vania-janet/multiturn-rag-retrieval-data huggingface dataset:
Ubuntu 20.04 packages 5.4.0-150-generic 5.4.0-153-generic Worker node kernel & package updates for [CVE-2023-0461](https://nvd.nist.gov/vuln/detail/CVE-2023-0461),[CVE-2023-1380](https://nvd.nist.gov/vuln/detail/CVE-2023-1380),[CVE-2023-1670](https://nvd.nist.gov/vuln/detail/CVE-2023-1670),[CVE-2023-1859](https://nvd.nist.gov/vuln/detail/CVE-2023-1859),[CVE-2023-2612](https://nvd.nist.gov/vuln/detail/CVE-2023-2612),[CVE-2023-2828](https://nvd.nist.gov/vuln/detail/CVE-2023-2828),[CVE-2023-30456](https://nvd.nist.gov/vuln/detail/CVE-2023-30456),[CVE-2023-3138](https://nvd.nist.gov/vuln/detail/CVE-2023-3138),[CVE-2023-31436](https://nvd.nist.gov/vuln/detail/CVE-2023-31436),[CVE-2023-32233](https://nvd.nist.gov/vuln/detail/CVE-2023-32233),[CVE-2023-3297](https://nvd.nist.gov/vuln/detail/CVE-2023-3297). 
 Kubernetes 1.24.14 1.24.15 See the [Kubernetes release notes](https://github.com/kubernetes/kubernetes/releases/tag/v1.24.15).
Ubuntu 16.04 packages 4.4.0-190-generic 4.4.0-193-generic Updated worker node images with kernel and package updates for [CVE-2017-17087](https://nvd.nist.gov/vuln/detail/CVE-2017-17087), [CVE-2018-10322](https://nvd.nist.gov/vuln/detail/CVE-2018-10322), [CVE-2019-20807](https://nvd.nist.gov/vuln/detail/CVE-2019-20807), [CVE-2020-15999](https://nvd.nist.gov/vuln/detail/CVE-2020-15999), [CVE-2020-16119](https://nvd.nist.gov/vuln/detail/CVE-2020-16119), and [CVE-2020-26116](https://nvd.nist.gov/vuln/detail/CVE-2020-26116). 







 Change log for master fix pack 1.17.13_1543, released 26 October 2020 

The following table shows the changes that are in the master fix pack patch update 1.17.13_1543. Master patch updates are applied automatically.



Changes since version 1.17.12_1540

 Component Previous Current Description 

 Calico configuration N/A N/A Updated the calico-node daemon set in the kube-system namespace to set the spec.updateStrategy.rollingUpdate.maxUnavailable parameter to 10% for clusters with more than 50 worker nodes. 
 Cluster health image v1.1.11 v1.1.12 Updated to use Go version 1.15.2. 
 Gateway-enabled cluster controller 1082 1105 Updated to use Go version 1.15.2. 
 IBM Cloud Controller Manager v1.17.12-1 v1.17.13-1 Updated to support the Kubernetes 1.17.13 release.
(https://nvd.nist.gov/vuln/detail/CVE-2023-25584), [CVE-2023-25585](https://nvd.nist.gov/vuln/detail/CVE-2023-25585), [CVE-2023-25588](https://nvd.nist.gov/vuln/detail/CVE-2023-25588), [CVE-2023-2612](https://nvd.nist.gov/vuln/detail/CVE-2023-2612), [CVE-2023-2650](https://nvd.nist.gov/vuln/detail/CVE-2023-2650), [CVE-2023-29491](https://nvd.nist.gov/vuln/detail/CVE-2023-29491), [CVE-2023-30456](https://nvd.nist.gov/vuln/detail/CVE-2023-30456), [CVE-2023-31436](https://nvd.nist.gov/vuln/detail/CVE-2023-31436), [CVE-2023-32233](https://nvd.nist.gov/vuln/detail/CVE-2023-32233). 
 Kubernetes N/A N/A N/A 







 Change log for master fix pack 1.27.2_1524 and worker node fix pack 1.27.2_1526, released 24 May 2023 



Changes since version 1.26.

