| copyright | lastupdated | keywords | subcollection | ||
|---|---|---|---|---|---|
|
2025-01-17 |
change log, version history, 1.28 |
containers |
{{site.data.keyword.attribute-definition-list}}
{: #changelog_128}
View information of version changes for major, minor, and patch updates that are available for your {{site.data.keyword.containerlong}} clusters that run this version. Changes include updates to Kubernetes and {{site.data.keyword.cloud_notm}} Provider components. {: shortdesc}
{: #changelog_overview}
In Kubernetes, most new beta features are disabled by default. Alpha features, which are subject to change, are disabled in all versions. For more information, see the Default service settings for Kubernetes components and the feature gates for each version.
For more information about major, minor, and patch versions and preparation actions between minor versions, see Kubernetes versions. {: tip}
Check the Security Bulletins on {{site.data.keyword.cloud_notm}} Status{: external} for security vulnerabilities that affect {{site.data.keyword.containerlong_notm}}. You can filter the results to view only Kubernetes Cluster security bulletins that are relevant to {{site.data.keyword.containerlong_notm}}. Change log entries that address other security vulnerabilities but don't also refer to an {{site.data.keyword.IBM_notm}} security bulletin are for vulnerabilities that are not known to affect {{site.data.keyword.containerlong_notm}} in normal usage. If you run privileged containers, run commands on the workers, or execute untrusted code, then you might be at risk.
Some change logs are for worker node fix packs, and apply only to worker nodes. You must apply these patches to ensure security compliance for your worker nodes. These worker node fix packs can be at a higher version than the master because some build fix packs are specific to worker nodes. Other change logs are for master fix packs, and apply only to the cluster master. Master fix packs might not be automatically applied. You can choose to apply them manually. For more information about patch types, see Update types. {: note}
{: #128_components}
{: #cl-boms-12815_1593_W}
The following table shows the components included in the worker node fix pack 1.28.15_1593. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}
| Component | Version | Description |
|---|---|---|
| UBUNTU_20_04 | 5.4.0-204-generic | N/A |
| Kubernetes | 1.28.15 | For more information, see the change logs. |
| containerd | 1.7.23 | For more information, see the change logs. |
| HAProxy | 14daa781a66ca5ed5754656ce53c3cca4af580b5 | N/A |
| GPU Device Plug-in and Installer | dc0ff3ad7a22a45390d050aa7d3ab23968870a14 | Resolves the following CVEs: CVE-2024-35195{: external}, CVE-2024-53088{: external}, and CVE-2024-53122{: external}. |
| {: caption="Components in version 1.28.15_1593." caption-side="bottom"} | ||
| {: #cl-boms-12815_1593_W-component-table} |
{: #12815_1592_W}
The following table shows the changes that are in the worker node fix pack 1.28.15_1592. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 Packages | 5.4.0-202-generic | 5.4.0-204-generic | Worker node kernel & package updates for CVE-2021-47001{: external}, CVE-2021-47101{: external}, CVE-2022-38096{: external}, CVE-2023-52821{: external}, CVE-2024-11053{: external}, CVE-2024-35963{: external}, CVE-2024-35965{: external}, CVE-2024-35966{: external}, CVE-2024-35967{: external}, CVE-2024-36952{: external}, CVE-2024-38553{: external}, CVE-2024-38597{: external}, CVE-2024-40910{: external}, CVE-2024-43892{: external}, CVE-2024-47606{: external}, CVE-2024-49967{: external}, CVE-2024-50264{: external}, CVE-2024-53057{: external}. |
| {: caption="Changes since version 1.28.15_1591" caption-side="bottom"} |
{: #12815_1591_W}
The following table shows the changes that are in the worker node fix pack 1.28.15_1591. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 Packages | 5.4.0-200-generic | 5.4.0-202-generic | Worker node kernel & package updates for CVE-2021-47076{: external}, CVE-2021-47501{: external}, CVE-2022-48733{: external}, CVE-2022-48938{: external}, CVE-2022-48943{: external}, CVE-2023-52488{: external}, CVE-2023-52497{: external}, CVE-2023-52498{: external}, CVE-2023-52639{: external}, CVE-2024-26947{: external}, CVE-2024-35904{: external}, CVE-2024-35951{: external}, CVE-2024-36938{: external}, CVE-2024-36953{: external}, CVE-2024-36968{: external}, CVE-2024-38538{: external}, CVE-2024-42068{: external}, CVE-2024-42077{: external}, CVE-2024-42156{: external}, CVE-2024-42240{: external}, CVE-2024-44940{: external}, CVE-2024-44942{: external}, CVE-2024-46724{: external}, CVE-2024-47814{: external}, CVE-2024-50602{: external}. |
| HAProxy | 55c1488 | 14daa78 | Security fixes for CVE-2024-10963{: external}, CVE-2024-11168{: external}, CVE-2024-9287{: external}, CVE-2024-10041{: external}. |
| GPU Device Plug-in and Installer | 96f9b63 | 8904e33 | Security fixes for CVE-2024-10963{: external}, CVE-2024-50192{: external}, CVE-2024-27399{: external}, CVE-2024-38564{: external}, CVE-2024-10041{: external}, CVE-2024-50082{: external}, CVE-2024-50099{: external}, CVE-2024-50256{: external}, CVE-2024-50264{: external}, CVE-2024-9287{: external}, CVE-2024-27043{: external}, CVE-2024-49949{: external}, CVE-2024-11168{: external}, CVE-2024-50110{: external}, CVE-2024-50142{: external}, CVE-2024-46858{: external}, CVE-2024-46695{: external}. |
| {: caption="Changes since version 1.28.15_1590" caption-side="bottom"} |
{: #12815_1590_W}
The following table shows the changes that are in the worker node fix pack 1.28.15_1589. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 Packages | 5.4.0-200-generic | 5.4.0-200-generic | Worker node kernel & package updates for CVE-2024-41671{: external}, CVE-2024-52530{: external}, CVE-2024-52531{: external}, CVE-2024-52532{: external}, CVE-2024-52533{: external}, CVE-2024-9287{: external}. |
| HAProxy | N/A | N/A | N/A |
| Containerd | N/A | N/A | N/A |
| Kubernetes | N/A | N/A | N/A |
| GPU Device Plug-in and Installer | 96f9b63 | 995bd7 | Security fixes for CVE-2019-11236{: external}, CVE-2019-20916{: external}, CVE-2020-26137{: external}, CVE-2021-3572{: external}, CVE-2022-40897{: external}, CVE-2023-32681{: external}, CVE-2023-43804{: external}, CVE-2023-45803{: external}, CVE-2023-5752{: external}, CVE-2024-35195{: external}, CVE-2024-3651{: external}, CVE-2024-37891{: external}, CVE-2024-6345{: external}. |
| {: caption="Changes since version 1.28.15_1587" caption-side="bottom"} |
{: #12815_1588_M}
The following table shows the changes that are in the master fix pack 1.28.15_1588. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| {{site.data.keyword.cloud_notm}} RBAC Operator | c4a05b0 | 743ed58 | New version contains updates and security fixes. |
| Key Management Service provider | v2.8.16 | v2.8.17 | New version contains updates and security fixes. |
| Load balancer and load balancer monitor for {{site.data.keyword.cloud_notm}} Provider | 3051 | 3079 | New version contains updates and security fixes. |
| Portieris admission controller | v0.13.20 | v0.13.21 | See the Portieris admission controller release notes{: external}. |
| {: caption="Changes since version 1.28.15_1586" caption-side="bottom"} |
{: #12815_1587_W}
The following table shows the changes that are in the worker node fix pack 1.28.15_1587. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 Packages | 5.4.0-200-generic | 5.4.0-200-generic | N/A |
| Containerd | 1.7.23 | 1.7.23 | N/A |
| Kubernetes | 1.28.14 | 1.28.15 | For more information, see the change logs{: external}. |
| HAProxy | 885986 | 55c148 | Security fixes for CVE-2023-45539{: external}, CVE-2024-3596{: external}, CVE-2019-12900{: external}, CVE-2024-50602{: external}. |
| GPU Device Plug-in and Installer | 33c70dd | 96f9b63 | Security fixes for CVE-2022-48773{: external}, CVE-2022-48936{: external}, CVE-2023-52492{: external}, CVE-2024-24857{: external}, CVE-2024-26851{: external}, CVE-2024-26924{: external}, CVE-2024-26976{: external}, CVE-2024-27017{: external}, CVE-2024-27062{: external}, CVE-2024-35839{: external}, CVE-2024-35898{: external}, CVE-2024-35939{: external}, CVE-2024-38540{: external}, CVE-2024-38541{: external}, CVE-2024-38586{: external}, CVE-2024-38608{: external}, CVE-2024-39503{: external}, CVE-2024-40924{: external}, CVE-2024-40961{: external}, CVE-2024-40983{: external}, CVE-2024-40984{: external}, CVE-2024-41009{: external}, CVE-2024-41042{: external}, CVE-2024-41066{: external}, CVE-2024-41092{: external}, CVE-2024-41093{: external}, CVE-2024-42070{: external}, CVE-2024-42079{: external}, CVE-2024-42244{: external}, CVE-2024-42284{: external}, CVE-2024-42292{: external}, CVE-2024-42301{: external}, CVE-2024-43854{: external}, CVE-2024-43880{: external}, CVE-2024-43889{: external}, CVE-2024-43892{: external}, CVE-2024-44935{: external}, CVE-2024-44989{: external}, CVE-2024-44990{: external}, CVE-2024-45018{: external}, CVE-2024-46826{: external}, CVE-2024-47668{: external}, CVE-2024-3596{: external}, CVE-2019-12900{: external}, CVE-2024-50602{: external}. |
