vania-janet/multiturn-rag-retrieval-data huggingface dataset:
ibmcloud cr va-version-set 

Set the version of Vulnerability Advisor. You can set the version to either v3, the default, or v4. If you want to use version 4 temporarily, see [Setting the Vulnerability Advisor version](https://cloud.ibm.com/docs/Registry?topic=Registry-va_index&interface=uiva_set_version).

Vulnerability Advisor version 3 is deprecated from 19 June 2023. For more information about how to update to version 4, see [Update Vulnerability Advisor to version 4 by 19 June 2023](https://cloud.ibm.com/docs/Registry?topic=Registry-registry_notices_va_v4&interface=ui).

ibmcloud cr va-version-set VERSION



 Prerequisites 

None.





 Command options 

VERSION
: The version of Vulnerability Advisor that you want to use. Valid values are v3 and v4.





 Example 

To set the Vulnerability version to version 4, run the following command:

ibmcloud cr va-version-set v4







 ibmcloud cr vulnerability-assessment (ibmcloud cr va) 

View a vulnerability assessment report for your images.

From version 1.0.0 of the container-registry plug-in, you can choose whether to run the ibmcloud cr vulnerability-assessment command in either version 3 (the default) or version 4 of Vulnerability Advisor. If you want to run Vulnerability Advisor in a different version, see [Setting the Vulnerability Advisor version](https://cloud.ibm.com/docs/Registry?topic=Registry-va_index&interface=uiva_set_version). For more information about the versions of Vulnerability Advisor, see [About Vulnerability Advisor](https://cloud.ibm.com/docs/Registry?topic=Registry-va_index&interface=uiabout).

Vulnerability Advisor version 3 is deprecated from 19 June 2023. For more information about how to update to version 4, see [Update Vulnerability Advisor to version 4 by 19 June 2023](https://cloud.ibm.com/docs/Registry?topic=Registry-registry_notices_va_v4&interface=ui).
Please note that it fixes PSIRT Advisory ID: 10237 Product Record ID: 104487 Title: Node.js zlib DOS security vulnerability, October 2017 (CVE-2017-14919). It is recommended to upgrade to v3.16.1 to get fixes for security vulnerabilities affecting 8.6.0.0 and earlier, 6.10.2.0 to 6.11.4.0 and 4.8.2.0 to 4.8.4.0.





 1 November 2017 

Updated Node.js buildpack v3.15
: The SDK for Node.js buildpack v3.15 provides IBM SDK for Node.js versions 4.8.3, 4.8.4, 6.11.3, 6.11.4, 8.3.0 and 8.6.0. The default is latest 6.x, so it is currently 6.11.4.





 31 October 2017 

Updated Liberty buildpack v3.15
: The monthly Liberty runtime version was updated to 2017.10.0.0.





 17 October 2017 

Updated Liberty buildpack v3.14-20171013-1023
: The default Liberty runtime version was updated to the 17.0.0.3 release.



* The monthly Liberty runtime version was updated to 2017.9.0.1.
* The IBM JRE version was updated to 8 SR5.







 6 October 2017 

Updated ASP.NET Core buildpack v1.0.26-20170913-1346
: This release includes the following updates:



* Add support for .NET Core runtime 2.0.0
* Add support for .NET Core SDK 1.1.0
* Add support for .NET Core SDK 2.0.0
* Remove support for .NET Core SDK 1.1.0-preview1-005051
* Remove support for .NET Core SDK 2.0.0-preview1-005977
* Remove support for .NET Core runtime 1.0.3
* Remove support for .NET Core runtime 1.1.0
* Update Node version to 6.11.2
Key Management Service provider v2.3.13 v2.4.3 Updated golang.org/x/crypto to v0.0.0-20220214200702-86341886e292. Adds fix for [CVE-2021-43565](https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-43565). Adds Golang dependency updates. 