 Component Previous Current Description 

 etcd configuration N/A N/A Improved etcd probe configurations. 
 IBM Cloud Controller Manager v1.26.4-7 v1.27.1-8 Updated to support the Kubernetes 1.27.1 release. Updated Go dependencies and to Go version 1.20.3. Base image updated. Increased default number of concurrent node and service sync workers. VPC load balancer updates can now be complete asynchronously.
4.13.1 4.13.3 see [change logs](https://docs.openshift.com/container-platform/4.13/release_notes/ocp-4-13-release-notes.htmlocp-4-13-3). 
 RHEL 8 Packages N/A N/A Worker node package updates for [CVE-2023-32067](https://nvd.nist.gov/vuln/detail/CVE-2023-32067),[CVE-2023-24329](https://nvd.nist.gov/vuln/detail/CVE-2023-24329). 







 Change log for master fix pack 4.13.0_1522_openshift and worker node fix pack 4.13.1_1521_openshift, released 14 June 2023 



Changes since master fix pack 4.12.16_1545_openshift and worker fix pack 4.12.19_1546_openshift.

 Component Previous Current Description 

 Calico v3.25.1 v3.26.0 See the [Calico release notes](https://docs.tigera.io/archive). 
 Calico Operator v1.29.3 v1.30.2 See the [Calico Operator release notes](https://github.com/tigera/operator/releases/tag/v1.30.2). 
 etcd v3.5.8 v3.5.9 See the [etcd release notes](https://github.com/etcd-io/etcd/releases/v3.5.9). 
 IBM Cloud Controller Manager v1.25.9-7 v1.26.5-5 Updated to support the Kubernetes 1.26.5 release. Updated Go dependencies and to Go version 1.19.9. Updated calicoctl to version v3.25.1 and vpcctl to version v0.15.0. 
 Key Management Service provider v2.6.6 v2.7.0 Secret encryption support added for clusters in Satellite locations with CoreOS enabled. Updated Go dependencies.
OpenVPN Operator image v1.4.22 v1.4.23 Updated base image to resolve CVEs: [CVE-2022-4304](https://nvd.nist.gov/vuln/detail/CVE-2022-4304), [CVE-2022-4450](https://nvd.nist.gov/vuln/detail/CVE-2022-4450), [CVE-2023-0215](https://nvd.nist.gov/vuln/detail/CVE-2023-0215), [CVE-2023-0286](https://nvd.nist.gov/vuln/detail/CVE-2023-0286), [CVE-2023-0361](https://nvd.nist.gov/vuln/detail/CVE-2023-0361). 
 Portieris admission controller v0.13.3 v0.13.4 See the [Portieris admission controller release notes](https://github.com/IBM/portieris/releases/tag/v0.13.4). 
 Red Hat OpenShift on IBM Cloud Control Plane Operator and Metrics Server 4.11.0-20230314 4.11.0-20230417 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.11.0+20230417). 
 Red Hat OpenShift on IBM Cloud toolkit 4.11.0+20230314 4.11.0+20230417 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.11.0+20230417). 







 Change log for worker node fix pack 4.11.39_1554_openshift, released 24 April 2023
OpenVPN Operator image v1.4.22 v1.4.23 Updated base image to resolve CVEs: [CVE-2022-4304](https://nvd.nist.gov/vuln/detail/CVE-2022-4304), [CVE-2022-4450](https://nvd.nist.gov/vuln/detail/CVE-2022-4450), [CVE-2023-0215](https://nvd.nist.gov/vuln/detail/CVE-2023-0215), [CVE-2023-0286](https://nvd.nist.gov/vuln/detail/CVE-2023-0286), [CVE-2023-0361](https://nvd.nist.gov/vuln/detail/CVE-2023-0361). 
 Portieris admission controller v0.13.3 v0.13.4 See the [Portieris admission controller release notes](https://github.com/IBM/portieris/releases/tag/v0.13.4). 
 Red Hat OpenShift on IBM Cloud Control Plane Operator and Metrics Server 4.10.0-20230314 4.10.0-20230417 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.10.0+20230417). 
 Red Hat OpenShift on IBM Cloud toolkit 4.10.0+20230314 4.10.0+20230417 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.10.0+20230417). 