| {: caption="Changes since version 1.28.14_1585" caption-side="bottom"} |
{: #12815_1586_M}
The following table shows the changes that are in the master fix pack 1.28.15_1586. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| {{site.data.keyword.cloud_notm}} Block Storage driver and plug-in | v2.4.26 | v2.4.27 | New version contains updates and security fixes. |
| {{site.data.keyword.cloud_notm}} RBAC Operator | 77dac6b | c4a05b0 | New version contains updates and security fixes. |
| Kubernetes | v1.28.14 | v1.28.15 | See the Kubernetes release notes{: external}. |
| {: caption="Changes since version 1.28.14_1584" caption-side="bottom"} |
{: #12814_1585_W}
The following table shows the changes that are in the worker node fix pack 1.28.14_1585. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 Packages | 5.4.0-198-generic | 5.4.0-200-generic | Kernel and package updates for CVE-2021-47212{: external}, CVE-2022-36402{: external}, CVE-2023-52531{: external}, CVE-2023-52614{: external}, CVE-2024-20696{: external}, CVE-2024-26607{: external}, CVE-2024-26640{: external}, CVE-2024-26641{: external}, CVE-2024-26668{: external}, CVE-2024-26669{: external}, CVE-2024-26800{: external}, CVE-2024-26885{: external}, CVE-2024-26891{: external}, CVE-2024-26960{: external}, CVE-2024-27051{: external}, CVE-2024-27397{: external}, CVE-2024-35848{: external}, CVE-2024-37891{: external}, CVE-2024-38602{: external}, CVE-2024-38611{: external}, CVE-2024-38630{: external}, CVE-2024-40929{: external}, CVE-2024-41071{: external}, CVE-2024-41073{: external}, CVE-2024-42229{: external}, CVE-2024-42244{: external}, CVE-2024-45016{: external} |
| GPU Device Plug-in and Installer | 68e8137 | 33c70dd | Driver update and security fixes for CVE-2024-5535{: external}, CVE-2024-6232{: external} |
| {: caption="Changes since version 1.28.14_1582" caption-side="bottom"} |
{: #12814_1584_M}
The following table shows the changes that are in the master fix pack 1.28.14_1584. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Cluster health image | v1.5.8 | v1.5.9 | New version contains updates and security fixes. |
| etcd | v3.5.15 | v3.5.16 | See the etcd release notes{: external}. |
| {{site.data.keyword.filestorage_full_notm}} for Classic plug-in and monitor | 446 | 447 | New version contains updates and security fixes. |
| {{site.data.keyword.cloud_notm}} RBAC Operator | 5b17dab | 77dac6b | New version contains updates and security fixes. |
| Key Management Service provider | v2.8.14 | v2.8.16 | New version contains updates and security fixes. |
| Portieris admission controller | v0.13.18 | v0.13.20 | See the Portieris admission controller release notes{: external}. |
| {: caption="Changes since version 1.28.14_1579" caption-side="bottom"} |
{: #12814_1582_W}
The following table shows the changes that are in the worker node fix pack 1.28.14_1582. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 Packages | 5.4.0-196-generic | 5.4.0-198-generic | Package updates for CVE-2022-36227{: external}, CVE-2024-26960{: external}, CVE-2024-27397{: external}, CVE-2024-38630{: external}, CVE-2024-45016{: external}, CVE-2024-5742{: external}. |
| Containerd | 1.7.22 | 1.7.23 | For more information, see the change logs{: external}. |
| Haproxy | 67d03375 | 88598691 | Security fixes for CVE-2024-5535{: external}. |
| {: caption="Changes since version 1.28.14_1581" caption-side="bottom"} |
{: #12814_1581_W}
The following table shows the changes that are in the worker node fix pack 1.28.14_1581. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 Packages | N/A | N/A | Package updates for CVE-2023-26112{: external}, CVE-2024-43802{: external}. |
| Containerd | N/A | N/A | |
| Kubernetes | N/A | N/A | |
| Haproxy | 546887ab | 67d03375 | Security fixes for CVE-2024-4032{: external}, CVE-2024-6232{: external}, CVE-2024-6923{: external}, CVE-2024-45490{: external}, CVE-2024-45491{: external}, CVE-2024-45492{: external}. |
| GPU Device Plug-in and Installer | a248cf6b | 68e8137 | Driver update and security fixes for CVE-2024-26880{: external}, CVE-2024-26894{: external}, CVE-2024-39506{: external}, CVE-2024-41040{: external}, CVE-2023-52800{: external}, CVE-2024-40989{: external}, CVE-2024-42090{: external}, CVE-2021-47385{: external}, CVE-2023-52470{: external}, CVE-2023-52683{: external}, CVE-2024-42238{: external}, CVE-2024-42265{: external}, CVE-2021-47384{: external}, CVE-2024-36922{: external}, CVE-2024-42114{: external}, CVE-2024-42228{: external}, CVE-2024-40912{: external}, CVE-2024-40931{: external}, CVE-2024-42124{: external}, CVE-2021-47289{: external}, CVE-2023-52840{: external}, CVE-2024-26595{: external}, CVE-2024-36901{: external}, CVE-2024-6923{: external}, CVE-2024-38558{: external}, CVE-2024-41008{: external}, CVE-2024-41012{: external}, CVE-2024-4032{: external}, CVE-2024-41007{: external}, CVE-2024-41035{: external}, CVE-2021-47527{: external}, CVE-2022-48754{: external}, CVE-2023-6040{: external}, CVE-2024-40978{: external}, CVE-2021-47582{: external}, CVE-2024-38581{: external}, CVE-2024-41090{: external}, CVE-2024-45492{: external}, CVE-2021-47321{: external}, CVE-2024-36920{: external}, CVE-2024-40954{: external}, CVE-2024-40995{: external}, CVE-2024-40998{: external}, CVE-2024-42152{: external}, CVE-2021-46984{: external}, CVE-2023-52817{: external}, CVE-2024-35809{: external}, CVE-2024-35944{: external}, CVE-2024-23848{: external}, CVE-2024-42226{: external}, CVE-2024-42094{: external}, CVE-2021-47101{: external}, CVE-2024-26720{: external}, CVE-2024-26923{: external}, CVE-2024-41005{: external}, CVE-2023-52798{: external}, CVE-2024-42096{: external}, CVE-2024-40988{: external}, CVE-2024-42084{: external}, CVE-2024-42240{: external}, CVE-2024-41014{: external}, CVE-2024-41041{: external}, CVE-2024-41065{: external}, CVE-2024-42322{: external}, CVE-2022-48760{: external}, CVE-2024-26600{: external}, CVE-2024-26939{: external}, CVE-2024-40972{: external}, CVE-2024-40997{: external}, CVE-2024-43830{: external}, CVE-2024-38559{: external}, CVE-2024-38619{: external}, CVE-2024-39501{: external}, CVE-2024-42131{: external}, CVE-2021-47393{: external}, CVE-2022-48836{: external}, CVE-2023-52809{: external}, CVE-2024-26638{: external}, CVE-2021-47609{: external}, CVE-2024-26855{: external}, CVE-2024-36902{: external}, CVE-2021-47287{: external}, CVE-2024-40960{: external}, CVE-2024-41064{: external}, CVE-2024-41071{: external}, CVE-2024-42225{: external}, CVE-2024-45490{: external}, CVE-2021-47352{: external}, CVE-2024-26769{: external}, CVE-2024-36939{: external}, CVE-2024-40977{: external}, CVE-2024-42154{: external}, CVE-2024-35989{: external}, CVE-2024-36919{: external}, CVE-2024-38579{: external}, CVE-2024-41076{: external}, CVE-2024-26645{: external}, CVE-2024-40958{: external}, CVE-2024-41023{: external}, CVE-2024-43871{: external}, CVE-2021-47441{: external}, CVE-2022-48804{: external}, CVE-2023-52478{: external}, CVE-2023-52605{: external}, CVE-2024-26665{: external}, CVE-2024-40904{: external}, CVE-2024-40911{: external}, CVE-2024-41044{: external}, CVE-2024-41039{: external}, CVE-2024-41060{: external}, CVE-2024-42246{: external}, CVE-2024-45491{: external}, CVE-2021-47338{: external}, CVE-2021-47432{: external}, CVE-2021-47560{: external}, CVE-2024-27042{: external}, CVE-2021-47383{: external}, CVE-2024-36953{: external}, CVE-2024-40959{: external}, CVE-2021-47097{: external}, CVE-2024-26717{: external}, CVE-2024-37356{: external}, CVE-2024-41038{: external}, CVE-2024-39471{: external}, CVE-2021-47497{: external}, CVE-2022-48619{: external}, CVE-2022-48866{: external}, CVE-2023-52476{: external}, CVE-2021-47466{: external}, CVE-2023-52522{: external}, CVE-2024-41097{: external}, CVE-2024-42237{: external}, CVE-2021-47412{: external}, CVE-2024-26649{: external}, CVE-2024-41056{: external}, CVE-2024-41013{: external}, CVE-2024-41055{: external}, CVE-2024-26846{: external}, CVE-2024-35884{: external}, CVE-2024-36883{: external}, CVE-2024-40929{: external}, CVE-2024-40901{: external}, CVE-2024-40941{: external}, CVE-2024-41091{: external}, CVE-2021-47386{: external}, CVE-2024-27013{: external}, CVE-2024-35877{: external}, CVE-2024-39499{: external}, CVE-2021-47455{: external}, CVE-2024-38570{: external}, CVE-2024-6232{: external}. |
| {: caption="Changes since version 1.28.14_1580" caption-side="bottom"} |
{: #12814_1579_M}
The following table shows the changes that are in the master fix pack 1.28.14_1579. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| GPU device plug-in and installer | 184b5e2 | 91f881a | New version contains updates and security fixes. |
| {{site.data.keyword.IBM_notm}} Calico extension | 1598 | 1607 | New version contains security fixes. |
| {{site.data.keyword.cloud_notm}} Block Storage driver and plug-in | v2.4.24 | v2.4.26 | New version contains updates and security fixes. |