 Change log for worker node fix pack 1.19.16_1579, released 28 February 2022 



Changes since version 1.19.16_1577

 Component Previous Current Description 

 Ubuntu 18.04 packages 4.15.0-167-generic 4.15.0-169-generic Kernel and package updates for [CVE-2021-4083](https://nvd.nist.gov/vuln/detail/CVE-2021-4083), [CVE-2021-4155](https://nvd.nist.gov/vuln/detail/CVE-2021-4155), [CVE-2021-45960](https://nvd.nist.gov/vuln/detail/CVE-2021-45960), [CVE-2021-46143](https://nvd.nist.gov/vuln/detail/CVE-2021-46143), [CVE-2022-0330](https://nvd.nist.gov/vuln/detail/CVE-2022-0330), [CVE-2022-22822](https://nvd.nist.gov/vuln/detail/CVE-2022-22822), [CVE-2022-22823](https://nvd.nist.gov/vuln/detail/CVE-2022-22823), [CVE-2022
Changes since version 3.11.570_1621_openshift

 Component Previous Current Description 

 RHEL 7 Packages 3.10.0-1160.53.1.el7 3.10.0-1160.59.1.el7 Kernel and package updates for [CVE-2020-25709](https://nvd.nist.gov/vuln/detail/CVE-2020-25709), [CVE-2020-25710](https://nvd.nist.gov/vuln/detail/CVE-2020-25710), [CVE-2022-24407](https://nvd.nist.gov/vuln/detail/CVE-2022-24407), [CVE-2020-0465](https://nvd.nist.gov/vuln/detail/CVE-2020-0465), [CVE-2020-0466](https://nvd.nist.gov/vuln/detail/CVE-2020-0466), [CVE-2021-0920](https://nvd.nist.gov/vuln/detail/CVE-2021-0920), [CVE-2021-3564](https://nvd.nist.gov/vuln/detail/CVE-2021-3564), [CVE-2021-3573](https://nvd.nist.gov/vuln/detail/CVE-2021-3573), [CVE-2021-3752](https://nvd.nist.gov/vuln/detail/CVE-2021-3752), [CVE-2021-4155](https://nvd.nist.gov/vuln/detail/CVE-2021-4155), [CVE-2022-0330](https://nvd.nist.gov/vuln/detail/CVE-2022-0330), [CVE-2022-22942](https://nvd.nist.gov/vuln/detail/CVE-2022-22942).
Changes since version 4.3.29_1532_openshift

 Component Previous Current Description 

 RHEL 7 Packages 3.10.0-1127.13.1.el7 3.10.0-1127.18.2.el7 Updated worker node images with package updates for [CVE-2020-10713](https://nvd.nist.gov/vuln/detail/CVE-2020-10713), [CVE-2020-14308](https://nvd.nist.gov/vuln/detail/CVE-2020-14308), [CVE-2020-14309](https://nvd.nist.gov/vuln/detail/CVE-2020-14309), [CVE-2020-14310](https://nvd.nist.gov/vuln/detail/CVE-2020-14310), [CVE-2020-14311](https://nvd.nist.gov/vuln/detail/CVE-2020-14311), [CVE-2020-15705](https://nvd.nist.gov/vuln/detail/CVE-2020-15705), [CVE-2020-15706](https://nvd.nist.gov/vuln/detail/CVE-2020-15706), [CVE-2020-15707](https://nvd.nist.gov/vuln/detail/CVE-2020-15707), [CVE-2019-19527](https://nvd.nist.gov/vuln/detail/CVE-2019-19527), [CVE-2020-10757](https://nvd.nist.gov/vuln/detail/CVE-2020-10757), [CVE-2020-12653](https://nvd.nist.gov/vuln/detail/CVE-2020-12653), and [CVE-2020-12654](https://nvd.nist.gov/vuln/detail/CVE-2020-12654).
Key Management Service provider v2.3.13 v2.4.3 Updated golang.org/x/crypto to v0.0.0-20220214200702-86341886e292. Adds fix for [CVE-2021-43565](https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-43565). Adds Golang dependency updates. 







 Change log for worker node fix pack 1.20.15_1572, released 28 February 2022 



Changes since version 1.20.15_1570

 Component Previous Current Description 

 Ubuntu 18.04 packages 4.15.0-167-generic 4.15.0-169-generic Kernel and package updates for [CVE-2021-4083](https://nvd.nist.gov/vuln/detail/CVE-2021-4083), [CVE-2021-4155](https://nvd.nist.gov/vuln/detail/CVE-2021-4155), [CVE-2021-45960](https://nvd.nist.gov/vuln/detail/CVE-2021-45960), [CVE-2021-46143](https://nvd.nist.gov/vuln/detail/CVE-2021-46143), [CVE-2022-0330](https://nvd.nist.gov/vuln/detail/CVE-2022-0330), [CVE-2022-22822](https://nvd.nist.gov/vuln/detail/CVE-2022-22822), [CVE-2022-22823](https://nvd.nist.gov/vuln/detail/CVE-2022-22823), [CVE-2022
If you want to continue to use version 3, you don't need to do anything.

