vania-janet/multiturn-rag-retrieval-data huggingface dataset:
* [Change log for version 4.3.8_1705 released 11 November 2022](https://cloud.ibm.com/docs/containers?topic=containers-vpc_bs_changelog4.3.8_1705_is_block_relnote)
* [Change log for version 4.3.7_1613, released 22 September 2022](https://cloud.ibm.com/docs/containers?topic=containers-vpc_bs_changelog4.3.7_1613_is_block_relnote)
* [Change log for version 4.3.6_1579, released 12 September 2022](https://cloud.ibm.com/docs/containers?topic=containers-vpc_bs_changelog436_1579_is_block_relnote)
* [Change log for version 4.3.5_1563, released 24 August 2022](https://cloud.ibm.com/docs/containers?topic=containers-vpc_bs_changelog435_1563_is_block_relnote)
* [Change log for version 4.3.4_1551, released 18 July 2022](https://cloud.ibm.com/docs/containers?topic=containers-vpc_bs_changelog434_1551_is_block_relnote)
* [Change log for version 4.3.2_1441, released 17 June 2022](https://cloud.ibm.com/docs/containers?topic=containers-vpc_bs_changelog432_1441_is_block_relnote)
* [Change log for version 4.3.0_1163, released 25 May 2022](https://cloud.ibm.com/docs/containers?topic=containers-vpc_bs_changelog430_1163_is_block_relnote)



* [Version 4.2](https://cloud.ibm.com/docs/containers?topic=containers-vpc_bs_changelog042_is_block)
: Disables [protocol sniffing and detection](https://istio.io/latest/docs/ops/configuration/traffic-management/protocol-selection/).
: Improves the termination sequence for rolling updates of ingress and egress gateways.





 Change log for 1.4.2, released 16 December 2020 

Review the changes that are in version 1.4.2 of the managed Istio add-on.

Previous version
: 1.4.0

Current version
: 1.4.2

Updates in this version
: See the Istio release notes for [Istio 1.4.2](https://istio.io/latest/news/releases/1.4.x/announcing-1.4.2/).
: Resolves the following CVEs



* [CVE-2019-18801](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18801)
* [CVE-2019-18802](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18802)
* [CVE-2019-18838](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18838)



: For more information, see the [Istio security bulletin](https://istio.io/latest/news/security/istio-security-2019-007/).
Changes since version 4.3.40_1550_openshift

 Component Previous Current Description 

 Cluster health image v1.1.13 v1.1.16 Updated image to implement additional IBM security controls. 
 Gateway-enabled cluster controller 1184 1195 Updated image for [CVE-2020-1971](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1971). 
 IBM Calico extension 556 567 Updated image to implement additional IBM security controls and for [CVE-2020-1971](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1971) and [CVE-2020-24659](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24659). 
 IBM Cloud Block Storage driver and plug-in v2.0.0 v2.0.1 Updated image for [CVE-2020-1971](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1971) and [CVE-2020-24659](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24659). 
 IBM Cloud Controller Manager v1.17.16-1 v1.17.17-1 Updated to support the Kubernetes 1.17.17 release. 
 IBM Cloud File Storage for Classic plug-in and monitor 384 385 Updated image for [CVE-2020-1971](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1971) and [CVE-2020-24659](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24659).
Updated image to implement additional IBM security controls and for [CVE-2021-3449](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449), [CVE-2021-3450](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450), and [CVE-2021-20305](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20305). 
 Cluster master operations N/A N/A Resolved a Red Hat OpenShift API server target down alert on clusters that are updated from version 4.4 or earlier. 
 IBM Cloud Block Storage for Classic driver and plug-in v2.0.1 v2.0.3 Updated to use Go version 1.15.9 and for [CVE-2020-28851](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28851). 
 IBM Cloud Controller Manager v1.18.17-1 v1.18.18-1 Updated to support the Kubernetes 1.18.18 release. 
 IBM Cloud File Storage for Classic plug-in and monitor 389 390 Updated to use Go version 1.15.9 and for [CVE-2020-28851](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28851), and [CVE-2021-3121](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3121).
* [usn-4760-1](https://ubuntu.com/security/notices/USN-4760-1/)
* [usn-4891-1](https://ubuntu.com/security/notices/USN-4891-1/)
* [usn-4898-1](https://ubuntu.com/security/notices/USN-4898-1/).



