CVE-2023-52528, CVE-2023-52565, CVE-2023-52578, CVE-2023-52594, CVE-2023-52595, CVE-2023-52598, CVE-2023-52606, CVE-2023-52607, CVE-2023-52610, CVE-2023-6240, CVE-2024-0340, CVE-2024-23307, CVE-2024-25744, CVE-2024-26593, CVE-2024-26603, CVE-2024-26610, CVE-2024-26615, CVE-2024-26642, CVE-2024-26643, CVE-2024-26659, CVE-2024-26664, CVE-2024-26693, CVE-2024-26694, CVE-2024-26743, CVE-2024-26744, CVE-2024-26779, CVE-2024-26872, CVE-2024-26892, CVE-2024-26897, CVE-2024-26901, CVE-2024-26919, CVE-2024-26933, CVE-2024-26934, CVE-2024-26964, CVE-2024-26973, CVE-2024-26993, CVE-2024-27014, CVE-2024-27048, CVE-2024-27052, CVE-2024-27056, CVE-2024-27059, RHSA-2024:3626, CVE-2024-25062, RHSA-2024:3166, CVE-2020-15778, RHSA-2024:3163, CVE-2024-22365, RHSA-2024:3102, CVE-2024-22195, RHSA-2024:2985, CVE-2022-40897, CVE-2023-23931, CVE-2023-27043, CVE-2023-43804, RHSA-2024:3139, CVE-2021-40153, CVE-2021-41072, RHSA-2024:3270, CVE-2023-3758, RHSA-2024:3203, CVE-2023-7008.
HAProxy 18889dd e77d4ca New version contains security fixes

Change log for master fix pack 4.12.58_1597_openshift, released 19 June 2024

The following table shows the changes that are in the master fix pack 4.12.58_1597_openshift. Master patch updates are applied automatically.

Changes since version 4.12.56_1593_openshift
Component Previous Current Description
Cluster health image v1.5.5 v1.5.6 New version contains updates and security fixes.
IBM Calico extension 1589 1595 New version contains security fixes.
IBM Cloud Controller Manager v1.25.16-48 v1.25.16-52 New version contains updates and security fixes.
IBM Cloud RBAC Operator 4c5d156 14d0ab5 New version contains updates and security fixes.
Key Management Service provider v2.8.10 v2.8.11 New version contains updates and security fixes.
Red Hat OpenShift on IBM Cloud. 4.12.56 4.12.58 https://docs.openshift.com/container-platform/4.12/release_notes/ocp-4-12-release-notes.html
OpenVPN client 2.6.8-r0-IKS-114-amd64 2.6.8-r0-IKS-130-amd64 New version contains updates and security fixes.
OpenVPN Operator image v1.5.15 v1.5.16 New version contains updates and security fixes.
OpenVPN server 2.6.8-r0-IKS-113-amd64 2.6.8-r0-IKS-131-amd64 New version contains updates and security fixes.
Portieris admission controller v0.13.15 v0.13.16 See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit 4.12.0+20240514 4.12.0+20240603 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.12.59_1598_openshift, released 18 June 2024

The following table shows the changes that are in the worker node fix pack 4.12.59_1598_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.58_1594_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.12.58 4.12.59 For more information, see the change logs.
RHEL 8 Packages 4.18.0-513.24.1.el8_9 4.18.0-513.24.1.el8_9 N/A
HAProxy 0062a3c 18889dd Security fixes for CVE-2024-25062.

Change log for worker node fix pack 4.12.58_1594_openshift, released 03 June 2024

The following table shows the changes that are in the worker node fix pack 4.12.58_1594_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.57_1591_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.12.57 4.12.58 For more information, see the change logs.
RHEL 8 Packages 4.18.0-513.24.1.el8_9 4.18.0-513.24.1.el8_9 N/A
HAProxy e88695e 0062a3c CVE-2024-0450, CVE-2024-33599, CVE-2024-26461, CVE-2021-43618, CVE-2024-22365, CVE-2023-6597, CVE-2024-26458, CVE-2024-2961, CVE-2024-33601, CVE-2024-33602, CVE-2023-7008, CVE-2023-6004, CVE-2023-6918, CVE-2024-33600.

Change log for master fix pack 4.12.56_1593_openshift, released 29 May 2024

The following table shows the changes that are in the master fix pack 4.12.56_1593_openshift. Master patch updates are applied automatically.

Changes since version 4.12.55_1588_openshift
Component Previous Current Description
Calico v3.26.4 v3.27.2 See the Calico release notes.
Cluster health image v1.5.4 v1.5.5 New version contains updates and security fixes.
IBM Calico extension 1537 1589 New version contains security fixes.
IBM Cloud Block Storage driver and plug-in v2.4.19 v2.4.20 New version contains updates and security fixes.
IBM Cloud Controller Manager v1.25.16-42 v1.25.16-48 New version contains updates and security fixes.
IBM Cloud File Storage for Classic for Classic plug-in and monitor 442 443 New version contains updates and security fixes.
Key Management Service provider v2.8.9 v2.8.10 New version contains updates and security fixes.
Load balancer and load balancer monitor for IBM Cloud Provider 2867 2933 New version contains updates and security fixes.
OpenVPN Operator image v1.5.14 v1.5.15 New version contains updates and security fixes.
Portieris admission controller v0.13.13 v0.13.15 See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud. 4.12.55 4.12.56 See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit 4.12.0+20240412 4.12.0+20240514 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Tigera Operator v1.30.9 v1.32.5 See the Tigera Operator release notes.

Change log for worker node fix pack 4.12.57_1591_openshift, released 23 May 2024

The following table shows the changes that are in the worker node fix pack 4.12.57_1591_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.56_1590_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.12.56 4.12.57 For more information, see the change logs.
RHEL 8 Packages 4.18.0-513.24.1.el8_9 4.18.0-513.24.1.el8_9 Worker node package updates for RHSA-2024:2722, CVE-2024-2961.
HAProxy d225100 4e826da CVE-2024-2961, CVE-2024-28834.

Change log for worker node fix pack 4.12.56_1590_openshift, released 06 May 2024

The following table shows the changes that are in the worker node fix pack 4.12.56_1590_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.55_1589_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.12.55 4.12.56 For more information, see the change logs.
RHEL 8 Packages 4.18.0-513.24.1.el8_9 4.18.0-513.24.1.el8_9 Worker node package updates for RHSA-2024:2098, CVE-2024-1753.
HAProxy 295dba8 295dba8 N/A

Change log for master fix pack 4.12.55_1588_openshift, released 24 April 2024

The following table shows the changes that are in the master fix pack 4.12.55_1588_openshift. Master patch updates are applied automatically.

