vania-janet/multiturn-rag-retrieval-data huggingface dataset:
Red Hat OpenShift 4.12.2 4.12.4 For more information, see the [change log](https://docs.openshift.com/container-platform/4.12/release_notes/ocp-4-12-release-notes.htmlocp-4-12-4). 
 HAProxy d38f89 af5031 [CVE-2022-40897](https://nvd.nist.gov/vuln/detail/CVE-2022-40897), [CVE-2022-4415](https://nvd.nist.gov/vuln/detail/CVE-2022-4415), [CVE-2020-10735](https://nvd.nist.gov/vuln/detail/CVE-2020-10735), [CVE-2021-28861](https://nvd.nist.gov/vuln/detail/CVE-2021-28861), [CVE-2022-45061](https://nvd.nist.gov/vuln/detail/CVE-2022-45061). 







 Change log for master fix pack 4.12.2_1527_openshift and worker node fix pack 4.12.2_1526_openshift, released 23 February 2023 

The following table shows the changes that are in the master fix pack 4.12.2_1627_openshift and worker node fix pack 4.12.2_1526_openshift. Master patch updates are applied automatically. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since master fix pack 4.11.22_1540_openshift and worker fix pack 4.11.26_1542_openshift

 Component Previous Current Description 

 Calico v3.23.5 v3.25.0 See the [Calico release notes](https://docs.tigera.io/archive).
In the Validate version section, select I have read and agree to the following license agreements.
4. Click Validate.

To monitor the progress of the validation process, click View logs.







 Step 9: Manage compliance 

Controls are safeguards that are used to meet security and compliance requirements. Only controls that are supported by Security and Compliance Center, formatted correctly, and validated by Code Risk Analysis and Security and Compliance Center scans appear in the catalog. For more information, see [Formatting controls in your readme file](https://cloud.ibm.com/docs/sell?topic=sell-sell-format-controls).



 Manage compliance controls 

You can review the controls that were added from your readme file and add additional controls.



1. Click Add controls.
2. Choose a profile.
3. Select the controls that you want to add to your version.
4. Click Add.







 Run Code Risk Analyzer scan 

Scan your source code with Code Risk Analyzer to identify any security vulnerabilities that you need to assess.



1. Click Run scan.
2. Wait for the scan to finish.







 Add Security and Compliance Center scan 

Add the scans that you previously ran in the Security and Compliance Center. Security and Compliance Center scans determine adherence to regulatory controls. For more information, see [Scheduling a scan](https://cloud.ibm.com/docs/security-compliance?topic=security-compliance-schedule-scan).



1. Select the profile that you scanned.
2. Select the Security and Compliance Center scan.
3. Click Add scan.
4. Click Next.









 Review requirements 

You must complete validation and any other requirements to publish your Terraform template.





 Next steps 

Go to the Partner Center and submit your request to [publish your Terraform template](https://cloud.ibm.com/docs/sell?topic=sell-terraform-publish) to the IBM Cloud catalog.
Kubernetes v1.18.4 v1.18.6 See the [Kubernetes change logs](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.18.mdv1186). The update resolves CVE-2020-8557 (see the [IBM security bulletin](https://www.ibm.com/support/pages/node/6249941)). 
 Ubuntu 18.04 packages 4.15.0-109-generic 4.15.0-111-generic Updated worker node images with kernel and package updates for [CVE-2018-11236](https://nvd.nist.gov/vuln/detail/CVE-2018-11236), [CVE-2018-11237](https://nvd.nist.gov/vuln/detail/CVE-2018-11237), [CVE-2018-19591](https://nvd.nist.gov/vuln/detail/CVE-2018-19591), [CVE-2019-19126](https://nvd.nist.gov/vuln/detail/CVE-2019-19126), [CVE-2019-9169](https://nvd.nist.gov/vuln/detail/CVE-2019-9169), [CVE-2020-10029](https://nvd.nist.gov/vuln/detail/CVE-2020-10029), [CVE-2020-12402](https://nvd.nist.gov/vuln/detail/CVE-2020-12402), [CVE-2020-1751](https://nvd.nist.gov/vuln/detail/CVE-2020-1751), and [CVE-2020-1752](https://nvd.nist.gov/vuln/detail/CVE-2020-1752).
Ubuntu 16.04 packages 4.4.0-185-generic 4.4.0-186-generic Updated worker node images with package updates for [CVE-2019-12380](https://nvd.nist.gov/vuln/detail/CVE-2019-12380), [CVE-2019-17514](https://nvd.nist.gov/vuln/detail/CVE-2019-17514), [CVE-2019-20907](https://nvd.nist.gov/vuln/detail/CVE-2019-20907), [CVE-2019-9674](https://nvd.nist.gov/vuln/detail/CVE-2019-9674), [CVE-2020-10713](https://nvd.nist.gov/vuln/detail/CVE-2020-10713), [CVE-2020-11935]
* [CVE-2022-27776](https://nvd.nist.gov/vuln/detail/CVE-2022-27776)
* [CVE-2022-27782](https://nvd.nist.gov/vuln/detail/CVE-2022-27782)
* [CVE-2022-25313](https://nvd.nist.gov/vuln/detail/CVE-2022-25313)
* [CVE-2022-25314](https://nvd.nist.gov/vuln/detail/CVE-2022-25314)