: For more information, see the [Istio security bulletin 2021-003](https://istio.io/latest/news/security/istio-security-2021-003/).





 Change log for 1.8.4, released 23 March 2021 

Review the changes that are in version 1.8.4 of the managed Istio add-on.

Previous version
: 1.8.3

Current version
: 1.8.4

Updates in this version
: See the Istio release notes for [Istio 1.8.4](https://istio.io/latest/news/releases/1.8.x/announcing-1.8.4/).
: Resolves the following CVEs



* [CVE-2021-23840](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840)
* [CVE-2021-23841](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841)
* [CVE-2020-27619](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27619)
* [CVE-2021-3177](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3177)







 Change log for 1.8.3, released 1 March 2021
* Resolves [CVE-2021-36221](https://nvd.nist.gov/vuln/detail/CVE-2021-36221), [CVE-2021-29923](https://nvd.nist.gov/vuln/detail/CVE-2021-29923), and [CVE-2021-33196](https://nvd.nist.gov/vuln/detail/CVE-2021-33196).
* Updates the UBI to 8.4-210.
* Includes the ibmc plug-in version 2.0.7.
* Pulls the Golang base image from artifactory.
* Includes endpoint updates for jp-tok and uk-south.
* Updates location constraints for Sao Paulo 01. New constraints are br-sao-standard, br-sao-vault, br-sao-cold, and br-sao-smart. For more information, see [Storage classes](https://cloud.ibm.com/docs/cloud-object-storage?topic=cloud-object-storage-classes).
* Allows deployments to the kube-system namespace when bucketAccessPolicy is enabled.
* Supports dynamic provisioning for non-default regions in AWS s3 instance.







 Change log for version 2.1.4, released 1 September 2021 



* Image tags: 1.8.33
* Fixes a timeoutSeconds issue in the livenessProbe and readinessProbe.
* Updates the Golang version to v1.17.
* Updates the UBI image to 8.4-208.
* Migrates the image from the ibmcom public registry to the icr.io/cpopen registry.
A known issue exists with validation when you deploy by using projects. For more information, see [Validation fails in projects with version 4.1.1 and later](https://cloud.ibm.com/docs/secure-infrastructure-vpc?topic=secure-infrastructure-vpc-known-issueski-project-val-fail).







 June 2023 



 01 June 2023 

Version 4.0.0 of the landing zone deployable architectures available
: Version 4.0.0 of the landing zone deployable architectures is available in the IBM Cloud [catalog](https://cloud.ibm.com/catalogreference_architecture).

By default, the default VPC security group and ACLs are removed. Because the landing zone deployable architectures create security groups, the VPC defaults are not needed and might be more permissive than required.

To prevent the default group and rules from being removed, specify your VPC configuration by using an override block. Add the clean_default_security_group and clean_default_acl properties set to false to the block. For example, if you deploy with projects, edit the override_json_string optional variable as in the following example:

"vpcs": [
{
"prefix": "management",
"clean_default_security_group": false,
"clean_default_acl": false,
. . . the rest of your VPC configuration
}]

For more information about implementing the Terraform logic, see the [release notes](https://github.com/terraform-ibm-modules/terraform-ibm-landing-zone/releases/tag/4.0.0) on GitHub.







 May 2023 



 18 May 2023 

Version 3.8.3 of the landing zone deployable architectures available
: Version 3.8.3 of the landing zone deployable architectures is available in the IBM Cloud [catalog](https://cloud.ibm.com/catalogreference_architecture). This version fixes the issue that prevented deletion of the SSH key in the VSI on VPC landing zone.
* [Change log for version 4.4.5_1371, released 13 June 2022](https://cloud.ibm.com/docs/openshift?topic=openshift-vpc_bs_changelog445_1371_is_block_relnote)



* [Version 4.3](https://cloud.ibm.com/docs/openshift?topic=openshift-vpc_bs_changelog043_is_block)