If you want to use version 4 to run the ibmcloud cr va, ibmcloud cr image-list, or ibmcloud cr image-digests commands, see [Setting the Vulnerability Advisor version](https://cloud.ibm.com/docs/Registry?topic=Registry-va_index&interface=uiva_set_version).

For more information about Vulnerability Advisor, see [About Vulnerability Advisor](https://cloud.ibm.com/docs/Registry?topic=Registry-va_index&interface=uiabout). For more information about Vulnerability Advisor API 4, see [Vulnerability Advisor 4 for IBM Cloud Container Registry](https://cloud.ibm.com/apidocs/container-registry/va-v4).

New commands for setting and checking the Vulnerability Advisor version are available from Container Registry plug-in 1.0.0
: From Container Registry plug-in 1.0.0, you can use new commands to check and set Vulnerability Advisor versions.

If you want to continue to use version 3, you don't need to do anything.

If you want to use version 4, you can set the version by running the [ibmcloud cr va-version-set](https://cloud.ibm.com/docs/Registry?topic=Registry-containerregcliic_cr_va_version_set) command.

For more information about setting the version by using the ibmcloud cr va-version-set command, see [ibmcloud cr va-version-set](https://cloud.ibm.com/docs/Registry?topic=Registry-containerregcliic_cr_va_version_set) and [Setting the Vulnerability Advisor version](https://cloud.ibm.com/docs/Registry?topic=Registry-va_index&interface=uiva_set_version).

To find out which version of Vulnerability Advisor that you're running, see [ibmcloud cr va-version](https://cloud.ibm.com/docs/Registry?topic=Registry-containerregcliic_cr_va_version).





 3 August 2022
Changes since version 4.6.53_1572_openshift

 Component Previous Current Description 

 RHEL 7 Packages 3.10.0-1160.53.1.el7 3.10.0-1160.59.1.el7 Kernel and package updates for [CVE-2020-25709](https://nvd.nist.gov/vuln/detail/CVE-2020-25709), [CVE-2020-25710](https://nvd.nist.gov/vuln/detail/CVE-2020-25710), [CVE-2022-24407](https://nvd.nist.gov/vuln/detail/CVE-2022-24407), [CVE-2020-0465](https://nvd.nist.gov/vuln/detail/CVE-2020-0465), [CVE-2020-0466](https://nvd.nist.gov/vuln/detail/CVE-2020-0466), [CVE-2021-0920](https://nvd.nist.gov/vuln/detail/CVE-2021-0920), [CVE-2021-3564](https://nvd.nist.gov/vuln/detail/CVE-2021-3564), [CVE-2021-3573](https://nvd.nist.gov/vuln/detail/CVE-2021-3573), [CVE-2021-3752](https://nvd.nist.gov/vuln/detail/CVE-2021-3752), [CVE-2021-4155](https://nvd.nist.gov/vuln/detail/CVE-2021-4155), [CVE-2022-0330](https://nvd.nist.gov/vuln/detail/CVE-2022-0330), [CVE-2022-22942](https://nvd.nist.gov/vuln/detail/CVE-2022-22942)
Changes since version 3.11.380_1581_openshift

 Component Previous Current Description 

 Red Hat OpenShift node 3.11.380 3.11.394 See the [Red Hat OpenShift release notes](https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.htmlocp-3-11-394). 
 RHEL 7 Packages N/A N/A Updated worker node with package updates for [CVE-2020-8625](https://nvd.nist.gov/vuln/detail/CVE-2020-8625), [CVE-2020-14372](https://nvd.nist.gov/vuln/detail/CVE-2020-14372), [CVE-2020-25632](https://nvd.nist.gov/vuln/detail/CVE-2020-25632), [CVE-2020-25647](https://nvd.nist.gov/vuln/detail/CVE-2020-25647), [CVE-2020-27749](https://nvd.nist.gov/vuln/detail/CVE-2020-27749), [CVE-2020-27779](https://nvd.nist.gov/vuln/detail/CVE-2020-27779), [CVE-2021-20225](https://nvd.nist.gov/vuln/detail/CVE-2021-20225), [CVE-2021-20233](https://nvd.nist.gov/vuln/detail/CVE-2021-20233), and [CVE-2021-27803](https://nvd.nist.gov/vuln/detail/CVE-2021-27803). 