 Change log for version 5.0.1-beta_1411, released 15 June 2022 

Fixes a bug where the resource group wasn't included in the snapshot creation request payload.





 Change log for version 5.0.0-beta_1125, released 10 June 2022 

Adds snapshot support.







 Version 4.4 



 Change log for version 4.4.17_1829, released 21 February 2023 



* Resolves [CVE-2022-47629](https://nvd.nist.gov/vuln/detail/CVE-2022-47629).







 Change log for version 4.4.16_1779, released 24 January 2023 



* Updates the storage-secret-sidecar image to v1.2.15.
VRVDR-56909 7.8 N/A CVE-2021-4034: policykit-1 security update 









 1912u 



 Issues Resolved 



Issues resolved for 1912u

 Issue Number Priority Summary 

 VRVDR-56932 Critical L2TPtunnels fail to establish after the upgrade from 1801zb to 1912r 







 Security Vulnerabilities Resolved 



Security vulnerabilities resolved for 1912u

 Issue Number CVSS score Advisory Summary 

 VRVDR-57185 9.8 DLA-2935-1 CVE-2022-23852, CVE-2022-25235, CVE-2022-25236, CVE-2022-25313, CVE-2022-25315: Debian DLA-2935-1 : expat -LTS security update 
 VRVDR-57184 5.5 DLA-2932-1 CVE-2022-0561, CVE-2022-0562, CVE-2022-22844: Debian DLA-2932-1 : tiff -LTS security update 
 VRVDR-57183 8.8 DLA-2931-1 CVE-2022-24407: Debian DLA-2931-1 : cyrus-sasl2 -LTS security update 
 VRVDR-57003 9.8 DLA-2919-1 CVE-2021-3177, CVE-2021-4189: Debian DLA-2919-1 : python2.7 -LTS security update 
 VRVDR-56955 7.5 DLA-2898-1 CVE-2022-22747: Debian DLA-2898-1 : nss-LTS security update
Ubuntu 18.04 packages 4.15.0-175-generic 4.15.0-176-generic Kernel and package updates for [CVE-2018-16301](https://nvd.nist.gov/vuln/detail/CVE-2018-16301), [CVE-2019-18276](https://nvd.nist.gov/vuln/detail/CVE-2019-18276), [CVE-2020-8037](https://nvd.nist.gov/vuln/detail/CVE-2020-8037), [CVE-2021-31870](https://nvd.nist.gov/vuln/detail/CVE-2021-31870), [CVE-2021-31871](https://nvd.nist.gov/vuln/detail/CVE-2021-31871), [CVE-2021-31872](https://nvd.nist.gov/vuln/detail/CVE-2021-31872), [CVE-2021-31873](https://nvd.nist.gov/vuln/detail/CVE-2021-31873), [CVE-2021-43975](https://nvd.nist.gov/vuln/detail/CVE-2021-43975), [CVE-2022-1271](https://nvd.nist.gov/vuln/detail/CVE-2022-1271), [CVE-2022-24765](https://nvd.nist.gov/vuln/detail/CVE-2022-24765). 
 Kubernetes v1.23.5 v1.23.6 For more information, see the [change log](https://github.com/kubernetes/kubernetes/releases/tag/v1.23.6). 







