IBM Cloud Docs
Red Hat OpenShift version 4.9 change log

Red Hat OpenShift version 4.9 change log

This version is no longer supported. Update your cluster to a supported version as soon as possible.

View information of version changes for major, minor, and patch updates that are available for your Red Hat® OpenShift® on IBM Cloud® clusters that run version 4.9. Changes include updates to Red Hat OpenShift, Kubernetes, and IBM Cloud Provider components.

This version is no longer supported. Update your cluster to a supported version as soon as possible.

Overview

Unless otherwise noted in the change logs, the IBM Cloud provider version enables Red Hat OpenShift APIs and features that are at beta. Red Hat OpenShift alpha features, which are subject to change, are disabled.

Check the Security Bulletins on IBM Cloud Status for security vulnerabilities that affect Red Hat OpenShift on IBM Cloud. You can filter the results to view only Kubernetes Service security bulletins that are relevant to Red Hat OpenShift on IBM Cloud. Change log entries that address other security vulnerabilities but don't also refer to an IBM security bulletin are for vulnerabilities that are not known to affect Red Hat OpenShift on IBM Cloud in normal usage. If you run privileged containers, run commands on the workers, or execute untrusted code, then you might be at risk.

Master patch updates are applied automatically. Worker node patch updates can be applied by reloading or updating the worker nodes. For more information about major, minor, and patch versions and preparation actions between minor versions, see Red Hat OpenShift versions.

Change logs

Review the version 4.9 change log.

Change log for master fix pack 4.9.59_1600_openshift, released 30 August 2023

The following table shows the changes that are in the master fix pack 4.9.59_1600_openshift. Master patch updates are applied automatically.

Changes since version 4.9.59_1597_openshift
Component Previous Current Description
Cluster health image v1.3.23 v1.3.24 Updated Go to version 1.19.12 and updated dependencies. Updated base image version to 378.
etcd v3.4.26 v3.4.27 See the etcd release notes.
Gateway-enabled cluster controller 2322 2366 Update Go dependencies to fix CVE-2023-3978.
IBM Cloud File Storage for Classic plug-in and monitor 433 434 Updated Go to version 1.20.6 and updated dependencies. Updated to newer UBI base image.
Key Management Service provider v2.7.2 v2.7.3 Updated Go dependencies.
OpenVPN client 2.6.5-r0-IKS-41-amd64 2.6.5-r0-IKS-66-amd64 Updated openvpn components to fix CVEs.
OpenVPN server 2.6.5-r0-IKS-40-amd64 2.6.5-r0-IKS-57-amd64 Updated openvpn components to fix CVEs.
OpenVPN Operator image v1.4.26 v1.4.27 Updated ansible-operator version to 1.30.0
Portieris admission controller v0.13.5 v0.13.6 See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit v4.9.0-20230710 v4.9.0-20230811 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.9.59_1601_openshift, released 28th August 2023

The following table shows the changes that are in the worker node fix pack 4.9.59_1601_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.59_1599_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud N/A N/A N/A
RHEL 8 Packages N/A N/A N/A

Change log for worker node fix pack 4.9.59_1599_openshift, released 15th August 2023

The following table shows the changes that are in the worker node fix pack 4.9.59_1599_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.59_1598_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. N/A N/A N/A
RHEL 7 Packages 3.10.0-1160.92.1.el7 3.10.0-1160.95.1.el7 Worker node kernel & package updates for CVE-2023-38408, CVE-2022-3564.
RHEL 8 Packages 4.18.0-477.15.1.el8_8 4.18.0-477.21.1.el8_8 Worker node kernel & package updates for CVE-2022-42896, CVE-2023-1281, CVE-2023-1829, CVE-2023-2124, CVE-2023-2194, CVE-2023-2235, CVE-2023-2602, CVE-2023-2603, CVE-2023-27536, CVE-2023-28321, CVE-2023-28484, CVE-2023-29469, CVE-2023-32681, CVE-2023-34969, CVE-2023-38408.

Change log for worker node fix pack 4.9.59_1598_openshift, released 1 August 2023

The following table shows the changes that are in the worker node fix pack 4.9.59_1598_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.59_1596_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. N/A N/A N/A
RHEL 7 Packages N/A N/A Worker node package updates for CVE-2022-3564, CVE-2023-2828, CVE-2023-32233.
RHEL 8 Packages N/A N/A Worker node package update for CVE-2023-2828.

Change log for master fix pack 4.9.59_1597_openshift, released 28 July 2023

The following table shows the changes that are in the master fix pack 4.9.59_1597_openshift. Master patch updates are applied automatically.

Changes since version 4.9.59_1594_openshift
Component Previous Current Description
Cluster health image v1.3.21 v1.3.23 Updated Go to version 1.19.11 and updated Go dependencies. Updated UBI base image.
Key Management Service provider v2.6.7 v2.7.2 Updated Go to version 1.19.11 and updated Go dependencies. Updated UBI base image.
Load balancer and load balancer monitor for IBM Cloud Provider 2584 2631 Updated Go to version 1.19.10 and updated Go dependencies. Updated Alpine base image.
OpenVPN client 2.6.4-r0-IKS-34-amd64 2.6.5-r0-IKS-41-amd64 Updated OpenVPN to version 2.6.5.
OpenVPN Operator image v1.4.25 v1.4.26 Updated based image to resolve CVE-2023-24329, CVE-2020-24736, CVE-2023-26604, CVE-2023-1667, and CVE-2023-2283.
OpenVPN server 2.6.4-r0-IKS-33-amd64 2.6.5-r0-IKS-40-amd64 Updated OpenVPN to version 2.6.5.
Red Hat OpenShift on IBM Cloud Control Plane Operator and Metrics Server v4.9.0-20230417 v4.9.0-20230710 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud toolkit 4.9.0+20230417 4.9.0+20230710 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.9.59_1596_openshift, released 17th July 2023

The following table shows the changes that are in the worker node fix pack 4.9.59_1596_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.59_1595_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud N/A N/A N/A
RHEL 7 Packages N/A N/A N/A
RHEL 8 Packages N/A N/A N/A

Change log for worker node fix pack 4.9.59_1595_openshift, released 03 July 2023

The following table shows the changes that are in the worker node fix pack 4.9.59_1595_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.59_1593_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. N/A N/A N/A

Change log for master fix pack 4.9.59_1594_openshift, released 27 June 2023

The following table shows the changes that are in the master fix pack 4.9.59_1594_openshift. Master patch updates are applied automatically.

Changes since version 4.9.59_1591_openshift
Component Previous Current Description
Cluster health image v1.3.20 v1.3.21 Updated Go dependencies and to Go version 1.19.10.
etcd v3.4.25 v3.4.26 See the etcd release notes.
Gateway-enabled cluster controller 2106 2322 Updated image to resolve CVE-2023-2650.
IBM Cloud File Storage for Classic plug-in and monitor 431 433 Updated Go to version 1.20.4. Updated UBI base image.
Key Management Service provider v2.6.6 v2.6.7 Updated Go dependencies and to Go version 1.19.10.
Load balancer and load balancer monitor for IBM Cloud Provider 2486 2584 Updated Go dependencies and to Go version 1.19.9. Updated base image.
OpenVPN client 2.5.8-r0-IKS-674-amd64 2.6.4-r0-IKS-34-amd64 Upgrade openvpn to version 2.6.4-r0.
OpenVPN server 2.5.8-r0-IKS-673-amd64 2.6.4-r0-IKS-33-amd64 Upgrade openvpn to version 2.6.4-r0.
OpenVPN Operator image v1.4.23 v1.4.25 Updated OpenVPN configuration to provide shutdown grace period before terminating connections.

Change log for worker node fix pack 4.9.59_1593_openshift, released 19 June 2023

The following table shows the changes that are in the worker node fix pack 4.9.59_1593_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.59_1592_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. N/A N/A N/A
RHEL 7 Packages 3.10.0-1160.90.1.el7 3.10.0-1160.92.1.el7 Worker node kernel & package updates for CVE-2022-48339,CVE-2023-24329.
RHEL 8 Packages N/A N/A Worker node package updates for CVE-2023-32067,CVE-2023-24329.