 Change log for worker node fix pack 4.10.57_1565_openshift, released 24 April 2023
OpenVPN Operator image v1.4.22 v1.4.23 Updated base image to resolve CVEs: [CVE-2022-4304](https://nvd.nist.gov/vuln/detail/CVE-2022-4304), [CVE-2022-4450](https://nvd.nist.gov/vuln/detail/CVE-2022-4450), [CVE-2023-0215](https://nvd.nist.gov/vuln/detail/CVE-2023-0215), [CVE-2023-0286](https://nvd.nist.gov/vuln/detail/CVE-2023-0286), [CVE-2023-0361](https://nvd.nist.gov/vuln/detail/CVE-2023-0361). 
 Portieris admission controller v0.13.3 v0.13.4 See the [Portieris admission controller release notes](https://github.com/IBM/portieris/releases/tag/v0.13.4). 
 Red Hat OpenShift on IBM Cloud Control Plane Operator and Metrics Server 4.9.0-20230314 4.9.0-20230417 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.9.0+20230417). 
 Red Hat OpenShift on IBM Cloud toolkit 4.9.0+20230314 4.9.0+20230417 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.9.0+20230417). 







 Change log for worker node fix pack 4.9.59_1587_openshift, released 24 April 2023
Ubuntu 16.04 packages 4.4.0-171-generic 4.4.0-173-generic Updated worker node images with package updates for [CVE-2019-19906](https://nvd.nist.gov/vuln/detail/CVE-2019-19906), [CVE-2019-5188](https://nvd.nist.gov/vuln/detail/CVE-2019-5188), [CVE-2019-20367](https://nvd.nist.gov/vuln/detail/CVE-2019-20367), [CVE-2019-14615](https://nvd.nist.gov/vuln/detail/CVE-2019-14615), [CVE-2019-18885](https://nvd.nist.gov/vuln/detail/CVE-2019-18885), [CVE-2019-19332](https://nvd.nist.gov/vuln/detail/CVE-2019-19332), [CVE-2019-19062](https://nvd.nist.gov/vuln/detail/CVE-2019-19062), [CVE-2019-15796](https://nvd.nist.gov/vuln/detail/CVE-2019-15796), [CVE-
Several tools in this toolchain require secrets to access privileged resources. An IBM Cloud API key is an example of such a secret. All secrets must be stored securely in a secrets vault and then referenced as required by the toolchain.

The Secrets step specifies which secret vault integrations are added to your toolchain. Use the provided toggles to add or remove the vault integrations that you require. However, these can be configured in subsequent steps. Also, familiarize yourself with the concepts in the [Protecting your sensitive data in Continuous Delivery](https://cloud.ibm.com/docs/devsecops?topic=devsecops-data-securitysecure-credentials) documentation because this provides important information about preconfiguring your vault providers and integrations.

Zoom

![DevSecOps secrets options](https://cloud.ibm.com/docs-content/v1/content/5eb88a2575e30e316dbb83829c7f4c8b1ddbc67c/devsecops/images/devsecops-secrets-options.png)

Figure 7. DevSecOps secrets options

If you plan to use IBM Key Protect or HashiCorp Vault for managing your secrets, see the [IBM Key Protect section of the CI setup guide](https://cloud.ibm.com/docs/devsecops?topic=devsecops-cd-devsecops-tekton-ci-compliancecd-devsecops-key-protect-ci).



 IBM Key Protect 

Use [Key Protect](https://cloud.ibm.com/catalog/services/key-protect) to securely store and apply secrets like API keys, Image Signature, or HashiCorp Vault credentials that are part of your toolchain. You must create a Key Protect Service Instance before proceeding further. If you already created a Key Protect Service Instance as prerequisite, you can link the same in this step.