 Change log for worker node fix pack 1.23.5_1526, released 11 April 2022
* [Create or retrieve your SSH key ID](https://cloud.ibm.com/docs/ssh-keys?topic=ssh-keys-getting-started-tutorial). You need the 40-digit UUID for the SSH key, not the SSH key name.
* (Optional - Catalog Tile) create secrets for your credentials and passwords by using the [Secrets Manager](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-arbitrary-secrets&interface=ui).







 Deploying SAP S/4HANA using Terraform scripts 

Use these steps to configure the IBM Cloud Provider plug-in and use Terraform to create a VPC for SAP. The scripts can take 2 hours to complete.



1. Log in to the Deployment Server by using ssh.
2. Clone the terraform and ansbile folders and readme file from https://github.com/IBM-Cloud/sap-s4hana/tree/main/cli and change to the sap-s4hana/cli/terraform folder.

$ git clone https://github.com/IBM-Cloud/sap-s4hana.git

$ cd sap-s4hana/cli/terraform
3. Edit the terraform.tfvars variable file and enter the IBM Cloud API key that you retrieved.

ibmcloud_api_key = "<ibmcloud_apikey>"

Variables that are defined in the terraform.tfvars file are automatically loaded by Terraform when the IBM Cloud Provider plug-in is initialized and you can reference them in every Terraform configuration file that you use.

Because the terraform.tfvars file contains confidential information, do not push this file to a version control system. Keep this file on your local system only.
4. Edit the input parameter file, input.auto.tfvars, and modify the variables to match your solution. The file is preset with the minimal recommended disk sizes. For using an existing VPC, you must modify:



* VPC - An existing VPC name.
RHEL 8 Packages 4.18.0-477.10.1.el8_8 4.18.0-477.13.1.el8_8 Worker node kernel & package updates for [CVE-2023-22490](https://nvd.nist.gov/vuln/detail/CVE-2023-22490), [CVE-2023-23946](https://nvd.nist.gov/vuln/detail/CVE-2023-23946), [CVE-2023-25652](https://nvd.nist.gov/vuln/detail/CVE-2023-25652), [CVE-2023-25815](https://nvd.nist.gov/vuln/detail/CVE-2023-25815), [CVE-2023-29007](https://nvd.nist.gov/vuln/detail/CVE-2023-29007), [CVE-2023-32233](https://nvd.nist.gov/vuln/detail/CVE-2023-32233). 







 Change log for master fix pack 4.9.59_1591_openshift, released 25 May 2023 

The following table shows the changes that are in the master fix pack 4.9.59_1591_openshift. Master patch updates are applied automatically.



Changes since version 4.9.59_1587_openshift

 Component Previous Current Description 

 Cluster health image v1.3.19 v1.3.20 Updated Go to version 1.19.9 and updated dependencies. Updated the base image. Resolved add-on health bugs. 
 etcd v3.4.24 v3.4.25 See the [etcd release notes](https://github.com/etcd-io/etcd/releases/v3.4.25). 
 Gateway-enabled cluster controller 2024 2106 Updated to resolve CVEs. 
 IBM Cloud Controller Manager v1.22.17-8 v1.22.17-9 Key rotation.
Ubuntu 18.04 packages 4.15.0-173-generic 4.15.0-175-generic Kernel and package updates for [CVE-2018-25032](https://nvd.nist.gov/vuln/detail/CVE-2018-25032)[CVE-2021-3426](https://nvd.nist.gov/vuln/detail/CVE-2021-3426)[CVE-2021-4189](https://nvd.nist.gov/vuln/detail/CVE-2021-4189)[CVE-2022-0391](https://nvd.nist.gov/vuln/detail/CVE-2022-0391)[CVE-2022-21712](https://nvd.nist.gov/vuln/detail/CVE-2022-21712)[CVE-2022-21716](https://nvd.nist.gov/vuln/detail/CVE-2022-21716)[CVE-2022-25308](https://nvd.nist.gov/vuln/detail/CVE-2022-25308)[CVE-2022-25309](https://nvd.nist.gov/vuln/detail/CVE-2022-25309)[CVE-2022-25310](https://nvd.nist.gov/vuln/detail/CVE-2022-25310)[CVE-2022-27666](https://nvd.nist.gov/vuln/detail/CVE-2022-27666). 







