IBM Cloud Docs
Kubernetes version 1.28 change log

Kubernetes version 1.28 change log

This version is deprecated. Update your cluster to a supported version as soon as possible.

View information about version changes for major, minor, and patch updates that are available for your IBM Cloud® Kubernetes Service clusters that run version 1.28. Changes include updates to Kubernetes and IBM Cloud Provider components.

Overview

In clusters that run version 1.23 or earlier, the IBM Cloud provider version enables Kubernetes APIs and features that are at beta. Most new beta features are disabled by default. Kubernetes alpha features, which are subject to change, are disabled in all versions. For more information, see the Default service settings for Kubernetes components and the feature gates for each version.

For more information about major, minor, and patch versions and preparation actions between minor versions, see Kubernetes versions.

Check the Security Bulletins on IBM Cloud Status for security vulnerabilities that affect IBM Cloud Kubernetes Service. You can filter the results to view only Kubernetes Cluster security bulletins that are relevant to IBM Cloud Kubernetes Service. Change log entries that address other security vulnerabilities but don't also refer to an IBM security bulletin are for vulnerabilities that are not known to affect IBM Cloud Kubernetes Service in normal usage. If you run privileged containers, run commands on the workers, or execute untrusted code, then you might be at risk.

Some change logs are for worker node fix packs, and apply only to worker nodes. You must apply these patches to ensure security compliance for your worker nodes. These worker node fix packs can be at a higher version than the master because some build fix packs are specific to worker nodes. Other change logs are for master fix packs, and apply only to the cluster master. Master fix packs might not be automatically applied. You can choose to apply them manually. For more information about patch types, see Update types.

Version 1.28 change log

Review the version 1.28 change log.

Change log for worker node fix pack 1.28.15_1587, released 18 November 2024

The following table shows the changes that are in the worker node fix pack 1.28.15_1587. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 1.28.14_1585
Component Previous Current Description
Ubuntu 20.04 Packages 5.4.0-200-generic 5.4.0-200-generic N/A
Containerd 1.7.23 1.7.23 N/A
Kubernetes 1.28.14 1.28.15 For more information, see the change logs.
HAProxy 885986 55c148 Security fixes for CVE-2023-45539, CVE-2024-3596, CVE-2019-12900, CVE-2024-50602.
GPU Device Plug-in and Installer 33c70dd 96f9b63 Security fixes for CVE-2022-48773, CVE-2022-48936, CVE-2023-52492, CVE-2024-24857, CVE-2024-26851, CVE-2024-26924, CVE-2024-26976, CVE-2024-27017, CVE-2024-27062, CVE-2024-35839, CVE-2024-35898, CVE-2024-35939, CVE-2024-38540, CVE-2024-38541, CVE-2024-38586, CVE-2024-38608, CVE-2024-39503, CVE-2024-40924, CVE-2024-40961, CVE-2024-40983, CVE-2024-40984, CVE-2024-41009, CVE-2024-41042, CVE-2024-41066, CVE-2024-41092, CVE-2024-41093, CVE-2024-42070, CVE-2024-42079, CVE-2024-42244, CVE-2024-42284, CVE-2024-42292, CVE-2024-42301, CVE-2024-43854, CVE-2024-43880, CVE-2024-43889, CVE-2024-43892, CVE-2024-44935, CVE-2024-44989, CVE-2024-44990, CVE-2024-45018, CVE-2024-46826, CVE-2024-47668, CVE-2024-3596, CVE-2019-12900, CVE-2024-50602.

Change log for master fix pack 1.28.15_1586, released 13 November 2024

The following table shows the changes that are in the master fix pack 1.28.15_1586. Master patch updates are applied automatically.

Changes since version 1.28.14_1584
Component Previous Current Description
IBM Cloud Block Storage driver and plug-in v2.4.26 v2.4.27 New version contains updates and security fixes.
IBM Cloud RBAC Operator 77dac6b c4a05b0 New version contains updates and security fixes.
Kubernetes v1.28.14 v1.28.15 See the Kubernetes release notes.

Change log for worker node fix pack 1.28.14_1585, released 04 November 2024

The following table shows the changes that are in the worker node fix pack 1.28.14_1585. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 1.28.14_1582
Component Previous Current Description
Ubuntu 20.04 Packages 5.4.0-198-generic 5.4.0-200-generic Kernel and package updates for CVE-2021-47212, CVE-2022-36402, CVE-2023-52531, CVE-2023-52614, CVE-2024-20696, CVE-2024-26607, CVE-2024-26640, CVE-2024-26641, CVE-2024-26668, CVE-2024-26669, CVE-2024-26800, CVE-2024-26885, CVE-2024-26891, CVE-2024-26960, CVE-2024-27051, CVE-2024-27397, CVE-2024-35848, CVE-2024-37891, CVE-2024-38602, CVE-2024-38611, CVE-2024-38630, CVE-2024-40929, CVE-2024-41071, CVE-2024-41073, CVE-2024-42229, CVE-2024-42244, CVE-2024-45016
GPU Device Plug-in and Installer 68e8137 33c70dd Driver update and security fixes for CVE-2024-5535, CVE-2024-6232

Change log for master fix pack 1.28.14_1584, released 30 October 2024

The following table shows the changes that are in the master fix pack 1.28.14_1584. Master patch updates are applied automatically.

Changes since version 1.28.14_1579
Component Previous Current Description
Cluster health image v1.5.8 v1.5.9 New version contains updates and security fixes.
etcd v3.5.15 v3.5.16 See the etcd release notes.
IBM Cloud File Storage for Classic for Classic plug-in and monitor 446 447 New version contains updates and security fixes.
IBM Cloud RBAC Operator 5b17dab 77dac6b New version contains updates and security fixes.
Key Management Service provider v2.8.14 v2.8.16 New version contains updates and security fixes.
Portieris admission controller v0.13.18 v0.13.20 See the Portieris admission controller release notes.

Change log for worker node fix pack 1.28.14_1582, released 21 October 2024

The following table shows the changes that are in the worker node fix pack 1.28.14_1582. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 1.28.14_1581
Component Previous Current Description
Ubuntu 20.04 Packages 5.4.0-196-generic 5.4.0-198-generic Package updates for CVE-2022-36227, CVE-2024-26960, CVE-2024-27397, CVE-2024-38630, CVE-2024-45016, CVE-2024-5742.
Containerd 1.7.22 1.7.23 For more information, see the change logs.
Haproxy 67d03375 88598691 Security fixes for CVE-2024-5535.

