IBM Cloud Docs
Red Hat OpenShift version 4.6 change log

Red Hat OpenShift version 4.6 change log

This version is no longer supported. Update your cluster to a supported version as soon as possible.

Overview

Unless otherwise noted in the change logs, the IBM Cloud provider version enables Red Hat OpenShift APIs and features that are at beta. Red Hat OpenShift alpha features, which are subject to change, are disabled.

Check the Security Bulletins on IBM Cloud Status for security vulnerabilities that affect Red Hat OpenShift on IBM Cloud. You can filter the results to view only Kubernetes Service security bulletins that are relevant to Red Hat OpenShift on IBM Cloud. Change log entries that address other security vulnerabilities but don't also refer to an IBM security bulletin are for vulnerabilities that are not known to affect Red Hat OpenShift on IBM Cloud in normal usage. If you run privileged containers, run commands on the workers, or execute untrusted code, then you might be at risk.

Master patch updates are applied automatically. Worker node patch updates can be applied by reloading or updating the worker nodes. For more information about major, minor, and patch versions and preparation actions between minor versions, see Red Hat OpenShift versions.

Change logs

Review the version 4.6 change log.

Change log for master fix pack 4.6.61_1605_openshift, released 27 October 2022

The following table shows the changes that are in the master fix pack 4.6.61_1605_openshift. Master patch updates are applied automatically.

Changes since version 4.6.611600openshift
Component Previous Current Description
Cluster health image v1.3.11 v1.3.12 Updated Go dependencies, golangci-lint, and to Go version 1.19.2. Updated base image version to 109. Excluded ingress status from cluster status calculation.
IBM Cloud Controller Manager v1.19.16-19 v1.19.16-21 Updated to support the Kubernetes 1.19.16 release.
IBM Cloud RBAC Operator dc1725a 778ef2b Updated to Go version 1.18.6.
Key Management Service provider v2.5.9 v2.5.10 Updated Go dependencies and to Go version 1.19.2.
OpenVPN Operator image v1.4.9 v1.4.10 Updated ansible operator base image to v1.24.0 to resolve CVEs.

Change log for worker node fix pack 4.6.61_1603_openshift, released 25 October 2022

The following table shows the changes that are in the worker node fix pack 4.6.61_1603_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.61_1602_openshift
Component Previous Current Description
RHEL 7 Packages N/A N/A N/A
Red Hat OpenShift on IBM Cloud N/A N/A N/A

Change log for worker node fix pack 4.6.61_1602_openshift, released 10 October 2022

The following table shows the changes that are in the worker node fix pack 4.6.61_1602_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.61_1601_openshift
Component Previous Current Description
RHEL 7 Packages N/A N/A N/A
RHEL 8 Packages N/A N/A N/A
Red Hat OpenShift on IBM Cloud N/A N/A N/A

Change log for master fix pack 4.6.61_1600_openshift, released 26 September 2022

The following table shows the changes that are in the master fix pack 4.6.61_1600_openshift. Master patch updates are applied automatically.

Changes since version 4.6.601598openshift
Component Previous Current Description
Cluster health image v1.3.10 v1.3.11 Updated Go dependencies and to Go version 1.18.6.
IBM Calico extension 1006 1096 Updated image for CVE-2022-2526.
IBM Cloud Block Storage driver and plug-in v2.2.9 v2.3.1 Updated to Go version 1.18.6. Updated universal base image (UBI) to version 8.6-941 to resolve CVEs.
IBM Cloud File Storage for Classic plug-in and monitor 414 416 Updated to Go version 1.18.6. Updated universal base image (UBI) to version 8.6-941 to resolve CVEs.
Key Management Service Provider v2.5.8 v2.5.9 Updated Go dependencies and to Go version 1.18.6.
Red Hat OpenShift on IBM Cloud 4.6.60 4.6.61 See the Red Hat OpenShift on IBM Cloud Release Notes.
OpenVPN Operator image v1.4.8 v1.4.9 Updated ansible operator base image to v1.23.0 to resolve CVEs.
Red Hat OpenShift on IBM Cloud Control Plane Operator v4.6.0-20220816 v4.6.0-20220920 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud Metrics Server v4.6.0-20220816 v4.6.0-20220920 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud toolkit 4.6.0+20220816 4.6.0+20220920 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.6.61_1601_openshift, released 26 September 2022

The following table shows the changes that are in the worker node fix pack 4.6.61_1601_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.60_1599_openshift
Component Previous Current Description
RHEL 7 Packages N/A N/A N/A
RHEL 8 Packages 4.18.0-372.19.1 4.18.0-372.26.1 N/A
Red Hat OpenShift on IBM Cloud. 4.6.60 4.6.61 For more information, see the change log.

Change log for worker node fix pack 4.6.60_1599_openshift, released 12 September 2022

The following table shows the changes that are in the worker node fix pack 4.6.60_1599_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.60_1596_openshift
Component Previous Current Description
RHEL 7 Packages N/A N/A N/A
Red Hat OpenShift on IBM Cloud N/A N/A N/A

Change log for master fix pack 4.6.60_1598_openshift, released 1 September 2022

The following table shows the changes that are in the master fix pack 4.6.60_1598_openshift. Master patch updates are applied automatically.

Changes since version 4.6.59_1592_openshift
Component Previous Current Description
Calico v3.21.5 v3.21.6 See the Calico release notes. Updated the Calico custom resource definitions to include preserveUnknownFields: false.
Tigera Operator v1.23.7 v1.23.8 See the Tigera Operator release notes.
Cluster health image v1.3.9 v1.3.10 Updated Go dependencies and to Go version 1.18.5.
Gateway-enabled cluster controller 1792 1823 Updated to Go version 1.17.13.
IBM Calico extension 997 1006 Updated to Go version 1.17.13.
IBM Cloud Block Storage driver and plug-in v2.2.8 v2.2.9 Updated to Go version 1.18.5.
IBM Cloud Controller Manager v1.19.16-18 v1.19.16-19 Updated vpcctl binary to version 3367.
IBM Cloud File Storage for Classic plug-in and monitor 412 414 Updated to Go version 1.18.5. Updated universal base image (UBI) to version 8.6-902 to resolve CVEs.
IBM Cloud RBAC Operator 0a187a4 dc1725a Updated Go dependencies and to Go version 1.18.3.
Key Management Service provider v2.5.7 v2.5.8 Updated Go dependencies.
Load balancer and load balancer monitor for IBM Cloud Provider 2057 2109 Updated Go dependencies and to Go version 1.17.13.
Red Hat OpenShift on IBM Cloud. 4.6.59 4.6.60 See the Red Hat OpenShift on IBM Cloud Release Notes.
OpenVPN client 2.5.6-r1-IKS-629 2.5.6-r1-IKS-648 Update image for CVE-2022-2097 and CVE-2022-37434.
OpenVPN Operator image v1.4.7 v1.4.8 Updated Ansible operator base image to version v1.22.2 to resolve CVEs.
OpenVPN server 2.5.6-r1-IKS-628 2.5.6-r1-IKS-647 Update image for CVE-2022-2097 and CVE-2022-37434.
Portieris admission controller v0.12.5 v0.12.6 See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator v4.6.0-20220712 v4.6.0-20220816 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud Metrics Server v4.6.0-20220712 v4.6.0-20220816 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud toolkit 4.6.0+20220712 4.6.0+20220816 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.6.60_1596_openshift, released 29 August 2022

The following table shows the changes that are in the worker node fix pack 4.6.60_1596_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.60_1594_openshift
Component Previous Current Description
RHEL 7 Packages N/A N/A Worker node package updates for CVE-2022-2526.
Red Hat OpenShift on IBM Cloud. N/A N/A N/A
HAPROXY 6514a2 c1634f CVE-2022-32206, CVE-2022-32208

Change log for worker node fix pack 4.6.60_1594_openshift, released 16 August 2022

The following table shows the changes that are in the worker node fix pack 4.6.60_1594_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.60_1593_openshift
Component Previous Current Description
RHEL 7 Packages 3.10.0-1160.71.1 3.10.0-1160.76.1 Worker node package updates for CVE-2022-0005, CVE-2022-21123, CVE-2022-21125, CVE-2022-21127, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151, CVE-2022-21166.
Red Hat OpenShift on IBM Cloud. N/A N/A N/A

Change log for worker node fix pack 4.6.60_1593_openshift, released 01 August 2022

The following table shows the changes that are in the worker node fix pack 4.6.60_1593_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.59_1591_openshift
Component Previous Current Description
RHEL 7 Packages N/A N/A N/A
Red Hat OpenShift on IBM Cloud. 4.6.59 4.6.60 For more information, see the change log.