Change log for worker node fix pack 4.9.59_1592_openshift, released 5 June 2023

The following table shows the changes that are in the worker node fix pack 4.9.59_1592_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.59_1590_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. N/A N/A N/A
RHEL 7 Packages N/A N/A N/A
RHEL 8 Packages 4.18.0-477.10.1.el8_8 4.18.0-477.13.1.el8_8 Worker node kernel & package updates for CVE-2023-22490, CVE-2023-23946, CVE-2023-25652, CVE-2023-25815, CVE-2023-29007, CVE-2023-32233.

Change log for master fix pack 4.9.59_1591_openshift, released 25 May 2023

The following table shows the changes that are in the master fix pack 4.9.59_1591_openshift. Master patch updates are applied automatically.

Changes since version 4.9.59_1587_openshift
Component Previous Current Description
Cluster health image v1.3.19 v1.3.20 Updated Go to version 1.19.9 and updated dependencies. Updated the base image. Resolved add-on health bugs.
etcd v3.4.24 v3.4.25 See the etcd release notes.
Gateway-enabled cluster controller 2024 2106 Updated to resolve CVEs.
IBM Cloud Controller Manager v1.22.17-8 v1.22.17-9 Key rotation.
IBM Cloud RBAC Operator 778ef2b 4e2f346 Make armada-rbac-sync FIPS compliant
Key Management Service provider v2.6.5 v2.6.6 Updated Go to version 1.19.9 and updated dependencies.
Portieris admission controller v0.13.4 v0.13.5 See the Portieris admission controller release notes.
OpenVPN client 2.6.4-r0-IKS-27 2.5.8-r0-IKS-674 Reverted to previous version.
OpenVPN server 2.6.4-r0-IKS-26 2.5.8-r0-IKS-673 Reverted to previous version.

Change log for worker node fix pack 4.9.59_1590_openshift, released 23 May 2023

The following table shows the changes that are in the worker node fix pack 4.9.59_1590_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.59_1588_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud N/A N/A N/A
RHEL 7 Packages 4.15.0-210-generic 4.15.0-211-generic N/A
RHEL 8 Packages 4.18.0-425.19.2.el8_7 4.18.0-477.10.1.el8_8 Worker node kernel & package updates for CVE-2020-10735, CVE-2021-26341, CVE-2021-28861, CVE-2021-33655, CVE-2021-33656, CVE-2022-1462, CVE-2022-1679, CVE-2022-1705, CVE-2022-1789, CVE-2022-1962, CVE-2022-20141, CVE-2022-2196, CVE-2022-24765, CVE-2022-25265, CVE-2022-2663, CVE-2022-27664, CVE-2022-2795, CVE-2022-28131, CVE-2022-29187, CVE-2022-2928, CVE-2022-2929, CVE-2022-3028, CVE-2022-30594, CVE-2022-30629, CVE-2022-30630, CVE-2022-30631, CVE-2022-30632, CVE-2022-30633, CVE-2022-30635, CVE-2022-32148, CVE-2022-32189, CVE-2022-3239, CVE-2022-3522, CVE-2022-3524, CVE-2022-35252, CVE-2022-3564, CVE-2022-3566, CVE-2022-3567, CVE-2022-3619, CVE-2022-36227, CVE-2022-3623, CVE-2022-3625, CVE-2022-3628, CVE-2022-3707, CVE-2022-39188, CVE-2022-39189, CVE-2022-39253, CVE-2022-39260, CVE-2022-41218, CVE-2022-4129, CVE-2022-41674, CVE-2022-41717, CVE-2022-41973, CVE-2022-4269, CVE-2022-42703, CVE-2022-42720, CVE-2022-42721, CVE-2022-42722, CVE-2022-43552, CVE-2022-43750, CVE-2022-45061, CVE-2022-47929, CVE-2023-0394, CVE-2023-0461, CVE-2023-0778, CVE-2023-1195, CVE-2023-1582, CVE-2023-23454, CVE-2023-27535.
Haproxy N/A N/A N/A

Change log for worker node fix pack 4.9.59_1588_openshift, released 10 May 2023

The following table shows the changes that are in the worker node fix pack 4.9.59_1588_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.59_1587_openshift
Component Previous Current Description
RHEL 7 Packages N/A N/A Package updates for CVE-2022-43750.
RHEL 8 Packages N/A N/A N/A
Red Hat OpenShift on IBM Cloud N/A N/A N/A
Haproxy N/A N/A N/A

Change log for master fix pack 4.9.59_1587_openshift, released 27 April 2023

The following table shows the changes that are in the master fix pack 4.9.59_1587_openshift. Master patch updates are applied automatically.

Changes since version 4.9.57_1583_openshift
Component Previous Current Description
Cluster health image v1.3.17 v1.3.19 Updated Go to version 1.19.8 and updated dependencies.
IBM Calico extension 1366-amd64 1390-amd64 Eliminate IP syscall.
IBM Cloud Block Storage driver and plug-in v2.4.0 v2.4.5 Updated universal base image (UBI) to resolve CVEs. Updated Go to version 1.19.8 and updated dependencies.
IBM Cloud Controller Manager v1.22.17-5 v1.22.17-8 Update Go dependencies.
IBM Cloud File Storage for Classic plug-in and monitor 429 431 Updated Go to version 1.19.8 and updated dependencies. Update UBI base image.
Key Management Service provider v2.6.4 v2.6.5 Updated Go to version 1.19.7 and updated dependencies.
Load balancer and load balancer monitor for IBM Cloud Provider 2420 2486 Updated Go to version 1.19.7 and updated dependencies.
Red Hat OpenShift on IBM Cloud. 4.9.57 4.9.59 For more information, see the change log.
OpenVPN Operator image v1.4.22 v1.4.23 Updated base image to resolve CVEs: CVE-2022-4304, CVE-2022-4450, CVE-2023-0215, CVE-2023-0286, CVE-2023-0361.
Portieris admission controller v0.13.3 v0.13.4 See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator and Metrics Server 4.9.0-20230314 4.9.0-20230417 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud toolkit 4.9.0+20230314 4.9.0+20230417 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.9.59_1587_openshift, released 24 April 2023

The following table shows the changes that are in the worker node fix pack 4.9.59_1587_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.59_1585_openshift
Component Previous Current Description
RHEL 7 Packages N/A N/A N/A
RHEL 8 Packages N/A N/A N/A
Red Hat OpenShift on IBM Cloud N/A N/A N/A
Haproxy N/A N/A N/A

Change log for worker node fix pack 4.9.59_1585_openshift, released 11 April 2023

The following table shows the changes that are in the worker node fix pack 4.9.59_1585_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.57_1584_openshift
Component Previous Current Description
RHEL 7 Packages N/A N/A Worker node package updates for CVE-2023-0286, CVE-2023-0767.
RHEL 8 Packages 4.18.0-425.13.1 4.18.0-425.19.2 Worker node kernel & package updates for CVE-2022-4269, CVE-2022-4304, CVE-2022-4378, CVE-2022-4450, CVE-2023-0215, CVE-2023-0266, CVE-2023-0286, CVE-2023-0361, CVE-2023-0386.
Red Hat OpenShift on IBM Cloud. 4.9.57 4.9.59 For more information, see the change log.
Haproxy 8398d1 8895ad CVE-2023-0361.

Change log for master fix pack 4.9.57_1583_openshift, released 28 March 2023

The following table shows the changes that are in the master fix pack 4.9.57_1583_openshift. Master patch updates are applied automatically.