Changes since version 4.12.51_1585_openshift
Component Previous Current Description
Cluster health image v1.4.8 v1.5.4 New version contains updates and security fixes.
etcd v3.5.12 v3.5.13 See the etcd release notes.
IBM Cloud Controller Manager v1.25.16-33 v1.25.16-42 New version contains updates and security fixes.
IBM Cloud RBAC Operator bd30030 4c5d156 New version contains updates and security fixes.
Key Management Service provider v2.8.8 v2.8.9 New version contains updates and security fixes.
Load balancer and load balancer monitor for IBM Cloud Provider 2831 2867 New version contains updates and security fixes.
OpenVPN client 2.6.8-r0-IKS-110 2.6.8-r0-IKS-114 New version contains updates and security fixes.
OpenVPN server 2.6.8-r0-IKS-109 2.6.8-r0-IKS-113 New version contains updates and security fixes.
OpenVPN Operator image v1.5.13 v1.5.14 New version contains updates and security fixes.
Portieris admission controller v0.13.12 v0.13.13 See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud. 4.12.51 4.12.55 See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit 4.12.0+20240208 4.12.0+20240412 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.12.55_1589_openshift, released 22 April 2024

The following table shows the changes that are in the worker node fix pack 4.12.55_1589_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.54_1587_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.12.54 4.12.55 For more information, see the change logs.
RHEL 8 Packages 4.18.0-513.24.1.el8_9 4.18.0-513.24.1.el8_9 Worker node package updates for RHSA-2024:1782, CVE-2023-4408, CVE-2023-50387, CVE-2023-50868, RHSA-2024:1784, CVE-2024-28834.
HAProxy 295dba8 4e826da Security fixes for CVE-2024-28834.

Change log for worker node fix pack 4.12.54_1587_openshift, released 8 April 2024

The following table shows the changes that are in the worker node fix pack 4.12.54_1587_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.53_1586_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.12.53 4.12.54 For more information, see the change logs.
RHEL 8 Packages 4.18.0-513.18.1.el8_9 4.18.0-513.24.1.el8_9 Worker node and kernel packages for RHSA-2024:1607, CVE-2021-33631, CVE-2022-38096, CVE-2023-51042, CVE-2023-6546, CVE-2023-6931, CVE-2024-0565, CVE-2024-1086, RHSA-2024:1601, CVE-2023-28322, CVE-2023-38546, CVE-2023-46218, RHSA-2024:1615, CVE-2023-52425, RHSA-2024:1610, CVE-2022-48624.
HAProxy 512b32a 295dba8 Security fixes for CVE-2023-28322, CVE-2023-38546, CVE-2023-46218, CVE-2023-52425.
CRI-O 1.25.5-8 1.25.5-8 N/A

Change log for master fix pack 4.12.51_1585_openshift, released 27 March 2024

The following table shows the changes that are in the master fix pack 4.12.51_1585_openshift. Master patch updates are applied automatically.

Changes since version 4.12.49_1581_openshift
Component Previous Current Description
IBM Cloud Block Storage driver and plug-in v2.4.18 v2.4.19 https://github.ibm.com/alchemy-containers/armada-storage-block-plugin
IBM Calico extension 1534 1537 New version contains security fixes.
Cluster health image v1.4.7 v1.4.8 New version contains updates and security fixes.
IBM Cloud Controller Manager v1.25.16-24 v1.25.16-33 New version contains updates and security fixes.
Key Management Service provider v2.8.7 v2.8.8 New version contains updates and security fixes.
Load balancer and load balancer monitor for IBM Cloud Provider 2807 2831 https://github.ibm.com/alchemy-containers/armada-keepalived
Red Hat OpenShift on IBM Cloud. 4.12.49 4.12.51 https://docs.openshift.com/container-platform/
OpenVPN Operator image v1.4.33 v1.5.13 New version contains updates and security fixes.
Portieris admission controller v0.13.11 v0.13.12 See the Portieris admission controller release notes.
IBM Cloud File Storage for Classic plug-in and monitor 441 442 New version contains updates and security fixes.

Change log for worker node fix pack 4.12.53_1586_openshift, released 25 March 2024

The following table shows the changes that are in the worker node fix pack 4.12.53_1586_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.51_1583_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.12.51 4.12.53 For more information, see the change logs.
RHEL 8 Packages 4.18.0-513.18.1.el8_9 4.18.0-513.18.1.el8_9 N/A
CRI-O 1.25.5-8 1.25.5-8 N/A
HAProxy 512b32 512b32 N/A

Change log for worker node fix pack 4.12.51_1583_openshift, released 13 March 2024

The following table shows the changes that are in the worker node fix pack 4.12.51_1583_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.50_1582_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.12.50 4.12.51 For more information, see the change logs.
RHEL 8 Packages 4.18.0-513.18.1.el8_9 4.18.0-513.18.1.el8_9 N/A
HAProxy a13673 512b32 N/A
CRI-O 1.25.5-8 1.25.5-8 N/A

Change log for master fix pack 4.12.49_1581_openshift, released 28 February 2024

The following table shows the changes that are in the master fix pack 4.12.49_1581_openshift. Master patch updates are applied automatically.

Changes since version 4.12.46_1576_openshift
Component Previous Current Description
Cluster health image v1.4.6 v1.4.7 New version contains updates and security fixes.
etcd v3.5.11 v3.5.12 See the etcd release notes.
IBM Calico extension 1525 1534 New version contains security fixes.
IBM Cloud Block Storage driver and plug-in v2.4.14 v2.4.18 New version contains updates and security fixes.
IBM Cloud Controller Manager v1.25.16-17 v1.25.16-24 New version contains updates and security fixes.
IBM Cloud File Storage for Classic plug-in and monitor 439 441 New version contains updates and security fixes.
IBM Cloud RBAC Operator 7185ea1 bd30030 New version contains updates and security fixes.
Key Management Service provider v2.8.6 v2.8.7 New version contains updates and security fixes.
Load balancer and load balancer monitor for IBM Cloud Provider 2789 2807 New version contains updates and security fixes.
OpenVPN client 2.6.8-r0-IKS-108 2.6.8-r0-IKS-110 New version contains updates and security fixes.
OpenVPN server 2.6.8-r0-IKS-107 2.6.8-r0-IKS-109 New version contains updates and security fixes.
OpenVPN Operator image v1.4.32 v1.4.33 New version contains updates and security fixes.
Red Hat OpenShift on IBM Cloud. 4.12.46 4.12.49 See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit v4.12.0-20240104 v4.12.0-20240208 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.12.50_1582_openshift, released 26 February 2024