Zoom

!
CVE-2019-20454](https://nvd.nist.gov/vuln/detail/CVE-2019-20454), [CVE-2019-19956](https://nvd.nist.gov/vuln/detail/CVE-2019-19956), [CVE-2019-20388](https://nvd.nist.gov/vuln/detail/CVE-2019-20388), [CVE-2020-7595](https://nvd.nist.gov/vuln/detail/CVE-2020-7595), [CVE-2019-13627](https://nvd.nist.gov/vuln/detail/CVE-2019-13627), [CVE-2018-20843](https://nvd.nist.gov/vuln/detail/CVE-2018-20843), [CVE-2019-15903](https://nvd.nist.gov/vuln/detail/CVE-2019-15903), and [CVE-2019-20387](https://nvd.nist.gov/vuln/detail/CVE-2019-20387). 
 IBM Cloud Controller Manager v1.18.10-1 v1.18.12-1 Updated to support the Kubernetes 1.18.12 release. Updated image for [DLA-2424-1](https://www.debian.org/lts/security/2020/dla-2424). 
 IBM Cloud File Storage for Classic plug-in and monitor 378 379 Updated to use the universal base image (UBI) and to use Go version 1.15.2.
Click the Authorize button to complete the service to service authorization.







 Step 2: Configure KMIP for VMWare with Hyper Protect Crypto Services instance 



1. In the IBM Cloud for VMware Solutions console, click Resources from the left navigation pane.
2. Scroll down to the KMIP for VMware Instances table, click the instance that you want to configure the Hyper Protect Crypto Services with. The status of the KMIP for VMware instance is Inactive because it is not configured yet.
3. Select Getting started from the left navigation pane on the next page.
4. Select the Initialize service instance option and Hyper Protect as the key management type.



* Select the Hyper Protect Crypto Services instance ID that stores your root key and key encryption key. You can click the Retrieve button to get a list of Hyper Protect Crypto Services instances under your IBM Cloud account.

Only IDs of Hyper Protect Crypto Services instances that contain at least one root key are to be listed. Make sure to [create a root key](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-get-startedmanage-keys) first.
* Select the root key to wrap the key encryption key for your data encryption key. You can click the Retrieve button to get a list of root keys stored on the selected Hyper Protect Crypto Services instance.

Make sure not to delete the root key that you select for key wrapping. Otherwise, the data encryption keys stored for VMWare solutions by the KMIP adapter cannot be accessed.



5. Click Configure to complete the configuration. Optionally, you can add client certificates if you have an existing VMWare or vCenter environment that you like to reuse.
6. Click Refresh and ensure that the status of the KMIP for VMware instance is Installed.
7. Identify the KMIP server endpoints information for the next step. For example, kmip.private.us-south.hs-crypto.cloud.ibm.com:10073.







 Step 3: Configure a trusted connection between the vCenter Server and KMIP adapter
Step 4: Step 4: Deploy your application by using Hyper Protect Virtual Servers BYOI and run the application in a secure environment 

Now it's time to deploy and run your newly built application. To do so, you download the encrypted registration file that was created during the build and use the Hyper Protect Virtual Servers BYOI feature to provision a Hyper Protect Virtual Servers instance for your application.



 1. Retrieve the encrypted registration file 

First, download the encrypted registration file for your application container image:

./build.py get-config-json --env sbs-config.json --key-id secure-build-ad52e76-1

The command creates a GPG key to sign the file. The parameter key-id is used to generate the key UID. Provide a unique value that comprises the image tag retrieved in step 3, for example, secure-build-ad52e76-1:

While the command runs, you are asked multiple times for a passphrase. First, enter the passphrase twice for key creation, then again to sign the file.

The command creates the file sbs.enc file in your current directory and prints the following output:

INFO:__main__:a json config file has been written to sbs.enc.