 Change log for worker node fix pack 3.11.380_1581_openshift, released 1 March 2021 

The following table shows the changes that are in the worker node fix pack 3.11.380_1581_openshift.
To view the contents of version 3.3, from the running image, type default_versions.sh. The 3.x branch provides images with the current tool versions. The current Java™ version is Java™ 11. Node.js no longer uses nvm to manage different node.js versions. It provides the current LTS version of Node.js at the time that it was built.

The IBM Cloud CLI provides code risk analysis commands. You can use the IBM Cloud CLI to analyze your code for vulnerabilities and compliance with certain rules. Code Risk Analyzer is available in all IBM Cloud regions where toolchains are supported. For more information about Code Risk Analyzer, see [Code Risk Analyzer plug-in](https://cloud.ibm.com/docs/code-risk-analyzer-cli-plugin).

This image includes the following tools:

 node --version
v14.17.6

 npm --version
6.14.15

 jq --version
jq-1.6

 yq --version
yq (https://github.com/mikefarah/yq/) version 4.13.2

 kubectl version --client
Client Version: version.Info{Major:"1", Minor:"20", GitVersion:"v1.20.5", GitCommit:"6b1d87acf3c8253c123756b9e61dac642678305f", GitTreeState:"clean", BuildDate:"2021-03-18T01:10:43Z", GoVersion:"go1.15.8", Compiler:"gc", Platform:"linux/amd64"}

 buildctl --version
buildctl github.com/moby/buildkit v0.9.0 c8bb937807d405d92be91f06ce2629e6202ac7a9

 helm version --client
* Resolves [CVE-2022-24921](https://nvd.nist.gov/vuln/detail/CVE-2022-24921), and [CVE-2022-23852](https://nvd.nist.gov/vuln/detail/CVE-2022-23852).
* Updates s3fs fuse to v1.91.
* Adds support for additional mount options Ex: ibm.io/add-mount-param: "del_cache,retries=6".
* Fixes a bug where mixupload returns EntityTooSmall when a copypart is less than 5MB after split.







 Change log for version 2.1.12, released 11 March 2022 



* Updates the UBI to 8.5-230.1645809059
* Resolves [CVE-2022-24407](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24407)







 Change log for version 2.1.11, released 1 March 2022 



* Update Go to version 1.16.14
* Resolves [CVE-2022-23772](https://nvd.nist.gov/vuln/detail/CVE-2022-23772), [CVE-2022-23773](https://nvd.nist.gov/vuln/detail/CVE-2022-23773), [CVE-2022-23806](https://nvd.nist.gov/vuln/detail/CVE-2022-23806)







 Change log for version 2.1.10, released 17 February 2022 



* Updates the universal base image (UBI) to ubi-minimal:8.5-230.
Change log for version 2.1.3, released 25 August 2021 



* Image tags: 1.8.32
* Addresses the following CVEs: [CVE-2021-3520](https://nvd.nist.gov/vuln/detail/CVE-2021-3520), [CVE-2021-3516](https://nvd.nist.gov/vuln/detail/CVE-2021-3516), [CVE-2021-3517](https://nvd.nist.gov/vuln/detail/CVE-2021-3517), [CVE-2021-3518](https://nvd.nist.gov/vuln/detail/CVE-2021-3518), [CVE-2021-3537](https://nvd.nist.gov/vuln/detail/CVE-2021-3537), [CVE-2021-3541](https://nvd.nist.gov/vuln/detail/CVE-2021-3541), [CVE-2021-33195](https://nvd.nist.gov/vuln/detail/CVE-2021-33195), [CVE-2021-33196](https://nvd.nist.gov/vuln/detail/CVE-2021-33196), [CVE-2021-33198](https://nvd.nist.gov/vuln/detail/CVE-2021-33198), [CVE-2021-33197](https://nvd.nist.gov/vuln/detail/CVE-2021-33197), and [CVE-2021-34558](https://nvd.nist.gov/vuln/detail/CVE-2021-34558).
* Includes a new version of the ibmc Helm plug-in.
* Adds support for Satellite clusters.
* Adds support for static provisioning of s3fs on AWS clusters.
* Adds support for installing the ibm-object-storage-plugin in air-gapped environments.
Changes since version 4.9.19_1526_openshift