Changes since version 4.9.55_1579_openshift
Component Previous Current Description
Cluster health image v1.3.16 v1.3.17 Updated Go to version 1.19.7 and updated dependencies.
etcd v3.4.23 v3.4.24 See the etcd release notes.
IBM Calico extension 1308-amd64 1366-amd64 Updated to resolve CVE-2023-23916.
IBM Cloud Block Storage driver and plug-in v2.3.7 v2.4.0 Removed ExpandInUsePersistentVolumes feature gate.
IBM Cloud File Storage for Classic plug-in and monitor 427 429 Updated universal base image (UBI) to resolve CVEs. Updated Go to version 1.19.6 and updated dependencies.
Key Management Service provider v2.6.3 v2.6.4 Updated Go to version 1.19.7 and updated dependencies.
Load balancer and load balancer monitor for IBM Cloud Provider 2383 2420 Updated the image to resolve CVEs.
OpenVPN Operator image v1.4.20 v1.4.22 Updated ansible-operator to v1.28.0 to fix CVEs.
Red Hat OpenShift on IBM Cloud. 4.9.55 4.9.57 See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator, Metrics Server, and toolkit v4.9.0-20230220 v4.9.0-20230314 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.9.57_1584_openshift, released 27 March 2023

The following table shows the changes that are in the worker node fix pack 4.9.57_1584_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.57_1580_openshift
Component Previous Current Description
RHEL 7 Packages N/A N/A N/A
RHEL 8 Packages N/A N/A N/A
Red Hat OpenShift on IBM Cloud. N/A N/A N/A
Haproxy af5031 8398d1 CVE-2023-23916.

Change log for worker node fix pack 4.9.57_1580_openshift, released 13 March 2023

The following table shows the changes that are in the worker node fix pack 4.9.57_1580_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.56_1576_openshift
Component Previous Current Description
RHEL 7 Packages 3.10.0-1160.83.1 3.10.0-1160.87.1 Worker node kernel & package updates for CVE-2018-13405, CVE-2021-4037, CVE-2022-2639, CVE-2022-37434, CVE-2022-42703, CVE-2022-4378.
RHEL 8 Packages N/A N/A Worker node package updates for CVE-2023-23916.
Red Hat OpenShift on IBM Cloud. 4.9.56 4.9.57 For more information, see the change log.

Change log for master fix pack 4.9.55_1579_openshift, released 2 March 2023

The following table shows the changes that are in the master fix pack 4.9.55_1579_openshift. Master patch updates are applied automatically.

Changes since version 4.9.54_1573_openshift
Component Previous Current Description
Cluster health image v1.3.15 v1.3.16 Updated Go dependencies and to Go version 1.19.6. Updated universal base image (UBI) to resolve CVEs.
etcd v3.4.22 v3.4.23 See the etcd release notes.
Gateway-enabled cluster controller 1902 1987 Updated armada-utils to version v1.9.35
IBM Calico extension 1305-amd64 1308-amd64 Updated universal base image (UBI) to resolve CVE-2022-47629.
IBM Cloud Block Storage driver and plug-in v2.3.6 v2.3.7 Updated universal base image (UBI) to resolve CVEs.
IBM Cloud Controller Manager v1.22.17-2 v1.22.17-5 Updated vpcctl binary to 3601.
IBM Cloud File Storage for Classic plug-in and monitor 425 427 Updated universal base image (UBI) to resolve CVEs.
Key Management Service provider v2.5.13 v2.6.3 Updated Go dependencies and to Go version 1.19.6.
Load balancer and Load balancer monitor for IBM Cloud Provider 2325 2383 Updated to armada-utils version 1.9.35.
OpenVPN client 2.5.6-r1-IKS-648 2.5.8-r0-IKS-674-amd64 Remediate CVE-2023-0286, CVE-2022-4304, CVE-2022-4450, CVE-2023-0215.
OpenVPN server 2.5.6-r1-IKS-647 2.5.8-r0-IKS-673-amd64 Remediate CVE-2023-0286, CVE-2022-4304, CVE-2022-4450, CVE-2023-0215.
OpenVPN Operator image v1.4.13 v1.4.20 Update ansible-operator to v1.26.1 to fix CVEs.
Portieris admission controller v0.12.6 v0.13.3 See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud. 4.9.54 4.9.55 See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator v4.9.0-20230123 v4.9.0-20230220 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud Metrics Server v4.9.0-20230123 v4.9.0-20230220 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud toolkit 4.9.0+20230123 4.9.0+20230220 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.9.56_1576_openshift, released 27 February 2023

The following table shows the changes that are in the worker node fix pack 4.9.56_1576_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.54_1575_openshift
Component Previous Current Description
RHEL 7 Packages N/A N/A N/A
RHEL 8 Packages 4.18.0-425.10.1 4.18.0-425.13.1 Worker node & kernel package updates for CVE-2020-10735, CVE-2021-28861, CVE-2022-2873, CVE-2022-40897, CVE-2022-41222, CVE-2022-43945, CVE-2022-4415, CVE-2022-45061, CVE-2022-48303.
Red Hat OpenShift on IBM Cloud. 4.9.54 4.9.56 For more information, see the change log.
HAProxy d38f89 af5031 CVE-2022-40897, CVE-2022-4415, CVE-2020-10735, CVE-2021-28861, CVE-2022-45061.

Change log for worker node fix pack 4.9.54_1575_openshift, released 13 February 2023

The following table shows the changes that are in the worker node fix pack 4.9.54_1575_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.54_1574_openshift
Component Previous Current Description
RHEL 7 Packages N/A N/A N/A
RHEL 8 Packages N/A N/A Worker node package updates for CVE-2022-23521, CVE-2022-41903, CVE-2022-47629.
Red Hat OpenShift on IBM Cloud. N/A N/A N/A
HAProxy 8d6ea6 08c969 CVE-2022-47629.

Change log for master fix pack 4.9.54_1573_openshift, released 30 January 2023

The following table shows the changes that are in the master fix pack 4.9.54_1573_openshift. Master patch updates are applied automatically.

Changes since version 4.9.52_1568_openshift
Component Previous Current Description
Calico v3.22.5 v3.23.5 See the Calico release notes.
Tigera Operator v1.25.13 v1.27.17 See the Tigera Operator release notes.
Cluster health image v1.3.14 v1.3.15 Updated Go dependencies and to Go version 1.19.4.
IBM Calico extension 1257 1280 Publish s390x image.
IBM Cloud Block Storage driver and plug-in v2.3.4 v2.3.6 Updated universal base image (UBI) to 8.7-1031
IBM Cloud Controller Manager v1.22.16-1 v1.22.17-2 Updated to support the Kubernetes 1.22.17 release.
IBM Cloud File Storage for Classic plug-in and monitor 421 425 Fixes for Fixing CVE-2022-40303 and CVE-2022-40304.
Key Management Service provider v2.5.12 v2.5.13 Updated Go dependencies and to Go version 1.19.4.
Red Hat OpenShift on IBM Cloud Control Plane Operator v4.9.0-20221205 v4.9.0-20230123 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud. 4.9.52 4.9.54 See the Red Hat OpenShift on IBM Cloud Release Notes.
Red Hat OpenShift on IBM Cloud Metrics Server v4.9.0-20221205 v4.9.0-20230123 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud toolkit 4.9.0+20221205 4.9.0+20230123 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.9.54_1574_openshift, released 30 January 2023

The following table shows the changes that are in the worker node fix pack 4.9.54_1574_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.54_1571_openshift
Component Previous Current Description
RHEL 7 Packages 3.10.0-1160.81 3.10.0-1160.83 Worker node kernel & package updates for CVE-2017-5715, CVE-2021-25220, CVE-2021-26401, CVE-2022-2795, CVE-2022-2964, CVE-2023-22809.
RHEL 8 Packages N/A N/A Worker node kernel & package updates for CVE-2022-40303, CVE-2022-40304, CVE-2023-22809.
Red Hat OpenShift on IBM Cloud. N/A N/A N/A
HAProxy 508bf6 8d6ea6 CVE-2022-42010, CVE-2022-42011, CVE-2022-42012, CVE-2022-40303, CVE-2022-40304, CVE-2022-3821, CVE-2022-35737, CVE-2022-43680, CVE-2021-46848.