| {{site.data.keyword.cloud_notm}} Controller Manager | v1.28.13-1 | v1.28.14-1 | New version contains updates and security fixes. |
| {{site.data.keyword.filestorage_full_notm}} for Classic plug-in and monitor | 445 | 446 | New version contains updates and security fixes. |
| {{site.data.keyword.cloud_notm}} Metrics Server Config Watcher | 48787be | bc543b7 | New version contains updates and security fixes. |
| {{site.data.keyword.cloud_notm}} RBAC Operator | 897f067 | 5b17dab | New version contains updates and security fixes. |
| Key Management Service provider | v2.8.13 | v2.8.14 | New version contains updates and security fixes. |
| Konnectivity agent and server | v0.1.9 | v0.1.10 | See the Konnectivity release notes{: external}. |
| Kubernetes | v1.28.13 | v1.28.14 | See the Kubernetes release notes{: external}. |
| Load balancer and load balancer monitor for {{site.data.keyword.cloud_notm}} Provider | 3022 | 3051 | New version contains updates and security fixes. |
| {: caption="Changes since version 1.28.13_1576" caption-side="bottom"} |
{: #12814_1580_W}
The following table shows the changes that are in the worker node fix pack 1.28.14_1580. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 Packages | 5.4.0-193-generic | 5.4.0-196-generic | Worker node kernel & package updates for CVE-2016-1585{: external}, CVE-2021-46926{: external}, CVE-2021-47188{: external}, CVE-2022-48791{: external}, CVE-2022-48863{: external}, CVE-2023-27043{: external}, CVE-2023-52629{: external}, CVE-2023-52760{: external}, CVE-2024-2201{: external}, CVE-2024-24860{: external}, CVE-2024-26677{: external}, CVE-2024-26787{: external}, CVE-2024-26830{: external}, CVE-2024-26921{: external}, CVE-2024-26929{: external}, CVE-2024-27012{: external}, CVE-2024-36901{: external}, CVE-2024-38570{: external}, CVE-2024-39484{: external}, CVE-2024-39494{: external}, CVE-2024-42160{: external}, CVE-2024-42228{: external}, CVE-2024-45490{: external}, CVE-2024-45491{: external}, CVE-2024-45492{: external}, CVE-2024-6232{: external}, CVE-2024-6345{: external}, CVE-2024-6923{: external}, CVE-2024-7592{: external}, CVE-2024-8088{: external}, CVE-2024-8096{: external}. |
| Containerd | 1.7.21 | 1.7.22 | For more information, see the change logs{: external} and security bulletin for CVE-2024-45310{: external}. |
| Kubernetes | 1.28.13 | 1.28.14 | For more information, see the change logs{: external}. |
| Haproxy | N/A | N/A | N/A |
| GPU Device Plug-in and Installer | 91f881a3 | a248cf6b | Security fixes for CVE-2024-6119{: external}, CVE-2024-45490{: external}, CVE-2024-45491{: external}, CVE-2024-45492{: external}, CVE-2024-34397{: external}. |
| {: caption="Changes since version 1.28.13_1578" caption-side="bottom"} |
{: #12813_1578_W}
The following table shows the changes that are in the worker node fix pack 1.28.13_1578. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 packages | N/A | N/A | Worker node package updates for CVE-2016-1585{: external}, CVE-2024-41810{: external}, CVE-2024-41957{: external}, CVE-2024-43374{: external}. |
| Kubernetes | N/A | N/A | N/A |
| Containerd | 1.7.20 | 1.7.21 | For more information, see the change logs{: external}. |
| GPU device plug-in and installer | c2e2956 | 91f881a | Security fixes for CVE-2019-11236{: external}, CVE-2019-20916{: external}, CVE-2020-26137{: external}, CVE-2021-3572{: external}, CVE-2022-40897{: external}, CVE-2023-32681{: external}, CVE-2023-43804{: external}, CVE-2023-45803{: external}, CVE-2023-5752{: external}, CVE-2024-35195{: external}, CVE-2024-3651{: external}, CVE-2024-37891{: external}, CVE-2024-6345{: external}, CVE-2023-44487{: external}, GO-2023-2153{: external}. |
| {: caption="Changes since version 1.28.13_1577" caption-side="bottom"} |
{: #12813_1576_M}
The following table shows the changes that are in the master fix pack 1.28.13_1576. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Cluster health image | v1.5.7 | v1.5.8 | New version contains updates and security fixes. |
| CoreDNS | 1.11.1 | 1.11.3 | See the CoreDNS release notes{: external}. |
| etcd | v3.5.14 | v3.5.15 | See the etcd release notes{: external}. |
| {{site.data.keyword.cloud_notm}} Block Storage driver and plug-in | v2.4.23 | v2.4.24 | New version contains updates and security fixes. |
| {{site.data.keyword.cloud_notm}} Controller Manager | v1.28.12-1 | v1.28.13-1 | New version contains updates and security fixes. |
| {{site.data.keyword.cloud_notm}} RBAC Operator | 312030f | 897f067 | New version contains updates and security fixes. |
| Key Management Service provider | v2.8.12 | v2.8.13 | New version contains updates and security fixes. |
| Kubernetes | v1.28.12 | v1.28.13 | See the Kubernetes release notes{: external}. |
| Load balancer and load balancer monitor for {{site.data.keyword.cloud_notm}} Provider | 2967 | 3022 | New version contains updates and security fixes. |
| Portieris admission controller | v0.13.17 | v0.13.18 | See the Portieris admission controller release notes{: external}. |
| {: caption="Changes since version 1.28.12_1573" caption-side="bottom"} |
{: #12813_1577_W}
The following table shows the changes that are in the worker node fix pack 1.28.13_1577. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 Packages | 5.4.0-192-generic | 5.4.0-193-generic | Worker node kernel & package updates for CVE-2021-46926{: external}, CVE-2022-48174{: external}, CVE-2023-52629{: external}, CVE-2023-52760{: external}, CVE-2024-2201{: external}, CVE-2024-24860{: external}, CVE-2024-26830{: external}, CVE-2024-26921{: external}, CVE-2024-26929{: external}, CVE-2024-36901{: external}, CVE-2024-39484{: external}, CIS benchmark compliance: 1.1.10{: external}, 5.1.3{: external}. |
| Containerd | N/A | N/A | N/A |
| Kubernetes | 1.28.12 | 1.28.13 | For more information, see the change logs{: external}. |
| Haproxy | c91c765 | 546887a | Security fixes for CVE-2024-2398{: external}, CVE-2024-37370{: external}, CVE-2024-37371{: external}, CVE-2024-6345{: external}. |
| GPU Device Plug-in and Installer | 184b5e23 | c2e29569 | Driver update and security fixes for CVE-2024-6345{: external}, CVE-2024-2398{: external}. |
| {: caption="Changes since version 1.28.12_1575" caption-side="bottom"} |
{: #12812_1575_W}
The following table shows the changes that are in the worker node fix pack 1.28.12_1575. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 packages | 5.4.0-190-generic | 5.4.0-192-generic | Worker node kernel & package updates for CVE-2022-48655{: external}, CVE-2022-48674{: external}, CVE-2023-52752{: external}, CVE-2024-0397{: external}, CVE-2024-2511{: external}, CVE-2024-26583{: external}, CVE-2024-26584{: external}, CVE-2024-26585{: external}, CVE-2024-26886{: external}, CVE-2024-26907{: external}, CVE-2024-27019{: external}, CVE-2024-36016{: external}, CVE-2024-37370{: external}, CVE-2024-37371{: external}, CVE-2024-4032{: external}, CVE-2024-4741{: external}, CVE-2024-5535{: external}, CVE-2024-7264{: external}. |
| GPU device plug-in and installer | 47ed2ef | 4bd77eb | Updates for CVE-2019-11236{: external},CVE-2019-20916{: external},CVE-2020-26137{: external},CVE-2021-3572{: external}, CVE-2022-40897{: external}, CVE-2023-32681{: external}, CVE-2023-43804{: external}, CVE-2023-45803{: external}, CVE-2024-37891{: external}, CVE-2024-6345{: external}, CVE-2023-52803{: external}. |
| {: caption="Changes since version 1.28.12_1574" caption-side="bottom"} |
{: #12812_1573_M}
The following table shows the changes that are in the master fix pack 1.28.12_1573. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Calico | v3.27.2 | v3.27.4 | See the Calico release notes{: external}. |
| Cluster health image | v1.4.11 | v1.5.7 | New version contains updates and security fixes. |
| etcd | v3.5.13 | v3.5.14 | See the etcd release notes{: external}. |
| GPU device plug-in and installer | 10ea2b1 | 184b5e2 | New version contains updates and security fixes. |
| {{site.data.keyword.IBM_notm}} Calico extension | 1595 | 1598 | New version contains security fixes. |
| {{site.data.keyword.cloud_notm}} Block Storage driver and plug-in | v2.4.20 | v2.4.23 | New version contains updates and security fixes. |
| {{site.data.keyword.cloud_notm}} Controller Manager | v1.28.10-5 | v1.28.12-1 | New version contains updates and security fixes. |
| {{site.data.keyword.filestorage_full_notm}} for Classic plug-in and monitor | 443 | 445 | New version contains updates and security fixes. |
| {{site.data.keyword.cloud_notm}} RBAC Operator | 14d0ab5 | 312030f | New version contains updates and security fixes. |
| Key Management Service provider | v2.8.11 | v2.8.12 | New version contains updates and security fixes. |
| Kubernetes | v1.28.11 | v1.28.12 | See the Kubernetes release notes{: external}. |
| Load balancer and load balancer monitor for {{site.data.keyword.cloud_notm}} Provider | 2933 | 2967 | New version contains updates and security fixes. |