Change log for worker node fix pack 1.28.14_1581, released 09 October 2024

The following table shows the changes that are in the worker node fix pack 1.28.14_1581. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 1.28.14_1580
Component Previous Current Description
Ubuntu 20.04 Packages N/A N/A Package updates for CVE-2023-26112, CVE-2024-43802.
Containerd N/A N/A
Kubernetes N/A N/A
Haproxy 546887ab 67d03375 Security fixes for CVE-2024-4032, CVE-2024-6232, CVE-2024-6923, CVE-2024-45490, CVE-2024-45491, CVE-2024-45492.
GPU Device Plug-in and Installer a248cf6b 68e8137 Driver update and security fixes for CVE-2024-26880, CVE-2024-26894, CVE-2024-39506, CVE-2024-41040, CVE-2023-52800, CVE-2024-40989, CVE-2024-42090, CVE-2021-47385, CVE-2023-52470, CVE-2023-52683, CVE-2024-42238, CVE-2024-42265, CVE-2021-47384, CVE-2024-36922, CVE-2024-42114, CVE-2024-42228, CVE-2024-40912, CVE-2024-40931, CVE-2024-42124, CVE-2021-47289, CVE-2023-52840, CVE-2024-26595, CVE-2024-36901, CVE-2024-6923, CVE-2024-38558, CVE-2024-41008, CVE-2024-41012, CVE-2024-4032, CVE-2024-41007, CVE-2024-41035, CVE-2021-47527, CVE-2022-48754, CVE-2023-6040, CVE-2024-40978, CVE-2021-47582, CVE-2024-38581, CVE-2024-41090, CVE-2024-45492, CVE-2021-47321, CVE-2024-36920, CVE-2024-40954, CVE-2024-40995, CVE-2024-40998, CVE-2024-42152, CVE-2021-46984, CVE-2023-52817, CVE-2024-35809, CVE-2024-35944, CVE-2024-23848, CVE-2024-42226, CVE-2024-42094, CVE-2021-47101, CVE-2024-26720, CVE-2024-26923, CVE-2024-41005, CVE-2023-52798, CVE-2024-42096, CVE-2024-40988, CVE-2024-42084, CVE-2024-42240, CVE-2024-41014, CVE-2024-41041, CVE-2024-41065, CVE-2024-42322, CVE-2022-48760, CVE-2024-26600, CVE-2024-26939, CVE-2024-40972, CVE-2024-40997, CVE-2024-43830, CVE-2024-38559, CVE-2024-38619, CVE-2024-39501, CVE-2024-42131, CVE-2021-47393, CVE-2022-48836, CVE-2023-52809, CVE-2024-26638, CVE-2021-47609, CVE-2024-26855, CVE-2024-36902, CVE-2021-47287, CVE-2024-40960, CVE-2024-41064, CVE-2024-41071, CVE-2024-42225, CVE-2024-45490, CVE-2021-47352, CVE-2024-26769, CVE-2024-36939, CVE-2024-40977, CVE-2024-42154, CVE-2024-35989, CVE-2024-36919, CVE-2024-38579, CVE-2024-41076, CVE-2024-26645, CVE-2024-40958, CVE-2024-41023, CVE-2024-43871, CVE-2021-47441, CVE-2022-48804, CVE-2023-52478, CVE-2023-52605, CVE-2024-26665, CVE-2024-40904, CVE-2024-40911, CVE-2024-41044, CVE-2024-41039, CVE-2024-41060, CVE-2024-42246, CVE-2024-45491, CVE-2021-47338, CVE-2021-47432, CVE-2021-47560, CVE-2024-27042, CVE-2021-47383, CVE-2024-36953, CVE-2024-40959, CVE-2021-47097, CVE-2024-26717, CVE-2024-37356, CVE-2024-41038, CVE-2024-39471, CVE-2021-47497, CVE-2022-48619, CVE-2022-48866, CVE-2023-52476, CVE-2021-47466, CVE-2023-52522, CVE-2024-41097, CVE-2024-42237, CVE-2021-47412, CVE-2024-26649, CVE-2024-41056, CVE-2024-41013, CVE-2024-41055, CVE-2024-26846, CVE-2024-35884, CVE-2024-36883, CVE-2024-40929, CVE-2024-40901, CVE-2024-40941, CVE-2024-41091, CVE-2021-47386, CVE-2024-27013, CVE-2024-35877, CVE-2024-39499, CVE-2021-47455, CVE-2024-38570, CVE-2024-6232.

Change log for master fix pack 1.28.14_1579, released 25 September 2024

The following table shows the changes that are in the master fix pack 1.28.14_1579. Master patch updates are applied automatically.

Changes since version 1.28.13_1576
Component Previous Current Description
GPU device plug-in and installer 184b5e2 91f881a New version contains updates and security fixes.
IBM Calico extension 1598 1607 New version contains security fixes.
IBM Cloud Block Storage driver and plug-in v2.4.24 v2.4.26 New version contains updates and security fixes.
IBM Cloud Controller Manager v1.28.13-1 v1.28.14-1 New version contains updates and security fixes.
IBM Cloud File Storage for Classic for Classic plug-in and monitor 445 446 New version contains updates and security fixes.
IBM Cloud Metrics Server Config Watcher 48787be bc543b7 New version contains updates and security fixes.
IBM Cloud RBAC Operator 897f067 5b17dab New version contains updates and security fixes.
Key Management Service provider v2.8.13 v2.8.14 New version contains updates and security fixes.
Konnectivity agent and server v0.1.9 v0.1.10 See the Konnectivity release notes.
Kubernetes v1.28.13 v1.28.14 See the Kubernetes release notes.
Load balancer and load balancer monitor for IBM Cloud Provider 3022 3051 New version contains updates and security fixes.

Change log for worker node fix pack 1.28.14_1580, released 23 September 2024

The following table shows the changes that are in the worker node fix pack 1.28.14_1580. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 1.28.13_1578
Component Previous Current Description
Ubuntu 20.04 Packages 5.4.0-193-generic 5.4.0-196-generic Worker node kernel & package updates for CVE-2016-1585, CVE-2021-46926, CVE-2021-47188, CVE-2022-48791, CVE-2022-48863, CVE-2023-27043, CVE-2023-52629, CVE-2023-52760, CVE-2024-2201, CVE-2024-24860, CVE-2024-26677, CVE-2024-26787, CVE-2024-26830, CVE-2024-26921, CVE-2024-26929, CVE-2024-27012, CVE-2024-36901, CVE-2024-38570, CVE-2024-39484, CVE-2024-39494, CVE-2024-42160, CVE-2024-42228, CVE-2024-45490, CVE-2024-45491, CVE-2024-45492, CVE-2024-6232, CVE-2024-6345, CVE-2024-6923, CVE-2024-7592, CVE-2024-8088, CVE-2024-8096.
Containerd 1.7.21 1.7.22 For more information, see the change logs and security bulletin for CVE-2024-45310.
Kubernetes 1.28.13 1.28.14 For more information, see the change logs.
Haproxy N/A N/A N/A
GPU Device Plug-in and Installer 91f881a3 a248cf6b Security fixes for CVE-2024-6119, CVE-2024-45490, CVE-2024-45491, CVE-2024-45492, CVE-2024-34397.

Change log for worker node fix pack 1.28.13_1578, released 10 September 2024

The following table shows the changes that are in the worker node fix pack 1.28.13_1578. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 1.28.13_1577
Component Previous Current Description
Ubuntu 20.04 packages N/A N/A Worker node package updates for CVE-2016-1585, CVE-2024-41810, CVE-2024-41957, CVE-2024-43374.
Kubernetes N/A N/A N/A
Containerd 1.7.20 1.7.21 For more information, see the change logs.
GPU device plug-in and installer c2e2956 91f881a Security fixes for CVE-2019-11236, CVE-2019-20916, CVE-2020-26137, CVE-2021-3572, CVE-2022-40897, CVE-2023-32681, CVE-2023-43804, CVE-2023-45803, CVE-2023-5752, CVE-2024-35195, CVE-2024-3651, CVE-2024-37891, CVE-2024-6345, CVE-2023-44487, GO-2023-2153.