The encrypted registration file sbs.enc contains the information that is used by Hyper Protect Virtual Servers to provision a server instance with your application's container image. The file includes the repository_name as well as the container registry credentials. As the file is encrypted, you can pass it on to a cloud administrator (for example to provision the service instance) without exposing this information.





 2. Create the Hyper Protect Virtual Servers instance for your application. 

Use the Hyper Protect Virtual Servers BYOI feature to provision a Hyper Protect Virtual Servers instance for your application container image. To do so, you need the image tag from step 10.

Run the following command to provision the Hyper Protect Virtual Servers instance:

image_tag=s390x-v1-ad52e76
Kubernetes 1.21.4 1.21.5 See the [change logs](https://github.com/kubernetes/kubernetes/releases/tag/v1.21.5). This update resolves [CVE-2021-25741](https://nvd.nist.gov/vuln/detail/CVE-2021-25741). For more information, see the [IBM security bulletin](https://www.ibm.com/support/pages/node/6496649)). 
 Ubuntu 18.04 packages 4.15.0-156 4.15.0-158 Updated worker node images and kernel with package updates [CVE-2021-22946](https://nvd.nist.gov/vuln/detail/CVE-2021-22946), [CVE-2021-22947](https://nvd.nist.gov/vuln/detail/CVE-2021-22947), [CVE-2021-33560](https://nvd.nist.gov/vuln/detail/CVE-2021-33560), [CVE-2021-3709](https://nvd.nist.gov/vuln/detail/CVE-2021-3709), [CVE-2021-3710](https://nvd.nist.gov/vuln/detail/CVE-2021-3710), [CVE-2021-40330](https://nvd.nist.gov/vuln/detail/CVE-2021-40330), [CVE-2021-40528](https://nvd.nist.gov/vuln/detail/CVE-2021-40528), and [CVE-2021-41072](https://nvd.nist.gov/vuln/detail/CVE-2021-41072). 







 Change log for worker node fix pack 1.21.4_1530, released 13 September 2021 

The following table shows the changes that are in the worker node fix pack patch update 1.21.4_1530.
Containerd v1.4.1 v1.4.3 See the [containerd release notes](https://github.com/containerd/containerd/releases/tag/v1.4.3). The update resolves CVE-2020–15257 (see the [IBM security bulletin](https://www.ibm.com/support/pages/node/6387878)). 
 HA proxy 1.8.26-384f42 db4e6d Added provenance labels for source tracking. 
 Ubuntu 18.04 packages 4.15.0-123-generic 4.15.0-126-generic Updated worker node image with kernel and package updates for [CVE-2020-14351](https://nvd.nist.gov/vuln/detail/CVE-2020-14351) and [CVE-2020-4788](https://nvd.nist.gov/vuln/detail/CVE-2020-4788). 
 Ubuntu 16.04 packages 4.4.0-194-generic 4.4.0-197-generic Updated worker node image with kernel and package updates for [CVE-2020-0427](https://nvd.nist.gov/vuln/detail/CVE-2020-0427), [CVE-2020-12352](https://nvd.nist.gov/vuln/detail/CVE-2020-12352), [CVE-2020-14351](https://nvd.nist.gov/vuln/detail/CVE-2020-14351), [CVE-2020-25645](https://nvd.nist.gov/vuln/detail/CVE-2020-25645), and [CVE-2020-4788](https://nvd.nist.gov/vuln/detail/CVE-2020-4788). 







 Change log for worker node fix pack 1.19.4_1527, released 23 November 2020 

The following table shows the changes that are in the worker node fix pack 1.19.4_1527.
VRVDR-47885 8.1 DSA-4495-1 CVE-2018-20836, CVE-2019-1125, CVE-2019-1999, CVE-2019-10207, CVE-2019-10638, CVE-201912817, CVE-2019-12984, CVE-2019-13233, CVE2019-13631, CVE-2019-13648, CVE-2019-14283, CVE-2019-14284: Debian DSA-4495-1: linux – security update 