 Change log for master fix pack 1.21.11_1555, released 6 April 2022 



Changes since version 1.21.11_1553

 Component Previous Current Description 

 Load balancer and load balancer monitor for IBM Cloud Provider 1865 1899 Revert setting gratuitous ARP on LBv1. 







 Change log for master fix pack 1.21.11_1553, released 30 March 2022 



Changes since version 1.21.10_1550
2020-29363](https://nvd.nist.gov/vuln/detail/CVE-2020-29363), [CVE-2020-28196](https://nvd.nist.gov/vuln/detail/CVE-2020-28196), [CVE-2019-2708](https://nvd.nist.gov/vuln/detail/CVE-2019-2708), [CVE-2016-10228](https://nvd.nist.gov/vuln/detail/CVE-2016-10228), [CVE-2019-25013](https://nvd.nist.gov/vuln/detail/CVE-2019-25013), [CVE-2019-9169](https://nvd.nist.gov/vuln/detail/CVE-2019-9169), [CVE-2020-27618](https://nvd.nist.gov/vuln/detail/CVE-2020-27618), [CVE-2021-3326](https://nvd.nist.gov/vuln/detail/CVE-2021-3326), and [CVE-2020-8927](https://nvd.nist.gov/vuln/detail/CVE-2020-8927). 
 Red Hat OpenShift 4.6.27 4.6.29 See the [Red Hat OpenShift release notes](https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.htmlocp-4-6-29). 
 RHEL 7 Packages N/A N/A Updated worker node image with package updates. 







 Change log for master fix pack 4.6.28_1543_openshift, released 24 May 2021 

The following table shows the changes that are in the master fix pack patch update 4.6.28_1543_openshift. Master patch updates are applied automatically.



Changes since version 4.6.23_1540_openshift

 Component Previous Current Description
Ubuntu 18.04 packages 4.15.0-175-generic 4.15.0-176-generic Kernel and package updates for [CVE-2018-16301](https://nvd.nist.gov/vuln/detail/CVE-2018-16301), [CVE-2019-18276](https://nvd.nist.gov/vuln/detail/CVE-2019-18276), [CVE-2020-8037](https://nvd.nist.gov/vuln/detail/CVE-2020-8037), [CVE-2021-31870](https://nvd.nist.gov/vuln/detail/CVE-2021-31870), [CVE-2021-31871](https://nvd.nist.gov/vuln/detail/CVE-2021-31871), [CVE-2021-31872](https://nvd.nist.gov/vuln/detail/CVE-2021-31872), [CVE-2021-31873](https://nvd.nist.gov/vuln/detail/CVE-2021-31873), [CVE-2021-43975](https://nvd.nist.gov/vuln/detail/CVE-2021-43975), [CVE-2022-1271](https://nvd.nist.gov/vuln/detail/CVE-2022-1271), [CVE-2022-24765](https://nvd.nist.gov/vuln/detail/CVE-2022-24765). 







 Change log for worker node fix pack 1.20.15_1577, released 11 April 2022 

The following table shows the changes that are in the worker node fix pack 1.20.15_1577. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 1.20.15_1575

 Component Previous Current Description
Ubuntu 16.04 packages 4.4.0-201-generic 4.4.0-203-generic Updated worker node image with package updates for [CVE-2020-27619](https://nvd.nist.gov/vuln/detail/CVE-2020-27619), [CVE-2020-29372](https://nvd.nist.gov/vuln/detail/CVE-2020-29372), [CVE-2020-29374](https://nvd.nist.gov/vuln/detail/CVE-2020-29374), [CVE-2020-8625](https://nvd.nist.gov/vuln/detail/CVE-2020-8625), [CVE-2021-23840](https://nvd.nist.gov/vuln/detail/CVE-2021-23840), [CVE-2021-23841](https://nvd.nist.gov/vuln/detail/CVE-2021-23841), [CVE-2021-26937](https://nvd.nist.gov/vuln/detail/CVE-2021-26937), [CVE-2021-27212](https://nvd.nist.gov/vuln/detail/CVE-2021-27212), and [CVE-2021-3177](https://nvd.nist.gov/vuln/detail/CVE-2021-3177). 