Change log for master fix pack 1.28.13_1576, released 28 August 2024

The following table shows the changes that are in the master fix pack 1.28.13_1576. Master patch updates are applied automatically.

Changes since version 1.28.12_1573
Component Previous Current Description
Cluster health image v1.5.7 v1.5.8 New version contains updates and security fixes.
CoreDNS 1.11.1 1.11.3 See the CoreDNS release notes.
etcd v3.5.14 v3.5.15 See the etcd release notes.
IBM Cloud Block Storage driver and plug-in v2.4.23 v2.4.24 New version contains updates and security fixes.
IBM Cloud Controller Manager v1.28.12-1 v1.28.13-1 New version contains updates and security fixes.
IBM Cloud RBAC Operator 312030f 897f067 New version contains updates and security fixes.
Key Management Service provider v2.8.12 v2.8.13 New version contains updates and security fixes.
Kubernetes v1.28.12 v1.28.13 See the Kubernetes release notes.
Load balancer and load balancer monitor for IBM Cloud Provider 2967 3022 New version contains updates and security fixes.
Portieris admission controller v0.13.17 v0.13.18 See the Portieris admission controller release notes.

Change log for worker node fix pack 1.28.13_1577, released 26 August 2024

The following table shows the changes that are in the worker node fix pack 1.28.13_1577. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 1.28.12_1575
Component Previous Current Description
Ubuntu 20.04 Packages 5.4.0-192-generic 5.4.0-193-generic Worker node kernel & package updates for CVE-2021-46926, CVE-2022-48174, CVE-2023-52629, CVE-2023-52760, CVE-2024-2201, CVE-2024-24860, CVE-2024-26830, CVE-2024-26921, CVE-2024-26929, CVE-2024-36901, CVE-2024-39484, CIS benchmark compliance: 1.1.10, 5.1.3.
Containerd N/A N/A N/A
Kubernetes 1.28.12 1.28.13 For more information, see the change logs.
Haproxy c91c765 546887a Security fixes for CVE-2024-2398, CVE-2024-37370, CVE-2024-37371, CVE-2024-6345.
GPU Device Plug-in and Installer 184b5e23 c2e29569 Driver update and security fixes for CVE-2024-6345, CVE-2024-2398.

Change log for worker node fix pack 1.28.12_1575, released 12 August 2024

The following table shows the changes that are in the worker node fix pack 1.28.12_1575. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 1.28.12_1574
Component Previous Current Description
Ubuntu 20.04 packages 5.4.0-190-generic 5.4.0-192-generic Worker node kernel & package updates for CVE-2022-48655, CVE-2022-48674, CVE-2023-52752, CVE-2024-0397, CVE-2024-2511, CVE-2024-26583, CVE-2024-26584, CVE-2024-26585, CVE-2024-26886, CVE-2024-26907, CVE-2024-27019, CVE-2024-36016, CVE-2024-37370, CVE-2024-37371, CVE-2024-4032, CVE-2024-4741, CVE-2024-5535, CVE-2024-7264.
GPU device plug-in and installer 47ed2ef 4bd77eb Updates for CVE-2019-11236,CVE-2019-20916,CVE-2020-26137,CVE-2021-3572, CVE-2022-40897, CVE-2023-32681, CVE-2023-43804, CVE-2023-45803, CVE-2024-37891, CVE-2024-6345, CVE-2023-52803.

Change log for master fix pack 1.28.12_1573, released 31 July 2024

The following table shows the changes that are in the master fix pack 1.28.12_1573. Master patch updates are applied automatically.

Changes since version 1.28.11_1564
Component Previous Current Description
Calico v3.27.2 v3.27.4 See the Calico release notes.
Cluster health image v1.4.11 v1.5.7 New version contains updates and security fixes.
etcd v3.5.13 v3.5.14 See the etcd release notes.
GPU device plug-in and installer 10ea2b1 184b5e2 New version contains updates and security fixes.
IBM Calico extension 1595 1598 New version contains security fixes.
IBM Cloud Block Storage driver and plug-in v2.4.20 v2.4.23 New version contains updates and security fixes.
IBM Cloud Controller Manager v1.28.10-5 v1.28.12-1 New version contains updates and security fixes.
IBM Cloud File Storage for Classic for Classic plug-in and monitor 443 445 New version contains updates and security fixes.
IBM Cloud RBAC Operator 14d0ab5 312030f New version contains updates and security fixes.
Key Management Service provider v2.8.11 v2.8.12 New version contains updates and security fixes.
Kubernetes v1.28.11 v1.28.12 See the Kubernetes release notes.
Load balancer and load balancer monitor for IBM Cloud Provider 2933 2967 New version contains updates and security fixes.
Portieris admission controller v0.13.16 v0.13.17 See the Portieris admission controller release notes.

Change log for worker node fix pack 1.28.12_1574, released 29 July 2024

The following table shows the changes that are in the worker node fix pack 1.28.12_1574. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 1.28.11_1567
Component Previous Current Description
Ubuntu 20.04 packages 5.4.0-189-generic 5.4.0-190-generic Worker node kernel & package updates for CVE-2022-48655, CVE-2024-0760, CVE-2024-1737, CVE-2024-1975, CVE-2024-26583, CVE-2024-26584, CVE-2024-26585, CVE-2024-26907, CVE-2024-36016, CVE-2024-4076, CVE-2024-5569.
Containerd 1.7.19 1.7.20 For more information, see the change logs.
Kubernetes 1.28.11 1.28.12 For more information, see the change logs.
GPU device plug-in and installer 184b5e2 47ed2ef Security fixes for CVE-2024-4032.
Haproxy N/A N/A N/A

Change log for worker node fix pack 1.28.11_1567, released 15 July 2024

The following table shows the changes that are in the worker node fix pack 1.28.11_1567. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 1.28.11_1566
Component Previous Current Description
Ubuntu 20.04 packages 5.4.0-187-generic 5.4.0-189-generic Worker node kernel & package updates for CVE-2023-6270, CVE-2023-6597, CVE-2024-0450, CVE-2024-2201, CVE-2024-23307, CVE-2024-24861, CVE-2024-26586, CVE-2024-26642, CVE-2024-26643, CVE-2024-26828, CVE-2024-26889, CVE-2024-26922, CVE-2024-26923, CVE-2024-26925, CVE-2024-26926.
Containerd 1.7.18 1.7.19 For more information, see the change logs.
HAProxy e77d4ca c91c765 Security fixes for CVE-2024-28182,CVE-2024-25062.
GPU device plug-in and installer fbdf629 184b5e23 Security fixes for CVE-2023-45288,CVE-2021-47069, CVE-2024-26801,CVE-2024-35854,CVE-2024-35960, CVE-2023-2953,CVE-2024-26584,CVE-2024-26759, CVE-2024-35890,CVE-2024-26982,CVE-2024-35835, CVE-2021-46972,CVE-2021-47353,CVE-2021-47356, CVE-2024-26675,CVE-2021-47236,CVE-2023-52781, CVE-2024-26656,CVE-2021-47311,CVE-2023-52675, CVE-2024-35789,CVE-2024-35958,CVE-2021-47456, CVE-2024-26583,CVE-2024-26974,CVE-2024-36004, CVE-2021-47073,CVE-2023-52464,CVE-2023-52667, CVE-2024-35838,CVE-2024-26906,CVE-2024-27410, CVE-2024-28182,CVE-2023-52560,CVE-2023-52615, CVE-2023-52686,CVE-2023-52700,CVE-2023-52669, CVE-2024-26804,CVE-2024-26859,CVE-2024-35853, CVE-2024-35852,CVE-2023-52813,CVE-2023-52881, CVE-2024-26735,CVE-2024-26826,CVE-2023-52703,CVE-2024-26907,CVE-2021-46909,CVE-2023-52877,CVE-2024-27397,CVE-2024-3651,CVE-2021-47495,CVE-2023-52626,CVE-2024-35959,CVE-2024-36007,CVE-2024-35845,CVE-2024-35855,CVE-2024-35888,CVE-2021-47310,CVE-2023-52835,CVE-2023-52878,CVE-2024-26585,CVE-2020-26555,CVE-2023-5090.