| Portieris admission controller | v0.13.16 | v0.13.17 | See the Portieris admission controller release notes{: external}. |
| {: caption="Changes since version 1.28.11_1564" caption-side="bottom"} |
{: #12812_1574_W}
The following table shows the changes that are in the worker node fix pack 1.28.12_1574. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 packages | 5.4.0-189-generic | 5.4.0-190-generic | Worker node kernel & package updates for CVE-2022-48655{: external}, CVE-2024-0760{: external}, CVE-2024-1737{: external}, CVE-2024-1975{: external}, CVE-2024-26583{: external}, CVE-2024-26584{: external}, CVE-2024-26585{: external}, CVE-2024-26907{: external}, CVE-2024-36016{: external}, CVE-2024-4076{: external}, CVE-2024-5569{: external}. |
| Containerd | 1.7.19 | 1.7.20 | For more information, see the change logs{: external}. |
| Kubernetes | 1.28.11 | 1.28.12 | For more information, see the change logs{: external}. |
| GPU device plug-in and installer | 184b5e2 | 47ed2ef | Security fixes for CVE-2024-4032{: external}. |
| Haproxy | N/A | N/A | N/A |
| {: caption="Changes since version 1.28.11_1567" caption-side="bottom"} |
{: #12811_1567_W}
The following table shows the changes that are in the worker node fix pack 1.28.11_1567. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 packages | 5.4.0-187-generic | 5.4.0-189-generic | Worker node kernel & package updates for CVE-2023-6270{: external}, CVE-2023-6597{: external}, CVE-2024-0450{: external}, CVE-2024-2201{: external}, CVE-2024-23307{: external}, CVE-2024-24861{: external}, CVE-2024-26586{: external}, CVE-2024-26642{: external}, CVE-2024-26643{: external}, CVE-2024-26828{: external}, CVE-2024-26889{: external}, CVE-2024-26922{: external}, CVE-2024-26923{: external}, CVE-2024-26925{: external}, CVE-2024-26926{: external}. |
| Containerd | 1.7.18 | 1.7.19 | For more information, see the change logs{: external}. |
| HAProxy | e77d4ca | c91c765 | Security fixes for CVE-2024-28182{: external},CVE-2024-25062{: external}. |
| GPU device plug-in and installer | fbdf629 | 184b5e23 | Security fixes for CVE-2023-45288{: external},CVE-2021-47069{: external},CVE-2024-26801{: external},CVE-2024-35854{: external},CVE-2024-35960{: external},CVE-2023-2953{: external},CVE-2024-26584{: external},CVE-2024-26759{: external},CVE-2024-35890{: external},CVE-2024-26982{: external},CVE-2024-35835{: external},CVE-2021-46972{: external},CVE-2021-47353{: external},CVE-2021-47356{: external},CVE-2024-26675{: external},CVE-2021-47236{: external},CVE-2023-52781{: external},CVE-2024-26656{: external},CVE-2021-47311{: external},CVE-2023-52675{: external},CVE-2024-35789{: external},CVE-2024-35958{: external},CVE-2021-47456{: external},CVE-2024-26583{: external},CVE-2024-26974{: external},CVE-2024-36004{: external},CVE-2021-47073{: external},CVE-2023-52464{: external},CVE-2023-52667{: external},CVE-2024-35838{: external},CVE-2024-26906{: external},CVE-2024-27410{: external},CVE-2024-28182{: external},CVE-2023-52560{: external},CVE-2023-52615{: external},CVE-2023-52686{: external},CVE-2023-52700{: external},CVE-2023-52669{: external},CVE-2024-26804{: external},CVE-2024-26859{: external},CVE-2024-35853{: external},CVE-2024-35852{: external},CVE-2023-52813{: external},CVE-2023-52881{: external},CVE-2024-26735{: external},CVE-2024-26826{: external},CVE-2023-52703{: external},CVE-2024-26907{: external},CVE-2021-46909{: external},CVE-2023-52877{: external},CVE-2024-27397{: external},CVE-2024-3651{: external},CVE-2021-47495{: external},CVE-2023-52626{: external},CVE-2024-35959{: external},CVE-2024-36007{: external},CVE-2024-35845{: external},CVE-2024-35855{: external},CVE-2024-35888{: external},CVE-2021-47310{: external},CVE-2023-52835{: external},CVE-2023-52878{: external},CVE-2024-26585{: external},CVE-2020-26555{: external},CVE-2023-5090{: external}. |
| {: caption="Changes since version 1.28.11_1566" caption-side="bottom"} |
{: #12811_1566_W}
The following table shows the changes that are in the worker node fix pack 1.28.11_1566. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 packages | 5.4.0-186-generic | 5.4.0-187-generic | Worker node kernel & package updates for CVE-2022-4968{: external}, CVE-2024-2201{: external}, CVE-2024-26643{: external}, CVE-2024-26925{: external}, CVE-2024-32002{: external}, CVE-2024-38428{: external}. |
| HAProxy | 18889dd | e77d4ca | New version contains security fixes |
| GPU device plug-in and installer | 8ef78ef | fbdf629 | New version contains updates and security fixes. |
| {: caption="Changes since version 1.28.11_1565" caption-side="bottom"} |
{: #12811_1564_M}
The following table shows the changes that are in the master fix pack 1.28.11_1564. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Cluster health image | v1.4.10 | v1.4.11 | New version contains updates and security fixes. |
| GPU device plug-in and installer | 9fad43c | 10ea2b1 | New version contains updates and security fixes. |
| {{site.data.keyword.IBM_notm}} Calico extension | 1589 | 1595 | New version contains security fixes. |
| {{site.data.keyword.cloud_notm}} Controller Manager | v1.28.10-1 | v1.28.10-5 | New version contains updates and security fixes. |
| {{site.data.keyword.cloud_notm}} Metrics Server Config Watcher | 0281c94 | 48787be | New version contains updates and security fixes. |
| {{site.data.keyword.cloud_notm}} RBAC Operator | 4c5d156 | 14d0ab5 | New version contains updates and security fixes. |
| Key Management Service provider | v2.8.10 | v2.8.11 | New version contains updates and security fixes. |
| Kubernetes | v1.28.10 | v1.28.11 | See the Kubernetes release notes{: external}. |
| Kubernetes NodeLocal DNS cache | 1.23.0 | 1.23.1 | See the Kubernetes NodeLocal DNS cache release notes{: external}. |
| Portieris admission controller | v0.13.15 | v0.13.16 | See the Portieris admission controller release notes{: external}. |
| {: caption="Changes since version 1.28.10_1560" caption-side="bottom"} |
{: #12811_1565_W}
The following table shows the changes that are in the worker node fix pack 1.28.11_1565. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 packages | 5.4.0-182-generic | 5.4.0-186-generic | Worker node kernel and package updates CVE-2021-47063{: external}, CVE-2021-47070{: external}, CVE-2023-47233{: external}, CVE-2023-52530{: external}, CVE-2024-26614{: external}, CVE-2024-26622{: external}, CVE-2024-26712{: external}, CVE-2024-26733{: external}, CIS benchmark compliance: 1.5.4{: external}, 1.5.5{: external}, 4.5.5{: external}, 3.3.4{: external}, 3.3.9{: external}, 1.1.1.2{: external}, 1.1.1.3{: external}, 1.1.1.4{: external}, 1.1.1.5{: external}. |
| Kubernetes | 1.28.10 | 1.28.11 | For more information, see the change logs{: external}. |
| Containerd | 1.7.17 | 1.7.18 | For more information, see the change logs{: external}. |
| HAProxy | 0062a3c | 18889dd | Security fixes for CVE-2024-25062{: external}. |
| GPU device plug-in and installer | fdf201e | 8ef78ef | Security fixes for CVE-2019-25162{: external}, CVE-2020-36777{: external}, CVE-2021-46934{: external}, CVE-2021-47013{: external}, CVE-2021-47055{: external}, CVE-2021-47118{: external}, CVE-2021-47153{: external}, CVE-2021-47171{: external}, CVE-2021-47185{: external}, CVE-2022-48627{: external}, CVE-2022-48669{: external}, CVE-2023-52439{: external}, CVE-2023-52445{: external}, CVE-2023-52477{: external}, CVE-2023-52513{: external}, CVE-2023-52520{: external}, CVE-2023-52528{: external}, CVE-2023-52565{: external}, CVE-2023-52578{: external}, CVE-2023-52594{: external}, CVE-2023-52595{: external}, CVE-2023-52598{: external}, CVE-2023-52606{: external}, CVE-2023-52607{: external}, CVE-2023-52610{: external}, CVE-2023-6240{: external}, CVE-2024-0340{: external}, CVE-2024-23307{: external}, CVE-2024-25744{: external}, CVE-2024-26593{: external}, CVE-2024-26603{: external}, CVE-2024-26610{: external}, CVE-2024-26615{: external}, CVE-2024-26642{: external}, CVE-2024-26643{: external}, CVE-2024-26659{: external}, CVE-2024-26664{: external}, CVE-2024-26693{: external}, CVE-2024-26694{: external}, CVE-2024-26743{: external}, CVE-2024-26744{: external}, CVE-2024-26779{: external}, CVE-2024-26872{: external}, CVE-2024-26892{: external}, CVE-2024-26897{: external}, CVE-2024-26901{: external}, CVE-2024-26919{: external}, CVE-2024-26933{: external}, CVE-2024-26934{: external}, CVE-2024-26964{: external}, CVE-2024-26973{: external}, CVE-2024-26993{: external}, CVE-2024-27014{: external}, CVE-2024-27048{: external}, CVE-2024-27052{: external}, CVE-2024-27056{: external}, CVE-2024-27059{: external}, CVE-2024-25062{: external}. |
| {: caption="Changes since version 1.28.10_1561" caption-side="bottom"} |
{: #12810_1561_W}
The following table shows the changes that are in the worker node fix pack 1.28.10_1561. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 packages | 5.4.0-182-generic | 5.4.0-182-generic | Worker node package updates CVE-2023-22745{: external}, CVE-2024-32004{: external}, CVE-2024-32020{: external}, CVE-2024-32021{: external}, CVE-2024-32465{: external}, CVE-2024-33599{: external}, CVE-2024-33600{: external}, CVE-2024-33601{: external}, CVE-2024-33602{: external}, CVE-2024-34064{: external}, CVE-2024-3651{: external}. |