Change log for master fix pack 4.6.59_1592_openshift, released 26 July 2022

The following table shows the changes that are in the master fix pack 4.6.59_1592_openshift. Master patch updates are applied automatically.

Changes since version 4.6.58_1588_openshift
Component Previous Current Description
Cluster health image v1.3.8 v1.3.9 Updated Go dependencies and to use Go version 1.18.4. Fixed minor typographical error in the add-on daemonset not available health status.
Gateway-enabled cluster controller 1680 1792 Updated to use Go version 1.17.11. Updated image for CVE-2022-2097 and CVE-2022-29458.
IBM Calico extension 980 997 Updated to use Go version 1.17.11. Updated universal base image (UBI) to version 8.6-854 to resolve CVEs.
IBM Cloud Block Storage driver and plug-in v2.2.6 v2.2.8 Updated to use Go version 1.18.3. Updated universal base image (UBI) to version 8.6-854 to resolve CVEs.
IBM Cloud File Storage for Classic plug-in and monitor 410 412 Updated to use Go version 1.18.3. Updated universal base image (UBI) to version 8.6-854 to resolve CVEs. Improved Kubernetes resource watch configuration.
IBM Cloud RBAC Operator 8c96932 0a187a4 Updated universal base image (UBI) to resolve CVEs.
Key Management Service provider v2.5.6 v2.5.7 Updated Go dependencies and to use Go version 1.18.4.
Load balancer and load balancer monitor for IBM Cloud Provider 1997 2057 Updated image for CVE-2022-2097.
Red Hat OpenShift on IBM Cloud. 4.6.58 4.6.59 See the Red Hat OpenShift on IBM Cloud release notes.
OpenVPN client 2.5.6-r0-IKS-592 2.5.6-r1-IKS-629 Updated Alpine base image to version 3.16 to resolve CVEs. Updated OpenVPN to version 2.5.6-r1.
OpenVPN Operator image v1.4.6 v1.4.7 Updated Ansible operator base image to version v1.22.1 to resolve CVEs.
OpenVPN server 2.5.6-r0-IKS-591 2.5.6-r1-IKS-628 Updated Alpine base image to version 3.16 to resolve CVEs. Updated OpenVPN to version 2.5.6-r1.
Portieris admission controller v0.12.4 v0.12.5 See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator v4.6.0-20220614 v4.6.0-20220712 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud Metrics Server v4.6.0-20220614 v4.6.0-20220712 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud toolkit 4.6.0+20220614 4.6.0+20220712 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.6.59_1591_openshift, released 18 July 2022

The following table shows the changes that are in the worker node fix pack 4.6.59_1591_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.59_1590_openshift
Component Previous Current Description
RHEL 7 Packages 3.10.0-1160.66.1 3.10.0-1160.71.1 Worker node package updates for CVE-2020-26116, CVE-2020-26137, CVE-2021-3177, CVE-2022-0391, CVE-2022-1729, CVE-2022-1966.
Red Hat OpenShift on IBM Cloud N/A N/A N/A

Change log for worker node fix pack 4.6.59_1590_openshift, released 11 July 2022

The following table shows the changes that are in the worker node fix pack 4.6.59_1590_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.59_1589_openshift
Component Previous Current Description
General N/A N/A Fix to address a bug that occurred if you used the persistent volume claim NFS v3 storage.

Change log for worker node fix pack 4.6.59_1589_openshift, released 05 July 2022

The following table shows the changes that are in the worker node fix pack 4.6.59_1589_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.58_1587_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.6.58 4.6.59 For more information, see the change log.

Change log for master fix pack 4.6.58_1588_openshift, released 22 June 2022

The following table shows the changes that are in the master fix pack 4.6.58_1588_openshift. Master patch updates are applied automatically.

Changes since version 4.6.57_1584_openshift
Component Previous Current Description
Calico v3.20.5 v3.21.5 See the Calico release notes.
Tigera Operator v1.20.8 v1.23.7 See the Tigera Operator release notes.
Cluster health image v1.3.7 v1.3.8 Updated Go to version 1.17.11 and also updated the dependencies.
IBM Cloud Block Storage driver and plug-in v2.2.4 v2.2.6 Bug fixes for the driver installation. Block plug-in base images were updated to universal base image (UBI) 8.6-751.1655117800 for CVE-2022-1271
IBM Cloud Controller Manager v1.19.16-15 v1.19.16-17 Update prometheus/client_golang to v1.11.1. Update golang.org/x/text to v0.3.7.
Key Management Service provider v2.5.5 v2.5.6 Updated Go to version 1.17.11 and also updated the dependencies.
OpenVPN Operator image v1.4.5 v1.4.6 Update base image to version v1.22.0 to resolve CVEs.
Red Hat OpenShift on IBM Cloud. 4.6.57 4.6.58 See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator v4.6.0-20220509 v4.6.0-20220614 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud Metrics Server and toolkit v4.6.0-20220509 v4.6.0-20220614 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.6.58_1587_openshift, released 20 June 2022

The following table shows the changes that are in the worker node fix pack 4.6.58_1587_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.58_1585_openshift
Component Previous Current Description
RHEL 7 Packages N/A N/A Worker node package updates for CVE-2022-1271.
Haproxy 468c09 04f862 CVE-2022-1271.
Red Hat OpenShift on IBM Cloud. N/A N/A N/A

Change log for worker node fix pack 4.6.58_1585_openshift, released 7 June 2022

The following table shows the changes that are in the worker node fix pack 4.6.58_1585_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.57_1583_openshift
Component Previous Current Description
RHEL 7 Packages N/A N/A Worker node package updates for CVE-2022-24903.
Red Hat OpenShift on IBM Cloud. 4.6.57 4.6.58 For more information, see the change log.

Change log for master fix pack 4.6.57_1584_openshift, released 3 June 2022

The following table shows the changes that are in the master fix pack 4.6.57_1584_openshift. Master patch updates are applied automatically.

Changes since version 4.6.56_1580_openshift
Component Previous Current Description
Cluster health image v1.3.6 v1.3.7 Updated Go to version 1.17.10 and also updated the dependencies. Update registry base image version to 104
IBM Calico extension 954 980 Updated to use Go version 1.17.10. Updated minimal universal base image (UBI) to version 8.5.
IBM Cloud Block Storage driver and plug-in v2.2.2 v2.2.4 Updated universal base image (UBI) to version 8.6-751 to resolve CVEs.
IBM Cloud Controller Manager v1.19.16-11 v1.19.16-15 Build changes for new key.
IBM Cloud File Storage for Classic plug-in and monitor 408 410 Updated universal base image (UBI) to version 8.6-751 to resolve CVEs.
IBM Cloud RBAC Operator 8c8c82b 8c96932 Updated Go to version 1.18.1
Key Management Service provider v2.5.4 v2.5.5 Updated Go to version 1.17.10 and updated the golang dependencies.
Load balancer and load balancer monitor for IBM Cloud Provider 1915 1997 Updated Go to version 1.17.10 and updated dependencies.
OpenVPN Operator image v1.4.3 v1.4.5 Updated base image to v1.21.0 for CVE remediation.
Portieris admission controller v0.10.3 v0.12.4 See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud. 4.6.56 4.6.57 See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator v4.6.0-20220411 v4.6.0-20220509 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud Metrics Server v4.6.0-20220411 v4.6.0-20220509 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud toolkit 4.6.0+20220411 4.6.0+20220509 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.6.57_1583_openshift, released 23 May 2022

The following table shows the changes that are in the worker node fix pack 4.6.57_1583_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.57_1582_openshift
Component Previous Current Description
RHEL 7 Packages 3.10.0-1160.62.1 3.10.0-1160.66.1 Worker node kernel & package updates for CVE-2018-25032, CVE-2022-1271, CVE-2022-0492.
HA proxy 36b0307 468c09 CVE-2021-3634.

Change log for worker node fix pack 4.6.57_1582_openshift, released 09 May 2022

The following table shows the changes that are in the worker node fix pack 4.6.57_1582_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.56_1581_openshift
Component Previous Current Description
RHEL 7 Packages N/A N/A N/A
Red Hat OpenShift on IBM Cloud. 4.6.56 4.6.57 For more information, see the change log.
Haproxy f53b22 36b030 CVE-2022-1271, CVE-2022-1154, CVE-2018-25032.

Change log for master fix pack 4.6.56_1580_openshift, released 26 April 2022

The following table shows the changes that are in the master fix pack 4.6.56_1580_openshift. Master patch updates are applied automatically.