Change log for worker node fix pack 1.28.11_1566, released 09 July 2024

The following table shows the changes that are in the worker node fix pack 1.28.11_1566. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 1.28.11_1565
Component Previous Current Description
Ubuntu 20.04 packages 5.4.0-186-generic 5.4.0-187-generic Worker node kernel & package updates for CVE-2022-4968, CVE-2024-2201, CVE-2024-26643, CVE-2024-26925, CVE-2024-32002, CVE-2024-38428.
HAProxy 18889dd e77d4ca New version contains security fixes
GPU device plug-in and installer 8ef78ef fbdf629 New version contains updates and security fixes.

Change log for master fix pack 1.28.11_1564, released 19 June 2024

The following table shows the changes that are in the master fix pack 1.28.11_1564. Master patch updates are applied automatically.

Changes since version 1.28.10_1560
Component Previous Current Description
Cluster health image v1.4.10 v1.4.11 New version contains updates and security fixes.
GPU device plug-in and installer 9fad43c 10ea2b1 New version contains updates and security fixes.
IBM Calico extension 1589 1595 New version contains security fixes.
IBM Cloud Controller Manager v1.28.10-1 v1.28.10-5 New version contains updates and security fixes.
IBM Cloud Metrics Server Config Watcher 0281c94 48787be New version contains updates and security fixes.
IBM Cloud RBAC Operator 4c5d156 14d0ab5 New version contains updates and security fixes.
Key Management Service provider v2.8.10 v2.8.11 New version contains updates and security fixes.
Kubernetes v1.28.10 v1.28.11 See the Kubernetes release notes.
Kubernetes NodeLocal DNS cache 1.23.0 1.23.1 See the Kubernetes NodeLocal DNS cache release notes.
Portieris admission controller v0.13.15 v0.13.16 See the Portieris admission controller release notes.

Change log for worker node fix pack 1.28.11_1565, released 18 June 2024

The following table shows the changes that are in the worker node fix pack 1.28.11_1565. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 1.28.10_1561
Component Previous Current Description
Ubuntu 20.04 packages 5.4.0-182-generic 5.4.0-186-generic Worker node kernel and package updates CVE-2021-47063, CVE-2021-47070, CVE-2023-47233, CVE-2023-52530, CVE-2024-26614, CVE-2024-26622, CVE-2024-26712, CVE-2024-26733, CIS benchmark compliance: 1.5.4, 1.5.5, 4.5.5, 3.3.4, 3.3.9, 1.1.1.2, 1.1.1.3, 1.1.1.4, 1.1.1.5.
Kubernetes 1.28.10 1.28.11 For more information, see the change logs.
Containerd 1.7.17 1.7.18 For more information, see the change logs.
HAProxy 0062a3c 18889dd Security fixes for CVE-2024-25062.
GPU device plug-in and installer fdf201e 8ef78ef Security fixes for CVE-2019-25162, CVE-2020-36777, CVE-2021-46934, CVE-2021-47013, CVE-2021-47055, CVE-2021-47118, CVE-2021-47153, CVE-2021-47171, CVE-2021-47185, CVE-2022-48627, CVE-2022-48669, CVE-2023-52439, CVE-2023-52445, CVE-2023-52477, CVE-2023-52513, CVE-2023-52520, CVE-2023-52528, CVE-2023-52565, CVE-2023-52578, CVE-2023-52594, CVE-2023-52595, CVE-2023-52598, CVE-2023-52606, CVE-2023-52607, CVE-2023-52610, CVE-2023-6240, CVE-2024-0340, CVE-2024-23307, CVE-2024-25744, CVE-2024-26593, CVE-2024-26603, CVE-2024-26610, CVE-2024-26615, CVE-2024-26642, CVE-2024-26643, CVE-2024-26659, CVE-2024-26664, CVE-2024-26693, CVE-2024-26694, CVE-2024-26743, CVE-2024-26744, CVE-2024-26779, CVE-2024-26872, CVE-2024-26892, CVE-2024-26897, CVE-2024-26901, CVE-2024-26919, CVE-2024-26933, CVE-2024-26934, CVE-2024-26964, CVE-2024-26973, CVE-2024-26993, CVE-2024-27014, CVE-2024-27048, CVE-2024-27052, CVE-2024-27056, CVE-2024-27059, CVE-2024-25062.

Change log for worker node fix pack 1.28.10_1561, released 03 June 2024

The following table shows the changes that are in the worker node fix pack 1.28.10_1561. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 1.28.9_1557
Component Previous Current Description
Ubuntu 20.04 packages 5.4.0-182-generic 5.4.0-182-generic Worker node package updates CVE-2023-22745, CVE-2024-32004, CVE-2024-32020, CVE-2024-32021, CVE-2024-32465, CVE-2024-33599, CVE-2024-33600, CVE-2024-33601, CVE-2024-33602, CVE-2024-34064, CVE-2024-3651.
Kubernetes 1.28.9 1.28.10 For more information, see the change logs.
Containerd 1.7.17 1.7.17 N/A
HAProxy e88695e 0062a3c Security fixes for CVE-2024-0450, CVE-2024-33599, CVE-2024-26461, CVE-2021-43618, CVE-2024-22365, CVE-2023-6597, CVE-2024-26458, CVE-2024-2961, CVE-2024-33601, CVE-2024-33602, CVE-2023-7008, CVE-2023-6004, CVE-2023-6918, CVE-2024-33600.
GPU device plug-in and installer 806184d fdf201e Security fixes for CVE-2024-33602, CVE-2024-28182, CVE-2024-2961, CVE-2024-33599, CVE-2024-33600, CVE-2024-33601.

Change log for master fix pack 1.28.10_1560, released 29 May 2024

The following table shows the changes that are in the master fix pack 1.28.10_1560. Master patch updates are applied automatically.

