IBM Cloud Docs
Version 4.14 change log

Version 4.14 change log

View information of version changes for major, minor, and patch updates that are available for your Red Hat® OpenShift® on IBM Cloud® clusters that run version 4.14. Changes include updates to Red Hat OpenShift, Kubernetes, and IBM Cloud Provider components.

Overview

Unless otherwise noted in the change logs, the IBM Cloud provider version enables Red Hat OpenShift APIs and features that are at beta. Red Hat OpenShift alpha features are disabled and subject to change.

Check the Security Bulletins on IBM Cloud Status for security vulnerabilities that affect Red Hat OpenShift on IBM Cloud. You can filter the results to view only Kubernetes Service security bulletins that are relevant to Red Hat OpenShift on IBM Cloud. Change log entries that address other security vulnerabilities but don't include an IBM security bulletin are for vulnerabilities that are not known to affect Red Hat OpenShift on IBM Cloud in normal usage. If you run privileged containers, run commands on the workers, or execute untrusted code, then you might be at risk.

Master patch updates are applied automatically. Worker node patch updates can be applied by reloading or updating the worker nodes. For more information about major, minor, and patch versions and preparation actions between minor versions, see Red Hat OpenShift versions.

Change log for worker node fix pack 4.14.25_1564_openshift, released 23 May 2024

The following table shows the changes that are in the worker node fix pack 4.14.25_1564_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.14.23_1561_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.14.23 4.14.25 For more information, see the change logs.
RHEL 8 Packages 4.18.0-513.24.1.el8_9 4.18.0-513.24.1.el8_9 Worker node package updates for RHSA-2024:2722, CVE-2024-2961.
HAProxy d225100 4e826da CVE-2024-2961, CVE-2024-28834.

Change log for master fix pack 4.14.22_1563_openshift, released 09 May 2024

The following table shows the changes that are in the master fix pack 4.14.22_1563_openshift. Master patch updates are applied automatically.

Changes since version 4.14.20_1558_openshift
Component Previous Current Description
IBM Cloud Block Storage driver and plug-in v2.5.8 v2.5.9 New version contains updates and security fixes.
IBM Cloud Controller Manager v1.27.12-10 v1.27.13-4 New version contains updates and security fixes.
IBM Cloud File Storage for Classic for Classic plug-in and monitor 442 443 New version contains updates and security fixes.
Red Hat OpenShift on IBM Cloud. 4.14.20 4.14.22 See the Red Hat OpenShift on IBM Cloud release notes.

Change log for worker node fix pack 4.14.23_1561_openshift, released 06 May 2024

The following table shows the changes that are in the worker node fix pack 4.14.23_1561_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.14.21_1559_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.14.21 4.14.23 For more information, see the change logs.
RHEL 8 Packages 4.18.0-513.24.1.el8_9 4.18.0-513.24.1.el8_9 Worker node package updates for RHSA-2024:2098, CVE-2024-1753.
HAProxy 295dba8 295dba8 N/A

Change log for master fix pack 4.14.20_1558_openshift, released 24 April 2024

The following table shows the changes that are in the master fix pack 4.14.20_1558_openshift. Master patch updates are applied automatically.

Changes since version 4.14.16_1555_openshift
Component Previous Current Description
Cluster health image v1.5.3 v1.5.4 New version contains updates and security fixes.
etcd v3.5.12 v3.5.13 See the etcd release notes.
IBM Cloud Controller Manager v1.27.12-1 v1.27.12-10 New version contains updates and security fixes.
IBM Cloud RBAC Operator bd30030 4c5d156 New version contains updates and security fixes.
Key Management Service provider v2.8.8 v2.8.9 New version contains updates and security fixes.
Load balancer and load balancer monitor for IBM Cloud Provider 2831 2867 New version contains updates and security fixes.
Portieris admission controller v0.13.12 v0.13.13 See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud. 4.14.16 4.14.20 See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit 4.14.0+20240226 4.14.0+20240412 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.14.21_1559_openshift, released 22 April 2024

The following table shows the changes that are in the worker node fix pack 4.14.21_1559_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.14.19_1557_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.14.19 4.14.21 For more information, see the change logs.
RHEL 8 Packages 4.18.0-513.24.1.el8_9 4.18.0-513.24.1.el8_9 Worker node package updates for RHSA-2024:1782, CVE-2023-4408, CVE-2023-50387, CVE-2023-50868, RHSA-2024:1784, CVE-2024-28834.
HAProxy 295dba8 4e826da Security fixes for CVE-2024-28834.