Changes since version 4.6.56_1578_openshift
Component Previous Current Description
Calico v3.19.4 v3.20.5 See the Calico release notes.
Tigera Operator v1.17.9 v1.20.8 See the Tigera Operator release notes.
Cluster health image v1.3.5 v1.3.6 Updated Go to version 1.17.9 and also updated the dependencies. Update registry base image version to 103.
Gateway-enabled cluster controller 1669 1680 Updated metadata for a rotated key.
IBM Calico extension 950 954 Updated to latest minimal universal base image (UBI) to resolve CVE-2021-3999, CVE-2022-23218, CVE-2022-23219, CVE-2022-23308, CVE-2021-23177, and CVE-2021-31566.
IBM Cloud Block Storage driver and plug-in v2.2.1 v2.2.2 Updated universal base image (UBI) to 8.5-240.1648458092
IBM Cloud Controller Manager v1.19.16-10 v1.19.16-11 Updated vpcctl to the 3003 binary image.
IBM Cloud File Storage for Classic plug-in and monitor 407 408 Fixed CVE-2022-0778.
IBM Cloud RBAC Operator 6c43ef1 8c8c82b Updated Go to version 1.17.8
Key Management Service provider v2.5.3 v2.5.4 Moved to a different base image, version 102, to reduce CVE footprint. Resolved CVE-2022-0778.
Load balancer and Load balancer monitor for IBM Cloud Provider 1866 1915 Updated the image to resolve CVEs.
OpenVPN client 2.5.4-r0-IKS-579 2.5.6-r0-IKS-592 Upgrade openvpn to version 2.5.6-r0.
OpenVPN server 2.5.4-r0-IKS-578 2.5.6-r0-IKS-591 Upgrade openvpn to version 2.5.6-r0.
OpenVPN Operator image v1.4.2 v1.4.3 Updated ansible operator base image to version v1.19.0 to resolve CVEs.
Red Hat OpenShift on IBM Cloud Control Plane Operator v4.6.0-20220308 v4.6.0-20220411 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud Metrics Server v4.6.0-20220308 v4.6.0-20220411 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud toolkit 4.6.0+20220308 4.6.0+20220411 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.6.56_1581_openshift, released 25 April 2022

Changes since version 4.6.56_1579_openshift
Component Previous Current Description
RHEL 7 Packages N/A N/A Package updates.

Change log for worker node fix pack 4.6.56_1579_openshift, released 11 April 2022

The following table shows the changes that are in the worker node fix pack 4.6.56_1579_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.56_1577_openshift
Component Previous Current Description
RHEL Packages 3.10.0-1160.59.1 3.10.0-1160.62.1 Kernel and package updates for CVE-2021-45960, CVE-2021-46143, CVE-2022-22822, CVE-2022-22823, CVE-2022-22824, CVE-2022-22825, CVE-2022-22826 CVE-2022-22827, CVE-2022-23852, CVE-2022-25235, CVE-2022-25236, CVE-2022-25315, CVE-2021-4028, CVE-2021-4083 CVE-2022-0778.

Change log for master fix pack 4.6.56_1578_openshift, released 6 April 2022

Changes since version 4.6.48_1573_openshift
Component Previous Current Description
Calico v3.17.6 v3.19.4 See the Calico release notes.
Tigera Operator v1.13.11 v1.17.9 See the Tigera Operator release notes.
Cluster health image v1.3.3 v1.3.5 Update golang dependencies. Update image to version 102 to fix CVEs CVE-2021-3999, CVE-2022-23218, CVE-2022-23219
Gateway-enabled cluster controller 1653 1669 Updated to use Go version 1.17.8.
IBM Calico extension 929 950 Updated to use Go version 1.17.8. Updated universal base image (UBI) to resolve CVEs.
IBM Cloud Block Storage driver and plug-in v2.1.7 v2.2.1 Bug fixes for driver installation issues. Updated universal base image (UBI) to 8.5-240 and updated Go to version to 1.16.15. Fixes for CVEs.
IBM Cloud Controller Manager v1.19.16-9 v1.19.16-10 Changes to the build.
IBM Cloud File Storage for Classic plug-in and monitor 405 407 Updated Go to version 1.16.14. Updated universal base image (UBI) to version 8.5-240.
IBM Cloud RBAC Operator 0fc9949 6c43ef1 Upgraded Go packages to resolve vulnerabilities
Key Management Service provider v2.4.3 v2.5.3 Updated to use Go version 1.17.8. Updated golang dependencies. Fixed CVE CVE-2022-24407.
Load balancer and load balancer monitor for IBM Cloud Provider 1748 1866 Updated the image to resolve CVEs. Updated to use Go version 1.17.8.
OpenVPN client 2.5.4-r0-IKS-556 2.5.4-r0-IKS-579 Updated Go to version 1.16.15.
OpenVPN server 2.5.4-r0-IKS-562 2.5.4-r0-IKS-578 Updated Go to version 1.16.15.
OpenVPN Operator image v1.4.1 v1.4.2 Updated ansible operator base image to version v1.18.0 to resolve CVEs.
Red Hat OpenShift 4.6.48 4.6.56 See the Red Hat OpenShift release notes.
Red Hat OpenShift Control Plane Operator v4.6.0-20220222 v4.6.0-20220308 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud Metrics Server v4.6.0-20220222 v4.6.0-20220308 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud toolkit 4.6.0+20220222 4.6.0+20220308 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node pack 4.6.56_1577_openshift, released 28 March 2022

Changes since version 4.6.55_1575_openshift
Component Previous Current Description
RHEL Packages N/A N/A N/A
HA proxy 15198f b40c07 CVE-2021-45960, CVE-2021-46143, CVE-2022-22822, CVE-2022-22823, CVE-2022-22824, CVE-2022-22825, CVE-2022-22826, CVE-2022-22827, CVE-2022-23852, CVE-2022-25235, CVE-2022-25236, CVE-2022-25315, CVE-2021-3999, CVE-2022-23218, CVE-2022-23219, CVE-2022-23308, CVE-2021-23177, CVE-2021-31566.
Red Hat OpenShift 4.6.55 4.6.56 For more information, see the change logs.

Change log for worker node pack 4.6.55_1575_openshift, released 14 March 2022

Changes since version 4.6.53_1574_openshift
Component Previous Current Description
RHEL Packages N/A N/A N/A
Red Hat OpenShift 4.6.53 4.6.55 See the change log.

Change log for master fix pack 4.6.48_1573_openshift, released 3 March 2022

Changes since version 4.6.48_1570_openshift
Component Previous Current Description
Cluster health image v1.2.21 v1.3.3 Updated golang.org/x/crypto to v0.0.0-20220214200702-86341886e292. Adds fix for CVE-2021-43565. Adds Golang dependency updates.
Gateway-enabled cluster controller 1586 1653 Updated to use Go version 1.17.7 and updated Go modules to fix CVEs.
IBM Calico extension 923 929 Updated universal base image (UBI) to the 8.5-230 version to resolve CVEs. Updated to use Go version 1.16.13.
IBM Cloud Block Storage driver and plug-in v2.1.6 v2.1.7 Adds fix for CVE-2021-3538](https://nvd.nist.gov/vuln/detail/CVE-2021-3538){: external}.
IBM Cloud Controller Manager v1.19.16-6 v1.19.16-9 Adds changes to the renovate rules.
IBM Cloud File Storage for Classic plug-in and monitor 404 405 Adds fix for CVE-2021-3538 and adds dependency updates.
Key Management Service provider v2.3.13 v2.4.3 Updated golang.org/x/crypto to v0.0.0-20220214200702-86341886e292. Adds fix for CVE-2021-43565. Adds Golang dependency updates.
OpenVPN server 2.5.4-r0-IKS-555 2.5.4-r0-IKS-562 Turns off CRL verification in the openvpn image.
OpenVPN Operator image v1.4.0 v1.4.1 Turns off CRL verification in the opevpn-operator images.
Red Hat OpenShift Control Plane Operator v4.6.0-20220107 v4.6.0-20220222 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud Metrics Server v4.6.0-20220107 v4.6.0-20220222 See the Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.6.0+20220222){: external}.
Red Hat OpenShift on IBM Cloud toolkit 4.6.0+20220107 4.6.0+20220222 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.6.53_1574_openshift, released 28 February 2022

Changes since version 4.6.53_1572_openshift
Component Previous Current Description
RHEL 7 Packages 3.10.0-1160.53.1.el7 3.10.0-1160.59.1.el7 Kernel and package updates for CVE-2020-25709, CVE-2020-25710, CVE-2022-24407, CVE-2020-0465, CVE-2020-0466, CVE-2021-0920, CVE-2021-3564, CVE-2021-3573, CVE-2021-3752, CVE-2021-4155, CVE-2022-0330, CVE-2022-22942
HA proxy f6a2b3 15198fb Contains fixes for CVE-2022-24407.