 1801zd 



 Issues Resolved 



Issues resolved for 1801zd

 Issue Number Priority Summary 

 VRVDR-48717 Major Resources group address-group address-range entries do not work together with address entries 
 VRVDR-48473 Minor Error getting Login User Id 
 VRVDR-47596 Minor NAT used count is showing count larger than total available 
 VRVDR-41091 Minor Off-by-one error in lcore id in copying rule stats 







 Security Vulnerabilities Resolved 



Security vulnerabilities resolved for 1801zd

 Issue Number CVSS score Advisory Summary 

 VRVDR-48746 9.8 DSA-4547-1 CVE-2018-10103, CVE-2018-10105, CVE-201814461, CVE-2018-14462, CVE-2018-14463, CVE2018-14464, CVE-2018-14465, CVE-2018-14466, CVE-2018-14467,CVE-2018-14468, CVE-201814469, CVE-2018-14470, CVE-2018-14879, CVE2018-14880, CVE-2018-14881, CVE-2018-14882, CVE-2018-16227, CVE-2018-16228, CVE-201816229, CVE-2018-16230, CVE-2018-16300, CVE2018-16451, CVE-2018-16452, CVE-2019-15166: Debian DSA-4547-1: tcpdump – security update
Resolves [CVE-2021-3712](https://nvd.nist.gov/vuln/detail/CVE-2021-3712).





 Version 4.8.0_997, released on 16 November 2021 

Initial release of 4.8.0.







 Version 4.7.0 



 Version 4.7.0_2288, released on 14 Jul 2022 

Resolves [CVE-2022-2097](https://nvd.nist.gov/vuln/detail/CVE-2022-2097).





 Version 4.7.0_2252, released on 7 Jul 2022 



* [CVE-2021-38561](https://nvd.nist.gov/vuln/detail/CVE-2021-38561).
* [CVE-2022-21698](https://nvd.nist.gov/vuln/detail/CVE-2022-21698).
* [CVE-2022-1271](https://nvd.nist.gov/vuln/detail/CVE-2022-1271).







 Version 4.7.0_1985, released on 13 Jun 2022 

Resolves [CVE-2021-3634](https://nvd.nist.gov/vuln/detail/CVE-2021-3634).





 Version 4.7.0_1561, released on 4 May 2022 



* [CVE-2018-25032](https://nvd.nist.gov/vuln/detail/CVE-2018-25032).
* [CVE-2022-28327](https://nvd.nist.gov/vuln/detail/CVE-2022-28327).
* [CVE-2022-24675](https://nvd.nist.gov/vuln/detail/CVE-2022-24675).
* [CVE-2022-4304](https://nvd.nist.gov/vuln/detail/CVE-2022-4304)
* [CVE-2022-4450](https://nvd.nist.gov/vuln/detail/CVE-2022-4450)
* [CVE-2023-0215](https://nvd.nist.gov/vuln/detail/CVE-2023-0215)
* [CVE-2023-0286](https://nvd.nist.gov/vuln/detail/CVE-2023-0286)







 1.4.0_3703_iks, released 30 January 2023 

Updates the golang version to 1.19.5.





 1.4.0_3684_iks, released 24 January 2023 

Introduces support for multiple platform architectures such as AMD64 and s390x.





 1.4.0_3537_iks, released 3 January 2023 



* [CVE-2022-43551](https://nvd.nist.gov/vuln/detail/CVE-2022-43551)
* [CVE-2022-43552](https://nvd.nist.gov/vuln/detail/CVE-2022-43552)







 1.4.0_3297_iks, released 15 December 2022 

[CVE-2022-41717](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41717)





 1.4.0_3212_iks, released 12 December 2022 

Initial release of 1.4.0. For more information, see the [community release documentation](https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v1.4.0).