Change log for worker node fix pack 4.14.19_1557_openshift, released 8 April 2024

The following table shows the changes that are in the worker node fix pack 4.14.19_1557_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.14.17_1556_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.14.17 4.14.19 For more information, see the change logs.
RHEL 8 Packages 4.18.0-513.18.1.el8_9 4.18.0-513.24.1.el8_9 Worker node and kernel packages for RHSA-2024:1607, CVE-2021-33631, CVE-2022-38096, CVE-2023-51042, CVE-2023-6546, CVE-2023-6931, CVE-2024-0565, CVE-2024-1086, RHSA-2024:1601, CVE-2023-28322, CVE-2023-38546, CVE-2023-46218, RHSA-2024:1615, CVE-2023-52425, RHSA-2024:1610, CVE-2022-48624.
HAProxy 512b32a 295dba8 Security fixes for CVE-2023-28322, CVE-2023-38546, CVE-2023-46218, CVE-2023-52425.

Change log for master fix pack 4.14.16_1555_openshift, released 27 March 2024

The following table shows the changes that are in the master fix pack 4.14.16_1555_openshift. Master patch updates are applied automatically.

Changes since version 4.14.12_1552_openshift
Component Previous Current Description
Cluster health image v1.5.2 v1.5.3 New version contains updates and security fixes.
IBM Calico extension 1534 1537 New version contains security fixes.
IBM Cloud Block Storage driver and plug-in v2.5.7 v2.5.8 New version contains updates and security fixes.
IBM Cloud Controller Manager v1.27.11-2 v1.27.12-1 New version contains updates and security fixes.
IBM Cloud File Storage for Classic plug-in and monitor 441 442 New version contains updates and security fixes.
Key Management Service provider v2.8.7 v2.8.8 New version contains updates and security fixes.
Load balancer and load balancer monitor for IBM Cloud Provider 2807 2831 New version contains updates and security fixes.
Portieris admission controller v0.13.11 v0.13.12 See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud. 4.14.12 4.14.16 See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit 4.14.0+20240209 4.14.0+20240226 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.14.17_1556_openshift, released 25 March 2024

The following table shows the changes that are in the worker node fix pack 4.14.17_1556_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.14.15_1554_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.14.15 4.14.17 For more information, see the change logs.
RHEL 8 Packages 4.18.0-513.18.1.el8_9 4.18.0-513.18.1.el8_9 N/A
CRI-O 1.27.4-2 1.27.4-3 N/A
HAProxy 512b32 512b32 N/A

Change log for worker node fix pack 4.14.15_1554_openshift, released 13 March 2024

The following table shows the changes that are in the worker node fix pack 4.14.15_1554_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.14.13_1553_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.14.13 4.14.15 For more information, see the change logs.
RHEL 8 Packages 4.18.0-513.18.1.el8_9 4.18.0-513.18.1.el8_9 N/A
HAProxy a13673 512b32 N/A

Change log for master fix pack 4.14.12_1552_openshift, released 28 February 2024

The following table shows the changes that are in the master fix pack 4.14.12_1552_openshift. Master patch updates are applied automatically.

Changes since version 4.14.8_1545_openshift
Component Previous Current Description
Cluster health image v1.5.1 v1.5.2 New version contains updates and security fixes.
etcd v3.5.11 v3.5.12 See the etcd release notes.
IBM Calico extension 1525 1534 New version contains security fixes.
IBM Cloud Block Storage driver and plug-in v2.5.4 v2.5.7 New version contains updates and security fixes.
IBM Cloud Controller Manager v1.27.10-3 v1.27.11-2 New version contains updates and security fixes.
IBM Cloud File Storage for Classic plug-in and monitor 439 441 New version contains updates and security fixes.
IBM Cloud RBAC Operator 7185ea1 bd30030 New version contains updates and security fixes.
Key Management Service provider v2.8.6 v2.8.7 New version contains updates and security fixes.
Load balancer and load balancer monitor for IBM Cloud Provider 2789 2807 New version contains updates and security fixes.
Red Hat OpenShift on IBM Cloud. 4.14.8 4.14.12 See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit v4.14.0-20240109 v4.14.0-20240209 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.14.13_1553_openshift, released 26 February 2024