 Component Previous Current Description 

 RHEL 7 Packages 3.10.0-1160.53.1.el7 3.10.0-1160.59.1.el7 Kernel and package updates for [CVE-2020-25709](https://nvd.nist.gov/vuln/detail/CVE-2020-25709), [CVE-2020-25710](https://nvd.nist.gov/vuln/detail/CVE-2020-25710), [CVE-2022-24407](https://nvd.nist.gov/vuln/detail/CVE-2022-24407), [CVE-2020-0465](https://nvd.nist.gov/vuln/detail/CVE-2020-0465), [CVE-2020-0466](https://nvd.nist.gov/vuln/detail/CVE-2020-0466), [CVE-2021-0920](https://nvd.nist.gov/vuln/detail/CVE-2021-0920), [CVE-2021-3564](https://nvd.nist.gov/vuln/detail/CVE-2021-3564), [CVE-2021-3573](https://nvd.nist.gov/vuln/detail/CVE-2021-3573), [CVE-2021-3752](https://nvd.nist.gov/vuln/detail/CVE-2021-3752), [CVE-2021-4155](https://nvd.nist.gov/vuln/detail/CVE-2021-4155), [CVE-2022-0330](https://nvd.nist.gov/vuln/detail/CVE-2022-0330), [CVE-2022-22942](https://nvd.nist.gov/vuln/detail/CVE-2022-22942).
Changes since version 4.8.32_1547_openshift

 Component Previous Current Description 

 RHEL 7 Packages 3.10.0-1160.53.1.el7 3.10.0-1160.59.1.el7 Kernel and package updates for [CVE-2020-25709](https://nvd.nist.gov/vuln/detail/CVE-2020-25709), [CVE-2020-25710](https://nvd.nist.gov/vuln/detail/CVE-2020-25710), [CVE-2022-24407](https://nvd.nist.gov/vuln/detail/CVE-2022-24407), [CVE-2020-0465](https://nvd.nist.gov/vuln/detail/CVE-2020-0465), [CVE-2020-0466](https://nvd.nist.gov/vuln/detail/CVE-2020-0466), [CVE-2021-0920](https://nvd.nist.gov/vuln/detail/CVE-2021-0920), [CVE-2021-3564](https://nvd.nist.gov/vuln/detail/CVE-2021-3564), [CVE-2021-3573](https://nvd.nist.gov/vuln/detail/CVE-2021-3573), [CVE-2021-3752](https://nvd.nist.gov/vuln/detail/CVE-2021-3752), [CVE-2021-4155](https://nvd.nist.gov/vuln/detail/CVE-2021-4155), [CVE-2022-0330](https://nvd.nist.gov/vuln/detail/CVE-2022-0330), [CVE-2022-22942](https://nvd.nist.gov/vuln/detail/CVE-2022-22942).
Changes since version 4.7.42_1549_openshift

 Component Previous Current Description 

 RHEL 7 Packages 3.10.0-1160.53.1.el7 3.10.0-1160.59.1.el7 Kernel and package updates for [CVE-2020-25709](https://nvd.nist.gov/vuln/detail/CVE-2020-25709), [CVE-2020-25710](https://nvd.nist.gov/vuln/detail/CVE-2020-25710), [CVE-2022-24407](https://nvd.nist.gov/vuln/detail/CVE-2022-24407), [CVE-2020-0465](https://nvd.nist.gov/vuln/detail/CVE-2020-0465), [CVE-2020-0466](https://nvd.nist.gov/vuln/detail/CVE-2020-0466), [CVE-2021-0920](https://nvd.nist.gov/vuln/detail/CVE-2021-0920), [CVE-2021-3564](https://nvd.nist.gov/vuln/detail/CVE-2021-3564), [CVE-2021-3573](https://nvd.nist.gov/vuln/detail/CVE-2021-3573), [CVE-2021-3752](https://nvd.nist.gov/vuln/detail/CVE-2021-3752), [CVE-2021-4155](https://nvd.nist.gov/vuln/detail/CVE-2021-4155), [CVE-2022-0330](https://nvd.nist.gov/vuln/detail/CVE-2022-0330), [CVE-2022-22942](https://nvd.nist.gov/vuln/detail/CVE-2022-22942)
Changes since version 4.3.40_1548_openshift