Change log for worker node fix pack 4.6.53_1572_openshift, released 14 February 2022

Changes since version 4.6.53_1571_openshift
Component Previous Current Description
RHEL 7 Packages N/A N/A N/A
Red Hat OpenShift N/A N/A N/A
HA proxy d38fa1 f6a2b3 CVE-2021-3521 CVE-2021-4122.

Change log for worker node fix pack 4.6.53_1571_openshift, released 31 January 2022

The following table shows the changes that are in the worker node fix pack 4.6.53_1571_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.53_1569_openshift
Component Previous Current Description
RHEL 7 Packages N/A N/A Updated worker node images with package updates for CVE-2021-4034.

Change log for master fix pack 4.6.48_1570_openshift, released 26 January 2022

The following table shows the changes that are in the master fix pack patch update 4.6.48_1570_openshift. Master patch updates are applied automatically.

Changes since version 4.6.47_1569_openshift
Component Previous Current Description
Calico N/A N/A Changed to improve Calico availability during updates.
Cluster health image v1.2.20 v1.2.21 Updated to use Go version 1.17.5, updated Go dependencies and golangci-lint.
IBM Calico extension 900 923 Updated universal base image (UBI) to the 8.5-218 version to resolve CVEs. Updated to use Go version 1.16.13.
IBM Cloud Block Storage for Classic driver and plug-in v2.1.3 v2.1.6 Updated to use Go version 1.16.13.
IBM Cloud Controller Manager v1.19.16-5 v1.19.16-6 Exclude CVE-2020-14312 from scanning
IBM Cloud File Storage for Classic plug-in and monitor 402 404 Updated universal base image (UBI) to the 8.5-218 version to resolve CVEs. Updated to use Go version 1.16.13.
IBM Cloud RBAC Operator 3430e03 0fc9949 Updated universal base image (UBI) to the 8.5-218 version to resolve CVEs. Updated to use Go version 1.16.13.
Key Management Service provider v2.3.12 v2.3.13 Updated Go dependencies and golangci-lint.
Load balancer and load balancer monitor for IBM Cloud Provider 1660 1748 Updated the Alpine base image to the 3.15 version to resolve CVEs. Updated to use Go version 1.17.6.
Red Hat OpenShift 4.6.47 4.6.48 Changed the duration of the Kubernetes API server certificate from 825 days to 730 days. Changed the duration of the cluster CA certificate from 30 years to 10 years. Updated to fix CVE-2021-25735. See the Red Hat OpenShift release notes.
Red Hat OpenShift Control Plane Operator v4.6.0-20211201 v4.6.0-20220107 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
OpenVPN client 2.4.6-r3-IKS-463 2.5.4-r0-IKS-556 Update base image to alpine 3.15 to address CVEs, no longer set the --compress config option, updated scripts.
OpenVPN server 2.4.6-r3-IKS-462 2.5.4-r0-IKS-555 Update base image to alpine 3.15 to address CVEs, no longer set the --compress config option, updated scripts.
OpenVPN Operator image v1.3.9 v1.4.0 Updated OpenVPN to version 2.5.4-r0. Remove deprecated compression config option from VPN server. Set cipher explicitly to default value to avoid warning message in logs.
Red Hat OpenShift on IBM Cloud Metrics Server v4.6.0-20211201 v4.6.0-20220107 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud toolkit 4.6.0+20211201 4.6.0+20220107 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.6.53_1569_openshift, released 18 January 2022

The following table shows the changes that are in the worker node fix pack 4.6.53_1569_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.52_1568_openshift
Component Previous Current Description
RHEL 7 Packages 3.10.0-1160.49.1.el7 3.10.0-1160.53.1.el7 Kernel and package updates for CVE-2020-25704, CVE-2020-36322, CVE-2021-42739, and CVE-2021-3712.
Red Hat OpenShift 4.6.52 4.6.53 See the change logs.

Change log for worker node fix pack 4.6.52_1568_openshift, released 4 January 2022

The following table shows the changes that are in the worker node fix pack patch update 4.6.52_1568_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.52_1567_openshift
Component Previous Current Description
HA proxy 3b8663 d38fa1 Contains fixes for CVE-2021-3712.

Change log for worker node fix pack 4.6.52_1567_openshift, released 20 December 2021

The following table shows the changes that are in the worker node fix pack patch update 4.6.52_1567_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.49_1566_openshift
Component Previous Current Description
Red Hat OpenShift node 4.6.49 4.6.52 See the change logs

Change log for master fix pack 4.6.47_1565_openshift, released 7 December 2021

The following table shows the changes that are in the master fix pack patch update 4.6.47_1565_openshift. Master patch updates are applied automatically.

Changes since version 4.6.47_1563_openshift
Component Previous Current Description
Calico v3.17.5 v3.17.6 See the Calico release notes.
Tigera Operator v1.13.9 v1.13.11 See the Tigera Operator release notes.
Cluster health image v1.2.18 v1.2.20 Updated universal base image (UBI) to the latest 8.4 version to resolve CVEs. Updated to use Go version 1.16.10.
Gateway-enabled cluster controller 1567 1586 Updated Alpine base image to the latest 3.14 version to resolve CVEs. Updated to use Go version 1.16.10.
IBM Calico extension 864 900 Updated universal base image (UBI) to the 8.5-204 version to resolve CVEs. Updated to use Go version 1.16.10.
IBM Cloud Block Storage for Classic driver and plug-in v2.1.2 v2.1.3 Updated universal base image (UBI) to the 8.5-204 version to resolve CVEs. Updated to use Go version 1.16.10.
IBM Cloud File Storage for Classic plug-in and monitor 401 402 Updated universal base image (UBI) to the 8.5-204 version to resolve CVEs. Updated to use Go version 1.16.10.
IBM Cloud RBAC Operator 4ca5637 3430e03 Updated universal base image (UBI) to the latest 8.5 version to resolve CVEs. Updated to use Go version 1.16.10.
Key Management Service provider v2.3.10 v2.3.12 Updated universal base image (UBI) to the latest 8.4 version to resolve CVEs. Updated to use Go version 1.16.10.
Load balancer and load balancer monitor for IBM Cloud Provider 1589 1660 Updated Alpine base image to the latest 3.14 version to resolve CVEs. Updated to use Go version 1.16.10.
Red Hat OpenShift Control Plane Operator v4.6.0-20211109 v4.6.0-20211201 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
OpenVPN Operator image v1.3.8 v1.3.9 Updated ansible operator base image to version v1.14.0 to resolve CVEs.
Red Hat OpenShift on IBM Cloud Metrics Server v4.6.0-20211109 v4.6.0-20211201 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud toolkit 4.6.0+20211109 4.6.0+20211201 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.6.49_1566_openshift, released 6 December 2021

The following table shows the changes that are in the worker node fix pack patch update 4.6.49_1566_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.49_1564_openshift
Component Previous Current Description
RHEL 7 Packages 3.10.0-1160.45 3.10.0-1160.49 Updated worker node images and kernel with package updates. Contains fixes for CVE-2020-36385, CVE-2021-37750, CVE-2021-41617, CVE-2021-20271"{: external}.

Change log for worker node fix pack 4.6.49_1564_openshift, released 22 November 2021

The following table shows the changes that are in the worker node fix pack patch update 4.6.49_1564_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.49_1562_openshift
Component Previous Current Description
HA proxy 07f1e9e 3b8663 Contains fixes for CVE-2021-20231, CVE-2021-20232, CVE-2021-3580, CVE-2021-22946, CVE-2021-22947, CVE-2021-22876, CVE-2021-22898, CVE-2021-22925, CVE-2019-20838, CVE-2020-14155, CVE-2018-20673, CVE-2021-42574, CVE-2019-17594, CVE-2019-17595, CVE-2020-12762, CVE-2020-16135, CVE-2021-3445, CVE-2021-36084, CVE-2021-36085, CVE-2021-36086, CVE-2021-36087, CVE-2021-20266, CVE-2019-18218, CVE-2021-23840, CVE-2021-23841, CVE-2021-27645, CVE-2021-33574, CVE-2021-35942, CVE-2021-33560, CVE-2019-13750, CVE-2019-13751, CVE-2019-19603, CVE-2019-5827, CVE-2020-13435, CVE-2020-24370, CVE-2021-28153, CVE-2021-3800, CVE-2021-33928, CVE-2021-33929, CVE-2021-33930, CVE-2021-33938, andCVE-2021-3200

Change log for master fix pack 4.6.47_1563_openshift, released 17 November 2021

The following table shows the changes that are in the master fix pack patch update 4.6.47_1563_openshift. Master patch updates are applied automatically.