The following table shows the changes that are in the worker node fix pack 4.12.50_1582_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.49_1578_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.12.49 4.12.50 For more information, see the change logs.
RHEL 8 Packages 4.18.0-513.11.1.el8_9 4.18.0-513.18.1.el8_9 Package updates for RHSA-2024:0897, CVE-2022-3545, CVE-2022-41858, CVE-2023-1073, CVE-2023-1838, CVE-2023-2166, CVE-2023-2176, CVE-2023-40283, CVE-2023-45871, CVE-2023-4623, CVE-2023-46813, CVE-2023-4921, CVE-2023-5717, CVE-2023-6356, CVE-2023-6535, CVE-2023-6536, CVE-2023-6606, CVE-2023-6610, CVE-2023-6817, CVE-2024-0646, RHSA-2024:0768, CVE-2020-28241, RHSA-2024:0889, CVE-2019-13224, CVE-2019-16163, CVE-2019-19012, CVE-2019-19203, CVE-2019-19204, RHSA-2024:0811, CVE-2023-28486, CVE-2023-28487, CVE-2023-42465.

Change log for worker node fix pack 4.12.49_1578_openshift, released 12 February 2024

The following table shows the changes that are in the worker node fix pack 4.12.49_1578_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.47_1577_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.12.47 4.12.49 For more information, see the change logs.
RHEL 8 Packages 4.18.0-477.27.1.el8_8 4.18.0-513.11.1.el8_9 Package updates for RHSA-2024:0752, CVE-2024-21626, RHSA-2023:7549, CVE-2022-45884, CVE-2022-45886, CVE-2022-45919, CVE-2023-1192, CVE-2023-2163, CVE-2023-3812, CVE-2023-5178, RHSA-2024:0113, CVE-2022-36402, CVE-2023-20569, CVE-2023-2162, CVE-2023-42753, CVE-2023-4622, CVE-2023-5633, RHSA-2023:7077, CVE-2021-43975, CVE-2022-28388, CVE-2022-3594, CVE-2022-3640, CVE-2022-38457, CVE-2022-40133, CVE-2022-40982, CVE-2022-42895, CVE-2022-45869, CVE-2022-45887, CVE-2022-4744, CVE-2023-0458, CVE-2023-0590, CVE-2023-0597, CVE-2023-1073, CVE-2023-1074, CVE-2023-1075, CVE-2023-1079, CVE-2023-1118, CVE-2023-1206, CVE-2023-1252, CVE-2023-1382, CVE-2023-1855, CVE-2023-1989, CVE-2023-1998, CVE-2023-2269, CVE-2023-23455, CVE-2023-2513, CVE-2023-26545, CVE-2023-28328, CVE-2023-28772, CVE-2023-30456, CVE-2023-31084, CVE-2023-3141, CVE-2023-31436, CVE-2023-3161, CVE-2023-3212, CVE-2023-3268, CVE-2023-33203, CVE-2023-33951, CVE-2023-33952, CVE-2023-35823, CVE-2023-35824, CVE-2023-35825, CVE-2023-3609, CVE-2023-3611, CVE-2023-3772, CVE-2023-4128, CVE-2023-4132, CVE-2023-4155, CVE-2023-4206, CVE-2023-4207, CVE-2023-4208, CVE-2023-4732, CVE-2024-0443, RHSA-2023:7877, CVE-2023-3446, CVE-2023-3817, CVE-2023-5678, RHSA-2023:7187, CVE-2023-4016, RHSA-2023:7112, CVE-2023-4641, RHSA-2023:7166, CVE-2023-22745, RHSA-2023:7177, CVE-2022-3094, RHSA-2023:7116, CVE-2022-4904, RHSA-2023:7207, CVE-2020-22217, CVE-2023-31130, RHSA-2023:6943, CVE-2023-1786, RHSA-2023:6939, CVE-2022-3064, CVE-2022-41723, CVE-2022-41724, CVE-2022-41725, CVE-2023-24534, CVE-2023-24536, CVE-2023-24537, CVE-2023-24538, CVE-2023-24539, CVE-2023-24540, CVE-2023-25173, CVE-2023-25809, CVE-2023-27561, CVE-2023-28642, CVE-2023-29400, CVE-2023-29406, CVE-2023-3978, RHSA-2024:0155, CVE-2023-5981, RHSA-2024:0627, CVE-2024-0553, RHSA-2023:6976, CVE-2020-12762, RHSA-2024:0628, CVE-2023-48795, RHSA-2024:0119, CVE-2023-39615, RHSA-2023:7109, CVE-2023-20569, RHSA-2024:0606, CVE-2023-48795, CVE-2023-51385, RHSA-2023:7174, CVE-2023-31486, RHSA-2023:6944, CVE-2022-48468, RHSA-2023:7096, CVE-2023-23931, RHSA-2023:7176, CVE-2007-4559, RHSA-2024:0116, CVE-2023-43804, CVE-2023-45803, RHSA-2023:7151, CVE-2007-4559, RHSA-2024:0114, CVE-2022-48560, CVE-2022-48564, RHSA-2024:0256, CVE-2023-27043, RHSA-2023:7034, CVE-2007-4559, CVE-2023-32681, RHSA-2023:7058, CVE-2022-41723, RHSA-2024:0647, CVE-2021-35937, CVE-2021-35938, CVE-2021-35939, RHSA-2024:0253, CVE-2023-7104, RHSA-2023:7057, CVE-2023-33460.

Change log for master fix pack 4.12.46_1576_openshift, released 31 January 2024

The following table shows the changes that are in the master fix pack 4.12.46_1576_openshift. Master patch updates are applied automatically.

Changes since version 4.12.44_1571_openshift
Component Previous Current Description
Calico v3.26.3 v3.26.4 See the Calico release notes.
Tigera Operator v1.30.7 v1.30.9 See the Tigera Operator release notes.
Cluster health image v1.4.5 v1.4.6 New version contains security fixes.
etcd v3.5.10 v3.5.11 See the etcd release notes.
IBM Calico extension 1487 1525 New version contains security fixes.
IBM Cloud Controller Manager v1.25.16-4 v1.25.16-17 New version contains updates and security fixes.
IBM Cloud RBAC Operator e544e35 7185ea1 New version contains updates and security fixes.
Key Management Service provider v2.8.5 v2.8.6 New version contains updates and security fixes.
Load balancer and load balancer monitor for IBM Cloud Provider 2767 2789 New version contains updates and security fixes.
OpenVPN client 2.6.7-r0-IKS-93 2.6.8-r0-IKS-108 New version contains updates and security fixes.
OpenVPN server 2.6.7-r0-IKS-92 2.6.8-r0-IKS-107 New version contains updates and security fixes.
OpenVPN Operator image v1.4.31 v1.4.32 New version contains updates and security fixes.
Portieris admission controller v0.13.10 v0.13.11 See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud. 4.12.44 4.12.46 See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit v4.12.0-20231102 v4.12.0-20240104 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.12.47_1577_openshift, released 29 January 2024

The following table shows the changes that are in the worker node fix pack 4.12.47_1577_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.46_1575_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.12.46 4.12.47 For more information, see the change logs.
Rhel8 Packages 4.18.0-477.27.1.el8_8 4.18.0-477.27.1.el8_8 N/A
HAProxy e105dc a13673 Security fixes for CVE-2023-7104, CVE-2023-27043.