Changes since version 1.28.9_1554
Component Previous Current Description
Calico v3.26.4 v3.27.2 See the Calico release notes.
Cluster health image v1.4.9 v1.4.10 New version contains updates and security fixes.
IBM Calico extension 1537 1589 New version contains security fixes.
IBM Cloud Block Storage driver and plug-in v2.4.19 v2.4.20 New version contains updates and security fixes.
IBM Cloud Controller Manager v1.28.9-1 v1.28.10-1 New version contains updates and security fixes.
IBM Cloud File Storage for Classic for Classic plug-in and monitor 442 443 New version contains updates and security fixes.
IBM Cloud Metrics Server Config Watcher 50808cc 0281c94 New version contains updates and security fixes.
Key Management Service provider v2.8.9 v2.8.10 New version contains updates and security fixes.
Kubernetes v1.28.9 v1.28.10 See the Kubernetes release notes.
Load balancer and load balancer monitor for IBM Cloud Provider 2867 2933 New version contains updates and security fixes.
Konnectivity agent and server v0.1.5_47_iks v0.1.9_105_iks See the Konnectivity release notes.
GPU device plug-in and installer 206b5a6 9fad43c New version contains updates and security fixes.
Portieris admission controller v0.13.13 v0.13.15 See the Portieris admission controller release notes.

Change log for worker node fix pack 1.28.9_1557, released 23 May 2024

The following table shows the changes that are in the worker node fix pack 1.28.9_1557. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 1.28.9_1556
Component Previous Current Description
Ubuntu 20.04 packages 5.4.0-177-generic 5.4.0-182-generic Worker node package and kernel updates CVE-2016-9840, CVE-2016-9841, CVE-2018-25032, CVE-2022-37434, CVE-2023-23000, CVE-2023-23004, CVE-2023-24023, CVE-2023-4421, CVE-2023-46838, CVE-2023-52600, CVE-2023-52603, CVE-2023-5388, CVE-2023-6135, CVE-2024-0607, CVE-2024-1086, CVE-2024-23851, CVE-2024-24855, CVE-2024-26581, CVE-2024-26589, CVE-2024-28085, CVE-2024-28834, CVE-2024-2961, CIS benchmark compliance: 4.5.1.6, 4.5.1.7, 4.5.7.
Kubernetes 1.28.9 1.28.9 N/A
Containerd 1.7.16 1.7.17 For more information, see the change logs.
HAProxy d225100 4e826da CVE-2024-2961, CVE-2024-28834.
GPU device plug-in and installer 806184d c0e1605 Security fixes for CVE-2024-2961.

Change log for worker node fix pack 1.28.9_1556, released 06 May 2024

The following table shows the changes that are in the worker node fix pack 1.28.9_1556. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 1.28.9_1555
Component Previous Current Description
Ubuntu 20.04 packages 5.4.0-177-generic 5.4.0-177-generic Worker node package updates for CVE-2015-1197, CVE-2023-7207, CVE-2024-28182, CVE-2024-32487. CIS benchmark compliance: 1.1.2.1, 1.1.2.2, 1.1.2.3, and 1.1.2.4.
Kubernetes 1.28.9 1.28.9 N/A
Containerd 1.7.15 1.7.16 For more information, see the change logs.
HAProxy 295dba8 295dba8 N/A
GPU device plug-in and installer 9fad43c 806184d Security fixes for CVE-2022-48554, CVE-2023-2975, CVE-2023-3446, CVE-2023-5678, CVE-2024-22365, CVE-2023-7008, CVE-2023-3817, CVE-2023-6129, CVE-2023-6237, CVE-2024-0727.

Change log for master fix pack 1.28.9_1554, released 24 April 2024

The following table shows the changes that are in the master fix pack 1.28.9_1554. Master patch updates are applied automatically.

Changes since version 1.28.8_1550
Component Previous Current Description
Calico v3.27.3 v3.26.4 See the Calico release notes.
Cluster health image v1.4.8 v1.4.9 New version contains updates and security fixes.
etcd v3.5.12 v3.5.13 See the etcd release notes.
GPU device plug-in and installer 71cb7f7 206b5a6 New version contains updates and security fixes.
IBM Cloud Controller Manager v1.28.8-1 v1.28.9-1 New version contains updates and security fixes.
IBM Cloud Metrics Server Config Watcher 803912f 50808cc New version contains updates and security fixes.
IBM Cloud RBAC Operator bd30030 4c5d156 New version contains updates and security fixes.
Key Management Service provider v2.8.8 v2.8.9 New version contains updates and security fixes.
Kubernetes v1.28.8 v1.28.9 Update resolves CVE-2024-3177. For more information, see the Security Bulletin and the Kubernetes release notes.
Load balancer and load balancer monitor for IBM Cloud Provider 2831 2867 New version contains updates and security fixes.
Portieris admission controller v0.13.12 v0.13.13 See the Portieris admission controller release notes.

Change log for worker node fix pack 1.28.9_1555, released 22 April 2024

The following table shows the changes that are in the worker node fix pack 1.28.9_1555. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 1.28.8_1552
Component Previous Current Description
Ubuntu 20.04 packages 5.4.0-174-generic 5.4.0-177-generic Worker node and kernel package updates for CVE-2016-9840, CVE-2016-9841, CVE-2018-25032, CVE-2022-37434, CVE-2023-23000, CVE-2023-23004, CVE-2023-24023, CVE-2023-4421, CVE-2023-46838, CVE-2023-52600, CVE-2023-52603, CVE-2023-5388, CVE-2023-6135, CVE-2024-0607, CVE-2024-1086, CVE-2024-23851, CVE-2024-24855, CVE-2024-26581, CVE-2024-26589, CVE-2024-28085, CVE-2024-28834, CVE-2024-2961.
Kubernetes 1.28.8 1.28.9 For more information, see the change logs.
Containerd 1.7.13 1.7.15 For more information, see the change logs.
HAProxy 295dba8 4e826da Security fixes for CVE-2024-28834.
GPU device plug-in and installer 206b5a6 9fad43c1 Security fixes for CVE-2024-1488, CVE-2024-28834, CVE-2024-28835.

Change log for worker node fix pack 1.28.8_1552, released 8 April 2024

The following table shows the changes that are in the worker node fix pack 1.28.8_1552. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 1.28.8_1551
Component Previous Current Description
Ubuntu 20.04 packages 5.4.0-174-generic 5.4.0-174-generic Worker node package updates for CVE-2024-2398, CVE-2024-28085.
Kubernetes 1.28.8 1.28.8 N/A
Containerd 1.7.14 1.7.13 Reverted due to a bug.
HAProxy 512b32a 295dba8 Security fixes for CVE-2023-28322, CVE-2023-38546, CVE-2023-46218, CVE-2023-52425
GPU device plug-in and installer 5b69345 206b5a6 Security fixes for CVE-2023-28322, CVE-2023-38546, CVE-2023-46218, CVE-2023-52425

Change log for master fix pack 1.28.8_1550, released 27 March 2024

The following table shows the changes that are in the master fix pack 1.28.8_1550. Master patch updates are applied automatically.

Changes since version 1.28.7_1547
Component Previous Current Description
Cluster health image v1.4.7 v1.4.8 New version contains updates and security fixes.
IBM Calico extension 1534 1537 New version contains security fixes.
IBM Cloud Block Storage driver and plug-in v2.4.18 v2.4.19 New version contains updates and security fixes.
IBM Cloud Controller Manager v1.28.7-2 v1.28.8-1 New version contains updates and security fixes.
IBM Cloud File Storage for Classic plug-in and monitor 441 442 New version contains updates and security fixes.
IBM Cloud Metrics Server Config Watcher 90a78ef 803912f New version contains updates and security fixes.
Key Management Service provider v2.8.7 v2.8.8 New version contains updates and security fixes.
Kubernetes v1.28.7 v1.28.8 See the Kubernetes release notes.
Kubernetes NodeLocal DNS cache 1.22.28 1.23.0 See the Kubernetes NodeLocal DNS cache release notes.
Load balancer and load balancer monitor for IBM Cloud Provider 2807 2831 New version contains updates and security fixes.
Portieris admission controller v0.13.11 v0.13.12 See the Portieris admission controller release notes.