Changes since version 4.6.47_1560_openshift
Component Previous Current Description
Cluster health image v1.2.16 v1.2.18 Updated Go module dependencies and to use Go version 1.16.9. Updated image for CVE-2021-22946, CVE-2021-22947, CVE-2021-33928, CVE-2021-33929 and CVE-2021-33930.
etcd v3.4.17 v3.4.18 See the etcd release notes.
Gateway-enabled cluster controller 1510 1567 Updated to use Go version 1.16.9.
IBM Cloud Controller Manager v1.19.15-3 v1.19.16-3 Updated to support the Kubernetes 1.19.16 release. Updated image for DLA-2797-1.
IBM Cloud RBAC Operator e3cb629 4ca5637 Updated universal base image (UBI) to the latest 8.4 version to resolve CVEs.
Key Management Service provider v2.3.8 v2.3.10 Updated Go module dependencies and to use Go version 1.16.9. Updated image for CVE-2021-22946.
Load balancer and load balancer monitor for IBM Cloud Provider 1550 1589 Updated to use Go version 1.16.9.
Red Hat OpenShift Control Plane Operator v4.6.0-20210923 v4.6.0-20211109 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
OpenVPN client 2.4.6-r3-IKS-386 2.4.6-r3-IKS-463 Updated image to implement additional IBM security controls.
OpenVPN server 2.4.6-r3-IKS-385 2.4.6-r3-IKS-462 Updated image to implement additional IBM security controls.
OpenVPN Operator image v1.3.7 v1.3.8 Updated ansible operator base image to version v1.13.1 to resolve CVEs.
Red Hat OpenShift on IBM Cloud Metrics Server v4.6.0-20210923 v4.6.0-20211109 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud toolkit 4.6.0+20210923 4.6.0+20211109 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.6.49_1562_openshift, released 10 November 2021

The following table shows the changes that are in the worker node fix pack patch update 4.6.49_1562_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.46_1558_openshift
Component Previous Current Description
RHEL 7 Packages N/A N/A Updated worker node image packages for CVE-2021-42574
Red Hat OpenShift 4.6.48 4.6.49 See the Red Hat OpenShift release notes

Change log for master fix pack 4.6.47_1560_openshift, released 29 October 2021

The following table shows the changes that are in the master fix pack patch update 4.6.47_1560_openshift. Master patch updates are applied automatically.

Changes since version 4.6.44_1556_openshift
Component Previous Current Description
Cluster health image v1.2.15 v1.2.16 Updated universal base image (UBI) to the latest 8.4 version to resolve CVEs: CVE-2021-36222, CVE-2021-37750, CVE-2021-22922, CVE-2021-22923, and CVE-2021-22924.
etcd v3.4.16 v3.4.17 See the etcd release notes.
IBM Calico extension 763 864 Updated to use Go version 1.16.9. Updated universal base image (UBI) to the latest 8.4 version to resolve CVEs.
IBM Cloud Block Storage for Classic driver and plug-in v2.1.1 v2.1.2 Updated universal base image (UBI) to version 8.4-210 to resolve CVEs.
IBM Cloud Controller Manager v1.19.15-1 v1.19.15-3 Updated to ignore VPC load balancer (LB) state when a LB delete is requested.
IBM Cloud File Storage for Classic plug-in and monitor 400 401 Updated universal base image (UBI) to the latest 8.4-210 version to resolve CVEs.
Key Management Service provider v2.3.7 v2.3.8 Updated universal base image (UBI) to the latest 8.4 version to resolve CVEs: CVE-2021-36222, CVE-2021-37750, CVE-2021-22922, CVE-2021-22923, and CVE-2021-22924.
Red Hat OpenShift 4.6.44 4.6.47 See the Red Hat OpenShift release notes.
Red Hat OpenShift Control Plane Operator v4.6.0-20210917 v4.6.0-20210923 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
OpenVPN Operator image v1.3.6 v1.3.7 Updated ansible operator base image to version v1.12.0 to resolve CVEs.
Red Hat OpenShift on IBM Cloud Metrics Server v4.6.0-20210917 v4.6.0-20210923 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud toolkit 4.6.0+20210917 4.6.0+20210923 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.6.48_1561_openshift, released 25 October 2021

The following table shows the changes that are in the worker node fix pack patch update 4.6.48_1561_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.46_1558_openshift
Component Previous Current Description
Red Hat OpenShift 4.6.46 4.6.48 See the Red Hat OpenShift change logs.
RHEL 7 Packages 3.10.0-1160.42.2.el7 3.10.0-1160.45.1.el7 Updated worker node images and kernel with package updates for CVE-2021-3778 and CVE-2021-3796.
Worker-pool taint automation N/A N/A Fixes known issue related to worker-pool taint automation that prevents workers from getting providerID.

Change log for worker node fix pack 4.6.46_1558_openshift, released 11 October 2021

The following table shows the changes that are in the worker node fix pack patch update 4.6.46_1558_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.45_1557_openshift
Component Previous Current Description
Red Hat OpenShift 4.6.45 4.6.46 See the change logs. The update resolves CVE-2021-25741 (see the IBM security bulletin).

Change log for master fix pack 4.6.44_1556_openshift, released 28 September 2021

The following table shows the changes that are in the master fix pack patch update 4.6.44_1556_openshift. Master patch updates are applied automatically.

Changes since version 4.6.42_1553_openshift
Component Previous Current Description
Calico v3.17.2 v3.17.5 See the Calico release notes.
Tigera Operator v1.13.4 v1.13.9 See the Tigera Operator release notes.
Gateway-enabled cluster controller 1444 1510 Updated image for CVE-2021-3711 and CVE-2021-3712.
IBM Cloud Block Storage plug-in and driver v2.0.9 v2.1.1 Updated to use Go version 1.16.7. Updated universal base image (UBI) to the latest 8.4-208 version to resolve CVEs.
IBM Cloud Controller Manager v1.19.14-1 v1.19.15-1 Updated to support the Kubernetes 1.19.15 release. Fixed a bug that might cause node initialization to fail when a new node reuses the name of a deleted node.
IBM Cloud File Storage for Classic plug-in and monitor 398 400 Updated to use Go version 1.16.7. Updated universal base image (UBI) to the latest 8.4-208 version to resolve CVEs.
IBM Cloud RBAC Operator 945df65 e3cb629 Updated to use Go version 1.16.7.
Kubernetes API server auditing configuration N/A N/A Updated to support verbose Kubernetes API server auditing.
Load balancer and load balancer monitor for IBM Cloud Provider 1510 1550 Updated image for CVE-2021-3711 and CVE-2021-3712.
OpenShift Container Platform 4.6.42 4.6.44 See the OpenShift Container Platform release notes.
OpenShift Container PlatformControl Plane Operator v4.6.0-20210816 v4.6.0-20210917 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud Metrics Server v4.6.0-20210816 v4.6.0-20210917 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud toolkit 4.6.0+20210816 4.6.0+20210917 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.6.45_1557_openshift, released 27 September 2021

The following table shows the changes that are in the worker node fix pack patch update 4.6.45_1557_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.44_1555_openshift
Component Previous Current Description
Disk identification N/A N/A Enhanced the disk identification logic to handle the case of 2+ partitions.
HA proxy 9c98dc5 07f1e9 Updated image with fixes for CVE-2021-22922, CVE-2021-22923, CVE-2021-22924, CVE-2021-36222, and CVE-2021-37750.
OpenShift Container Platform 4.6.44 4.6.45 For more information, see the change logs.

Change log for worker node fix pack 4.6.44_1555_openshift, released 13 September 2021

The following table shows the changes that are in the worker node fix pack patch update 4.6.44_1555_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.43_1554_openshift
Component Previous Current Description
OpenShift Container Platform 4.6.43 4.6.44 See the Red Hat OpenShift release notes.
RHEL 7 Packages 3.10.0-1160.36.2.el7 3.10.0-1160.42.2.el7 Updated worker node image with package updates for CVE-2021-25214, CVE-2020-27777, CVE-2021-22555, CVE-2021-29154, CVE-2021-29650, CVE-2021-32399, and CVE-2021-3715.

Change log for worker node fix pack 4.6.43_1554_openshift, released 30 August 2021

The following table shows the changes that are in the worker node fix pack patch update 4.6.43_1554_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.42_1552_openshift
Component Previous Current Description
OpenShift Container Platform 4.6.42 4.6.43 For more information, see the change logs.

Change log for master fix pack 4.6.42_1553_openshift, released 25 August 2021

The following table shows the changes that are in the master fix pack patch update 4.6.42_1553_openshift. Master patch updates are applied automatically.