 Component Previous Current Description 

 HAProxy db4e6d 9b2dca Image update for [CVE-2020-1971](https://nvd.nist.gov/vuln/detail/CVE-2020-1971) and [CVE-2020-24659](https://nvd.nist.gov/vuln/detail/CVE-2020-24659). 
 RHEL 7 Packages 3.10.0-1160.6.1.el7 3.10.0-1160.11.1.el7 Updated worker node image with kernel and package updates for: [CVE-2019-18282](https://nvd.nist.gov/vuln/detail/CVE-2019-18282), [CVE-2020-10769](https://nvd.nist.gov/vuln/detail/CVE-2020-10769), [CVE-2020-14314](https://nvd.nist.gov/vuln/detail/CVE-2020-14314), [CVE-2020-14385](https://nvd.nist.gov/vuln/detail/CVE-2020-14385), [CVE-2020-24394](https://nvd.nist.gov/vuln/detail/CVE-2020-24394), [CVE-2020-25212](https://nvd.nist.gov/vuln/detail/CVE-2020-25212), [CVE-2020-25643](https://nvd.nist.gov/vuln/detail/CVE-2020-25643), and [CVE-2020-1971](https://nvd.nist.gov/vuln/detail/CVE-2020-1971). 







 Change log for master fix pack 4.3.40_1548_openshift, released 14 December 2020 

The following table shows the changes that are in the master fix pack patch update 4.3.40_1548_openshift.
Change log for version 4.3.4_1551, released 18 July 2022 



* Updates the storage-secret-sidecar image to v1.1.12
* Updates Golang to version 1.18.3
* Updates UBI image to version 8.6-854
* Improves secret watcher in case of secret update.
* Fixes an issue where volume mounting on node fails with already mounted error.
* Resolves the following CVEs: [CVE-2022-29824](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29824), [CVE-2021-40528](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40528), [CVE-2022-22576](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576), [CVE-2022-27774](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774), [CVE-2022-27776](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776), [CVE-2022-27782](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782), [CVE-2022-25313](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25313), [CVE-2022-25314](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25314).







 Change log for version 4.3.2_1441, released 17 June 2022
Changes since version 3.11.404_1584_openshift

 Component Previous Current Description 

 HA proxy 9b2dca a3b1ff The update addresses [CVE-2021-3449](https://nvd.nist.gov/vuln/detail/CVE-2021-3449) and [CVE-2021-3450](https://nvd.nist.gov/vuln/detail/CVE-2021-3450). 
 RHEL 7 Packages 3.10.0-1160.21.1.el7 3.10.0-1160.24.1.el7 Updated worker node images with kernel and package updates for [CVE-2021-27363](https://nvd.nist.gov/vuln/detail/CVE-2021-27363), [CVE-2021-27364](https://nvd.nist.gov/vuln/detail/CVE-2021-27364), and [CVE-2021-27365](https://nvd.nist.gov/vuln/detail/CVE-2021-27365). 







 Change log for master fix pack 3.11.394_1583_openshift, released 30 March 2021 

The following table shows the changes that are in the master fix pack patch update 3.11.394_1583_openshift. Master patch updates are applied automatically.