Change log for worker node fix pack 4.9.54_1571_openshift, released 16 January 2023

The following table shows the changes that are in the worker node fix pack 4.9.54_1571_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.53_1570_openshift
Component Previous Current Description
RHEL 7 Packages N/A N/A N/A
RHEL 8 Packages 4.18.0-425.3.1 4.18.0-425.10.1 Worker node kernel & package updates for CVE-2021-46848, CVE-2022-2601, CVE-2022-2964, CVE-2022-35737, CVE-2022-3775, CVE-2022-3821, CVE-2022-4139, CVE-2022-42010, CVE-2022-42011, CVE-2022-42012, CVE-2022-43680.
Red Hat OpenShift on IBM Cloud. 4.9.53 4.9.54 For more information, see the change log.

Change log for worker node fix pack 4.9.53_1570_openshift, released 02 January 2023

The following table shows the changes that are in the worker node fix pack 4.9.53_1570_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.53_1569_openshift
Component Previous Current Description
RHEL 7 Packages N/A N/A N/A
RHEL 8 Packages N/A N/A N/A
Red Hat OpenShift on IBM Cloud N/A N/A N/A

Change log for worker node fix pack 4.9.53_1569_openshift, released 19 December 2022

The following table shows the changes that are in the worker node fix pack 4.9.53_1569_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.52_1567_openshift
Component Previous Current Description
RHEL 7 Packages 3.10.0-1160.80 3.10.0-1160.81 Worker node kernel & package updates for CVE-2022-28733.
RHEL 8 Packages N/A N/A N/A
Red Hat OpenShift on IBM Cloud. 4.9.52 4.9.53 For more information, see the change log.

Change log for master fix pack 4.9.52_1568_openshift, released 14 December 2022

The following table shows the changes that are in the master fix pack 4.9.52_1568_openshift. Master patch updates are applied automatically.

Changes since version 4.9.51_1565_openshift
Component Previous Current Description
Cluster health image v1.3.13 v1.3.14 Updated Go dependencies. Exclude ingress status from cluster status aggregation.
etcd v3.4.21 v3.4.22 See the etcd release notes.
IBM Calico extension 1213 1257 Updated universal base image (UBI) to resolve: CVE-2022-1304, CVE-2016-3709, CVE-2022-42898.
IBM Cloud Block Storage driver and plug-in v2.3.3 v2.3.4 Update Go to version 1.18.8 and updated universal base image (UBI) to resolve CVEs.
IBM Cloud Controller Manager v1.22.15-7 v1.22.16-1 Updated to support the Kubernetes 1.22.16 release.
IBM Cloud File Storage for Classic plug-in and monitor 420 421 Updated universal base image (UBI) to resolve CVE-2022-42898. Updated Go to version 1.18.8
Key Management Service provider v2.5.11 v2.5.12 Updated Go dependencies.
Load balancer and load balancer monitor for IBM Cloud Provider 2110 2325 Update Go to version 1.19.1 and update dependencies.
OpenVPN Operator image v1.4.11 v1.4.13 Updated the ansible operator base image to v1.25.2 to resolve CVEs.
Red Hat OpenShift on IBM Cloud Control Plane Operator v4.9.0-20221104 v4.9.0-20221205 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud. 4.9.51 4.9.52 See the Red Hat OpenShift on IBM Cloud Release Notes.
Red Hat OpenShift on IBM Cloud Metrics Server and toolkit v4.9.0-20221104 v4.9.0-20221205 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.9.52_1567_openshift, released 05 December 2022

The following table shows the changes that are in the worker node fix pack 4.9.52_1567_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.51_1566_openshift
Component Previous Current Description
RHEL 7 Packages N/A N/A Worker node package updates for CVE-2022-42898.
RHEL 8 Packages N/A N/A Worker node package updates for CVE-2022-42898.
Red Hat OpenShift on IBM Cloud. 4.9.51 4.9.52 For more information, see the change log.
HAProxy c619f4 508bf6 CVE-2016-3709, CVE-2022-42898, CVE-2022-1304.

Change log for worker node fix pack 4.9.51_1566_openshift, released 21 November 2022

The following table shows the changes that are in the worker node fix pack 4.9.51_1566_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.51_1563_openshift
Component Previous Current Description
RHEL 7 Packages N/A N/A Worker node package updates for CVE-2022-21233, CVE-2022-23816, CVE-2022-23825, CVE-2022-2588, CVE-2022-26373, CVE-2022-29900, CVE-2022-29901, CVE-2022-41974.
RHEL 8 Packages N/A N/A Worker node package updates for CVE-2015-20107, CVE-2016-3709, CVE-2020-0256, CVE-2020-35525, CVE-2020-35527, CVE-2020-36516, CVE-2020-36558, CVE-2021-0308, CVE-2021-25220, CVE-2021-30002, CVE-2021-36221, CVE-2021-3640, CVE-2021-41190, CVE-2022-0168, CVE-2022-0494, CVE-2022-0617, CVE-2022-0854, CVE-2022-1016, CVE-2022-1048, CVE-2022-1055, CVE-2022-1184, CVE-2022-1304, CVE-2022-1353, CVE-2022-1708, CVE-2022-1852, CVE-2022-20368, CVE-2022-2078, CVE-2022-21499, CVE-2022-22624, CVE-2022-22628, CVE-2022-22629, CVE-2022-22662, CVE-2022-23816, CVE-2022-23825, CVE-2022-23960, CVE-2022-24448, CVE-2022-24795, CVE-2022-2509, CVE-2022-2586, CVE-2022-2588, CVE-2022-26373, CVE-2022-2639, CVE-2022-26700, CVE-2022-26709, CVE-2022-26710, CVE-2022-26716, CVE-2022-26717, CVE-2022-26719, CVE-2022-27191, CVE-2022-27404, CVE-2022-27405, CVE-2022-27406, CVE-2022-27950, CVE-2022-28390, CVE-2022-28893, CVE-2022-29162, CVE-2022-2938, CVE-2022-29581, CVE-2022-2989, CVE-2022-2990, CVE-2022-29900, CVE-2022-29901, CVE-2022-30293, CVE-2022-32746, CVE-2022-3515, CVE-2022-36946, CVE-2022-37434, CVE-2022-3787, CVE-2022-40674, CVE-2022-41974.
Red Hat OpenShift on IBM Cloud. N/A N/A N/A

Change log for master fix pack 4.9.51_1565_openshift, released 16 November 2022

The following table shows the changes that are in the master fix pack 4.9.51_1565_openshift. Master patch updates are applied automatically.

Changes since version 4.9.49_1561_openshift
Component Previous Current Description
Calico v3.22.4 v3.22.5 See the Calico release notes.
Tigera Operator v1.25.11 v1.25.13 See the Tigera Operator release notes.
Cluster health image v1.3.12 v1.3.13 Updated Go dependencies, golangci-lint, gosec, and to Go version 1.19.3. Updated base image version to 116.
etcd v3.4.18 v3.4.21 See the etcd release notes.
Gateway-enabled cluster controller 1823 1902 Go module updates.
IBM Calico extension 1096 1213 Updated image to fix the following CVEs: CVE-2020-35525, CVE-2020-35527, CVE-2022-3515, CVE-2022-37434, CVE-2022-2509, CVE-2022-32149.
IBM Cloud Block Storage driver and plug-in v2.3.1 v2.3.3 Updated universal base image (UBI) to version 8.7-923 to resolve CVEs.
IBM Cloud Controller Manager v1.22.15-3 v1.22.15-7 Key rotation and updated Go dependencies.
IBM Cloud File Storage for Classic plug-in and monitor 416 420 Updated universal base image (UBI) to version 8.7-923 to resolve CVEs.
Key Management Service provider v2.5.10 v2.5.11 Updated Go dependencies and to Go version 1.19.3.
OpenVPN Operator image v1.4.10 v1.4.11 Updated ansible operator base image to v1.24.0 to resolve CVEs.
Red Hat OpenShift on IBM Cloud Control Plane Operator v4.9.0-20220920 v4.9.0-20221104 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud. 4.9.49 4.9.51 See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Metrics Server and toolkit v4.9.0-20220920 v4.9.0-20221104 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.9.51_1564_openshift, released 11 November 2022

The following table shows the changes that are in the worker node fix pack 4.9.51_1564_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.51_1563_openshift
Component Previous Current Description
RHEL 7 Packages N/A N/A N/A
RHEL 8 Packages 4.18.0-372.32.1.el8_6 4.18.0-425.3.1.el8 Worker node kernel & package updates for CVE-2021-36221, CVE-2022-1708, CVE-2022-27191, CVE-2021-41190, CVE-2022-2990, CVE-2022-29162, CVE-2022-2989, CVE-2022-2990, CVE-2020-36516, CVE-2020-36558, CVE-2021-3640, CVE-2021-30002, CVE-2022-0168, CVE-2022-0617, CVE-2022-0854, CVE-2022-1016, CVE-2022-1048, CVE-2022-1055, CVE-2022-1184, CVE-2022-1852, CVE-2022-2078, CVE-2022-2586, CVE-2022-2639, CVE-2022-2938, CVE-2022-20368, CVE-2022-21499, CVE-2022-23960, CVE-2022-26373, CVE-2022-27950, CVE-2022-28390, CVE-2022-28893, CVE-2022-29581, CVE-2022-36946, CVE-2022-24448.