| Kubernetes | 1.28.9 | 1.28.10 | For more information, see the change logs{: external}. |
| Containerd | 1.7.17 | 1.7.17 | N/A |
| HAProxy | e88695e | 0062a3c | Security fixes for CVE-2024-0450{: external}, CVE-2024-33599{: external}, CVE-2024-26461{: external}, CVE-2021-43618{: external}, CVE-2024-22365{: external}, CVE-2023-6597{: external}, CVE-2024-26458{: external}, CVE-2024-2961{: external}, CVE-2024-33601{: external}, CVE-2024-33602{: external}, CVE-2023-7008{: external}, CVE-2023-6004{: external}, CVE-2023-6918{: external}, CVE-2024-33600{: external}. |
| GPU device plug-in and installer | 806184d | fdf201e | Security fixes for CVE-2024-33602{: external}, CVE-2024-28182{: external}, CVE-2024-2961{: external}, CVE-2024-33599{: external}, CVE-2024-33600{: external}, CVE-2024-33601{: external}. |
| {: caption="Changes since version 1.28.9_1557" caption-side="bottom"} |
{: #12810_1560_M}
The following table shows the changes that are in the master fix pack 1.28.10_1560. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Calico | v3.26.4 | v3.27.2 | See the Calico release notes{: external}. |
| Cluster health image | v1.4.9 | v1.4.10 | New version contains updates and security fixes. |
| {{site.data.keyword.IBM_notm}} Calico extension | 1537 | 1589 | New version contains security fixes. |
| {{site.data.keyword.cloud_notm}} Block Storage driver and plug-in | v2.4.19 | v2.4.20 | New version contains updates and security fixes. |
| {{site.data.keyword.cloud_notm}} Controller Manager | v1.28.9-1 | v1.28.10-1 | New version contains updates and security fixes. |
| {{site.data.keyword.filestorage_full_notm}} for Classic plug-in and monitor | 442 | 443 | New version contains updates and security fixes. |
| {{site.data.keyword.cloud_notm}} Metrics Server Config Watcher | 50808cc | 0281c94 | New version contains updates and security fixes. |
| Key Management Service provider | v2.8.9 | v2.8.10 | New version contains updates and security fixes. |
| Kubernetes | v1.28.9 | v1.28.10 | See the Kubernetes release notes{: external}. |
| Load balancer and load balancer monitor for {{site.data.keyword.cloud_notm}} Provider | 2867 | 2933 | New version contains updates and security fixes. |
| Konnectivity agent and server | v0.1.5_47_iks | v0.1.9_105_iks | See the Konnectivity release notes{: external}. |
| GPU device plug-in and installer | 206b5a6 | 9fad43c | New version contains updates and security fixes. |
| Portieris admission controller | v0.13.13 | v0.13.15 | See the Portieris admission controller release notes{: external}. |
| {: caption="Changes since version 1.28.9_1554" caption-side="bottom"} |
{: #1289_1557_W}
The following table shows the changes that are in the worker node fix pack 1.28.9_1557. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 packages | 5.4.0-177-generic | 5.4.0-182-generic | Worker node package and kernel updates CVE-2016-9840{: external}, CVE-2016-9841{: external}, CVE-2018-25032{: external}, CVE-2022-37434{: external}, CVE-2023-23000{: external}, CVE-2023-23004{: external}, CVE-2023-24023{: external}, CVE-2023-4421{: external}, CVE-2023-46838{: external}, CVE-2023-52600{: external}, CVE-2023-52603{: external}, CVE-2023-5388{: external}, CVE-2023-6135{: external}, CVE-2024-0607{: external}, CVE-2024-1086{: external}, CVE-2024-23851{: external}, CVE-2024-24855{: external}, CVE-2024-26581{: external}, CVE-2024-26589{: external}, CVE-2024-28085{: external}, CVE-2024-28834{: external}, CVE-2024-2961{: external}, CIS benchmark compliance: 4.5.1.6{: external}, 4.5.1.7{: external}, 4.5.7{: external}. |
| Kubernetes | 1.28.9 | 1.28.9 | N/A |
| Containerd | 1.7.16 | 1.7.17 | For more information, see the change logs{: external}. |
| HAProxy | d225100 | 4e826da | CVE-2024-2961{: external}, CVE-2024-28834{: external}. |
| GPU device plug-in and installer | 806184d | c0e1605 | Security fixes for CVE-2024-2961{: external}. |
| {: caption="Changes since version 1.28.9_1556" caption-side="bottom"} |
{: #1289_1556_W}
The following table shows the changes that are in the worker node fix pack 1.28.9_1556. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 packages | 5.4.0-177-generic | 5.4.0-177-generic | Worker node package updates for CVE-2015-1197{: external}, CVE-2023-7207{: external}, CVE-2024-28182{: external}, CVE-2024-32487{: external}. CIS benchmark compliance: 1.1.2.1{: external}, 1.1.2.2{: external}, 1.1.2.3{: external}, and 1.1.2.4{: external}. |
| Kubernetes | 1.28.9 | 1.28.9 | N/A |
| Containerd | 1.7.15 | 1.7.16 | For more information, see the change logs{: external}. |
| HAProxy | 295dba8 | 295dba8 | N/A |
| GPU device plug-in and installer | 9fad43c | 806184d | Security fixes for CVE-2022-48554{: external}, CVE-2023-2975{: external}, CVE-2023-3446{: external}, CVE-2023-5678{: external}, CVE-2024-22365{: external}, CVE-2023-7008{: external}, CVE-2023-3817{: external}, CVE-2023-6129{: external}, CVE-2023-6237{: external}, CVE-2024-0727{: external}. |
| {: caption="Changes since version 1.28.9_1555" caption-side="bottom"} |
{: #1289_1554_M}
The following table shows the changes that are in the master fix pack 1.28.9_1554. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Calico | v3.27.3 | v3.26.4 | See the Calico release notes{: external}. |
| Cluster health image | v1.4.8 | v1.4.9 | New version contains updates and security fixes. |
| etcd | v3.5.12 | v3.5.13 | See the etcd release notes{: external}. |
| GPU device plug-in and installer | 71cb7f7 | 206b5a6 | New version contains updates and security fixes. |
| {{site.data.keyword.cloud_notm}} Controller Manager | v1.28.8-1 | v1.28.9-1 | New version contains updates and security fixes. |
| {{site.data.keyword.cloud_notm}} Metrics Server Config Watcher | 803912f | 50808cc | New version contains updates and security fixes. |
| {{site.data.keyword.cloud_notm}} RBAC Operator | bd30030 | 4c5d156 | New version contains updates and security fixes. |
| Key Management Service provider | v2.8.8 | v2.8.9 | New version contains updates and security fixes. |
| Kubernetes | v1.28.8 | v1.28.9 | Update resolves CVE-2024-3177. For more information, see the Security Bulletin{: external} and the Kubernetes release notes{: external}. |
| Load balancer and load balancer monitor for {{site.data.keyword.cloud_notm}} Provider | 2831 | 2867 | New version contains updates and security fixes. |
| Portieris admission controller | v0.13.12 | v0.13.13 | See the Portieris admission controller release notes{: external}. |
| {: caption="Changes since version 1.28.8_1550" caption-side="bottom"} |
{: #1289_1555_W}
The following table shows the changes that are in the worker node fix pack 1.28.9_1555. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 packages | 5.4.0-174-generic | 5.4.0-177-generic | Worker node and kernel package updates for CVE-2016-9840{: external}, CVE-2016-9841{: external}, CVE-2018-25032{: external}, CVE-2022-37434{: external}, CVE-2023-23000{: external}, CVE-2023-23004{: external}, CVE-2023-24023{: external}, CVE-2023-4421{: external}, CVE-2023-46838{: external}, CVE-2023-52600{: external}, CVE-2023-52603{: external}, CVE-2023-5388{: external}, CVE-2023-6135{: external}, CVE-2024-0607{: external}, CVE-2024-1086{: external}, CVE-2024-23851{: external}, CVE-2024-24855{: external}, CVE-2024-26581{: external}, CVE-2024-26589{: external}, CVE-2024-28085{: external}, CVE-2024-28834{: external}, CVE-2024-2961{: external}. |
| Kubernetes | 1.28.8 | 1.28.9 | For more information, see the change logs{: external}. |
| Containerd | 1.7.13 | 1.7.15 | For more information, see the change logs{: external}. |
| HAProxy | 295dba8 | 4e826da | Security fixes for CVE-2024-28834{: external}. |
| GPU device plug-in and installer | 206b5a6 | 9fad43c1 | Security fixes for CVE-2024-1488{: external}, CVE-2024-28834{: external}, CVE-2024-28835{: external}. |
| {: caption="Changes since version 1.28.8_1552" caption-side="bottom"} |
{: #1288_1552_W}
The following table shows the changes that are in the worker node fix pack 1.28.8_1552. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 packages | 5.4.0-174-generic | 5.4.0-174-generic | Worker node package updates for CVE-2024-2398{: external}, CVE-2024-28085{: external}. |
| Kubernetes | 1.28.8 | 1.28.8 | N/A |
| Containerd | 1.7.14 | 1.7.13 | Reverted due to a bug{: external}. |
| HAProxy | 512b32a | 295dba8 | Security fixes for CVE-2023-28322{: external}, CVE-2023-38546{: external}, CVE-2023-46218{: external}, CVE-2023-52425{: external} |
| GPU device plug-in and installer | 5b69345 | 206b5a6 | Security fixes for CVE-2023-28322{: external}, CVE-2023-38546{: external}, CVE-2023-46218{: external}, CVE-2023-52425{: external} |
| {: caption="Changes since version 1.28.8_1551" caption-side="bottom"} |