* [Change log for version 4.3.8_1705 released 11 November 2022](https://cloud.ibm.com/docs/openshift?topic=openshift-vpc_bs_changelog4.3.8_1705_is_block_relnote)
* [Change log for version 4.3.7_1613, released 22 September 2022](https://cloud.ibm.com/docs/openshift?topic=openshift-vpc_bs_changelog4.3.7_1613_is_block_relnote)
* [Change log for version 4.3.6_1579, released 12 September 2022](https://cloud.ibm.com/docs/openshift?topic=openshift-vpc_bs_changelog436_1579_is_block_relnote)
* [Change log for version 4.3.5_1563, released 24 August 2022](https://cloud.ibm.com/docs/openshift?topic=openshift-vpc_bs_changelog435_1563_is_block_relnote)
* [Change log for version 4.3.4_1551, released 18 July 2022](https://cloud.ibm.com/docs/openshift?topic=openshift-vpc_bs_changelog434_1551_is_block_relnote)
* [Change log for version 4.3.0_1163, released 25 May 2022](https://cloud.ibm.com/docs/containers?topic=containers-vpc_bs_changelog430_1163_is_block_relnote)



* [Version 4.2](https://cloud.ibm.com/docs/containers?topic=containers-vpc_bs_changelog042_is_block)



* [Change log for version 4.2.6_1161, released 12 May 2022](https://cloud.ibm.com/docs/containers?topic=containers-vpc_bs_changelog426_1161_is_block_relnote)
* [Change log for version 4.2.5_1106, released 12 May 2022](https://cloud.ibm.com/docs/containers?topic=containers-vpc_bs_changelog425_1106_is_block_relnote)
* [Change log for version 4.2.3_983, released 11 April 2022](https://cloud.ibm.com/docs/containers?topic=containers-vpc_bs_changelog423_983_is_block_relnote)
* [Change log for version 4.2.2_900, released 24 March 2022](https://cloud.ibm.com/docs/containers?topic=containers-vpc_bs_changelog422_900_is_block_relnote)
* [Change log for version 4.2.1_895, released 17 March 2022](https://cloud.ibm.com/docs/containers?topic=containers-vpc_bs_changelog421_895_is_block_relnote)
* [Change log for version 4.2.0_890, released 28 February 2022](https://cloud.ibm.com/docs/containers?topic=containers-vpc_bs_changelog420_890_is_block_relnote)
IBM Cloud Controller Manager v1.19.3-3 v1.19.4-1 Updated to support the Kubernetes 1.19.4 release. Updated image for [DLA-2424-1](https://www.debian.org/lts/security/2020/dla-2424). 
 IBM Cloud RBAC Operator 31c794a 197bc70 Updated image for [CVE-2019-20454](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20454), [CVE-2020-10029](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10029), [CVE-2020-1751](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1751), [CVE-2020-1752](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1752), [CVE-2019-20807](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20807), [CVE-2019-16935](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16935), [CVE-2019-20907](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20907), [CVE-2020
etcd v3.4.3 v3.4.7 See the [etcd release notes](https://github.com/etcd-io/etcd/releases/v3.4.7). 
 Gateway-enabled cluster controller 1045 1082 Updated image for [CVE-2020-1967](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1967). 
 IBM Calico extension 320 349 Updated image for [CVE-2020-1967](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1967). 
 IBM Cloud Controller Manager v1.17.4-3 v1.17.5-1 Updated to support the Kubernetes 1.17.5 release and to use Go version 1.13.9. 
 IBM Cloud File Storage for Classic plug-in and monitor 358 371 Updated image for [CVE-2020-1967](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1967). 
 Load balancer and load balancer monitor for IBM Cloud Provider 177 206 Improved application logging. Updated image for [CVE-2020-1967](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1967). 
 Red Hat OpenShift 4.3.12-x86_64 4.3.18-x86_64 See the [Red Hat OpenShift release notes](https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html). 
 Red Hat OpenShift Console configuration N/A N/A Fixed a problem that might leave the Red Hat OpenShift Console inaccessible after a cluster master operation.
* Resolves the following CVEs: [CVE-2022-32206](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206), [CVE-2022-32208](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208), [CVE-2022-2526](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2526).