Change log for worker node fix pack 4.12.46_1575_openshift, released 16 January 2024

The following table shows the changes that are in the worker node fix pack 4.12.46_1575_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.45_1574_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud 4.12.45 4.12.46 For more information, see the change logs.
RHEL 8 Packages N/A N/A N/A
Haproxy 3060b0 e105dc CVE-2023-39615, CVE-2023-5981, CVE-2022-48560, CVE-2022-48564.

Change log for worker node fix pack 4.12.45_1574_openshift, released 02 January 2024

The following table shows the changes that are in the worker node fix pack 4.12.45_1574_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.45_1573_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud 4.12.45 4.12.45 N/A
RHEL 8 Packages 4.18.0-477.27.1.el8_8 4.18.0-477.27.1.el8_8 N/A

Change log for worker node fix pack 4.12.45_1573_openshift, released 18 December 2023

The following table shows the changes that are in the worker node fix pack 4.12.45_1573_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.44_1572_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud 4.12.44 4.12.45 For more information, see the change logs.
RHEL 8 Packages N/A N/A N/A

Change log for master fix pack 4.12.44_1571_openshift, released 06 December 2023

The following table shows the changes that are in the master fix pack 4.12.44_1571_openshift. Master patch updates are applied automatically.

Changes since version 4.12.40_1568_openshift
Component Previous Current Description
IBM Cloud Block Storage driver and plug-in v2.4.12 v2.4.14 New version contains updates and security fixes.
IBM Cloud Controller Manager v1.25.15-4 v1.25.16-4 New version contains updates and security fixes.
Load balancer and Load balancer monitor for IBM Cloud Provider 2731 2767 New version contains updates and security fixes.
OpenVPN client 2.6.5-r0-IKS-77 2.6.7-r0-IKS-93 New version contains updates and security fixes.
OpenVPN server 2.6.5-r0-IKS-76 2.6.7-r0-IKS-92 New version contains updates and security fixes.
OpenVPN Operator image v1.4.30 v1.4.31 New version contains updates and security fixes.
IBM Cloud File Storage for Classic plug-in and monitor 438 439 New version contains updates and security fixes.
Red Hat OpenShift on IBM Cloud. 4.12.40 4.12.44 See the Red Hat OpenShift on IBM Cloud release notes. Resolves CVE-2023-5408. For more information, see the IBM security bulletin.

Change log for worker node fix pack 4.12.44_1572_openshift, released 04 December 2023

The following table shows the changes that are in the worker node fix pack 4.12.44_1572_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.42_1569_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.12.42 4.12.44 For more information, see the change logs.
RHEL 8 Packages N/A N/A N/A

Change log for worker node fix pack 4.12.42_1569_openshift, released 29 November 2023

The following table shows the changes that are in the worker node fix pack 4.12.42_1569_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.41_1567_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.12.41 4.12.42 For more information, see the change logs.
CRI-O 1.25.4 1.25.4 Unqualified image registry aliases updated for address-parsing-service, admin-site, apache-tika, auto-update-service, config-service, data-integration-service, dataprovider-manager-service, data-service, documents-service, gate-service, gateway-service, icij-db, identity-service, internet-access-service, mongo, notes-service, public-api-service, router, and search-service.. However, using short names are not supported due to security risks, https://access.redhat.com/solutions/6178442.
RHEL 8 Packages N/A N/A N/A

Change log for master fix pack 4.12.40_1568_openshift, released 15 November 2023

The following table shows the changes that are in the master fix pack 4.12.40_1568_openshift. Master patch updates are applied automatically.

Changes since version 4.12.37_1565_openshift
Component Previous Current Description
Cluster health image v1.4.4 v1.4.5 New version contains updates and security fixes.
etcd v3.5.9 v3.5.10 See the etcd release notes.
IBM Cloud Controller Manager v1.25.14-8 v1.25.15-4 New version contains updates and security fixes.
IBM Cloud File Storage for Classic plug-in and monitor 435 438 New version contains updates and security fixes.
IBM Cloud RBAC Operator f0d3265 e544e35 New version contains updates and security fixes.
Key Management Service provider v2.8.4 v2.8.5 New version contains updates and security fixes.
Load balancer and load balancer monitor for IBM Cloud Provider 2681 2731 New version contains updates and security fixes.
OpenVPN client 2.6.5-r0-IKS-66 2.6.5-r0-IKS-77 New version contains updates and security fixes.
OpenVPN server 2.6.5-r0-IKS-57 2.6.5-r0-IKS-76 New version contains updates and security fixes.
OpenVPN Operator image v1.4.28 v1.4.30 New version contains updates and security fixes.
Portieris admission controller v0.13.8 v0.13.10 See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud. 4.12.37 4.12.40 Resolves CVE-2023-39325 and CVE-2023-44487. For more information, see the IBM security bulletin. See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit v4.12.0-20231010 v4.12.0-20231102 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.12.41_1567_openshift, released 08 November 2023

The following table shows the changes that are in the worker node fix pack 4.12.41_1567_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.39_1566_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud 4.12.39 4.12.41 For more information, see the change logs.

Change log for master fix pack 4.12.37_1565_openshift, released 25 October 2023

The following table shows the changes that are in the master fix pack 4.12.37_1565_openshift. Master patch updates are applied automatically.