{: #1288_1550_M}
The following table shows the changes that are in the master fix pack 1.28.8_1550. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Cluster health image | v1.4.7 | v1.4.8 | New version contains updates and security fixes. |
| {{site.data.keyword.IBM_notm}} Calico extension | 1534 | 1537 | New version contains security fixes. |
| {{site.data.keyword.cloud_notm}} Block Storage driver and plug-in | v2.4.18 | v2.4.19 | New version contains updates and security fixes. |
| {{site.data.keyword.cloud_notm}} Controller Manager | v1.28.7-2 | v1.28.8-1 | New version contains updates and security fixes. |
| {{site.data.keyword.filestorage_full_notm}} plug-in and monitor | 441 | 442 | New version contains updates and security fixes. |
| {{site.data.keyword.cloud_notm}} Metrics Server Config Watcher | 90a78ef | 803912f | New version contains updates and security fixes. |
| Key Management Service provider | v2.8.7 | v2.8.8 | New version contains updates and security fixes. |
| Kubernetes | v1.28.7 | v1.28.8 | See the Kubernetes release notes{: external}. |
| Kubernetes NodeLocal DNS cache | 1.22.28 | 1.23.0 | See the Kubernetes NodeLocal DNS cache release notes{: external}. |
| Load balancer and load balancer monitor for {{site.data.keyword.cloud_notm}} Provider | 2807 | 2831 | New version contains updates and security fixes. |
| Portieris admission controller | v0.13.11 | v0.13.12 | See the Portieris admission controller release notes{: external}. |
| {: caption="Changes since version 1.28.7_1547" caption-side="bottom"} |
{: #1288_1551_W}
The following table shows the changes that are in the worker node fix pack 1.28.8_1551. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 packages | 5.4.0-173-generic | 5.4.0-174-generic | Worker node kernel and package updates for CVE-2012-6655{: external}, CVE-2023-23000{: external}, CVE-2023-23004{: external}, CVE-2024-1086{: external}, CVE-2024-22667{: external}, CVE-2024-24855{: external}. |
| Kubernetes | 1.28.7 | 1.28.8 | For more information, see the change logs{: external}. |
| Containerd | 1.7.14 | 1.7.14 | N/A |
| HAProxy | 512b32 | 512b32 | N/A |
| {: caption="Changes since version 1.28.7_1549" caption-side="bottom"} |
{: #1287_1549_W}
The following table shows the changes that are in the worker node fix pack 1.28.7_1549. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 packages | 5.4.0-172-generic | 5.4.0-173-generic | Worker node kernel and package updates for CVE-2022-47695{: external}, CVE-2022-48063{: external}, CVE-2022-48065{: external}, CVE-2022-48624{: external}, CVE-2023-0340{: external}, CVE-2023-22995{: external}, CVE-2023-50782{: external}, CVE-2023-51779{: external}, CVE-2023-51781{: external}, CVE-2023-51782{: external}, CVE-2023-6915{: external}, CVE-2024-0565{: external}, CVE-2024-0646{: external}, CVE-2024-24806{: external}, CVE-2024-25062{: external}. |
| Kubernetes | 1.28.7 | 1.28.7 | N/A |
| GPU device plug-in and installer | 71cb7f | 5b6934 | N/A |
| HAProxy | 9b0400 | 512b32 | N/A |
| Containerd | 1.7.13 | 1.7.14 | For more information, see the change logs{: external}. |
| {: caption="Changes since version 1.28.7_1548" caption-side="bottom"} |
{: #1287_1547_M}
The following table shows the changes that are in the master fix pack 1.28.7_1547. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Cluster health image | v1.4.6 | v1.4.7 | New version contains updates and security fixes. |
| etcd | v3.5.11 | v3.5.12 | See the etcd release notes{: external}. |
| {{site.data.keyword.IBM_notm}} Calico extension | 1525 | 1534 | New version contains security fixes. |
| {{site.data.keyword.cloud_notm}} Block Storage driver and plug-in | v2.4.14 | v2.4.18 | New version contains updates and security fixes. |
| {{site.data.keyword.cloud_notm}} Controller Manager | v1.28.6-3 | v1.28.7-2 | New version contains updates and security fixes. |
| {{site.data.keyword.filestorage_full_notm}} plug-in and monitor | 439 | 441 | New version contains updates and security fixes. |
| {{site.data.keyword.cloud_notm}} RBAC Operator | 7185ea1 | bd30030 | New version contains updates and security fixes. |
| Key Management Service provider | v2.8.6 | v2.8.7 | New version contains updates and security fixes. |
| Kubernetes | v1.28.6 | v1.28.7 | See the Kubernetes release notes{: external}. |
| Load balancer and load balancer monitor for {{site.data.keyword.cloud_notm}} Provider | 2789 | 2807 | New version contains updates and security fixes. |
| {: caption="Changes since version 1.28.6_1542" caption-side="bottom"} |
{: #1287_1547_W}
The following table shows the changes that are in the worker node fix pack 1.28.7_1547. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 packages | 5.4.0-171-generic | 5.4.0-172-generic | Worker node kernel & package updates for CVE-2023-4408{: external}, CVE-2023-4641{: external}, CVE-2023-50387{: external}, CVE-2023-50868{: external}, CVE-2023-51781{: external}, CVE-2023-5517{: external}, CVE-2023-6516{: external}, CVE-2023-6915{: external}, CVE-2024-0565{: external}, CVE-2024-0646{: external}. |
| GPU device plug-in and installer | d992fea | 71cb7f7 | Security fixes for CVE-2023-50387{: external}, CVE-2023-50868{: external}. |
| Containerd | 1.7.13 | 1.7.13 | N/A |
| {: caption="Changes since version 1.28.6_1544" caption-side="bottom"} |
{: #1286_1544_W}
The following table shows the changes that are in the worker node fix pack 1.28.6_1544. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 packages | 5.4.0-170-generic | 5.4.0-171-generic | Worker node kernel & package updates for CVE-2023-2953{: external}, CVE-2023-45863{: external}, CVE-2023-5678{: external}, CVE-2023-6040{: external}, CVE-2023-6606{: external}, CVE-2023-6931{: external}, CVE-2023-6932{: external}, CVE-2024-0727{: external}. |
| Kubernetes | N/A | N/A | N/A |
| Containerd | 1.7.12 | 1.7.13 | For more information, see change log{: external} and security bulletin for CVE-2024-21626{: external}. |
| GPU device plug-in and installer | 0aa042f | d992fea | Security fixes for CVE-2021-35938{: external}, CVE-2021-35939{: external}, CVE-2023-48795{: external}, CVE-2024-0553{: external}, CVE-2021-35937{: external}. |
| HAProxy | a13673 | 9b0400 | Security fixes for CVE-2024-0553{: external}, CVE-2023-48795{: external}, CVE-2021-35937{: external}, CVE-2021-35938{: external}, CVE-2021-35939{: external}. |
| {: caption="Changes since version 1.28.6_1543" caption-side="bottom"} |
{: #1286_1542_M}
The following table shows the changes that are in the master fix pack 1.28.6_1542. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Calico | v3.26.3 | v3.26.4 | See the Calico release notes{: external}. |
| Cluster health image | v1.4.5 | v1.4.6 | New version contains security fixes. |
| etcd | v3.5.10 | v3.5.11 | See the etcd release notes{: external}. |
| {{site.data.keyword.IBM_notm}} Calico extension | 1487 | 1525 | New version contains security fixes. |
| {{site.data.keyword.cloud_notm}} Controller Manager | v1.28.4-6 | v1.28.6-3 | New version contains updates and security fixes. |
| {{site.data.keyword.cloud_notm}} Metrics Server Config Watcher | 58e69e0 | 90a78ef | New version contains updates and security fixes. |
| {{site.data.keyword.cloud_notm}} RBAC Operator | e544e35 | 7185ea1 | New version contains updates and security fixes. |
| Key Management Service provider | v2.8.5 | v2.8.6 | New version contains updates and security fixes. |
| Kubernetes | v1.28.4 | v1.28.6 | See the Kubernetes release notes{: external}. |
| Kubernetes NodeLocal DNS cache | 1.22.27 | 1.22.28 | See the Kubernetes NodeLocal DNS cache release notes{: external}. |
| Load balancer and load balancer monitor for {{site.data.keyword.cloud_notm}} Provider | 2767 | 2789 | New version contains updates and security fixes. |
| Portieris admission controller | v0.13.10 | v0.13.11 | See the Portieris admission controller release notes{: external}. |
| {: caption="Changes since version 1.28.4_1537" caption-side="bottom"} |
{: #1286_1543_W}
The following table shows the changes that are in the worker node fix pack 1.28.6_1543. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 packages | 5.4.0-169-generic | 5.4.0-170-generic | Worker node package and kernel updates for CVE-2020-28493{: external}, CVE-2022-44840{: external}, CVE-2022-45703{: external}, CVE-2022-47007{: external}, CVE-2022-47008{: external}, CVE-2022-47010{: external}, CVE-2022-47011{: external}, CVE-2023-6004{: external}, CVE-2023-6040{: external}, CVE-2023-6606{: external}, CVE-2023-6918{: external}, CVE-2023-6931{: external}, CVE-2023-6932{: external}, CVE-2024-0553{: external}, CVE-2024-22195{: external}, CVE-2024-22365{: external}. |
| Kubernetes | 1.28.4 | 1.28.6 | For more information, see change logs{: external}. |
| Containerd | 1.7.12 | 1.7.12 | N/A |
| GPU device plug-in and installer | 6273cd0 | 0aa042f | Security fixes for CVE-2021-44716{: external}, CVE-2022-27664{: external}, CVE-2022-29526{: external}, CVE-2022-32149{: external}, CVE-2022-41717{: external}, CVE-2022-41723{: external}, CVE-2023-39325{: external}, CVE-2023-3978{: external}, CVE-2023-44487{: external}. |