 Change log for version 4.3.5_1563, released 24 August 2022 



* Updates Golang to version 1.18.5
* Updates the storage-secret-sidecar image to v1.1.13
* Resolves the following CVEs: [CVE-2022-1586](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1586), [CVE-2022-2068](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068), [CVE-2022-1292](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292), [CVE-2022-2097](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097).







 Change log for version 4.3.4_1551, released 18 July 2022 



* Updates the storage-secret-sidecar image to v1.1.12
* Updates Golang to version 1.18.3
* Updates UBI image to version 8.6-854
* Improves secret watcher in case of secret update.
* Fixes an issue where volume mounting on node fails with already mounted error.
* Resolves the following CVEs: [CVE-2022-43680](https://nvd.nist.gov/vuln/detail/CVE-2022-43680), [CVE-2022-42010](https://nvd.nist.gov/vuln/detail/CVE-2022-42010), [CVE-2022-42011](https://nvd.nist.gov/vuln/detail/CVE-2022-42011), [CVE-2022-42012](https://nvd.nist.gov/vuln/detail/CVE-2022-42012), [CVE-2022-3821](https://nvd.nist.gov/vuln/detail/CVE-2022-3821), [CVE-2022-35737](https://nvd.nist.gov/vuln/detail/CVE-2022-35737), [CVE-2021-46848](https://nvd.nist.gov/vuln/detail/CVE-2021-46848).







 Change log for version 2.2.7, released 5 January 2023 



* Renames flex StorageClasses to Smart StorageClasses
* Updates GoLang to 1.18.9
* Resolves [CVE-2022-41717](https://nvd.nist.gov/vuln/detail/CVE-2022-41717) and [CVE-2022-41720](https://nvd.nist.gov/vuln/detail/CVE-2022-41720)



Because this change affects storage classes, you must uninstall and reinstall the 2.2.7 chart so the new storage classes are created in your cluster. This change is not automatically applied to existing PVCs and pods. You must create new PVCs with the new storage classes for the changes to take effect.





 Change log for version 2.2.6, released 15 December 2022
The [VPC Instance Metadata API](https://cloud.ibm.com/apidocs/vpc-metadata) does not yet support reserved IP addresses. Clients that use the metadata API do not require changes to use version 2022-03-29 or later.



 Action needed 

Before the client specifies version 2022-03-29 or later, follow these actions to avoid regressions in client functionality.



 Migrating use of IP addresses 

Before you migrate a client to API version 2022-03-29 or later, review your code for any use of the primary_ipv4_address property. As shown in the [examples](https://cloud.ibm.com/docs/vpc?topic=vpc-2022-03-29-migrationexamples), as of version 2022-03-29, the primary_ipv4_address string property is replaced by the primary_ip object property, which includes an address sub-property. Therefore, you need to change all instances of primary_ipv4_address to primary_ip.address in the manner appropriate for your programming language.

While primary_ipv4_address appears only in the NetworkInterface, NetworkInterfaceReference, and NetworkInterfacePrototype schemas (and their closely related BareMetalNetworkInterface schemas), those schemas are used extensively in the VPC API. Therefore, even though the incompatible change is limited to the primary_ipv4_address property, many operations have been affected. See [Changed operations](https://cloud.ibm.com/docs/vpc?topic=vpc-2022-03-29-migrationchanged-operations) for a complete list.





 Migrating use of security group associations 

As part of the [2021-02-23 release](https://cloud.ibm.com/docs/vpc?topic=vpc-api-change-log23-february-2021), security group target methods were made available, and the original methods specific to network interfaces were deprecated. API version 2022-03-29 removes support for those deprecated methods.
Trusted compute agent 5f3d092 a02f765 Updated image for [CVE-2018-10779](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10779), [CVE-2018-12900](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12900), [CVE-2018-17000](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17000), [CVE-2018-19210](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19210), [CVE-2019-6128](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6128), and [CVE-2019-7663](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7663). 







 Change log for 1.13.4_1510, released 4 March 2019 

The following table shows the changes that are in the patch 1.13.4_1510.