Changes since version 4.12.26_1562_openshift
Component Previous Current Description
Calico v3.26.1 v3.26.3 See the Calico release notes.
Tigera Operator v1.30.5 v1.30.7 See the Tigera Operator release notes.
Cluster health image v1.4.2 v1.4.4 New version contains updates and security fixes.
IBM Calico extension 1390 1487 New version contains security fixes.
IBM Cloud Block Storage driver and plug-in v2.4.10 v2.4.12 New version contains updates and security fixes.
IBM Cloud Controller Manager v1.25.14-1 v1.25.14-8 New version contains updates and security fixes. The logic for the service.kubernetes.io/ibm-load-balancer-cloud-provider-vpc-idle-connection-timeout annotation has changed. The default idle timeout is dependent on your account settings. Usually, this value is 50. However, some allowlisted accounts have larger timeout settings. If you don't set the annotation, your load balancers use the timeout setting in your account. You can explicitly specify the timeout by setting this annotation.
IBM Cloud RBAC Operator 4e2f346 f0d3265 New version contains updates and security fixes.
Key Management Service provider v2.8.2 v2.8.4 New version contains updates and security fixes.
OpenVPN Operator image v1.4.27 v1.4.28 New version contains updates and security fixes.
Portieris admission controller v0.13.6 v0.13.8 See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud. 4.12.26 4.12.37 See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit v4.12.0-20230811 v4.12.0-20231010 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.12.39_1566_openshift, released 23 October 2023

The following table shows the changes that are in the worker node fix pack 4.12.39_1566_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.36_1564_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.12.36 4.12.39 For more information, see the change logs.
RHEL 8 Packages N/A N/A Worker node package update for CVE-2023-44487.

Change log for worker node fix pack 4.12.36_1564_openshift, released 9 October 2023

The following table shows the changes that are in the worker node fix pack 4.12.36_1564_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.34_1563_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.12.34 4.12.36 For more information, see the change log.
RHEL 8 Packages N/A N/A Worker node package updates for CVE-2023-3341, CVE-2023-4527, CVE-2007-4559, CVE-2023-4806, CVE-2023-4813, CVE-2023-4911.

Change log for worker node fix pack 4.12.34_1563_openshift, released 27 September 2023

The following table shows the changes that are in the worker node fix pack 4.12.34_1563_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.34_1557_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.12.34 4.12.34 No Change
RHEL 8 Packages 4.18.0-477.21.1.el8_8 4.18.0-477.27.1.el8_8 Worker node kernel & package updates for CVE-2023-2002, CVE-2023-3090, CVE-2023-3390, CVE-2023-3776, CVE-2023-4004, CVE-2023-20593, CVE-2023-29491, CVE-2023-30630, CVE-2023-35001, CVE-2023-35788.

Change log for master fix pack 4.12.26_1562_openshift, released 20 September 2023

The following table shows the changes that are in the master fix pack 4.12.26_1562_openshift. Master patch updates are applied automatically.

Changes since version 4.12.26_1555_openshift
Component Previous Current Description
Calico v3.25.1 v3.26.1 See the Calico release notes.
Tigera Operator v1.29.4 v1.30.5 See the Tigera Operator release notes.
Cluster health image v1.3.24 v1.4.2 Updated Go to version 1.20.8 and updated dependencies. Updated to new base image.
IBM Cloud Block Storage driver and plug-in v2.4.5 v2.4.10 Updated Go dependencies. Updated to newer UBI base image.
IBM Cloud Controller Manager v1.25.14-4 v1.25.14-1 Updated to support the Kubernetes 1.25.14 release. Updated Go to version 1.20.8 and updated Go dependencies.
IBM Cloud File Storage for Classic plug-in and monitor 434 435 Updated Go to version 1.20.6 and updated dependencies. Updated to newer UBI base image.
Key Management Service provider v2.7.3 v2.8.2 Updated Go dependencies. Changed to new base image.
Load balancer and load balancer monitor for IBM Cloud Provider 2631 2681 Updated Go to version 1.19.12 and updated Go dependencies.

Change log for worker node fix pack 4.12.32_1557_openshift, released 12 September 2023

The following table shows the changes that are in the worker node fix pack 4.12.32_1557_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.30_1556_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.12.30 4.12.32 For more information, see the change log.
RHEL 8 Packages N/A N/A Package updates for CVE-2022-40982, CVE-2022-41804, CVE-2023-23908.

Change log for master fix pack 4.12.26_1555_openshift, released 30 August 2023

The following table shows the changes that are in the master fix pack 4.12.26_1555_openshift. Master patch updates are applied automatically.

Changes since version 4.12.24_1552_openshift
Component Previous Current Description
Cluster health image v1.3.23 v1.3.24 Updated Go to version 1.19.12 and updated dependencies. Updated base image version to 378.
IBM Cloud Controller Manager v1.25.12-1 v1.25.12-4 Updated Go dependencies to resolve a CVE.
IBM Cloud File Storage for Classic plug-in and monitor 433 434 Updated Go to version 1.20.6 and updated dependencies. Updated to newer UBI base image.
Key Management Service provider v2.7.2 v2.7.3 Updated Go dependencies.
OpenVPN client 2.6.5-r0-IKS-41-amd64 2.6.5-r0-IKS-66-amd64 Updated openvpn components to fix CVEs.
OpenVPN server 2.6.5-r0-IKS-40-amd64 2.6.5-r0-IKS-57-amd64 Updated openvpn components to fix CVEs.
OpenVPN Operator image v1.4.26 v1.4.27 Updated ansible-operator version to 1.30.0
Portieris admission controller v0.13.5 v0.13.6 See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud. 4.12.24 4.12.26 See the change log for more information.
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit v4.12.0-20230710 v4.12.0-20230811 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.12.30_1556_openshift, released 28th August 2023

The following table shows the changes that are in the worker node fix pack 4.12.30_1556_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.28_1554_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.12.28 4.12.30 For more information, see the change log.

Change log for worker node fix pack 4.12.28_1554_openshift, released 15th August 2023

The following table shows the changes that are in the worker node fix pack 4.12.28_1554_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.26_1553_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.12.26 4.12.28 For more information, see the change log.
RHEL 7 Packages 3.10.0-1160.92.1.el7 3.10.0-1160.95.1.el7 Worker node kernel & package updates for CVE-2023-38408, CVE-2022-3564.
RHEL 8 Packages 4.18.0-477.15.1.el8_8 4.18.0-477.21.1.el8_8 Worker node kernel & package updates for CVE-2022-42896, CVE-2023-1281, CVE-2023-1829, CVE-2023-2124, CVE-2023-2194, CVE-2023-2235, CVE-2023-2602, CVE-2023-2603, CVE-2023-27536, CVE-2023-28321, CVE-2023-28484, CVE-2023-29469, CVE-2023-32681, CVE-2023-34969, CVE-2023-38408.

Change log for worker node fix pack 4.12.26_1553_openshift, released 1 August 2023

The following table shows the changes that are in the worker node fix pack 4.12.26_1553_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.24_1551_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.12.24 4.12.26 For more information, see the change logs.
RHEL 7 Packages N/A N/A Worker node package updates for CVE-2022-3564, CVE-2023-2828, CVE-2023-32233.
RHEL 8 Packages N/A N/A Worker node package update for CVE-2023-2828.