Change log for worker node fix pack 4.9.51_1563_openshift, released 07 November 2022

The following table shows the changes that are in the worker node fix pack 4.9.51_1563_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.50_1559_openshift
Component Previous Current Description
RHEL 7 Packages 3.10.0-1160.76.1 3.10.0-1160.80.1 Worker node kernel & package updates for CVE-2022-21233, CVE-2022-23816, CVE-2022-23825, CVE-2022-2588, CVE-2022-26373, CVE-2022-29900, CVE-2022-29901, CVE-2022-41974.
RHEL 8 Packages 4.18.0-372.26.1 4.18.0-372.32.1 Worker node kernel & package updates for CVE-2020-35525, CVE-2020-35527, CVE-2022-0494, CVE-2022-1353, CVE-2022-23816, CVE-2022-23825, CVE-2022-2509, CVE-2022-2588, CVE-2022-29900, CVE-2022-29901, CVE-2022-3515, CVE-2022-37434, CVE-2022-41974.
Red Hat OpenShift on IBM Cloud. 4.9.50 4.9.51 For more information, see the change log.
HAProxy b034b2 3a1392 CVE-2022-37434, CVE-2022-37434, CVE-2020-35525, CVE-2020-35527, CVE-2022-3515, CVE-2022-2509.

Change log for master fix pack 4.9.49_1561_openshift, released 27 October 2022

The following table shows the changes that are in the master fix pack 4.9.49_1561_openshift. Master patch updates are applied automatically.

Changes since version 4.9.481556openshift
Component Previous Current Description
Cluster health image v1.3.11 v1.3.12 Updated Go dependencies, golangci-lint, and to Go version 1.19.2. Updated base image version to 109. Excluded ingress status from cluster status calculation.
IBM Cloud Controller Manager v1.22.14-2 v1.22.15-3 Updated to support the Kubernetes 1.22.15 release.
IBM Cloud RBAC Operator dc1725a 778ef2b Updated to Go version 1.18.6.
Key Management Service provider v2.5.9 v2.5.10 Updated Go dependencies and to Go version 1.19.2.
OpenVPN Operator image v1.4.9 v1.4.10 Updated ansible operator base image to v1.24.0 to resolve CVEs.
Red Hat OpenShift on IBM Cloud. 4.9.48 4.9.49 See the Red Hat OpenShift on IBM Cloud release notes.

Change log for worker node fix pack 4.9.50_1562_openshift, released 27 October 2022

The following table shows the changes that are in the worker node fix pack 4.9.50_1562_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.50_1559_openshift
Component Previous Current Description
VPC Gen 2 RHEL 8 worker image disk size N/A N/A Fixed regression on previous version where root filesystem partition was 25 GB instead of 100GB for VPC Gen 2

Change log for worker node fix pack 4.9.50_1559_openshift, released 25 October 2022

The following table shows the changes that are in the worker node fix pack 4.9.50_1559_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.49_1558_openshift
Component Previous Current Description
RHEL 7 Packages N/A N/A N/A
Red Hat OpenShift on IBM Cloud 4.9.49 4.9.50 See the change logs.

Change log for worker node fix pack 4.9.49_1558_openshift, released 10 October 2022

The following table shows the changes that are in the worker node fix pack 4.9.49_1558_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.48_1557_openshift
Component Previous Current Description
RHEL 7 Packages N/A N/A N/A
RHEL 8 Packages N/A N/A N/A
Red Hat OpenShift on IBM Cloud. 4.9.48 4.9.49 For more information, see the change log.

Change log for master fix pack 4.9.48_1556_openshift, released 26 September 2022

The following table shows the changes that are in the master fix pack 4.9.48_1556_openshift. Master patch updates are applied automatically.

Changes since version 4.9.461554openshift
Component Previous Current Description
Cluster health image v1.3.10 v1.3.11 Updated Go dependencies and to Go version 1.18.6.
IBM Calico extension 1006 1096 Updated image for CVE-2022-2526.
IBM Cloud Block Storage driver and plug-in v2.2.9 v2.3.1 Updated to Go version 1.18.6. Updated universal base image (UBI) to version 8.6-941 to resolve CVEs.
IBM Cloud Controller Manager v1.22.13-1 v1.22.14-2 Updated to support the Kubernetes 1.22.14 release.
IBM Cloud File Storage for Classic plug-in and monitor 414 416 Updated to Go version 1.18.6. Updated universal base image (UBI) to version 8.6-941 to resolve CVEs.
Key Management Service Provider v2.5.8 v2.5.9 Updated Go dependencies and to Go version 1.18.6.
Red Hat OpenShift on IBM Cloud 4.9.46 4.9.48 See the Red Hat OpenShift on IBM Cloud Release Notes.
OpenVPN Operator image v1.4.8 v1.4.9 Updated ansible operator base image to v1.23.0 to resolve CVEs.
Red Hat OpenShift on IBM Cloud Control Plane Operator v4.9.0-20220816 v4.9.0-20220920 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud Metrics Server v4.9.0-20220816 v4.9.0-20220920 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud toolkit 4.9.0+20220816 4.9.0+20220920 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.9.48_1557_openshift, released 26 September 2022

The following table shows the changes that are in the worker node fix pack 4.9.48_1557_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.47_1555_openshift
Component Previous Current Description
RHEL 7 Packages N/A N/A N/A
RHEL 8 Packages 4.18.0-372.19.1 4.18.0-372.26.1 N/A
Red Hat OpenShift on IBM Cloud. 4.9.47 4.9.48 For more information, see the change log.

Change log for worker node fix pack 4.9.47_1555_openshift, released 12 September 2022

The following table shows the changes that are in the worker node fix pack 4.9.47_1555_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.46_1553_openshift
Component Previous Current Description
RHEL 7 Packages N/A N/A N/A
Red Hat OpenShift on IBM Cloud. 4.9.46 4.9.47 For more information, see the change log.

Change log for master fix pack 4.9.46_1554_openshift, released 1 September 2022

The following table shows the changes that are in the master fix pack 4.9.46_1554_openshift. Master patch updates are applied automatically.