Change log for worker node fix pack 1.28.8_1551, released 25 March 2024

The following table shows the changes that are in the worker node fix pack 1.28.8_1551. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 1.28.7_1549
Component Previous Current Description
Ubuntu 20.04 packages 5.4.0-173-generic 5.4.0-174-generic Worker node kernel and package updates for CVE-2012-6655, CVE-2023-23000, CVE-2023-23004, CVE-2024-1086, CVE-2024-22667, CVE-2024-24855.
Kubernetes 1.28.7 1.28.8 For more information, see the change logs.
Containerd 1.7.14 1.7.14 N/A
HAProxy 512b32 512b32 N/A

Change log for worker node fix pack 1.28.7_1549, released 13 March 2024

The following table shows the changes that are in the worker node fix pack 1.28.7_1549. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 1.28.7_1548
Component Previous Current Description
Ubuntu 20.04 packages 5.4.0-172-generic 5.4.0-173-generic Worker node kernel and package updates for CVE-2022-47695, CVE-2022-48063, CVE-2022-48065, CVE-2022-48624, CVE-2023-0340, CVE-2023-22995, CVE-2023-50782, CVE-2023-51779, CVE-2023-51781, CVE-2023-51782, CVE-2023-6915, CVE-2024-0565, CVE-2024-0646, CVE-2024-24806, CVE-2024-25062.
Kubernetes 1.28.7 1.28.7 N/A
GPU device plug-in and installer 71cb7f 5b6934 N/A
HAProxy 9b0400 512b32 N/A
Containerd 1.7.13 1.7.14 For more information, see the change logs.

Change log for master fix pack 1.28.7_1547, released 28 February 2024

The following table shows the changes that are in the master fix pack 1.28.7_1547. Master patch updates are applied automatically.

Changes since version 1.28.6_1542
Component Previous Current Description
Cluster health image v1.4.6 v1.4.7 New version contains updates and security fixes.
etcd v3.5.11 v3.5.12 See the etcd release notes.
IBM Calico extension 1525 1534 New version contains security fixes.
IBM Cloud Block Storage driver and plug-in v2.4.14 v2.4.18 New version contains updates and security fixes.
IBM Cloud Controller Manager v1.28.6-3 v1.28.7-2 New version contains updates and security fixes.
IBM Cloud File Storage for Classic plug-in and monitor 439 441 New version contains updates and security fixes.
IBM Cloud RBAC Operator 7185ea1 bd30030 New version contains updates and security fixes.
Key Management Service provider v2.8.6 v2.8.7 New version contains updates and security fixes.
Kubernetes v1.28.6 v1.28.7 See the Kubernetes release notes.
Load balancer and load balancer monitor for IBM Cloud Provider 2789 2807 New version contains updates and security fixes.

Change log for worker node fix pack 1.28.7_1547, released 26 February 2024

The following table shows the changes that are in the worker node fix pack 1.28.7_1547. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 1.28.6_1544
Component Previous Current Description
Ubuntu 20.04 packages 5.4.0-171-generic 5.4.0-172-generic Worker node kernel & package updates for CVE-2023-4408, CVE-2023-4641, CVE-2023-50387, CVE-2023-50868, CVE-2023-51781, CVE-2023-5517, CVE-2023-6516, CVE-2023-6915, CVE-2024-0565, CVE-2024-0646.
GPU device plug-in and installer d992fea 71cb7f7 Security fixes for CVE-2023-50387, CVE-2023-50868.
Containerd 1.7.13 1.7.13 N/A

Change log for worker node fix pack 1.28.6_1544, released 12 February 2024

The following table shows the changes that are in the worker node fix pack 1.28.6_1544. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 1.28.6_1543
Component Previous Current Description
Ubuntu 20.04 packages 5.4.0-170-generic 5.4.0-171-generic Worker node kernel & package updates for CVE-2023-2953, CVE-2023-45863, CVE-2023-5678, CVE-2023-6040, CVE-2023-6606, CVE-2023-6931, CVE-2023-6932, CVE-2024-0727.
Kubernetes N/A N/A N/A
Containerd 1.7.12 1.7.13 For more information, see change log and security bulletin for CVE-2024-21626.
GPU device plug-in and installer 0aa042f d992fea Security fixes for CVE-2021-35938, CVE-2021-35939, CVE-2023-48795, CVE-2024-0553, CVE-2021-35937.
HAProxy a13673 9b0400 Security fixes for CVE-2024-0553, CVE-2023-48795, CVE-2021-35937, CVE-2021-35938, CVE-2021-35939.

Change log for master fix pack 1.28.6_1542, released 31 January 2024

The following table shows the changes that are in the master fix pack 1.28.6_1542. Master patch updates are applied automatically.

Changes since version 1.28.4_1537
Component Previous Current Description
Calico v3.26.3 v3.26.4 See the Calico release notes.
Cluster health image v1.4.5 v1.4.6 New version contains security fixes.
etcd v3.5.10 v3.5.11 See the etcd release notes.
IBM Calico extension 1487 1525 New version contains security fixes.
IBM Cloud Controller Manager v1.28.4-6 v1.28.6-3 New version contains updates and security fixes.
IBM Cloud Metrics Server Config Watcher 58e69e0 90a78ef New version contains updates and security fixes.
IBM Cloud RBAC Operator e544e35 7185ea1 New version contains updates and security fixes.
Key Management Service provider v2.8.5 v2.8.6 New version contains updates and security fixes.
Kubernetes v1.28.4 v1.28.6 See the Kubernetes release notes.
Kubernetes NodeLocal DNS cache 1.22.27 1.22.28 See the Kubernetes NodeLocal DNS cache release notes.
Load balancer and load balancer monitor for IBM Cloud Provider 2767 2789 New version contains updates and security fixes.
Portieris admission controller v0.13.10 v0.13.11 See the Portieris admission controller release notes.

Change log for worker node fix pack 1.28.6_1543, released 29 January 2024

The following table shows the changes that are in the worker node fix pack 1.28.6_1543. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 1.28.4_1541
Component Previous Current Description
Ubuntu 20.04 packages 5.4.0-169-generic 5.4.0-170-generic Worker node package and kernel updates for CVE-2020-28493, CVE-2022-44840, CVE-2022-45703, CVE-2022-47007, CVE-2022-47008, CVE-2022-47010, CVE-2022-47011, CVE-2023-6004, CVE-2023-6040, CVE-2023-6606, CVE-2023-6918, CVE-2023-6931, CVE-2023-6932, CVE-2024-0553, CVE-2024-22195, CVE-2024-22365.
Kubernetes 1.28.4 1.28.6 For more information, see change logs.
Containerd 1.7.12 1.7.12 N/A
GPU device plug-in and installer 6273cd0 0aa042f Security fixes for CVE-2021-44716, CVE-2022-27664, CVE-2022-29526, CVE-2022-32149, CVE-2022-41717, CVE-2022-41723, CVE-2023-39325, CVE-2023-3978, CVE-2023-44487.
HAProxy e105dc a13673 Security fixes for CVE-2023-7104, CVE-2023-27043.