Change log for master fix pack 4.12.24_1552_openshift, released 28 July 2023

The following table shows the changes that are in the master fix pack 4.12.24_1552_openshift. Master patch updates are applied automatically.

Changes since version 4.12.20_1549_openshift
Component Previous Current Description
Cluster health image v1.3.21 v1.3.23 Updated Go to version 1.19.11 and updated Go dependencies. Updated UBI base image.
IBM Cloud Controller Manager v1.25.11-1 v1.25.12-1 Updated to support the Kubernetes 1.25.12 release. Updated Go dependencies and to Go version 1.20.6.
Key Management Service provider v2.6.7 v2.7.2 Updated Go to version 1.19.11 and updated Go dependencies. Updated UBI base image.
Load balancer and load balancer monitor for IBM Cloud Provider 2584 2631 Updated Go to version 1.19.10 and updated Go dependencies. Updated Alpine base image.
OpenVPN client 2.6.4-r0-IKS-34-amd64 2.6.5-r0-IKS-41-amd64 Updated OpenVPN to version 2.6.5.
OpenVPN Operator image v1.4.25 v1.4.26 Updated based image to resolve CVE-2023-24329, CVE-2020-24736, CVE-2023-26604, CVE-2023-1667, and CVE-2023-2283.
OpenVPN server 2.6.4-r0-IKS-33-amd64 2.6.5-r0-IKS-40-amd64 Updated OpenVPN to version 2.6.5.
Red Hat OpenShift on IBM Cloud. 4.12.20 4.12.24 Resolves CVE-2023-1260. For more information, see the IBM security bulletin. See the Red Hat OpenShift on IBM Cloud release notes..
Red Hat OpenShift on IBM Cloud Control Plane Operator and Metrics Server v4.12.0-20230417 v4.12.0-20230710 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud toolkit 4.12.0+20230417 4.12.0+20230710 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.12.24_1551_openshift, released 17th July 2023

The following table shows the changes that are in the worker node fix pack 4.12.24_1551_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.22_1550_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud 4.12.22 4.12.24 See change log.
RHEL 7 Packages N/A N/A N/A
RHEL 8 Packages N/A N/A N/A

Change log for worker node fix pack 4.12.22_1550_openshift, released 03 July 2023

The following table shows the changes that are in the worker node fix pack 4.12.22_1550_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.21_1547_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.12.21 4.12.22 see change log.

Change log for master fix pack 4.12.20_1549_openshift, released 27 June 2023

The following table shows the changes that are in the master fix pack 4.12.20_1549_openshift. Master patch updates are applied automatically.

Changes since version 4.12.16_1545_openshift
Component Previous Current Description
Tigera Operator v1.29.3 v1.29.4 See the Tigera Operator release notes.
Cluster health image v1.3.20 v1.3.21 Updated Go dependencies and to Go version 1.19.10.
etcd v3.5.8 v3.5.9 See the etcd release notes.
IBM Cloud Controller Manager v1.25.9-7 v1.25.11-1 Updated to support the Kubernetes 1.25.11 release. Updated Go dependencies and to Go version 1.19.10. Updated calicoctl and vpcctl.
IBM Cloud File Storage for Classic plug-in and monitor 431 433 Updated Go to version 1.20.4. Updated UBI base image.
Key Management Service provider v2.6.6 v2.6.7 Updated Go dependencies and to Go version 1.19.10.
Load balancer and load balancer monitor for IBM Cloud Provider 2486 2584 Updated Go dependencies and to Go version 1.19.9. Updated base image.
Red Hat OpenShift on IBM Cloud 4.12.16 4.12.20 https://docs.openshift.com/container-platform/
OpenVPN client 2.5.8-r0-IKS-674-amd64 2.6.4-r0-IKS-34-amd64 Upgrade openvpn to version 2.6.4-r0.
OpenVPN server 2.5.8-r0-IKS-673-amd64 2.6.4-r0-IKS-33-amd64 Upgrade openvpn to version 2.6.4-r0.
OpenVPN Operator image v1.4.23 v1.4.25 Updated OpenVPN configuration to provide shutdown grace period before terminating connections.

Change log for worker node fix pack 4.12.21_1547_openshift, released 19 June 2023

The following table shows the changes that are in the worker node fix pack 4.12.21_1547_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.19_1546_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.12.19 4.12.21 For more information, see the change logs.
RHEL 8 Packages N/A N/A Worker node package updates for CVE-2023-32067,CVE-2023-24329.

Change log for worker node fix pack 4.12.19_1546_openshift, released 5 June 2023

The following table shows the changes that are in the worker node fix pack 4.12.19_1546_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.16_1544_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.12.16 4.12.19 For more information, see the change logs.
RHEL 7 Packages N/A N/A N/A
RHEL 8 Packages 4.18.0-477.10.1.el8_8 4.18.0-477.13.1.el8_8 Worker node kernel & package updates for CVE-2023-22490, CVE-2023-23946, CVE-2023-25652, CVE-2023-25815, CVE-2023-29007, CVE-2023-32233.

Change log for master fix pack 4.12.16_1545_openshift, released 25 May 2023

The following table shows the changes that are in the master fix pack 4.12.16_1545_openshift. Master patch updates are applied automatically.

Changes since version 4.12.13_1541_openshift
Component Previous Current Description
Cluster health image v1.3.19 v1.3.20 Updated Go to version 1.19.9 and updated dependencies. Updated the base image. Resolved add-on health bugs.
IBM Cloud Controller Manager v1.25.9-2 v1.25.9-7 Updated support of the Kubernetes 1.25.9 release. Updated Go dependencies. Key rotation.
Key Management Service provider v2.6.5 v2.6.6 Updated Go to version 1.19.9 and updated dependencies.
OpenVPN client 2.6.4-r0-IKS-27 2.5.8-r0-IKS-674 Reverted to previous version.
OpenVPN server 2.6.4-r0-IKS-26 2.5.8-r0-IKS-673 Reverted to previous version.
Portieris admission controller v0.13.4 v0.13.5 See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud. 4.12.13 4.12.16 For more information, see the change log.