| HAProxy | e105dc | a13673 | Security fixes for CVE-2023-7104{: external}, CVE-2023-27043{: external}. |
| {: caption="Changes since version 1.28.4_1541" caption-side="bottom"} |
{: #1284_1541_W}
The following table shows the changes that are in the worker node fix pack 1.28.4_1541. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 packages | 5.4.0-169-generic | 5.4.0-169-generic | Worker node package updates for CVE-2021-41617{: external}, CVE-2022-39348{: external}, CVE-2023-46137{: external}, CVE-2023-51385{: external}, CVE-2023-7104{: external}. |
| Kubernetes | 1.28.4 | 1.28.4 | N/A |
| Containerd | 1.7.11 | 1.7.12 | For more information, see the change logs{: external}. |
| GPU device plug-in and installer | b9c978a | 6273cd0 | New version contains security fixes. |
| Haproxy | 3060b0 | e105dc | CVE-2023-39615{: external}, CVE-2023-5981{: external}, CVE-2022-48560{: external}, CVE-2022-48564{: external}. |
| {: caption="Changes since version 1.28.4_1540" caption-side="bottom"} |
{: #1284_1540_W}
The following table shows the changes that are in the worker node fix pack 1.28.4_1540. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 packages | 5.4.0-169-generic | 5.4.0-169-generic | Worker node package updates for CVE-2023-48795{: external}. |
| Kubernetes | 1.28.4 | 1.28.4 | N/A |
| Containerd | 1.7.11 | 1.7.11 | N/A |
| GPU device plug-in and installer | 2d51c7a | b9c978a | New version contains security fixes. |
| {: caption="Changes since version 1.28.4_1539" caption-side="bottom"} |
{: #1284_1539_W}
The following table shows the changes that are in the worker node fix pack 1.28.4_1539. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 packages | 5.4.0-167-generic | 5.4.0-169-generic | Worker node kernel & package updates for CVE-2020-19726{: external}, CVE-2021-46174{: external}, CVE-2022-1725{: external}, CVE-2022-1771{: external}, CVE-2022-1897{: external}, CVE-2022-2000{: external}, CVE-2022-35205{: external}, CVE-2023-23931{: external}, CVE-2023-31085{: external}, CVE-2023-37453{: external}, CVE-2023-39192{: external}, CVE-2023-39193{: external}, CVE-2023-39804{: external}, CVE-2023-42754{: external}, CVE-2023-45539{: external}, CVE-2023-45871{: external}, CVE-2023-46218{: external}, CVE-2023-46246{: external}, CVE-2023-4806{: external}, CVE-2023-4813{: external}, CVE-2023-48231{: external}, CVE-2023-48233{: external}, CVE-2023-48234{: external}, CVE-2023-48235{: external}, CVE-2023-48236{: external}, CVE-2023-48237{: external}, CVE-2023-5178{: external}, CVE-2023-5717{: external}. |
| Kubernetes | N/A | N/A | N/A |
| Containerd | 1.7.10 | 1.7.11 | For more information, see the change logs{: external}. |
| {: caption="Changes since version 1.28.4_1538" caption-side="bottom"} |
{: #1284_1537_M}
The following table shows the changes that are in the master fix pack 1.28.4_1537. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| GPU device plug-in and installer | 99267c4 | 0e3950c | New version contains updates and security fixes. |
| {{site.data.keyword.cloud_notm}} Block Storage driver and plug-in | v2.4.12 | v2.4.14 | New version contains updates and security fixes. |
| {{site.data.keyword.cloud_notm}} Controller Manager | v1.28.3-5 | v1.28.4-6 | New version contains updates and security fixes. |
| {{site.data.keyword.filestorage_full_notm}} plug-in and monitor | 438 | 439 | New version contains updates and security fixes. |
| {{site.data.keyword.cloud_notm}} Metrics Server Config Watcher | c33e6e7 | 58e69e0 | New version contains updates and security fixes. |
| Konnectivity agent and server | v0.1.5_39_iks | v0.1.5_47_iks | See the Konnectivity release notes{: external}. |
| Kubernetes | v1.28.3 | v1.28.4 | Review the community Kubernetes release notes{: external}. Resolves CVE-2023-39325{: external} and CVE-2023-44487{: external}. For more information, see Security Bulletin: IBM Cloud Kubernetes Service is affected by Kubernetes API server security vulnerabilities (CVE-2023-39325 and CVE-2023-44487){: external}. |
| Load balancer and Load balancer monitor for {{site.data.keyword.cloud_notm}} Provider | 2731 | 2767 | New version contains updates and security fixes. |
| Kubernetes NodeLocal DNS cache | 1.22.24 | 1.22.27 | See the Kubernetes NodeLocal DNS cache release notes{: external}. |
| {: caption="Changes since version 1.28.3_1534" caption-side="bottom"} |
{: #1284_1538_W}
The following table shows the changes that are in the worker node fix pack 1.28.4_1538. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 packages | 5.4.0-166-generic | 5.4.0-167-generic | Worker node kernel & package updates for CVE-2023-31085{: external}, CVE-2023-40217{: external}, CVE-2023-44487{: external}, CVE-2023-45871{: external}, CVE-2023-47038{: external}, CVE-2023-5981{: external}. |
| Kubernetes | 1.28.3 | 1.28.4 | For more information, see the change logs{: external}. |
| Containerd | 1.7.9 | 1.7.10 | For more information, see the change logs{: external}. |
| GPU device plug-in and installer | 0e3950c | 2d51c7a | New version contains updates and security fixes. Driver version upgraded from 535.54.03{: external} to 535.129.03{: external}. |
| {: caption="Changes since version 1.28.3_1535" caption-side="bottom"} |
{: #1283_1535_W}
The following table shows the changes that are in the worker node fix pack 1.28.3_1535. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 packages | 5.4.0-166-generic | 5.4.0-166-generic | Worker node package updates for CVE-2023-36054{: external}, CVE-2023-4016{: external}, CVE-2023-43804{: external}, CVE-2023-45803{: external}. |
| GPU device plug-in and installer | 99267c4 | 0e3950c | New version contains updates and security fixes. |
| Kubernetes | 1.28.2 | 1.28.3 | For more information, see the change logs{: external}. |
| Containerd | 1.7.8 | 1.7.9 | For more information, see the change logs{: external}. |
| {: caption="Changes since version 1.28.2_1533" caption-side="bottom"} |
{: #1283_1534_M}
The following table shows the changes that are in the master fix pack 1.28.3_1534. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Cluster health image | v1.4.4 | v1.4.5 | New version contains updates and security fixes. |
| etcd | v3.5.9 | v3.5.10 | See the etcd release notes{: external}. |
| {{site.data.keyword.cloud_notm}} Controller Manager | v1.28.2-10 | v1.28.3-5 | New version contains updates and security fixes. |
| {{site.data.keyword.filestorage_full_notm}} plug-in and monitor | 435 | 438 | New version contains updates and security fixes. |
| {{site.data.keyword.cloud_notm}} Metrics Server Config Watcher | a1edf56 | c33e6e7 | New version contains updates and security fixes. |
| {{site.data.keyword.cloud_notm}} RBAC Operator | f0d3265 | e544e35 | New version contains updates and security fixes. |
| Key Management Service provider | v2.8.4 | v2.8.5 | New version contains updates and security fixes. |
| Kubernetes | v1.28.2 | v1.28.3 | See the Kubernetes release notes{: external}. |
| Load balancer and load balancer monitor for {{site.data.keyword.cloud_notm}} Provider | 2681 | 2731 | New version contains updates and security fixes. |
| Konnectivity agent and server | v0.1.3_5_iks | v0.1.5_39_iks | See the Konnectivity release notes{: external}. |
| Portieris admission controller | v0.13.8 | v0.13.10 | See the Portieris admission controller release notes{: external}. |
| {: caption="Changes since version 1.28.2_1531" caption-side="bottom"} |
{: #1282_1533_W}
The following table shows the changes that are in the worker node fix pack 1.28.2_1533. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 packages | 5.4.0-165-generic | 5.4.0-166-generic | Worker node kernel & package updates for CVE-2023-0597{: external}, CVE-2023-31083{: external}, CVE-2023-34058{: external}, CVE-2023-34059{: external}, CVE-2023-34319{: external}, CVE-2023-3446{: external}, CVE-2023-3772{: external}, CVE-2023-3817{: external}, CVE-2023-4132{: external}, CVE-2023-42752{: external}, CVE-2023-42753{: external}, CVE-2023-42755{: external}, CVE-2023-42756{: external}, CVE-2023-4622{: external}, CVE-2023-4623{: external}, CVE-2023-4733{: external}, CVE-2023-4735{: external}, CVE-2023-4750{: external}, CVE-2023-4751{: external}, CVE-2023-4752{: external}, CVE-2023-4781{: external}, CVE-2023-4881{: external}, CVE-2023-4921{: external}, CVE-2023-5344{: external}, CVE-2023-5441{: external}, CVE-2023-5535{: external}. |
| GPU device plug-in and installer | 4319682 | 99267c4 | New version contains updates and security fixes. |
| Containerd | 1.7.7 | 1.7.8 | For more information, see the change logs{: external}. |
| {: caption="Changes since version 1.28.2_1532" caption-side="bottom"} |
{: #1282_1531_M}
The following table shows the changes that are in the master fix pack 1.28.2_1531. Master patch updates are applied automatically.