Change log for worker node fix pack 1.28.4_1541, released 16 January 2024

The following table shows the changes that are in the worker node fix pack 1.28.4_1541. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 1.28.4_1540
Component Previous Current Description
Ubuntu 20.04 packages 5.4.0-169-generic 5.4.0-169-generic Worker node package updates for CVE-2021-41617, CVE-2022-39348, CVE-2023-46137, CVE-2023-51385, CVE-2023-7104.
Kubernetes 1.28.4 1.28.4 N/A
Containerd 1.7.11 1.7.12 For more information, see the change logs.
GPU device plug-in and installer b9c978a 6273cd0 New version contains security fixes.
Haproxy 3060b0 e105dc CVE-2023-39615, CVE-2023-5981, CVE-2022-48560, CVE-2022-48564.

Change log for worker node fix pack 1.28.4_1540, released 02 January 2024

The following table shows the changes that are in the worker node fix pack 1.28.4_1540. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 1.28.4_1539
Component Previous Current Description
Ubuntu 20.04 packages 5.4.0-169-generic 5.4.0-169-generic Worker node package updates for CVE-2023-48795.
Kubernetes 1.28.4 1.28.4 N/A
Containerd 1.7.11 1.7.11 N/A
GPU device plug-in and installer 2d51c7a b9c978a New version contains security fixes.

Change log for worker node fix pack 1.28.4_1539, released 18 December 2023

The following table shows the changes that are in the worker node fix pack 1.28.4_1539. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 1.28.4_1538
Component Previous Current Description
Ubuntu 20.04 packages 5.4.0-167-generic 5.4.0-169-generic Worker node kernel & package updates for CVE-2020-19726, CVE-2021-46174, CVE-2022-1725, CVE-2022-1771, CVE-2022-1897, CVE-2022-2000, CVE-2022-35205, CVE-2023-23931, CVE-2023-31085, CVE-2023-37453, CVE-2023-39192, CVE-2023-39193, CVE-2023-39804, CVE-2023-42754, CVE-2023-45539, CVE-2023-45871, CVE-2023-46218, CVE-2023-46246, CVE-2023-4806, CVE-2023-4813, CVE-2023-48231, CVE-2023-48233, CVE-2023-48234, CVE-2023-48235, CVE-2023-48236, CVE-2023-48237, CVE-2023-5178, CVE-2023-5717.
Kubernetes N/A N/A N/A
Containerd 1.7.10 1.7.11 For more information, see the change logs.

Change log for master fix pack 1.28.4_1537, released 06 December 2023

The following table shows the changes that are in the master fix pack 1.28.4_1537. Master patch updates are applied automatically.

Changes since version 1.28.3_1534
Component Previous Current Description
GPU device plug-in and installer 99267c4 0e3950c New version contains updates and security fixes.
IBM Cloud Block Storage driver and plug-in v2.4.12 v2.4.14 New version contains updates and security fixes.
IBM Cloud Controller Manager v1.28.3-5 v1.28.4-6 New version contains updates and security fixes.
IBM Cloud File Storage for Classic plug-in and monitor 438 439 New version contains updates and security fixes.
IBM Cloud Metrics Server Config Watcher c33e6e7 58e69e0 New version contains updates and security fixes.
Konnectivity agent and server v0.1.5_39_iks v0.1.5_47_iks See the Konnectivity release notes.
Kubernetes v1.28.3 v1.28.4 Review the community Kubernetes release notes. Resolves CVE-2023-39325 and CVE-2023-44487. For more information, see Security Bulletin: IBM Cloud Kubernetes Service is affected by Kubernetes API server security vulnerabilities (CVE-2023-39325 and CVE-2023-44487).
Load balancer and Load balancer monitor for IBM Cloud Provider 2731 2767 New version contains updates and security fixes.
Kubernetes NodeLocal DNS cache 1.22.24 1.22.27 See the Kubernetes NodeLocal DNS cache release notes.

Change log for worker node fix pack 1.28.4_1538, released 04 December 2023

The following table shows the changes that are in the worker node fix pack 1.28.4_1538. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 1.28.3_1535
Component Previous Current Description
Ubuntu 20.04 packages 5.4.0-166-generic 5.4.0-167-generic Worker node kernel & package updates for CVE-2023-31085, CVE-2023-40217, CVE-2023-44487, CVE-2023-45871, CVE-2023-47038, CVE-2023-5981.
Kubernetes 1.28.3 1.28.4 For more information, see the change logs.
Containerd 1.7.9 1.7.10 For more information, see the change logs.
GPU device plug-in and installer 0e3950c 2d51c7a New version contains updates and security fixes. Driver version upgraded from 535.54.03 to 535.129.03.

Change log for worker node fix pack 1.28.3_1535, released 29 November 2023

The following table shows the changes that are in the worker node fix pack 1.28.3_1535. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 1.28.2_1533
Component Previous Current Description
Ubuntu 20.04 packages 5.4.0-166-generic 5.4.0-166-generic Worker node package updates for CVE-2023-36054, CVE-2023-4016, CVE-2023-43804, CVE-2023-45803.
GPU device plug-in and installer 99267c4 0e3950c New version contains updates and security fixes.
Kubernetes 1.28.2 1.28.3 For more information, see the change logs.
Containerd 1.7.8 1.7.9 For more information, see the change logs.

Change log for master fix pack 1.28.3_1534, released 15 November 2023

The following table shows the changes that are in the master fix pack 1.28.3_1534. Master patch updates are applied automatically.

Changes since version 1.28.2_1531
Component Previous Current Description
Cluster health image v1.4.4 v1.4.5 New version contains updates and security fixes.
etcd v3.5.9 v3.5.10 See the etcd release notes.
IBM Cloud Controller Manager v1.28.2-10 v1.28.3-5 New version contains updates and security fixes.
IBM Cloud File Storage for Classic plug-in and monitor 435 438 New version contains updates and security fixes.
IBM Cloud Metrics Server Config Watcher a1edf56 c33e6e7 New version contains updates and security fixes.
IBM Cloud RBAC Operator f0d3265 e544e35 New version contains updates and security fixes.
Key Management Service provider v2.8.4 v2.8.5 New version contains updates and security fixes.
Kubernetes v1.28.2 v1.28.3 See the Kubernetes release notes.
Load balancer and load balancer monitor for IBM Cloud Provider 2681 2731 New version contains updates and security fixes.
Konnectivity agent and server v0.1.3_5_iks v0.1.5_39_iks See the Konnectivity release notes.
Portieris admission controller v0.13.8 v0.13.10 See the Portieris admission controller release notes.

Change log for worker node fix pack 1.28.2_1533, released 08 November 2023

The following table shows the changes that are in the worker node fix pack 1.28.2_1533. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 1.28.2_1532
Component Previous Current Description
Ubuntu 20.04 packages 5.4.0-165-generic 5.4.0-166-generic Worker node kernel & package updates for CVE-2023-0597, CVE-2023-31083, CVE-2023-34058, CVE-2023-34059, CVE-2023-34319, CVE-2023-3446, CVE-2023-3772, CVE-2023-3817, CVE-2023-4132, CVE-2023-42752, CVE-2023-42753, CVE-2023-42755, CVE-2023-42756, CVE-2023-4622, CVE-2023-4623, CVE-2023-4733, CVE-2023-4735, CVE-2023-4750, CVE-2023-4751, CVE-2023-4752, CVE-2023-4781, CVE-2023-4881, CVE-2023-4921, CVE-2023-5344, CVE-2023-5441, CVE-2023-5535.
GPU device plug-in and installer 4319682 99267c4 New version contains updates and security fixes.
Containerd 1.7.7 1.7.8 For more information, see the change logs.