 Change log for master fix pack 1.20.4_1531, released 27 February 2021 

The following table shows the changes that are in the master fix pack patch update 1.20.4_1531. Master patch updates are applied automatically.



Changes since version 1.20.4_1530.

 Component Previous Current Description 

 Calico v3.17.2 v3.17.3 See the [Calico release notes](https://docs.tigera.io/archive).
Ubuntu 18.04 packages 4.15.0-173-generic 4.15.0-175-generic Kernel and package updates for [CVE-2018-25032](https://nvd.nist.gov/vuln/detail/CVE-2018-25032)[CVE-2021-3426](https://nvd.nist.gov/vuln/detail/CVE-2021-3426)[CVE-2021-4189](https://nvd.nist.gov/vuln/detail/CVE-2021-4189)[CVE-2022-0391](https://nvd.nist.gov/vuln/detail/CVE-2022-0391)[CVE-2022-21712](https://nvd.nist.gov/vuln/detail/CVE-2022-21712)[CVE-2022-21716](https://nvd.nist.gov/vuln/detail/CVE-2022-21716)[CVE-2022-25308](https://nvd.nist.gov/vuln/detail/CVE-2022-25308)[CVE-2022-25309](https://nvd.nist.gov/vuln/detail/CVE-2022-25309)[CVE-2022-25310](https://nvd.nist.gov/vuln/detail/CVE-2022-25310)[CVE-2022-27666](https://nvd.nist.gov/vuln/detail/CVE-2022-27666). 







 Change log for master fix pack 1.23.5_1525, released 6 April 2022 



Changes since version 1.23.5_1523

 Component Previous Current Description 

 Load balancer and load balancer monitor for IBM Cloud Provider 1865 1899 Revert setting gratuitous ARP on LBv1. 







 Change log for master fix pack 1.23.5_1523, released 30 March 2022 



Changes since version 1.23.4_1520
Enter the SSH key ID in square brackets and quotation marks, for example [ "ibmcloud_ssh_key_UUID1","ibmcloud_ssh_key_UUID2",... ].
* The Region for your resources
* The Zone for your resources
* Whether to use an existing VPC or create one
* Whether to use an existing subnet
* Whether to create new port only when a new subnet is created
* TCP port range, nimimun and maximum
* VPC name
* Subnet name
* Security group name
* Hostname
* Profile
* Image
* Minimal recommended disk sizes
* SAP main password - must be at least 10 characters, upper and lowercase letters, a number, and a special character, not an exclamation point.
* Click Save changes.



For a more detailed description of each of the parameters, check the GitHub repo readme file, chapter “Input parameter file”. Also, make sure to mark as “sensitive” the parameters that contain sensitive information like passwords, API, and ssh private keys (they are marked as “sensitive” in the readme file, under “Input parameter file”)
7. On the workspace Settings page, click Generate plan. Wait for the plan to complete.
8. Click View log to review the log files of your Terraform execution plan.
9. Apply your Terraform template by clicking Apply plan.
10. Review the log file to ensure that no errors occurred during the provisioning, modification, or deletion process.







 Next steps 

If you need to rename your resources after they are created, modify the input.auto.tfvars file to change the names and run terraform plan and terraform apply again. Do not use the IBM Cloud Dashboard and user interface to modify your VPC after it is created. The Terraform scripts create a complete solution and selectively modifying resources with the user interface might cause unexpected results.