Changes since version 4.6.38_1550_openshift
Component Previous Current Description
Calico N/A N/A Updated the rolling update configuration for the calico-node daemonset in the calico-system namespace. The configuration is now the same regardless of the number of cluster worker nodes.
Cluster health image v1.2.14 v1.2.15 Updated to use Go version 1.15.15. Updated universal base image (UBI) to the latest 8.4 version to resolve CVEs.
Cluster master operations N/A N/A Fixes DNS configuration problem that might block Red Hat OpenShift operator updates.
Gateway-enabled cluster controller 1348 1444 Updated image for CVE-2021-36159.
IBM Calico extension 747 763 Updated to use Go version 1.16.6. Updated universal base image (UBI) to the latest 8.4-205 version to resolve CVEs.
IBM Cloud Block Storage for Classic plug-in and driver v2.0.8 v2.0.9 Updated to use Go version 1.16.6. Updated image for CVE-2021-33910.
IBM Cloud Controller Manager v1.19.13-1 v1.19.14-1 Updated to support the Kubernetes 1.19.14 release and to use Go version 1.15.15.
IBM Cloud File Storage for Classic plug-in and monitor 395 398 Updated to use Go version 1.16.6. Updated image for CVE-2021-33910.
Key Management Service provider v2.3.6 v2.3.7 Updated to use Go version 1.15.15. Updated universal base image (UBI) to the latest 8.4 version to resolve CVEs.
Load balancer and load balancer monitor for IBM Cloud Provider 1328 1510 Updated image for CVE-2020-27780.
Red Hat OpenShift 4.6.38 4.6.42 See the Red Hat OpenShift release notes.
Red Hat OpenShift Control Plane Operator v4.6.0-20210630 v4.6.0-20210816 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
OpenVPN Operator image v1.3.4 v1.3.6 Updated image for CVE-2021-33910.
Red Hat OpenShift on IBM Cloud Metrics Server v4.6.0-20210630 v4.6.0-20210816 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud toolkit 4.6.0+20210630 4.6.0+20210816 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.6.42_1552_openshift, released 16 August 2021

The following table shows the changes that are in the worker node fix pack patch update 4.6.42_1552_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.40_1551_openshift
Component Previous Current Description
HA proxy 68e6b3 9c98dc Updated image with fixes for CVE-2021-27218
RHEL 7 Packages N/A N/A Updated image with fixes for: CVE-2020-0543, CVE-2020-0548, CVE-2020-0549, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698, CVE-2020-24489, CVE-2020-24511, and CVE-2020-24512.
OpenShift Container Platform 4.6.40 4.6.42 For more information, see the change logs.

Change log for worker node fix pack 4.6.40_1551_openshift, released 02 August 2021

The following table shows the changes that are in the worker node fix pack patch update 4.6.40_1551_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.38_1549_openshift
Component Previous Current Description
HA proxy aae810 68e6b3 Updated image with fixes for CVE-2021-33910.
Registry endpoints Added ability to access all global registries for private service enabled clusters through the public domain. Added zonal public registry endpoints for clusters with both private and public service endpoints enabled.
Read only disk self healing For VPC Gen2 workers. Added automation to recover from disks going read only.
RHEL 7 Packages 3.10.0-1160.31.1 3.10.0-1160.36.2 Updated worker node images & Kernel with package updates: CVE-2019-20934, CVE-2020-11668, CVE-2021-33033, CVE-2021-33034, CVE-2021-33909.
OpenShift Container Platform 4.6.38 4.6.40 For more information, see the change logs.

Change log for master fix pack 4.6.38_1550_openshift, released 27 July 2021

The following table shows the changes that are in the master fix pack patch update 4.6.38_1550_openshift. Master patch updates are applied automatically.

Changes since version 4.6.34_1547_openshift
Component Previous Current Description
Cluster health image v1.2.13 v1.2.14 Updated universal base image (UBI) to the latest version to resolve CVEs.
etcd v3.4.14 v3.4.16 See the etcd release notes.
IBM Calico extension 730 747 Updated universal base image (UBI) to version 8.4-205 to resolve CVEs.
IBM Cloud Block Storage for Classic plug-in and driver v2.0.7 v2.0.8 Updated to use Go version 1.16.6. Updated universal base image (UBI) to version 8.4-205 to resolve CVEs.
IBM Cloud Controller Manager v1.19.12-2 v1.19.13-1 Updated to support the Kubernetes 1.19.13 release and to use Go version 1.15.14.
IBM Cloud File Storage for Classic plug-in and monitor 394 395 Updated universal base image (UBI) to version 8.4-205 to resolve CVEs.
IBM Cloud RBAC Operator b68ea92 945df65 Updated image for CVE-2021-33194.
Key Management Service provider v2.3.5 v2.3.6 Updated universal base image (UBI) to the latest version to resolve CVEs.
Red Hat OpenShift 4.6.34 4.6.38 See the Red Hat OpenShift release notes.
Red Hat OpenShift Control Plane Operator v4.6.0-20210608 v4.6.0-20210630 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
OpenVPN Operator image v1.3.3 v1.3.4 Updated Ansible operator base image to version 1.8.1 to resolve CVEs.
Red Hat OpenShift on IBM Cloud Metrics Server v4.6.0-20210608 v4.6.0-20210630 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud toolkit 4.6.0+20210608 4.6.0+20210630 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.6.38_1549_openshift, released 19 July 2021

The following table shows the changes that are in the worker node fix pack 4.6.38_1549_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.36_1548_openshift
Component Previous Current Description
Red Hat OpenShift 4.6.36 4.6.38 See the Red Hat OpenShift release notes.
RHEL 7 Packages N/A N/A Updated worker node image with package updates.

Change log for worker node fix pack 4.6.36_1548_openshift, released 6 July 2021

The following table shows the changes that are in the worker node fix pack 4.6.36_1548_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.34_1546_openshift
Component Previous Current Description
HA proxy 700dc6 aae810 Updated image with fixes for CVE-2021-3520, CVE-2021-20271, CVE-2021-3516, CVE-2021-3517, CVE-2021-3518, CVE-2021-3537, and CVE-2021-3541.
Red Hat OpenShift node 4.6.34 4.6.36 See the Red Hat OpenShift release notes.

Change log for master fix pack 4.6.34_1547_openshift, released 28 June 2021

The following table shows the changes that are in the master fix pack patch update 4.6.34_1547_openshift. Master patch updates are applied automatically.

Changes since version 4.6.28_1543_openshift
Component Previous Current Description
Cluster health image v1.2.12 v1.2.13 Updated to use Go version 1.15.12. Updated image for CVE-2021-33194.
Gateway-enabled cluster controller 1352 1348 Updated to run as a non-root user by default, with privileged escalation as needed.
IBM Calico extension 689 730 Updated to use Go version 1.16.15. Updated minimal universal base image (UBI) to version 8.4 to resolve CVEs.
IBM Cloud Block Storage for Classic plug-in and driver v2.0.4 v2.0.7 Updated to use Go version 1.15.12. Updated image for CVE-2021-33194. Updated minimal universal base image (UBI) to version 8.4 to resolve CVEs.
IBM Cloud Controller Manager v1.19.11-3 v1.19.12-2 Updated to support the Kubernetes 1.19.12 release and to use Go version 1.15.13. Updated Go dependencies to resolve CVEs. Updated image to implement additional IBM security controls.
IBM Cloud File Storage for Classic plug-in and monitor 392 394 Updated to use Go version 1.15.12. Updated universal base image (UBI) to version 8.4 to resolve CVEs.
IBM Cloud RBAC Operator 63cd064 b68ea92 Update to use Go version 1.16.4. Updated universal base image (UBI) to version 8.4 to resolve CVEs.
Key Management Service provider v2.3.4 v2.3.5 Updated to use Go version 1.15.12. Updated image for CVE-2021-33194.
Red Hat OpenShift 4.6.28 4.6.34 See the Red Hat OpenShift release notes.
Red Hat OpenShift Control Plane Operator v4.6.0-20210512 v4.6.0-20210608 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
OpenVPN Operator image v1.3.1 v1.3.3 Updated ansible operator base image to version 1.8.0 to resolve CVEs and updated image to implement additional IBM security controls.
Portieris admission controller v0.10.2 v0.10.3 See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud Metrics Server v4.6.0-20210512 v4.6.0-20210608 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud toolkit 4.6.0+20210512 4.6.0+20210608 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.6.34_1546_openshift, released 22 June 2021

The following table shows the changes that are in the worker node fix pack 4.6.34_1546_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.5.40_1541_openshift
Component Previous Current Description
HA proxy 26c5cc d3dc33 Updated image with fixes for CVE-2020-24977, CVE-2020-13434, CVE-2020-15358, CVE-2020-29361, CVE-2020-29362, CVE-2020-29363, CVE-2019-2708, CVE-2019-13012, CVE-2020-13543, CVE-2020-13584, CVE-2020-9948, CVE-2020-9951, CVE-2020-9983, CVE-2021-27219, CVE-2020-8231, CVE-2020-8284, CVE-2020-8285, CVE-2020-8286, CVE-2016-10228, CVE-2019-25013, CVE-2019-9169, CVE-2020-27618, CVE-2021-3326, CVE-2020-26116, CVE-2020-27619, CVE-2021-23336, CVE-2021-3177, CVE-2019-3842, CVE-2020-13776, CVE-2020-24330, CVE-2020-24331, CVE-2020-24332, CVE-2017-14502, CVE-2020-8927 and CVE-2020-28196.
IBM Cloud Container Registry N/A N/A Added private-only registry support for ca.icr.io, br.icr.io and jp2.icr.io.
Red Hat OpenShift 4.6.31 4.6.34 See the Red Hat OpenShift release notes.
RHEL 7 Packages 3.10.0-1160.25 3.10.0-1160.31 Updated worker node image with kernel package updates for CVE-2020-8648, CVE-2020-12362CVE-2020-12363CVE-2020-12364 CVE-2020-27170CVE-2021-3347, CVE-2020-24489, CVE-2020-24511CVE-2020-24512, CVE-2020-24513 and CVE-2021-25217.