Changes since version 3.11.380_1581_openshift

 Component Previous Current Description 

 Activity Tracker event N/A N/A Now, the containers-kubernetes.version.update event is sent to Activity Tracker when a master fix pack update is initiated for a cluster. 
 Cluster health image v1.1.18 v1.1.19 Updated image for [CVE-2020-28851](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28851). 
 IBM Cloud File Storage for Classic plug-in and monitor 388 389 Updated to use Go version 1.15.8.
Updated to use Go version 1.16.10. 
 Load balancer and load balancer monitor for IBM Cloud Provider 1589 1660 Updated Alpine base image to the latest 3.14 version to resolve CVEs. Updated to use Go version 1.16.10. 
 Operator Lifecycle Manager 0.16.1-IKS-14 0.16.1-IKS-15 Updated image for [CVE-2021-42374](https://nvd.nist.gov/vuln/detail/CVE-2021-42374), [CVE-2021-42375](https://nvd.nist.gov/vuln/detail/CVE-2021-42375), [CVE-2021-42378](https://nvd.nist.gov/vuln/detail/CVE-2021-42378), [CVE-2021-42379](https://nvd.nist.gov/vuln/detail/CVE-2021-42379), [CVE-2021-42380](https://nvd.nist.gov/vuln/detail/CVE-2021-42380), [CVE-2021-42381](https://nvd.nist.gov/vuln/detail/CVE-2021-42381), [CVE-2021-42382](https://nvd.nist.gov/vuln/detail/CVE-2021-42382), [CVE-2021-42383](https://nvd.nist.gov/vuln/detail/CVE-2021-42383), [CVE-2021-42384](https://nvd.nist.gov/vuln/detail/CVE-2021-42384), [CVE-2021-42385](https://nvd.nist.gov/vuln/detail/CVE-2021-42385), and [CVE-2021-42386](https://nvd.nist.gov/vuln/detail/CVE-2021-42386).
HA proxy f6a2b3 15198fb Contains fixes for [CVE-2022-24407](https://nvd.nist.gov/vuln/detail/CVE-2022-24407). 







 Change log for worker node fix pack 1.19.16_1577, released 14 February 2022 



Changes since version 1.19.16_1576

 Component Previous Current Description 

 Ubuntu 18.04 packages N/A N/A N/A 
 Kubernetes N/A N/A N/A 
 HA proxy d38fa1 f6a2b3 [CVE-2021-3521](https://nvd.nist.gov/vuln/detail/CVE-2021-3521)[CVE-2021-4122](https://nvd.nist.gov/vuln/detail/CVE-2021-4122). 







 Change log for worker node fix pack 1.19.16_1576, released 31 January 2022 



Changes since version 1.19.16_1575

 Component Previous Current Description 

 Ubuntu 18.04 packages N/A N/A Updated worker node images with package updates for [CVE-2018-7169](https://nvd.nist.gov/vuln/detail/CVE-2018-7169), [CVE-2021-3984](https://nvd.nist.gov/vuln/detail/CVE-2021-3984), [CVE-2021-4019](https://nvd.nist.gov/vuln/detail/CVE-2021-4019), [CVE-2021-4034](https://nvd.nist.gov/vuln/detail/CVE-2021-4034), [CVE-2021-4069](https://nvd.nist.gov/vuln/detail/CVE-2021-4069). 







 Change log for master fix pack 1.19.16_1575, released 26 January 2022 



Changes since version 1.19.16_1573

 Component Previous Current Description
RHEL 7 Packages 3.10.0-1160.6.1.el7 3.10.0-1160.11.1.el7 Updated worker node image with kernel and package updates for: [CVE-2019-18282](https://nvd.nist.gov/vuln/detail/CVE-2019-18282), [CVE-2020-10769](https://nvd.nist.gov/vuln/detail/CVE-2020-10769), [CVE-2020-14314](https://nvd.nist.gov/vuln/detail/CVE-2020-14314), [CVE-2020-14385](https://nvd.nist.gov/vuln/detail/CVE-2020-14385), [CVE-2020-24394](https://nvd.nist.gov/vuln/detail/CVE-2020-24394), [CVE-2020-25212](https://nvd.nist.gov/vuln/detail/CVE-2020-25212), [CVE-2020-25643](https://nvd.nist.gov/vuln/detail/CVE-2020-25643), and [CVE-2020-1971](https://nvd.nist.gov/vuln/detail/CVE-2020-1971). 







 Change log for master fix pack 3.11.318_1575_openshift, released 14 December 2020 

The following table shows the changes that are in the master fix pack patch update 3.11.318_1575_openshift. Master patch updates are applied automatically.



Changes since version 3.11.306_1573_openshift

 Component Previous Current Description 

 IBM Cloud File Storage for Classic plug-in and monitor 379 384 Updated to use Go version 1.15.5. Updated image to run as a non-root user and to implement additional IBM security controls. 
 Key management service (KMS) provider v1.0.4 v1.0.5 Updated image to implement additional IBM security controls.