If you need to remove the SAP NetWeaver 7.X and Db2 installation, go to your project folder and run terraform destroy.
Version 1.4.0 



 1.4.0_5159_iks, released 5 July 2023 



* Resolves [CVE-2023-32731](https://nvd.nist.gov/vuln/detail/CVE-2023-32731)







 1.4.0_5068_iks, released 6 June 2023 



* Updates golang version to 1.20.4.
* [CVE-2023-29491](https://nvd.nist.gov/vuln/detail/CVE-2023-29491)
* [CVE-2023-2650](https://nvd.nist.gov/vuln/detail/CVE-2023-2650)







 1.4.0_4169_iks, released 23 May 2023 



* [CVE-2023-28319](https://nvd.nist.gov/vuln/detail/CVE-2023-28319)
* [CVE-2023-28320](https://nvd.nist.gov/vuln/detail/CVE-2023-28320)
* [CVE-2023-28321](https://nvd.nist.gov/vuln/detail/CVE-2023-28321)
* [CVE-2023-28322](https://nvd.nist.gov/vuln/detail/CVE-2023-28322)







 1.4.0_4114_iks, released 4 May 2023 



* Image update.







 1.4.0_4062_iks, released 27 April 2023 



* [CVE-2023-27533](https://nvd.nist.gov/vuln/detail/CVE-2023-27533)
* [CVE-2023-27534](https://nvd.nist.gov/vuln/detail/CVE-2023-27534)
Ubuntu 18.04 packages 4.15.0-173-generic 4.15.0-175-generic Kernel and package updates for [CVE-2018-25032](https://nvd.nist.gov/vuln/detail/CVE-2018-25032)[CVE-2021-3426](https://nvd.nist.gov/vuln/detail/CVE-2021-3426)[CVE-2021-4189](https://nvd.nist.gov/vuln/detail/CVE-2021-4189)[CVE-2022-0391](https://nvd.nist.gov/vuln/detail/CVE-2022-0391)[CVE-2022-21712](https://nvd.nist.gov/vuln/detail/CVE-2022-21712)[CVE-2022-21716](https://nvd.nist.gov/vuln/detail/CVE-2022-21716)[CVE-2022-25308](https://nvd.nist.gov/vuln/detail/CVE-2022-25308)[CVE-2022-25309](https://nvd.nist.gov/vuln/detail/CVE-2022-25309)[CVE-2022-25310](https://nvd.nist.gov/vuln/detail/CVE-2022-25310)[CVE-2022-27666](https://nvd.nist.gov/vuln/detail/CVE-2022-27666). 







 Change log for master fix pack 1.22.8_1547, released 6 April 2022 



Changes since version 1.22.8_1545

 Component Previous Current Description 

 Load balancer and load balancer monitor for IBM Cloud Provider 1865 1899 Revert setting gratuitous ARP on LBv1. 







 Change log for master fix pack 1.22.8_1545, released 30 March 2022 



Changes since version 1.22.7_1541
Kubernetes v1.16.2 v1.16.3 See the [Kubernetes release notes](https://github.com/kubernetes/kubernetes/releases/tag/v1.16.3). 
 Ubuntu 16.04 kernel and packages 4.4.0-166-generic 4.4.0-169-generic Updated worker node images with kernel and package updates for [CVE-2018-12207](https://nvd.nist.gov/vuln/detail/CVE-2018-12207), [CVE-2019-0154](https://nvd.nist.gov/vuln/detail/CVE-2019-0154), [CVE-2019-0155](https://nvd.nist.gov/vuln/detail/CVE-2019-0155), [CVE-2019-11135](https://nvd.nist.gov/vuln/detail/CVE-2019-11135), [CVE-2019-15098](https://nvd.nist.gov/vuln/detail/CVE-2019-15098), [CVE-2019-17052](https://nvd.nist.gov/vuln/detail/CVE-2019-17052), [CVE-2019-17053](https://nvd.nist.gov/vuln/detail/CVE-2019-17053), [CVE-2019-17054](https://nvd.nist.gov/vuln/detail/CVE-2019-17054), [CVE-2019-17055](https://nvd.nist.gov/vuln/detail/CVE-2019-17055), [CVE-2019-17056](https://nvd.nist.gov/vuln/detail/CVE-2019-17056), and [CVE-2019-17666](https://nvd.nist.gov/vuln/detail/CVE-2019-17666).
Upgrading a VPN from a custom IKE policy from the CLI 

Before you begin, make sure to [set up your CLI environment](https://cloud.ibm.com/docs/vpc?topic=vpc-infrastructure-cli-plugin-vpc-reference).