| Component | Previous | Current | Description |
|---|---|---|---|
| Calico | v3.26.1 | v3.26.3 | See the Calico release notes{: external}. |
| Cluster health image | v1.4.2 | v1.4.4 | New version contains updates and security fixes. |
| {{site.data.keyword.IBM_notm}} Calico extension | 1390 | 1487 | New version contains security fixes. |
| {{site.data.keyword.cloud_notm}} Block Storage driver and plug-in | v2.4.10 | v2.4.12 | New version contains updates and security fixes. |
| {{site.data.keyword.cloud_notm}} Controller Manager | v1.28.1-3 | v1.28.2-10 | New version contains updates and security fixes. The logic for the service.kubernetes.io/ibm-load-balancer-cloud-provider-vpc-idle-connection-timeout annotation has changed. The default idle timeout is dependent on your account settings. Usually, this value is 50. However, some allowlisted accounts have larger timeout settings. If you don't set the annotation, your load balancers use the timeout setting in your account. You can explicitly specify the timeout by setting this annotation. |
| {{site.data.keyword.cloud_notm}} RBAC Operator | 4e2f346 | f0d3265 | New version contains updates and security fixes. |
| Key Management Service provider | v2.8.2 | v2.8.4 | New version contains updates and security fixes. |
| Kubernetes NodeLocal DNS cache | 1.22.23 | 1.22.24 | See the Kubernetes NodeLocal DNS cache release notes{: external}. |
| Portieris admission controller | v0.13.6 | v0.13.8 | See the Portieris admission controller release notes{: external}. |
| {: caption="Changes since version 1.28.2_1527" caption-side="bottom"} |
{: #1282_1532_W}
The following table shows the changes that are in the worker node fix pack 1.28.2_1532. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 packages | 5.4.0-164-generic | 5.4.0-165-generic | Worker node kernel & package updates for CVE-2022-3234{: external}, CVE-2022-3256{: external}, CVE-2022-3324{: external}, CVE-2022-3352{: external}, CVE-2022-3520{: external}, CVE-2022-3591{: external}, CVE-2022-3705{: external}, CVE-2022-4292{: external}, CVE-2022-4293{: external}, CVE-2023-34319{: external}, CVE-2023-38546{: external}, CVE-2023-42752{: external}, CVE-2023-42753{: external}, CVE-2023-42755{: external}, CVE-2023-42756{: external}, CVE-2023-4622{: external}, CVE-2023-4623{: external}, CVE-2023-4881{: external}, CVE-2023-4921{: external}. |
Ubuntu 18.04 packages (s390x) |
4.15.0-218-generic | 4.15.0-218-generic | Worker node kernel & package updates for CVE-2020-19189{: external}, CVE-2023-4733{: external}, CVE-2023-4735{: external}, CVE-2023-4750{: external}, CVE-2023-4751{: external}, CVE-2023-5344{: external}, CVE-2023-5441{: external}. |
Ubuntu 20.04 packages (s390x) |
5.4.0-164-generic | 5.4.0-165-generic | Worker node kernel & package updates for CVE-2023-3446{: external}, CVE-2023-3817{: external}, CVE-2023-4733{: external}, CVE-2023-4735{: external}, CVE-2023-4750{: external}, CVE-2023-4751{: external}, CVE-2023-4752{: external}, CVE-2023-4781{: external}, CVE-2023-5344{: external}, CVE-2023-5441{: external}, CVE-2023-5535{: external}. |
| Kubernetes | N/A | N/A | N/A |
| Containerd | 1.7.6 | 1.7.7 | For more information, see the change logs{: external}. |
| {: caption="Changes since version 1.28.2_1529" caption-side="bottom"} |
{: #1282_1529_W}
The following table shows the changes that are in the worker node fix pack 1.28.2_1529. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 packages | 5.4.0-163-generic | 5.4.0-164-generic | Worker node kernel & package updates for CVE-2021-4001{: external}, CVE-2023-1206{: external}, CVE-2023-20588{: external}, CVE-2023-3212{: external}, CVE-2023-3863{: external}, CVE-2023-40283{: external}, CVE-2023-4128{: external}, CVE-2023-4194{: external}, CVE-2023-43785{: external}, CVE-2023-43786{: external}, CVE-2023-43787{: external}. |
| GPU device plug-in and installer | 61afd3d | 4319682 | New version contains updates and security fixes. |
| Kubernetes | N/A | N/A | N/A |
| Containerd | N/A | N/A | N/A |
| {: caption="Changes since version 1.28.2_1528" caption-side="bottom"} |
{: #1282_1528_W}
The following table shows the changes that are in the worker node fix pack 1.28.2_1528. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node. {: shortdesc}
| Component | Previous | Current | Description |
|---|---|---|---|
| Ubuntu 20.04 packages | 5.4.0-162-generic | 5.4.0-163-generic | Package updates for CVE-2023-3341{: external}, CVE-2023-4156{: external}, CVE-2023-4128{: external}, CVE-2023-20588{: external}, CVE-2023-20900{: external}, CVE-2023-40283{: external}. |
| Containerd | 1.7.5 | 1.7.6 | N/A |
| Kubernetes | 1.28.1 | 1.28.2 | For more information, see the [change log](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#change log-since-v1281){: external}. |
| {: caption="Changes since version 1.28.1_1523" caption-side="bottom"} |
{: #1.28.2_1527M-and-1.28.1_1523W}
| Component | Previous | Current | Description |
|---|---|---|---|
| CoreDNS | 1.10.1 | 1.11.1 | See the CoreDNS release notes. CoreDNS now runs as a non-root user and has an updated role-based access control (RBAC) configuration. |
| Containerd | 1.7.4 | 1.7.5 | N/A |
| HAProxy configuration | N/A | N/A | Updated master health probes to use the /livez/ping endpoint. |
| IBM Cloud Controller Manager | v1.27.5-3 | v1.28.1-3 | Updated to support the Kubernetes 1.28.1 release. Updated Go dependencies and to Go version 1.20.7. New nodes are now registered with the node.kubernetes.io/network-unavailable taint which is cleared when Calico is initialized on the node. |
| Kubernetes add-on resizer | 1.8.18 | 1.8.19 | See the Kubernetes add-on resizer release notes. |
| Kubernetes (master) | v1.27.5 | v1.28.2 | See the Kubernetes release notes. |
| Kubernetes (worker node) | v1.27.4 | v1.28.1 | See the Kubernetes release notes. |
| Ubuntu 20.04 packages | 5.4.0-156-generic | 5.4.0-162-generic | Worker node kernel & package updates for CVE-2020-21047{: external} , CVE-2021-33294{: external} , CVE-2022-40982{: external} , CVE-2023-20593{: external} , CVE-2023-2269{: external} , CVE-2023-31084{: external} , CVE-2023-3268{: external} , CVE-2023-3609{: external} , CVE-2023-3611{: external} , CVE-2023-3776{: external} |
| Kubernetes configuration | N/A | N/A | See Default service settings for Kubernetes components. In addition, both default and verbose Kubernetes API server auditing records now contain extra user claim information. |
| GPU device plug-in and installer | N/A | 61afd3d | Driver version: 535.54.03. |
| Kubernetes Dashboard metrics scraper | N/A | N/A | Increased Kubernetes Dashboard metrics scraper CPU resource request to 20m. |
| Kubernetes DNS autoscaler | v1.8.8 | v1.8.9 | See the Kubernetes DNS autoscaler release notes. |
| Kubernetes Metrics Server | v0.6.3 | v0.6.4 | See the Kubernetes Metrics Server release notes. In addition, the Kubernetes Metrics Server has an updated role-based access control (RBAC) configuration. |
| Kubernetes CSI snapshot controller and CRDs | v6.2.1 | v6.2.2 | See the Kubernetes container storage interface (CSI) snapshotter release notes. |
| {: caption="Changes since version 1.27." caption-side="bottom"} |