Changes since version 4.9.42_1548_openshift
Component Previous Current Description
Calico v3.22.2 v3.22.4 See the Calico release notes. Updated the Calico custom resource definitions to include preserveUnknownFields: false.
Tigera Operator v1.25.7 v1.25.11 See the Tigera Operator release notes.
Cluster health image v1.3.9 v1.3.10 Updated Go dependencies and to Go version 1.18.5.
Gateway-enabled cluster controller 1792 1823 Updated to Go version 1.17.13.
IBM Calico extension 997 1006 Updated to Go version 1.17.13.
IBM Cloud Block Storage driver and plug-in v2.2.8 v2.2.9 Updated to Go version 1.18.5.
IBM Cloud Controller Manager v1.22.11-3 v1.22.13-1 Updated vpcctl binary to version 3367. Updated to support the Kubernetes 1.22.13 release.
IBM Cloud File Storage for Classic plug-in and monitor 412 414 Updated to Go version 1.18.5. Updated universal base image (UBI) to version 8.6-902 to resolve CVEs.
IBM Cloud RBAC Operator 0a187a4 dc1725a Updated Go dependencies and to Go version 1.18.3.
Key Management Service provider v2.5.7 v2.5.8 Updated Go dependencies.
Load balancer and load balancer monitor for IBM Cloud Provider 2058 2110 Updated Go dependencies and to Go version 1.17.13.
Red Hat OpenShift on IBM Cloud. 4.9.42 4.9.46 See the Red Hat OpenShift on IBM Cloud Release Notes.
OpenVPN client 2.5.6-r1-IKS-629 2.5.6-r1-IKS-648 Update image for CVE-2022-2097 and CVE-2022-37434.
OpenVPN Operator image v1.4.7 v1.4.8 Updated Ansible operator base image to version v1.22.2 to resolve CVEs.
OpenVPN server 2.5.6-r1-IKS-628 2.5.6-r1-IKS-647 Update image for CVE-2022-2097 and CVE-2022-37434.
Portieris admission controller v0.12.5 v0.12.6 See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator v4.9.0-20220712 v4.9.0-20220816 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud Metrics Server v4.9.0-20220712 v4.9.0-20220816 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud toolkit 4.9.0+20220712 4.9.0+20220816 See the Red Hat OpenShift on IBM Cloud toolkit release notes.

Change log for worker node fix pack 4.9.46_1553_openshift, released 29 August 2022

The following table shows the changes that are in the worker node fix pack 4.9.46_1553_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.45_1550_openshift
Component Previous Current Description
RHEL 7 Packages N/A N/A Worker node package updates for CVE-2022-2526.
Red Hat OpenShift on IBM Cloud. 4.9.45 4.9.46 For more information, see the change log.
HAProxy 6514a2 c1634f CVE-2022-32206, CVE-2022-32208

Change log for worker node fix pack 4.9.45_1550_openshift, released 16 August 2022

The following table shows the changes that are in the worker node fix pack 4.9.45_1550_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.43_1549_openshift
Component Previous Current Description
RHEL 7 Packages 3.10.0-1160.71.1 3.10.0-1160.76.1 Worker node package updates for CVE-2022-0005, CVE-2022-21123, CVE-2022-21125, CVE-2022-21127, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151, CVE-2022-21166.
Red Hat OpenShift on IBM Cloud. 4.9.43 4.9.45 For more information, see the change log.

Change log for worker node fix pack 4.9.43_1549_openshift, released 01 August 2022

The following table shows the changes that are in the worker node fix pack 4.9.43_1549_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.42_1547_openshift
Component Previous Current Description
RHEL 7 Packages N/A N/A N/A
Red Hat OpenShift on IBM Cloud. 4.9.42 4.9.43 For more information, see the change log.

Change log for master fix pack 4.9.42_1548_openshift, released 26 July 2022

The following table shows the changes that are in the master fix pack 4.9.42_1548_openshift. Master patch updates are applied automatically.

Changes since version 4.9.37_1544_openshift
Component Previous Current Description
Cluster health image v1.3.8 v1.3.9 Updated Go dependencies and to use Go version 1.18.4. Fixed minor typographical error in the add-on daemonset not available health status.
Gateway-enabled cluster controller 1680 1792 Updated to use Go version 1.17.11. Updated image for CVE-2022-2097 and CVE-2022-29458.
IBM Calico extension 980 997 Updated to use Go version 1.17.11. Updated universal base image (UBI) to version 8.6-854 to resolve CVEs.
IBM Cloud Block Storage driver and plug-in v2.2.6 v2.2.8 Updated to use Go version 1.18.3. Updated universal base image (UBI) to version 8.6-854 to resolve CVEs. Updated to support RHEL 8 worker nodes.
IBM Cloud Controller Manager v1.22.10-3 v1.22.11-3 Updated Go dependencies. Updated to support the Kubernetes 1.22.11 release.
IBM Cloud File Storage for Classic plug-in and monitor 410 412 Updated to use Go version 1.18.3. Updated universal base image (UBI) to version 8.6-854 to resolve CVEs. Improved Kubernetes resource watch configuration.
IBM Cloud RBAC Operator 8c96932 0a187a4 Updated universal base image (UBI) to resolve CVEs.
Key Management Service provider v2.5.6 v2.5.7 Updated Go dependencies and to use Go version 1.18.4.
Load balancer and load balancer monitor for IBM Cloud Provider 1998 2058 Updated image for CVE-2022-2097.
Red Hat OpenShift on IBM Cloud. 4.9.37 4.9.42 See the Red Hat OpenShift on IBM Cloud release notes.
OpenVPN client 2.5.6-r0-IKS-592 2.5.6-r1-IKS-629 Updated Alpine base image to version 3.16 to resolve CVEs. Updated OpenVPN to version 2.5.6-r1.
OpenVPN Operator image v1.4.6 v1.4.7 Updated Ansible operator base image to version v1.22.1 to resolve CVEs.
OpenVPN server 2.5.6-r0-IKS-591 2.5.6-r1-IKS-628 Updated Alpine base image to version 3.16 to resolve CVEs. Updated OpenVPN to version 2.5.6-r1.
Portieris admission controller v0.12.4 v0.12.5 See the Portieris admission controller release notes.
Red Hat OpenShift Control Plane Operator v4.9.0-20220614 v4.9.0-20220712 See the Red Hat OpenShift toolkit release notes.
Red Hat OpenShift Metrics Server v4.9.0-20220614 v4.9.0-20220712 See the Red Hat OpenShift toolkit release notes.
Red Hat OpenShift toolkit 4.9.0+20220614 4.9.0+20220712 See the Red Hat OpenShift toolkit release notes.

Change log for worker node fix pack 4.9.42_1547_openshift, released 18 July 2022

The following table shows the changes that are in the worker node fix pack 4.9.42_1547_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.40_1546_openshift
Component Previous Current Description
RHEL 7 Packages 3.10.0-1160.66.1 3.10.0-1160.71.1 Worker node package updates for CVE-2020-26116, CVE-2020-26137, CVE-2021-3177, CVE-2022-0391, CVE-2022-1729, CVE-2022-1966.
Red Hat OpenShift on IBM Cloud. 4.9.40 4.9.42 For more information, see the change log.

Change log for worker node fix pack 4.9.40_1546_openshift, released 11 July 2022

The following table shows the changes that are in the worker node fix pack 4.9.40_1546_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.40_1545_openshift
Component Previous Current Description
General N/A N/A Fix to address a bug that occurred if you used the persistent volume claim NFS v3 storage.

Change log for worker node fix pack 4.9.40_1545_openshift, released 05 July 2022

The following table shows the changes that are in the worker node fix pack 4.9.40_1545_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.38_1543_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.9.38 4.9.40 For more information, see the change log.

Change log for master fix pack 4.9.37_1544_openshift, released 22 June 2022

The following table shows the changes that are in the master fix pack 4.9.37_1544_openshift. Master patch updates are applied automatically.

Changes since version 4.9.33_1540_openshift
Component Previous Current Description
IBM Cloud Block Storage driver and plug-in v2.2.4 v2.2.6 Bug fixes for the driver installation. Block plugin base images were updated to ubi: 8.6-751.1655117800 for CVE-2022-1271
Calico v3.21.5 v3.22.2 See the Calico release notes.
Tigera Operator v1.23.7 v1.25.7 See the Tigera Operator release notes.
Cluster health image v1.3.7 v1.3.8 Updated Go to version 1.17.11 and also updated the dependencies.
IBM Cloud Controller Manager v1.22.10-1 v1.22.10-3 Update prometheus/client_golang@v1.11.0 to v1.11.1.
Key Management Service provider v2.5.5 v2.5.6 Updated Go to version 1.17.11 and also updated the dependencies.
OpenVPN Operator image v1.4.5 v1.4.6 Update base image to version v1.22.0 to resolve CVEs.
Red Hat OpenShift on IBM Cloud. 4.9.33 4.9.37 See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator v4.9.0-20220509 v4.9.0-20220614 See the Red Hat OpenShift toolkit release notes.
Red Hat OpenShift Metrics Server and toolkit v4.9.0-20220509 v4.9.0-20220614 See the Red Hat OpenShift toolkit release notes.