To upgrade a custom IKE policy by using the CLI, following these steps:



1. Find and store the IKE policy ID or name variable to be used in your CLI code, for example:

ike_policy - Find the ID (or name) of IKE policy that contains weak ciphers by using the [list IKE policies](https://cloud.ibm.com/docs/vpc?topic=vpc-infrastructure-cli-plugin-vpc-reference&interface=cliike-policies) command, and then populate the variable.

export ike_policy=<your_ike_policy_id_or_name>
2. Find and replace IKE policies authentication_algorithm, dh_group, and encryption_algorithm to use secure ciphers, and populate these variables in your CLI code.

authentication_algorithm - The authentication algorithm. One of: sha256, sha384, sha512.

dh_group - The Diffie-Hellman group. One of: 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 31.

encryption_algorithm - The encryption algorithm. One of: aes128, aes192, aes256.

export authentication_algorithm=<your_secure_authentication_algorithm>
export dh_group=<your_secure_dh_group>
export encryption_algorithm=<your_secure_encryption_algorithm>
3. Replace IKE policies --authentication-algorithm value, --dh-group value, and --encryption-algorithm value with secure ciphers in your CLI code.

ibmcloud is ike-policy-update $ike_policy
[--authentication-algorithm $authentication_algorithm]
[--dh-group $dh_group]
[--encryption-algorithm $encryption_algorithm]

Command examples:



* Initiate the IKE policy variables:
Ubuntu 18.04 packages 4.15.0-175-generic 4.15.0-176-generic Kernel and package updates for [CVE-2018-16301](https://nvd.nist.gov/vuln/detail/CVE-2018-16301), [CVE-2019-18276](https://nvd.nist.gov/vuln/detail/CVE-2019-18276), [CVE-2020-8037](https://nvd.nist.gov/vuln/detail/CVE-2020-8037), [CVE-2021-31870](https://nvd.nist.gov/vuln/detail/CVE-2021-31870), [CVE-2021-31871](https://nvd.nist.gov/vuln/detail/CVE-2021-31871), [CVE-2021-31872](https://nvd.nist.gov/vuln/detail/CVE-2021-31872), [CVE-2021-31873](https://nvd.nist.gov/vuln/detail/CVE-2021-31873), [CVE-2021-43975](https://nvd.nist.gov/vuln/detail/CVE-2021-43975), [CVE-2022-1271](https://nvd.nist.gov/vuln/detail/CVE-2022-1271), [CVE-2022-24765](https://nvd.nist.gov/vuln/detail/CVE-2022-24765). 
 Kubernetes v1.22.8 v1.22.9 For more information, see the [change log](https://github.com/kubernetes/kubernetes/releases/tag/v1.22.9). 







 Change log for worker node fix pack 1.22.8_1548, released 11 April 2022
Ubuntu 16.04 packages 4.4.0-184-generic 4.4.0-185-generic Updated worker node images with package updates for [CVE-2017-12133](https://nvd.nist.gov/vuln/detail/CVE-2017-12133), [CVE-2017-18269](https://nvd.nist.gov/vuln/detail/CVE-2017-18269), [CVE-2018-11236](https://nvd.nist.gov/vuln/detail/CVE-2018-11236), [CVE-2018-11237](https://nvd.nist.gov/vuln/detail/CVE-2018-11237), [CVE-2018-6485](https://nvd.nist.gov/vuln/detail/CVE-2018-6485), [CVE-2019-19126](https://nvd.nist.gov/vuln/detail/CVE-2019-19126), [CVE-2019-9169](https://nvd.nist.gov/vuln/detail/CVE-2019-9169), [CVE-2020-0543](https://nvd.nist.gov/vuln/detail/CVE-2020-0543), [CVE-2020-10029](https://nvd.nist.gov/vuln/detail/CVE-2020-10029), [CVE-2020-10711](https://nvd.nist.gov/vuln/detail/CVE-2020-10711), [CVE-2020-13143](https://nvd.nist.gov/vuln/detail/CVE-2020-13143), [CVE-2020-1751](https://nvd.nist.gov/vuln/detail/CVE-2020-1751), and [CVE-2020-1752](https://nvd.nist.gov/vuln/detail/CVE-2020-1752).