Change log for worker node fix pack 4.6.31_1545_openshift, released 7 June 2021

The following table shows the changes that are in the worker node fix pack 4.6.31_1545_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.29_1544_openshift
Component Previous Current Description
HA proxy 26c5cc 700dc6 Updated the image for CVE-2021-27219.
Red Hat OpenShift 4.6.29 4.6.31 See the Red Hat OpenShift release notes. The update resolves CVE-2021-30465 (see the IBM security bulletin).
TCP keepalive optimization for VPC N/A N/A Set the net.ipv4.tcp_keepalive_time setting to 180 seconds for compatibility with VPC gateways.
RHEL 7 Packages N/A N/A Updated worker node image with package updates for CVE-2021-27219.

Change log for worker node fix pack 4.6.29_1544_openshift, released 24 May 2021

The following table shows the changes that are in the worker node fix pack 4.6.29_1544_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.27_1542_openshift
Component Previous Current Description
HA proxy e0fa2f 26c5cc Updated image with fixes for CVE-2020-26116, CVE-2020-27619, CVE-2021-23336, CVE-2021-3177, CVE-2019-3842, CVE-2020-13776, CVE-2019-18276, CVE-2020-24977, CVE-2020-13434, CVE-2020-15358, CVE-2019-13012, CVE-2020-13543, CVE-2020-13584, CVE-2020-9948, CVE-2020-9951, CVE-2020-9983, CVE-2020-8231, CVE-2020-8284, CVE-2020-8285, CVE-2020-8286, CVE-2020-24330, CVE-2020-24331, CVE-2020-24332, CVE-2020-29361, CVE-2020-29362, CVE-2020-29363, CVE-2020-28196, CVE-2019-2708, CVE-2016-10228, CVE-2019-25013, CVE-2019-9169, CVE-2020-27618, CVE-2021-3326, and CVE-2020-8927.
Red Hat OpenShift 4.6.27 4.6.29 See the Red Hat OpenShift release notes.
RHEL 7 Packages N/A N/A Updated worker node image with package updates.

Change log for master fix pack 4.6.28_1543_openshift, released 24 May 2021

The following table shows the changes that are in the master fix pack patch update 4.6.28_1543_openshift. Master patch updates are applied automatically.

Changes since version 4.6.23_1540_openshift
Component Previous Current Description
Cluster health image v1.2.11 v1.2.12 Improved the add-on status information that displays when errors occur. Updated image to implement additional IBM security controls and for CVE-2020-26160, CVE-2020-28483 and CVE-2021-20305.
Gateway-enabled cluster controller 1322 1352 Updated to use Go version 1.15.11. Updated image to implement additional IBM security controls and for CVE-2021-28831, CVE-2021-30139, CVE-2021-3449 and CVE-2021-3450.
IBM Calico extension 618 689 Updated to use Go version 1.15.12. Updated image to implement additional IBM security controls and for CVE-2020-14391, CVE-2020-25661 and CVE-2020-25662.
IBM Cloud® Block Storage for Classic driver and plug-in v2.0.3 v2.0.4 Updated image for CVE-2021-3449 and CVE-2021-3450.
IBM Cloud Controller Manager v1.19.10-1 v1.19.11-3 Updated to support the Kubernetes 1.19.11 release and to use Go version 1.15.12.
IBM Cloud File Storage for Classic plug-in and monitor 390 392 Improved the prerequisite validation logic for provisioning persistent volume claims (PVCs). Updated image to implement additional IBM security controls and for CVE-2021-20305.
IBM Cloud RBAC Operator b6a694b 63cd064 Updated image to implement additional IBM security controls and for CVE-2020-28483.
Key Management Service provider v2.3.3 v2.3.4 Updated image to implement additional IBM security controls and for CVE-2020-28483 and CVE-2020-26160.
Load balancer and load balancer monitor for IBM Cloud Provider 1274 1328 Updated to use Go version 1.15.11. Updated image to implement additional IBM security controls and for CVE-2021-28831, CVE-2021-30139, CVE-2021-3449 and CVE-2021-3450.
Red Hat OpenShift 4.6.23 4.6.28 See the Red Hat OpenShift release notes.
Red Hat OpenShift Control Plane Operator v4.6.0-20210331 v4.6.0-20210512 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
OpenVPN Operator image v1.3.0 v1.3.1 Updated image for CVE-2021-20305.
Portieris admission controller v0.10.1 v0.10.2 See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud Metrics Server v4.6.0-20210331 v4.6.0-20210512 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud toolkit 4.6.0+20210331 4.6.0+20210512 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.6.27_1542_openshift, released 10 May 2021

The following table shows the changes that are in the worker node fix pack 4.6.27_1542_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.25_1541_openshift
Component Previous Current Description
Red Hat OpenShift 4.6.25 4.6.27 See the Red Hat OpenShift release notes.
RHEL 7 Packages 3.10.0-1160.24 3.10.0-1160.25 To increase resiliency, rsyslog no longer keeps old file descriptors. Updated worker node images with kernel and package updates for CVE-2021-25215, CVE-2020-25692, and CVE-2020-25648.

Change log for master fix pack 4.6.23_1540_openshift, released 27 April 2021

The following table shows the changes that are in the master fix pack patch update 4.6.23_1540_openshift. Master patch updates are applied automatically.

Changes since version 4.6.22_1538_openshift
Component Previous Current Description
Cluster health image v1.2.9 v1.2.11 Fixed Red Hat OpenShift version check for unsupported add-ons. Updated to use Go version 1.15.11. Updated image to implement additional IBM security controls and for CVE-2021-3449, CVE-2021-3450, and CVE-2021-20305.
Cluster master operations N/A N/A Resolved a Red Hat OpenShift API server target down alert on clusters that are updated from version 4.4 or earlier. Fixed a bug that can cause ibmcloud oc cluster config to fail.
IBM Cloud Controller Manager v1.19.9-1 v1.19.10-1 Updated to support the Kubernetes 1.19.10 release and to use Go version 1.15.10.
IBM Cloud File Storage for Classic plug-in and monitor 389 390 Updated to use Go version 1.15.9 and for CVE-2020-28851, and CVE-2021-3121.
IBM Cloud RBAC Operator 3dd6bbc b6a694b Updated image for CVE-2021-3449 and CVE-2021-3450.
Key Management Service provider v2.3.0 v2.3.3 Updated to use Go version 1.15.11 and for CVE-2021-3449, CVE-2021-3450, and CVE-2021-20305.
Red Hat OpenShift 4.6.22 4.6.23 See the Red Hat OpenShift release notes.
OpenVPN client 2.4.6-r3-IKS-301 2.4.6-r3-IKS-386 Updated image to implement additional IBM security controls.
OpenVPN Operator image v1.2.0 v1.3.0 Added OpenVPN support to the Red Hat OpenShift API server to support webhooks. Updated image to implement additional IBM security controls and for CVE-2021-3449, CVE-2021-3450, and CVE-2021-20305.
OpenVPN server 2.4.6-r3-IKS-301 2.4.6-r3-IKS-385 Updated image to implement additional IBM security controls.

Change log for worker node fix pack 4.6.25_1541_openshift, released 26 April 2021

The following table shows the changes that are in the worker node fix pack 4.6.25_1541_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.23_1539_openshift
Component Previous Current Description
HA proxy a3b1ff e0fa2f The update addresses CVE-2021-20305.
Red Hat OpenShift 4.6.23 4.6.25 See the Red Hat OpenShift release notes. Configured worker nodes to integrate with a newer version of the NVIDIA GPU operator. Now when you create an instance of the ClusterPolicy for the GPU operator, you must enter 450.80.02 for the Driver Config version.
RHEL 7 Packages N/A N/A Updated worker node images with package updates for CVE-2021-20305.