 Version 1.3.1 (unsupported) 

Version 1.3.1 is no longer supported.
Containerd v1.3.4 1.3.9 See the [containerd release notes](https://github.com/containerd/containerd/releases/tag/v1.3.9). The update resolves CVE-2020–15257 (see the [IBM security bulletin](https://www.ibm.com/support/pages/node/6387878)). 
 HAProxy 1.8.26-384f42 db4e6d Added provenance labels for source tracking. 
 Ubuntu 18.04 packages 4.15.0-123-generic 4.15.0-126-generic Updated worker node image with kernel and package updates for [CVE-2020-14351](https://nvd.nist.gov/vuln/detail/CVE-2020-14351) and [CVE-2020-4788](https://nvd.nist.gov/vuln/detail/CVE-2020-4788). 
 Ubuntu 16.04 packages 4.4.0-194-generic 4.4.0-197-generic Updated worker node image with kernel and package updates for [CVE-2020-0427](https://nvd.nist.gov/vuln/detail/CVE-2020-0427), [CVE-2020-12352](https://nvd.nist.gov/vuln/detail/CVE-2020-12352), [CVE-2020-14351](https://nvd.nist.gov/vuln/detail/CVE-2020-14351), [CVE-2020-25645](https://nvd.nist.gov/vuln/detail/CVE-2020-25645), and [CVE-2020-4788](https://nvd.nist.gov/vuln/detail/CVE-2020-4788). 







 Change log for worker node fix pack 1.16.15_1552, released 23 November 2020 

The following table shows the changes that are in the worker node fix pack 1.16.15_1552.
Ubuntu 16.04 packages Worker 4.4.0-178-generic 4.4.0-179-generic Updated worker node images with package and kernel updates for [CVE-2019-19060](https://nvd.nist.gov/vuln/detail/CVE-2019-19060), [CVE-2020-11494](https://nvd.nist.gov/vuln/detail/CVE-2020-11494), [CVE-2020-11608](https://nvd.nist.gov/vuln/detail/CVE-2020-11608), [CVE-2020-12762](https://nvd.nist.gov/vuln/detail/CVE-2020-12762), [CVE-2020-3810](https://nvd.nist.gov/vuln/detail/CVE-2020-3810), [CVE-2020-8616](https://nvd.nist.gov/vuln/detail/CVE-2020-8616), and [CVE-2020-8617](https://nvd.nist.gov/vuln/detail/CVE-2020-8617). 







 Change log for 1.18.2_1512, released 11 May 2020 

The following table shows the changes that are in patch update 1.18.2_1512. If you update your cluster from Kubernetes 1.17, review the [preparation actions](https://cloud.ibm.com/docs/containers?topic=containers-cs_versionsk8s_version_archive).



Changes since version 1.17.5_1523

 Component Previous Current Description 

 Calico v3.12.1 v3.13.3 See the [Calico release notes](https://docs.tigera.io/archive/v3.13/release-notes/.). 
 Cluster health image v1.1.1 v1.1.4 When cluster add-ons don't support the current cluster version, a warning is now returned in the cluster health state.
-2021-3177](https://nvd.nist.gov/vuln/detail/CVE-2021-3177), [CVE-2019-3842](https://nvd.nist.gov/vuln/detail/CVE-2019-3842), [CVE-2020-13776](https://nvd.nist.gov/vuln/detail/CVE-2020-13776), [CVE-2020-24330](https://nvd.nist.gov/vuln/detail/CVE-2020-24330), [CVE-2020-24331](https://nvd.nist.gov/vuln/detail/CVE-2020-24331), [CVE-2020-24332](https://nvd.nist.gov/vuln/detail/CVE-2020-24332), [CVE-2017-14502](https://nvd.nist.gov/vuln/detail/CVE-2017-14502), [CVE-2020-8927](https://nvd.nist.gov/vuln/detail/CVE-2020-8927) and [CVE-2020-28196](https://nvd.nist.gov/vuln/detail/CVE-2020-28196). 
 IBM Cloud Container Registry N/A N/A Added private-only registry support for ca.icr.io, br.icr.io and jp2.icr.io. 
 Red Hat OpenShift 4.6.31 4.6.34 See the [Red Hat OpenShift release notes](https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.htmlocp-4-6-34).