Change log for worker node fix pack 4.9.38_1543_openshift, released 20 June 2022

The following table shows the changes that are in the worker node fix pack 4.9.38_1543_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.36_1541_openshift
Component Previous Current Description
RHEL 7 Packages N/A N/A Worker node package updates for CVE-2022-1271.
HAProxy 468c09 04f862 CVE-2022-1271.
Red Hat OpenShift on IBM Cloud. 4.9.36 4.9.38 For more information, see the change log.

Change log for worker node fix pack 4.9.36_1541_openshift, released 7 June 2022

The following table shows the changes that are in the worker node fix pack 4.9.36_1541_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.33_1539_openshift
Component Previous Current Description
RHEL 7 Packages N/A N/A Worker node package updates for CVE-2022-24903.
Red Hat OpenShift on IBM Cloud. 4.9.33 4.9.36 For more information, see the change log.

Change log for master fix pack 4.9.33_1540_openshift, released 3 June 2022

The following table shows the changes that are in the master fix pack 4.9.33_1540_openshift. Master patch updates are applied automatically.

Changes since version 4.9.28_1536_openshift
Component Previous Current Description
Cluster health image v1.3.6 v1.3.7 Updated Go to version 1.17.10 and also updated the dependencies. Update registry base image version to 104
IBM Calico extension 954 980 Updated to use Go version 1.17.10. Updated minimal universal base image (UBI) to version 8.5.
IBM Cloud Block Storage driver and plug-in v2.2.2 v2.2.4 Updated universal base image (UBI) to version 8.6-751 to resolve CVEs.
IBM Cloud Controller Manager v1.22.8-7 v1.22.10-1 Updated to support the Kubernetes 1.22.10 release.
IBM Cloud File Storage for Classic plug-in and monitor 408 410 Updated universal base image (UBI) to version 8.6-751 to resolve CVEs.
IBM Cloud RBAC Operator 8c8c82b 8c96932 Updated Go to version 1.18.1
Key Management Service provider v2.5.4 v2.5.5 Updated Go to version 1.17.10 and updated the golang dependencies.
Load balancer and load balancer monitor for IBM Cloud Provider 1916 1998 Updated Go to version 1.17.10 and updated dependencies.
OpenVPN Operator image v1.4.3 v1.4.5 Updated base image to v1.21.0 for CVE remediation.
Red Hat OpenShift on IBM Cloud. 4.9.28 4.9.33 See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator v4.9.0-20220412 v4.9.0-20220509 See the Red Hat OpenShift toolkit release notes.
Red Hat OpenShift Metrics Server v4.9.0-20220412 v4.9.0-20220509 See the Red Hat OpenShift toolkit release notes.
Red Hat OpenShift toolkit 4.9.0+20220412 4.9.0+20220509 See the Red Hat OpenShift toolkit release notes.

Change log for worker node fix pack 4.9.33_1539_openshift, released 23 May 2022

The following table shows the changes that are in the worker node fix pack 4.9.33_1539_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.31_1538_openshift
Component Previous Current Description
Red Hat OpenShift on IBM Cloud. 4.9.31 4.9.33 For more information, see the change log.
RHEL 7 Packages 3.10.0-1160.62.1 3.10.0-1160.66.1 Worker node kernel & package updates for CVE-2018-25032, CVE-2022-1271, CVE-2022-0492.
HA proxy 36b0307 468c09 CVE-2021-3634.

Change log for worker node fix pack 4.9.31_1538_openshift, released 09 May 2022

The following table shows the changes that are in the worker node fix pack 4.9.31_1538_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.29_1537_openshift
Component Previous Current Description
RHEL 7 Packages N/A N/A N/A
Red Hat OpenShift on IBM Cloud. 4.9.29 4.9.31 For more information, see the change log.
HAProxy f53b22 36b030 CVE-2022-1271, CVE-2022-1154, CVE-2018-25032.

Change log for master fix pack 4.9.28_1536_openshift, released 26 April 2022

The following table shows the changes that are in the master fix pack 4.9.28_1536_openshift. Master patch updates are applied automatically.

Changes since version 4.9.25_1534_openshift
Component Previous Current Description
Calico v3.21.4 v3.21.5 See the Calico release notes.
Tigera Operator v1.23.5 v1.23.7 See the Tigera Operator release notes.
Cluster health image v1.3.5 v1.3.6 Updated Go to version 1.17.9 and also updated the dependencies. Update registry base image version to 103.
Gateway-enabled cluster controller 1669 1680 Updated metadata for a rotated key.
IBM Calico extension 950 954 Updated to latest minimal universal base image (UBI) to resolve CVE-2021-3999, CVE-2022-23218, CVE-2022-23219, CVE-2022-23308, CVE-2021-23177, and CVE-2021-31566.
IBM Cloud Block Storage driver and plug-in v2.2.1 v2.2.2 Updated universal base image (UBI) to 8.5-240.1648458092
IBM Cloud Controller Manager v1.22.8-3 v1.22.8-7 Updated vpcctl to the 3003 binary image.
IBM Cloud File Storage for Classic plug-in and monitor 407 408 Fixed CVE-2022-0778.
IBM Cloud RBAC Operator 6c43ef1 8c8c82b Updated Go to version 1.17.8
Key Management Service provider v2.5.3 v2.5.4 Moved to a different base image, version 102, to reduce CVE footprint. Resolved CVE-2022-0778.
Load balancer and Load balancer monitor for IBM Cloud Provider 1899 1916 Updated the image to resolve CVEs.
OpenVPN client 2.5.4-r0-IKS-579 2.5.6-r0-IKS-592 Upgrade openvpn to version 2.5.6-r0.
OpenVPN server 2.5.4-r0-IKS-578 2.5.6-r0-IKS-591 Upgrade openvpn to version 2.5.6-r0.
OpenVPN Operator image v1.4.2 v1.4.3 Updated ansible operator base image to version v1.19.0 to resolve CVEs.
Portieris admission controller v0.12.3 v0.12.4 See the Portieris admission controller release notes.
Red Hat OpenShift on IBM Cloud. 4.9.25 4.9.28 See the Red Hat OpenShift on IBM Cloud release notes.
Red Hat OpenShift on IBM Cloud Control Plane Operator v4.9.0-20220322 v4.9.0-20220412 See the Red Hat OpenShift toolkit release notes.
Red Hat OpenShift Metrics Server v4.9.0-20220322 v4.9.0-20220412 See the Red Hat OpenShift toolkit release notes.
Red Hat OpenShift toolkit 4.9.0+20220322 4.9.0+20220412 See the Red Hat OpenShift toolkit release notes.

Change log for worker node fix pack 4.9.29_1537_openshift, released 25 April 2022

Changes since version 4.9.26_1535_openshift
Component Previous Current Description
RHEL 7 Packages N/A N/A Package updates.
Red Hat OpenShift on IBM Cloud. 4.9.26 4.9.29 For more information, see the change log.

Change log for worker node fix pack 4.9.26_1535_openshift, released 11 April 2022

The following table shows the changes that are in the worker node fix pack 4.9.26_1535_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.9.25_1532_openshift
Component Previous Current Description
RHEL Packages 3.10.0-1160.59.1 3.10.0-1160.62.1 Kernel and package updates for CVE-2021-45960 CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827 CVE-2022-23852 CVE-2022-25235 CVE-2022-25236 CVE-2022-25315 CVE-2021-4028 CVE-2021-4083 CVE-2022-0778.
OpenShift 4.9.25 4.9.26 For more information, see the change logs.