Change log for worker node fix pack 4.6.23_1539_openshift, released 12 April 2021

The following table shows the changes that are in the worker node fix pack 4.6.23_1539_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.22_1536_openshift
Component Previous Current Description
HA proxy 9b2dca a3b1ff The update addresses CVE-2021-3449 and CVE-2021-3450.
Red Hat OpenShift 4.6.22 4.6.23 See the Red Hat OpenShift release notes.
RHEL 7 Packages 3.10.0-1160.21.1.el7 3.10.0-1160.24.1.el7 Updated worker node images with kernel and package updates for CVE-2021-27363, CVE-2021-27364, and CVE-2021-27365.

Change log for master fix pack 4.6.22_1538_openshift, released 2 April 2021

The following table shows the changes that are in the master fix pack patch update 4.6.22_1538_openshift. Master patch updates are applied automatically.

Changes since version 4.6.21_1535_openshift
Component Previous Current Description
IBM Cloud Block Storage driver and plug-in v2.0.1 v2.0.3 Updated to use Go version 1.15.9 and for CVE-2020-28851.
Red Hat OpenShift Control Plane Operator v4.6.0-20210126 v4.6.0-20210331 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift 4.6.21 4.6.22 See the Red Hat OpenShift release notes.
Red Hat OpenShift on IBM Cloud Metrics Server v4.6.0-20210126 v4.6.0-20210331 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud toolkit 4.6.0+20210126 4.6.0+20210331 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for master fix pack 4.6.21_1535_openshift, released 30 March 2021

The following table shows the changes that are in the master fix pack patch update 4.6.21_1535_openshift. Master patch updates are applied automatically.

Changes since version 4.6.17_1533_openshift
Component Previous Current Description
Activity Tracker event N/A N/A Now, the containers-kubernetes.version.update event is sent to Activity Tracker when a master fix pack update is initiated for a cluster.
Cluster health image v1.2.8 v1.2.9 Updated image for CVE-2020-28851.
Gateway-enabled cluster controller 1232 1322 Updated to use Go version 1.15.10 and for CVE-2021-23839, CVE-2021-23840, and CVE-2021-23841.
IBM Cloud Controller Manager v1.19.8-4 v1.19.9-1 Updated to support the Kubernetes 1.19.9 release. Fixed a bug that prevented VPC load balancers from supporting more than 50 subnets in an account.
IBM Cloud File Storage for Classic plug-in and monitor 388 389 Updated to use Go version 1.15.8.
IBM Cloud RBAC Operator 86de2b7 3dd6bbc Updated image for CVE-2020-28851.
Red Hat OpenShift 4.6.17 4.6.21 See the Red Hat OpenShift release notes.
OpenVPN Operator image v1.1.2 v1.2.0 Fixed a bug that could prevent worker node VPN updates.

Change log for worker node fix pack 4.6.22_1536_openshift, released 29 March 2021

The following table shows the changes that are in the worker node fix pack 4.6.22_1536_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.20_1534_openshift
Component Previous Current Description
Red Hat OpenShift 4.6.20 4.6.22 See the Red Hat OpenShift release notes.
RHEL 7 Packages 3.10.0-1160.15.2.el7 3.10.0-1160.21.1.el7 Updated worker node images with kernel and package updates for CVE-2019-19532, CVE-2020-0427, CVE-2020-7053, CVE-2020-14351, CVE-2020-25211, CVE-2020-25645, CVE-2020-25656, CVE-2020-25705, CVE-2020-28374, CVE-2020-29661, and CVE-2021-20265.

Change log for worker node fix pack 4.6.20_1534_openshift, released 12 March 2021

The following table shows the changes that are in the worker node fix pack 4.6.20_1534_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.18_1533_openshift
Component Previous Current Description
Red Hat OpenShift 4.6.18 4.6.20 See the Red Hat OpenShift release notes.
RHEL 7 Packages N/A N/A Updated worker node with package updates for CVE-2020-8625, CVE-2020-14372, CVE-2020-25632, CVE-2020-25647, CVE-2020-27749, CVE-2020-27779, CVE-2021-20225, CVE-2021-20233, and CVE-2021-27803.

Change log for worker node fix pack 4.6.18_1533_openshift, released 1 March 2021

The following table shows the changes that are in the worker node fix pack 4.6.18_1533_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.6.16_1529_openshift
Component Previous Current Description
Image garbage collection N/A N/A Fixed a race condition during the provisioning of worker nodes that might cause image garbage collection to fail.
IBM Cloud Container Registry private endpoints N/A N/A VPC worker nodes: Fixed a bug where traffic to the private endpoints of IBM Cloud Container Registry might fail after rebooting the worker node.
Red Hat OpenShift 4.6.16 4.6.18 See the Red Hat OpenShift release notes.
OpenShift Data Foundation N/A N/A Fixed the worker node configuration to resolve an error with deploying ODF.
RHEL 7 Packages N/A N/A Updated worker node with package updates.

Change log for master fix pack 4.6.17_1533_openshift, released 27 February 2021

The following table shows the changes that are in the master fix pack patch update 4.6.17_1533_openshift. Master patch updates are applied automatically.

Changes since version 4.6.16_1532_openshift
Component Previous Current Description
IBM Cloud Controller Manager v1.19.8-1 v1.19.8-4 Updated to use calicoctl version 3.16.8.
Load balancer and load balancer monitor for IBM Cloud Provider 1165 1274 Fixed a bug that might cause version 2.0 network load balancers (NLBs) to crash and restart on load balancer updates.
Red Hat OpenShift 4.6.16 4.6.17 See the Red Hat OpenShift release notes.

Change log for master fix pack 4.6.16_1532_openshift, released 22 February 2021

The following table shows the changes that are in the master fix pack patch update 4.6.16_1532_openshift. Master patch updates are applied automatically.

Changes since version 4.6.16_1530_openshift
Component Previous Current Description
IBM Cloud Controller Manager v1.19.7-13 v1.19.8-1 Updated to support the Kubernetes 1.19.8 release and to use Go version 1.15.8. Updated image to implement additional IBM security controls.
Key Management Service provider v2.2.4 v2.3.0 Updated to use Go version 1.15.7. Updated image to implement additional IBM security controls.
OpenVPN Operator image v1.1.0 v1.1.2 Updated image to implement additional IBM security controls.

Change log for 4.6.16_1530_openshift (master) and 4.6.16_1529_openshift (worker node), released 17 February 2020

The following table shows the changes that are in the version updates for the 4.6.16_1530_openshift master fix pack and 4.6.16_1529_openshift worker node fix pack.

Changes since version 4.5.24_1527_openshift (master) and 4.5.31_1529_openshift (worker node)
Component Previous Current Description
Calico v3.16.5 v3.17.2 See the Calico release notes.
Tigera Operator v1.10.9 v1.13.4 See the Tigera Operator release notes.
Cluster health image v1.2.6 v1.2.8 Updated to use Go version 1.15.7. Updated image to implement additional IBM security controls.
Gateway-enabled cluster controller 1195 1232 Updated to use Go version 1.15.7.
IBM Calico extension 567 618 Updated to use Go version 1.15.7.
IBM Cloud Controller Manager v1.18.15-3 v1.19.7-13 Updated to support the Kubernetes 1.19.7 release and to use Go version 1.15.5 and calicoctl version 3.16.7. Classic network load balancers (NLBs) now set the NET_RAW security context. Added support for VPC network load balancers. Updated version 1.0 and 2.0 network load balancers (NLBs) to run as a non-root user by default, with privileged escalation as needed. Updated image for DLA-2509-1.
IBM Cloud File Storage for Classic plug-in and monitor 385 388 Improved the retry logic for provisioning persistent volume claims (PVCs).
IBM Cloud RBAC Operator f859228 86de2b7 Updated to use Go version 1.15.7.
Key Management Service provider v2.2.3 v2.2.4 Updated image to implement additional IBM security controls.
Red Hat OpenShift configuration N/A N/A Updated the feature gate configuration.
Load balancer and load balancer monitor for IBM Cloud Provider 1078 1165 Updated to run as a non-root user by default, with privileged escalation as needed. Updated to use Go version 1.15.7.
Red Hat OpenShift Control Plane Operator v4.5.0-20210112 v4.6.0-20210126 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift 4.5.24 (master), 4.5.31 (worker) 4.6.16 See the Red Hat OpenShift release notes.
Red Hat OpenShift on IBM Cloud Metrics Server v4.5.0-20210112 v4.6.0-20210126 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud toolkit 4.5.0+20210112 4.6.0+20210126 See the Red Hat OpenShift on IBM Cloud toolkit release notes.