Change log for worker node fix pack 4.12.16_1544_openshift, released 23 May 2023

The following table shows the changes that are in the worker node fix pack 4.12.16_1544_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.15_1542_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.12.15 4.12.16 For more information, see the change logs.
RHEL 8 Packages 4.18.0-425.19.2.el8_7 4.18.0-477.10.1.el8_8 Worker node kernel & package updates for CVE-2020-10735, CVE-2021-26341, CVE-2021-28861, CVE-2021-33655, CVE-2021-33656, CVE-2022-1462, CVE-2022-1679, CVE-2022-1705, CVE-2022-1789, CVE-2022-1962, CVE-2022-20141, CVE-2022-2196, CVE-2022-24765, CVE-2022-25265, CVE-2022-2663, CVE-2022-27664, CVE-2022-2795, CVE-2022-28131, CVE-2022-29187, CVE-2022-2928, CVE-2022-2929, CVE-2022-3028, CVE-2022-30594, CVE-2022-30629, CVE-2022-30630, CVE-2022-30631, CVE-2022-30632, CVE-2022-30633, CVE-2022-30635, CVE-2022-32148, CVE-2022-32189, CVE-2022-3239, CVE-2022-3522, CVE-2022-3524, CVE-2022-35252, CVE-2022-3564, CVE-2022-3566, CVE-2022-3567, CVE-2022-3619, CVE-2022-36227, CVE-2022-3623, CVE-2022-3625, CVE-2022-3628, CVE-2022-3707, CVE-2022-39188, CVE-2022-39189, CVE-2022-39253, CVE-2022-39260, CVE-2022-41218, CVE-2022-4129, CVE-2022-41674, CVE-2022-41717, CVE-2022-41973, CVE-2022-4269, CVE-2022-42703, CVE-2022-42720, CVE-2022-42721, CVE-2022-42722, CVE-2022-43552, CVE-2022-43750, CVE-2022-45061, CVE-2022-47929, CVE-2023-0394, CVE-2023-0461, CVE-2023-0778, CVE-2023-1195, CVE-2023-1582, CVE-2023-23454, CVE-2023-27535.
Haproxy N/A N/A N/A

Change log for master fix pack 4.12.13_1541_openshift, released 2 May 2023

The following table shows the changes that are in the master fix pack 4.12.13_1540_openshift. Master patch updates are applied automatically.

Changes since version 4.12.11_1538_openshift
Component Previous Current Description
etcd v3.5.7 v3.5.8 See the etcd release notes.
IBM Cloud Controller Manager v1.25.9-1 v1.25.9-2 Update Go dependencies
Red Hat OpenShift on IBM Cloud. 4.12.11 4.12.13 For more information, see the change log.

Change log for master fix pack 4.12.11_1539_openshift, released 27 April 2023

The following table shows the changes that are in the master fix pack 4.12.11_1538_openshift. Master patch updates are applied automatically.

Changes since version 4.12.7_1534_openshift
Component Previous Current Description
Calico v3.25.0 v3.25.1 See the Calico release notes.
Tigera Operator v1.29.0 v1.29.3 See the Tigera Operator release notes.
Cluster health image v1.3.17 v1.3.19 Updated Go to version 1.19.8 and updated dependencies.
IBM Calico extension 1366-amd64 1390-amd64 Eliminate IP syscall.
IBM Cloud Block Storage driver and plug-in v2.4.0 v2.4.5 Updated universal base image (UBI) to resolve CVEs. Updated Go to version 1.19.8 and updated dependencies.
IBM Cloud Controller Manager v1.25.8-1 v1.25.9-1 Updated to support the Kubernetes 1.25.9 release. Updated Go dependencies and to Go version 1.19.8.
IBM Cloud File Storage for Classic plug-in and monitor 429 431 Updated Go to version 1.19.8 and updated dependencies. Update UBI base image.
Key Management Service provider v2.6.4 v2.6.5 Updated Go to version 1.19.7 and updated dependencies.
Load balancer and load balancer monitor for IBM Cloud Provider 2420 2486 Updated Go to version 1.19.7 and updated dependencies.
Red Hat OpenShift on IBM Cloud. 4.12.7 4.12.11 For more information, see the change log.
Red Hat OpenShift on IBM Cloud configuration N/A N/A Set proper topology spread constraints for the default Red Hat OpenShift on IBM Cloud image registry configuration used by classic clusters.
OpenVPN Operator image v1.4.22 v1.4.23 Updated base image to resolve CVEs: CVE-2022-4304, CVE-2022-4450, CVE-2023-0215, CVE-2023-0286, CVE-2023-0361.
Portieris admission controller v0.13.3 v0.13.4 See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator and Metrics Server 4.12.0-20230314 4.12.0-20230417 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud toolkit 4.12.0+20230314 4.12.0+20230417 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.12.15_1542_openshift, released 24 April 2023

The following table shows the changes that are in the worker node fix pack 4.12.15_1542_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.13_1539_openshift
Component Previous Current Description
RHEL 8 Packages N/A N/A N/A
Red Hat OpenShift on IBM Cloud. 4.12.13 4.12.15 SeeĀ change logs.
Haproxy N/A N/A N/A

Change log for worker node fix pack 4.12.13_1539_openshift, released 24 April 2023

The following table shows the changes that are in the worker node fix pack 4.12.13_1539_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.10_1536_openshift
Component Previous Current Description
RHEL 8 Packages N/A N/A N/A
Red Hat OpenShift on IBM Cloud. 4.12.10 4.12.13 SeeĀ change logs.
Haproxy N/A N/A N/A

Change log for worker node fix pack 4.12.10_1536_openshift, released 11 April 2023

The following table shows the changes that are in the worker node fix pack 4.12.10_1536_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.8_1535_openshift
Component Previous Current Description
RHEL 8 Packages 4.18.0-425.13.1 4.18.0-425.19.2 Worker node kernel & package updates for CVE-2022-4269, CVE-2022-4304, CVE-2022-4378, CVE-2022-4450, CVE-2023-0215, CVE-2023-0266, CVE-2023-0286, CVE-2023-0361, CVE-2023-0386.
Red Hat OpenShift on IBM Cloud. 4.12.8 4.12.10 For more information, see the change log.
Haproxy 8398d1 8895ad CVE-2023-0361.

Change log for master fix pack 4.12.7_1534_openshift, released 28 March 2023

The following table shows the changes that are in the master fix pack 4.12.7_1534_openshift. Master patch updates are applied automatically.