The following table shows the changes that are in the worker node fix pack 4.14.13_1553_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.14.11_1547_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.14.11 4.14.13 For more information, see the change logs.
RHEL 8 Packages 4.18.0-513.11.1.el8_9 4.18.0-513.18.1.el8_9 Package updates for RHSA-2024:0897, CVE-2022-3545, CVE-2022-41858, CVE-2023-1073, CVE-2023-1838, CVE-2023-2166, CVE-2023-2176, CVE-2023-40283, CVE-2023-45871, CVE-2023-4623, CVE-2023-46813, CVE-2023-4921, CVE-2023-5717, CVE-2023-6356, CVE-2023-6535, CVE-2023-6536, CVE-2023-6606, CVE-2023-6610, CVE-2023-6817, CVE-2024-0646, RHSA-2024:0768, CVE-2020-28241, RHSA-2024:0889, CVE-2019-13224, CVE-2019-16163, CVE-2019-19012, CVE-2019-19203, CVE-2019-19204, RHSA-2024:0811, CVE-2023-28486, CVE-2023-28487, CVE-2023-42465.

Change log for worker node fix pack 4.14.11_1547_openshift, released 12 February 2024

The following table shows the changes that are in the worker node fix pack 4.14.11_1547_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.14.10_1546_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.14.10 4.14.11 For more information, see the change logs.
RHEL 8 Packages 4.18.0-477.27.1.el8_8 4.18.0-513.11.1.el8_9 Package updates for RHSA-2024:0752, CVE-2024-21626, RHSA-2023:7549, CVE-2022-45884, CVE-2022-45886, CVE-2022-45919, CVE-2023-1192, CVE-2023-2163, CVE-2023-3812, CVE-2023-5178, RHSA-2024:0113, CVE-2022-36402, CVE-2023-20569, CVE-2023-2162, CVE-2023-42753, CVE-2023-4622, CVE-2023-5633, RHSA-2023:7077, CVE-2021-43975, CVE-2022-28388, CVE-2022-3594, CVE-2022-3640, CVE-2022-38457, CVE-2022-40133, CVE-2022-40982, CVE-2022-42895, CVE-2022-45869, CVE-2022-45887, CVE-2022-4744, CVE-2023-0458, CVE-2023-0590, CVE-2023-0597, CVE-2023-1073, CVE-2023-1074, CVE-2023-1075, CVE-2023-1079, CVE-2023-1118, CVE-2023-1206, CVE-2023-1252, CVE-2023-1382, CVE-2023-1855, CVE-2023-1989, CVE-2023-1998, CVE-2023-2269, CVE-2023-23455, CVE-2023-2513, CVE-2023-26545, CVE-2023-28328, CVE-2023-28772, CVE-2023-30456, CVE-2023-31084, CVE-2023-3141, CVE-2023-31436, CVE-2023-3161, CVE-2023-3212, CVE-2023-3268, CVE-2023-33203, CVE-2023-33951, CVE-2023-33952, CVE-2023-35823, CVE-2023-35824, CVE-2023-35825, CVE-2023-3609, CVE-2023-3611, CVE-2023-3772, CVE-2023-4128, CVE-2023-4132, CVE-2023-4155, CVE-2023-4206, CVE-2023-4207, CVE-2023-4208, CVE-2023-4732, CVE-2024-0443, RHSA-2023:7877, CVE-2023-3446, CVE-2023-3817, CVE-2023-5678, RHSA-2023:7187, CVE-2023-4016, RHSA-2023:7112, CVE-2023-4641, RHSA-2023:7166, CVE-2023-22745, RHSA-2023:7177, CVE-2022-3094, RHSA-2023:7116, CVE-2022-4904, RHSA-2023:7207, CVE-2020-22217, CVE-2023-31130, RHSA-2023:6943, CVE-2023-1786, RHSA-2023:6939, CVE-2022-3064, CVE-2022-41723, CVE-2022-41724, CVE-2022-41725, CVE-2023-24534, CVE-2023-24536, CVE-2023-24537, CVE-2023-24538, CVE-2023-24539, CVE-2023-24540, CVE-2023-25173, CVE-2023-25809, CVE-2023-27561, CVE-2023-28642, CVE-2023-29400, CVE-2023-29406, CVE-2023-3978, RHSA-2024:0155, CVE-2023-5981, RHSA-2024:0627, CVE-2024-0553, RHSA-2023:6976, CVE-2020-12762, RHSA-2024:0628, CVE-2023-48795, RHSA-2024:0119, CVE-2023-39615, RHSA-2023:7109, CVE-2023-20569, RHSA-2024:0606, CVE-2023-48795, CVE-2023-51385, RHSA-2023:7174, CVE-2023-31486, RHSA-2023:6944, CVE-2022-48468, RHSA-2023:7096, CVE-2023-23931, RHSA-2023:7176, CVE-2007-4559, RHSA-2024:0116, CVE-2023-43804, CVE-2023-45803, RHSA-2023:7151, CVE-2007-4559, RHSA-2024:0114, CVE-2022-48560, CVE-2022-48564, RHSA-2024:0256, CVE-2023-27043, RHSA-2023:7034, CVE-2007-4559, CVE-2023-32681, RHSA-2023:7058, CVE-2022-41723, RHSA-2024:0647, CVE-2021-35937, CVE-2021-35938, CVE-2021-35939, RHSA-2024:0253, CVE-2023-7104, RHSA-2023:7057, CVE-2023-33460.