Change log for master fix pack 1.28.2_1531, released 25 October 2023

The following table shows the changes that are in the master fix pack 1.28.2_1531. Master patch updates are applied automatically.

Changes since version 1.28.2_1527
Component Previous Current Description
Calico v3.26.1 v3.26.3 See the Calico release notes.
Cluster health image v1.4.2 v1.4.4 New version contains updates and security fixes.
IBM Calico extension 1390 1487 New version contains security fixes.
IBM Cloud Block Storage driver and plug-in v2.4.10 v2.4.12 New version contains updates and security fixes.
IBM Cloud Controller Manager v1.28.1-3 v1.28.2-10 New version contains updates and security fixes. The logic for the service.kubernetes.io/ibm-load-balancer-cloud-provider-vpc-idle-connection-timeout annotation has changed. The default idle timeout is dependent on your account settings. Usually, this value is 50. However, some allowlisted accounts have larger timeout settings. If you don't set the annotation, your load balancers use the timeout setting in your account. You can explicitly specify the timeout by setting this annotation.
IBM Cloud RBAC Operator 4e2f346 f0d3265 New version contains updates and security fixes.
Key Management Service provider v2.8.2 v2.8.4 New version contains updates and security fixes.
Kubernetes NodeLocal DNS cache 1.22.23 1.22.24 See the Kubernetes NodeLocal DNS cache release notes.
Portieris admission controller v0.13.6 v0.13.8 See the Portieris admission controller release notes.

Change log for worker node fix pack 1.28.2_1532, released 23 October 2023

The following table shows the changes that are in the worker node fix pack 1.28.2_1532. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 1.28.2_1529
Component Previous Current Description
Ubuntu 20.04 packages 5.4.0-164-generic 5.4.0-165-generic Worker node kernel & package updates for CVE-2022-3234, CVE-2022-3256, CVE-2022-3324, CVE-2022-3352, CVE-2022-3520, CVE-2022-3591, CVE-2022-3705, CVE-2022-4292, CVE-2022-4293, CVE-2023-34319, CVE-2023-38546, CVE-2023-42752, CVE-2023-42753, CVE-2023-42755, CVE-2023-42756, CVE-2023-4622, CVE-2023-4623, CVE-2023-4881, CVE-2023-4921.
Ubuntu 18.04 packages (s390x) 4.15.0-218-generic 4.15.0-218-generic Worker node kernel & package updates for CVE-2020-19189, CVE-2023-4733, CVE-2023-4735, CVE-2023-4750, CVE-2023-4751, CVE-2023-5344, CVE-2023-5441.
Ubuntu 20.04 packages (s390x) 5.4.0-164-generic 5.4.0-165-generic Worker node kernel & package updates for CVE-2023-3446, CVE-2023-3817, CVE-2023-4733, CVE-2023-4735, CVE-2023-4750, CVE-2023-4751, CVE-2023-4752, CVE-2023-4781, CVE-2023-5344, CVE-2023-5441, CVE-2023-5535.
Kubernetes N/A N/A N/A
Containerd 1.7.6 1.7.7 For more information, see the change logs.

Change log for worker node fix pack 1.28.2_1529, released 9 October 2023

The following table shows the changes that are in the worker node fix pack 1.28.2_1529. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 1.28.2_1528
Component Previous Current Description
Ubuntu 20.04 packages 5.4.0-163-generic 5.4.0-164-generic Worker node kernel & package updates for CVE-2021-4001, CVE-2023-1206, CVE-2023-20588, CVE-2023-3212, CVE-2023-3863, CVE-2023-40283, CVE-2023-4128, CVE-2023-4194, CVE-2023-43785, CVE-2023-43786, CVE-2023-43787.
GPU device plug-in and installer 61afd3d 4319682 New version contains updates and security fixes.
Kubernetes N/A N/A N/A
Containerd N/A N/A N/A

Change log for worker node fix pack 1.28.2_1528, released 27 September 2023

The following table shows the changes that are in the worker node fix pack 1.28.2_1528. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 1.28.1_1523
Component Previous Current Description
Ubuntu 20.04 packages 5.4.0-162-generic 5.4.0-163-generic Package updates for CVE-2023-3341, CVE-2023-4156, CVE-2023-4128, CVE-2023-20588, CVE-2023-20900, CVE-2023-40283.
Containerd 1.7.5 1.7.6 N/A
Kubernetes 1.28.1 1.28.2 For more information, see the [change log](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#change log-since-v1281){: external}.

Change log for master fix pack 1.28.2_1527 and worker node fix pack 1.28.1_1523, released 20 September 2023

Changes since version 1.27.
Component Previous Current Description
CoreDNS 1.10.1 1.11.1 See the CoreDNS release notes. CoreDNS now runs as a non-root user and has an updated role-based access control (RBAC) configuration.
Containerd 1.7.4 1.7.5 NA
HAProxy configuration N/A N/A Updated master health probes to use the /livez/ping endpoint.
IBM Cloud Controller Manager v1.27.5-3 v1.28.1-3 Updated to support the Kubernetes 1.28.1 release. Updated Go dependencies and to Go version 1.20.7. New nodes are now registered with the node.kubernetes.io/network-unavailable taint which is cleared when Calico is initialized on the node.
Kubernetes add-on resizer 1.8.18 1.8.19 See the Kubernetes add-on resizer release notes.
Kubernetes (master) v1.27.5 v1.28.2 See the Kubernetes release notes.
Kubernetes (worker node) v1.27.4 v1.28.1 See the Kubernetes release notes.
Ubuntu 20.04 packages 5.4.0-156-generic 5.4.0-162-generic Worker node kernel & package updates for CVE-2020-21047 , CVE-2021-33294 , CVE-2022-40982 , CVE-2023-20593 , CVE-2023-2269 , CVE-2023-31084 , CVE-2023-3268 , CVE-2023-3609 , CVE-2023-3611 , CVE-2023-3776
Kubernetes configuration N/A N/A See Default service settings for Kubernetes components. In addition, both default and verbose Kubernetes API server auditing records now contain extra user claim information.
GPU device plug-in and installer NA 61afd3d Driver version: 535.54.03.
Kubernetes Dashboard metrics scraper N/A N/A Increased Kubernetes Dashboard metrics scraper CPU resource request to 20m.
Kubernetes DNS autoscaler v1.8.8 v1.8.9 See the Kubernetes DNS autoscaler release notes.
Kubernetes Metrics Server v0.6.3 v0.6.4 See the Kubernetes Metrics Server release notes. In addition, the Kubernetes Metrics Server has an updated role-based access control (RBAC) configuration.
Kubernetes CSI snapshot controller and CRDs v6.2.1 v6.2.2 See the Kubernetes container storage interface (CSI) snapshotter release notes.