Changes since version 4.12.3_1530_openshift
Component Previous Current Description
Cluster health image v1.3.16 v1.3.17 Updated Go to version 1.19.7 and updated dependencies.
IBM Calico extension 1308-amd64 1366-amd64 Updated to resolve CVE-2023-23916.
IBM Cloud Block Storage driver and plug-in v2.3.7 v2.4.0 Removed ExpandInUsePersistentVolumes feature gate.
IBM Cloud Controller Manager v1.25.6-10 v1.25.8-1 Updated to support the Kubernetes 1.25.8 release.
IBM Cloud File Storage for Classic plug-in and monitor 427 429 Updated universal base image (UBI) to resolve CVEs. Updated Go to version 1.19.6 and updated dependencies.
Key Management Service provider v2.6.3 v2.6.4 Updated Go to version 1.19.7 and updated dependencies.
Load balancer and load balancer monitor for IBM Cloud Provider 2383 2420 Updated the image to resolve CVEs.
OpenVPN Operator image v1.5.3 v1.4.22 Updated ansible-operator to v1.28.0 to fix CVEs.
Red Hat OpenShift on IBM Cloud. 4.12.3 4.12.7 See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit v4.12.0-20230220 v4.12.0-20230314 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.12.8_1535_openshift, released 27 March 2023

The following table shows the changes that are in the worker node fix pack 4.12.8_1535_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.6_1531_openshift
Component Previous Current Description
RHEL 8 Packages N/A N/A N/A
Red Hat OpenShift on IBM Cloud. 4.12.6 4.12.8 For more information, see the change log.
Haproxy af5031 8398d1 CVE-2023-23916.

Change log for worker node fix pack 4.12.6_1531_openshift, released 13 March 2023

The following table shows the changes that are in the worker node fix pack 4.12.6_1531_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.4_1528_openshift
Component Previous Current Description
RHEL 8 Packages N/A N/A Worker node package updates for CVE-2023-23916.
Red Hat OpenShift on IBM Cloud. 4.12.4 4.12.6 For more information, see the change log.

Change log for master fix pack 4.12.3_1530_openshift, released 2 March 2023

The following table shows the changes that are in the master fix pack 4.12.3_1530_openshift. Master patch updates are applied automatically.

Changes since version 4.12.2_1527_openshift
Component Previous Current Description
Cluster health image v1.3.15 v1.3.16 Updated Go dependencies and to Go version 1.19.6. Updated universal base image (UBI) to resolve CVEs.
etcd v3.5.6 v3.5.7 See the etcd release notes.
IBM Calico extension 1305-amd64 1308-amd64 Updated universal base image (UBI) to resolve CVE-2022-47629.
IBM Cloud Controller Manager v1.25.6-8 v1.25.6-10 Updated Go dependencies. Updated k8s.io/utils digest to a5ecb01.
OpenVPN client 2.5.6-r1-IKS-648 2.5.8-r0-IKS-674-amd64 Remediate CVE-2023-0286, CVE-2022-4304, CVE-2022-4450, CVE-2023-0215.
OpenVPN server 2.5.6-r1-IKS-647 2.5.8-r0-IKS-673-amd64 Remediate CVE-2023-0286, CVE-2022-4304, CVE-2022-4450, CVE-2023-0215.
OpenVPN Operator image v1.4.20 v1.5.2 Resolve issue with openvpn container restarts
Red Hat OpenShift on IBM Cloud. 4.12.2 4.12.3 See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator v4.12.0-20230124 v4.12.0-20230220 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud Metrics Server v4.12.0-20230124 v4.12.0-20230220 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud toolkit 4.12.0+20230124 4.12.0+20230220 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.12.4_1528_openshift, released 27 February 2023

The following table shows the changes that are in the worker node fix pack 4.12.4_1528_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.12.2_1526_openshift
Component Previous Current Description
RHEL 8 Packages 4.18.0-425.10.1 4.18.0-425.13.1 Worker node & kernel package updates for CVE-2020-10735, CVE-2021-28861, CVE-2022-2873, CVE-2022-40897, CVE-2022-41222, CVE-2022-43945, CVE-2022-4415, CVE-2022-45061, CVE-2022-48303.
Red Hat OpenShift 4.12.2 4.12.4 For more information, see the change log.
HAProxy d38f89 af5031 CVE-2022-40897, CVE-2022-4415, CVE-2020-10735, CVE-2021-28861, CVE-2022-45061.

Change log for master fix pack 4.12.2_1527_openshift and worker node fix pack 4.12.2_1526_openshift, released 23 February 2023

The following table shows the changes that are in the master fix pack 4.12.2_1627_openshift and worker node fix pack 4.12.2_1526_openshift. Master patch updates are applied automatically. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since master fix pack 4.11.22_1540_openshift and worker fix pack 4.11.26_1542_openshift
Component Previous Current Description
Calico v3.23.5 v3.25.0 See the Calico release notes. Calico configuration now sets a BGP password. In addition, the default FelixConfiguration resource is updated to set natPortRange to 32768:65535 if not already set. For more information, see Why am I seeing SNAT port issues and egress connection failures?.
Tigera Operator v1.27.17 v1.29.0 See the Tigera Operator release notes.
Gateway-enabled cluster controller 1902 1987 Image updated to resolve CVE-2022-41721, CVE-2022-41717, CVE-2022-4304, CVE-2022-4450, CVE-2023-0215, and CVE-2023-0286.
IBM Calico extension 1280-amd64 1305-amd64 Updated Go version to 1.19.5.
IBM Cloud Block Storage driver and plug-in v2.3.6 v2.3.7 Updated Go version to 1.18.9. Updated universal base image (UBI) to version 8.7-1031.1675784874.
IBM Cloud Controller Manager v1.24.10-2 v1.25.6-8 Updated to support the Kubernetes 1.25.6 release. Updated Go dependencies and to Go version 1.19.5.
IBM Cloud File Storage plug-in and monitor 425 427 Image updated to resolve CVE-2022-47629.
Key Management Service provider v2.5.13 v2.6.3 Key Management Service (KMS) pod termination is delayed until the Kubernetes API server terminates. Updated Go dependencies and to Go version 1.19.6.
Load balancer and load balancer monitor for IBM Cloud Provider 2325 2383 Updated Go dependencies and to Go version 1.19.5.
Red Hat OpenShift (master) 4.11.22 4.12.2 See the Red Hat OpenShift release notes. Updated to resolve CVE-2022-3172. For more information, see the Security bulletin.
Red Hat OpenShift (worker node) 4.11.26 4.12.2 See the Red Hat OpenShift release notes.
Red Hat OpenShift Control Plane Operator v4.11.0-20230123 v4.12.0-20230124 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
OpenVPN Operator image v1.4.13 v1.4.20 Updated ansible-operator base image to version v1.26.1 to resolve CVEs.
Pause container image 3.8 3.9 See the pause container image release notes.
Portieris admission controller v0.12.6 v0.13.3 See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud Metrics Server v4.11.0-20230123 v4.12.0-20230124 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud toolkit 4.11.0+20230123 4.12.0+20230124 See the Red Hat OpenShift on IBM Cloud toolkit release notes.