Change log for master fix pack 4.14.8_1545_openshift, released 31 January 2024

The following table shows the changes that are in the master fix pack 4.14.8_1545_openshift. Master patch updates are applied automatically.

Changes since version 4.14.5_1539_openshift
Component Previous Current Description
Calico v3.26.3 v3.26.4 See the Calico release notes.
Tigera Operator v1.30.7 v1.30.9 See the Tigera Operator release notes.
Calico policy controller v3.26.3 v3.26.4 See the Calico release notes.
Cluster health image v1.5.0 v1.5.1 New version contains security fixes.
etcd v3.5.10 v3.5.11 See the etcd release notes.
IBM Calico extension 1512 1525 New version contains security fixes.
IBM Cloud Controller Manager v1.27.8-6 v1.27.10-3 New version contains updates and security fixes.
IBM Cloud RBAC Operator e544e35 7185ea1 New version contains updates and security fixes.
Key Management Service provider v2.8.5 v2.8.6 New version contains updates and security fixes.
Load balancer and load balancer monitor for IBM Cloud Provider 2767 2789 New version contains updates and security fixes.
Portieris admission controller v0.13.10 v0.13.11 See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud. 4.14.5 4.14.8 See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit v4.14.0-20231128 v4.14.0-20240109 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.14.10_1546_openshift, released 29 January 2024

The following table shows the changes that are in the worker node fix pack 4.14.10_1546_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.14.8_1544_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.14.8 4.14.10 For more information, see the change logs.
Rhel8 Packages 4.18.0-477.27.1.el8_8 4.18.0-477.27.1.el8_8 N/A
HAProxy e105dc a13673 Security fixes for CVE-2023-7104, CVE-2023-27043.

Change log for worker node fix pack 4.14.8_1544_openshift, released 16 January 2024

The following table shows the changes that are in the worker node fix pack 4.14.8_1544_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.14.6_1542_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud 4.14.6 4.14.8 For more information, see the change logs.
RHEL 8 Packages N/A N/A N/A
Haproxy 3060b0 e105dc CVE-2023-39615, CVE-2023-5981, CVE-2022-48560, CVE-2022-48564.

Change log for worker node fix pack 4.14.6_1542_openshift, released 02 January 2024

The following table shows the changes that are in the worker node fix pack 4.14.6_1542_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.14.6_1541_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud 4.14.6 4.14.6 N/A
RHEL 8 Packages 4.18.0-477.27.1.el8_8 4.18.0-477.27.1.el8_8 N/A

Change log for master fix pack 4.14.5_1539_openshift and worker node fix pack 4.14.4_1538_openshift, released 13 December 2023

Changes since master fix pack 4.13.23_1550_openshift and worker fix pack 4.13.24_1551_openshift.
Component Previous Current Description
Cluster health image v1.4.5 v1.5.0 New version contains updates and security fixes.
etcd N/A N/A etcd is now automatically defragmented when necessary.
HAProxy configuration N/A N/A Updated master health probes to use the /livez/ping endpoint.
IBM Cloud Block Storage driver and plug-in v2.4.14 v2.5.4 New version contains updates and security fixes.
IBM Cloud Controller Manager v1.26.11-6 v1.27.8-6 New version contains updates and security fixes.
Removed: OpenVPN Operator, client, and server N/A N/A Konnectivity components (part of Red Hat OpenShift) replace the OpenVPN components as the network proxy used to secure the communication of the Kubernetes API server master to worker nodes in the cluster.
Red Hat OpenShift (master) 4.13.23 4.14.5 See the Red Hat OpenShift release notes.
Red Hat OpenShift (worker node) 4.13.24 4.14.4 See the Red Hat OpenShift release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit 4.13.0+20231102 4.14.0+20231128 See the Red Hat OpenShift on IBM Cloud toolkit release notes.