Change log for master fix pack 4.9.25_1534_openshift, released 6 April 2022

Changes since version 4.9.21_1528_openshift
Component Previous Current Description
Cluster health image v1.3.3 v1.3.5 Update golang dependencies. Update image to version 102 to fix CVEs CVE-2021-3999, CVE-2022-23218, CVE-2022-23219
IBM Calico extension 929 950 Updated to use Go version 1.17.8. Updated universal base image (UBI) to resolve CVEs.
IBM Cloud Block Storage driver and plug-in v2.1.7 v2.2.1 Bug fixes for driver installation issues. Updated universal base image (UBI) to 8.5-240 and updated Go to version to 1.16.15. Fixes for CVEs.
IBM Cloud Controller Manager v1.22.7-2 v1.22.8-3 Updated to support the Kubernetes 1.22.8 release and to use Go version 1.16.15.
IBM Cloud File Storage plug-in and monitor 405 407 Updated Go to version 1.16.14. Updated universal base image (UBI) to version 8.5-240.
IBM Cloud RBAC Operator 0fc9949 6c43ef1 Upgraded Go packages to resolve vulnerabilities
Gateway-enabled cluster controller 1653 1669 Updated to use Go version 1.17.8.
Key Management Service provider v2.5.2 v2.5.3 Updated to use Go version 1.17.8. Updated golang dependencies. Fixed CVE CVE-2022-24407
Load balancer and Load balancer monitor for IBM Cloud Provider 1747 1899 Revert setting gratuitous ARP on LBv1. Updated the image to resolve CVEs. Updated to use Go version 1.17.8.
Red Hat OpenShift 4.9.21 4.9.25 See the Red Hat OpenShift release notes
Red hat OpenShift Control Plane Operator v4.9.0-20220222 v4.9.0-20220322 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud Metrics Server v4.9.0-20220222 v4.9.0-20220322 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
Red Hat OpenShift on IBM Cloud toolkit 4.9.0+20220222 4.9.0+20220322 See the Red Hat OpenShift on IBM Cloud toolkit release notes.
OpenVPN client 2.5.4-r0-IKS-556 2.5.4-r0-IKS-579 Updated Go to version 1.16.15.
OpenVPN server 2.5.4-r0-IKS-562 2.5.4-r0-IKS-578 Updated Go to version 1.16.15.
OpenVPN Operator image v1.4.1 v1.4.2 Updated ansible operator base image to version v1.18.0 to resolve CVEs.
Portieris admission controller v0.12.2 v0.12.3 See the Portieris admission controller release notes

Change log for worker node pack 4.9.25_1532_openshift, released 28 March 2022

Changes since version 4.9.23_1530_openshift_openshift
Component Previous Current Description
RHEL 7 Packages N/A N/A N/A
HA proxy 15198f b40c07 CVE-2021-45960, CVE-2021-46143, CVE-2022-22822, CVE-2022-22823, CVE-2022-22824, CVE-2022-22825, CVE-2022-22826, CVE-2022-22827, CVE-2022-23852, CVE-2022-25235, CVE-2022-25236, CVE-2022-25315, CVE-2021-3999, CVE-2022-23218, CVE-2022-23219, CVE-2022-23308, CVE-2021-23177, CVE-2021-31566.
Red Hat OpenShift 4.9.23 4.9.25 For more information, see the change logs.

Change log for worker node pack 4.9.23_1530_openshift, released 14 March 2022

Changes since version 4.9.22_1529_openshift
Component Previous Current Description
RHEL 7 Packages N/A N/A N/A
Red Hat OpenShift 4.9.22 4.9.23 See the change log.

Change log for master fix pack 4.9.21_1528_openshift, released 3 March 2022

Changes since version 4.9.17_1525_openshift
Component Previous Current Description
Cluster health image v1.3.0 v1.3.3 Updated golang.org/x/crypto to v0.0.0-20220214200702-86341886e292. Adds fix for CVE-2021-43565. Adds Golang dependency updates.
Gateway-enabled cluster controller 1586 1653 Updated to use Go version 1.17.7 and updated Go modules to fix CVEs.
IBM Calico extension 923 929 Updated universal base image (UBI) to the 8.5-230 version to resolve CVEs. Updated to use Go version 1.16.13.
IBM Cloud Block Storage for Classic driver and plug-in v2.1.6 v2.1.7 Fix for CVE-2021-3538.
IBM Cloud Controller Manager v1.22.6-1 v1.22.7-2 Updated to support the Kubernetes 1.22.7 release and to use Go version 1.16.14.
IBM Cloud File Storage for Classic plug-in and monitor 404 405 Adds fix for CVE-2021-3538 and adds dependency updates.
Key Management Service provider v2.4.0 v2.5.2 Updated golang.org/x/crypto to v0.0.0-20220214200702-86341886e292. Adds fix for CVE-2021-43565. Adds Golang dependency updates.
Red Hat OpenShift 4.9.17 4.9.21 For more information, see the change logs.
Red Hat OpenShift Control Plane Operator v4.9.0-20220201 v4.9.0-20220222 See the Red Hat OpenShift toolkit release notes.
Red Hat OpenShift Metrics Server v4.9.0-20220201 v4.9.0-20220222 See the Red Hat OpenShift toolkit release notes.
Red Hat OpenShift toolkit 4.9.0+20220201 4.9.0+20220222 See the Red Hat OpenShift toolkit release notes.
OpenVPN server 2.5.4-r0-IKS-555 2.5.4-r0-IKS-562 Turns off CRL verification in the openvpn image.
OpenVPN Operator image v1.4.0 v1.4.1 Turns off CRL verification in the opevpn-operator image.

Change log for worker node fix pack 4.9.22_1529_openshift, released 28 February 2022

Changes since version 4.9.19_1526_openshift
Component Previous Current Description
RHEL 7 Packages 3.10.0-1160.53.1.el7 3.10.0-1160.59.1.el7 Kernel and package updates for CVE-2020-25709, CVE-2020-25710, CVE-2022-24407, CVE-2020-0465, CVE-2020-0466, CVE-2021-0920, CVE-2021-3564, CVE-2021-3573, CVE-2021-3752, CVE-2021-4155, CVE-2022-0330, CVE-2022-22942.
Red Hat OpenShift 4.9.19 4.9.22 For more information, see the change logs
HA proxy f6a2b3 15198fb Contains fixes for CVE-2022-24407.

Change log for worker node fix pack 4.9.19_1526_openshift, released 14 February 2022

Changes since version 4.9.17_1523_openshift
Component Previous Current Description
RHEL 7 Packages N/A N/A N/A
Red Hat OpenShift N/A 4.9.19 For more information, see the change log.
HA proxy d38fa1 f6a2b3 CVE-2021-3521, CVE-2021-4122.

Change log for master fix pack 4.9.17_1525_openshift and worker node fix pack 4.9.17_1523_openshift, released 9 February 2022

The following table shows the changes that are in the master fix pack 4.9.17_1525_openshift and worker node fix pack 4.9.17_1523_openshift. Master patch updates are applied automatically. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.

Changes since version 4.8.26_1542_openshift master and 4.8.28_1543_openshift worker node.
Component Previous Current Description
Calico v3.20.3 v3.21.4 See the Calico release notes.
Tigera Operator v1.20.5 v1.23.5 See the Tigera Operator release notes.
Cluster health image v1.2.21 v1.3.0 Added new health check for cluster autoscaler add-on.
etcd N/A N/A Updated to support metrics collection for OpenShift.
IBM Cloud Controller Manager v1.21.9-1 v1.22.6-1 Updated to support the Kubernetes 1.22.6 release and to use Go version 1.16.12. In addition, the code for this component is now open source.
Red Hat OpenShift (master) 4.8.26 4.9.17 See the OpenShift release notes.
Red Hat OpenShift (worker node) 4.8.28 4.9.17 See the OpenShift release notes.
Red Hat OpenShift Control Plane Operator v4.8.0-20220107 v4.9.0-20220201 See the Red Hat OpenShift toolkit release notes.
Red Hat OpenShift configuration N/A N/A Updated the feature gate configuration. Added new ibm-admin flow schema to default Kubernetes API priority and fairness configuration.
Pause container image 3.5 3.6 See the pause container image release notes.
Red Hat OpenShift Metrics Server v4.8.0-20220107 v4.9.0-20220201 See the Red Hat OpenShift toolkit release notes.
Red Hat OpenShift toolkit 4.8.0+20220107 4.9.0+20220201 See the Red Hat OpenShift toolkit release notes.