Table 1. Changes since version 1.13.2_1509

 Component Previous Current Description 

 Cluster DNS provider N/A N/A Increased Kubernetes DNS and CoreDNS pod memory limit from 170Mi to 400Mi to handle more cluster services. 
 GPU device plug-in and installer eb3a259 e32d51c Updated images for [CVE-2019-6454](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6454). 
 IBM Cloud Provider v1.13.2-62 v1.13.4-86 Updated to support the Kubernetes 1.13.4 release.
* [Change log for version 4.4.10_1578, released 13 September 2022](https://cloud.ibm.com/docs/containers?topic=containers-vpc_bs_changelog4.4.10_1578_is_block_relnote)
* [Change log for version 4.4.9_1566, released 25 August 2022](https://cloud.ibm.com/docs/containers?topic=containers-vpc_bs_changelog4.4.9_1566_is_block_relnote)
* [Change log for version 4.4.8_1550, released 18 July 2022](https://cloud.ibm.com/docs/containers?topic=containers-vpc_bs_changelog4.4.8_1550_is_block_relnote)
* [Change log for version 4.4.6_1446, released 24 June 2022](https://cloud.ibm.com/docs/containers?topic=containers-vpc_bs_changelog4.4.6_1446_is_block_relnote)
* [Change log for version 4.4.5_1371, released 13 June 2022](https://cloud.ibm.com/docs/containers?topic=containers-vpc_bs_changelog445_1371_is_block_relnote)



* [Version 4.3](https://cloud.ibm.com/docs/containers?topic=containers-vpc_bs_changelog043_is_block)



* [Change log for version 4.3.8_1705 released 11 November 2022](https://cloud.ibm.com/docs/containers?topic=containers-vpc_bs_changelog4.3.8_1705_is_block_relnote)
* [Change log for version 4.3.7_1613, released 22 September 2022](https://cloud.ibm.com/docs/containers?topic=containers-vpc_bs_changelog4.3.7_1613_is_block_relnote)
* [Change log for version 4.3.5_1563, released 24 August 2022](https://cloud.ibm.com/docs/openshift?topic=openshift-vpc_bs_changelog435_1563_is_block_relnote)
* [Change log for version 4.3.4_1551, released 18 July 2022](https://cloud.ibm.com/docs/openshift?topic=openshift-vpc_bs_changelog434_1551_is_block_relnote)
* [Change log for version 4.3.2_1441, released 17 June 2022](https://cloud.ibm.com/docs/openshift?topic=openshift-vpc_bs_changelog432_1441_is_block_relnote)
* [Change log for version 4.3.0_1163, released 25 May 2022](https://cloud.ibm.com/docs/openshift?topic=openshift-vpc_bs_changelog430_1163_is_block_relnote)



* [Version 4.2](https://cloud.ibm.com/docs/openshift?topic=openshift-vpc_bs_changelog042_is_block)



* [Change log for version 4.2.6_1161, released 12 May 2022](https://cloud.ibm.com/docs/openshift?topic=openshift-vpc_bs_changelog426_1161_is_block_relnote)
* [Change log for version 4.2.5_1106, released 12 May 2022](https://cloud.ibm.com/docs/openshift?topic=openshift-vpc_bs_changelog425_1106_is_block_relnote)
Updated image to implement additional IBM security controls and for [CVE-2021-3449](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449), [CVE-2021-3450](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450), and [CVE-2021-20305](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20305). 
 OpenVPN client 2.4.6-r3-IKS-301 2.4.6-r3-IKS-386 Updated image to implement additional IBM security controls. 
 OpenVPN Operator image v1.2.0 v1.3.0 Added OpenVPN support to the Red Hat OpenShift API server to support webhooks. Updated image to implement additional IBM security controls and for [CVE-2021-3449](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449), [CVE-2021-3450](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450), and [CVE-2021-20305](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20305). 
 OpenVPN server 2.4.6-r3-IKS-301 2.4.6-r3-IKS-385 Updated image to implement additional IBM security controls. 







 Change log for worker node fix pack 4.4.33_1540_openshift, released 26 April 2021 

The following table shows the changes that are in the worker node fix pack 4.4.33_1540_openshift.
* [CVE-2022-42898](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42898)
* [CVE-2022-28321](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28321)
* [CVE-2022-33070](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33070)
* [CVE-2023-22809](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43551)
* [usn-5788-1](https://ubuntu.com/security/notices/USN-5788-1)
* [usn-5828-1](https://ubuntu.com/security/notices/USN-5828-1)
* [usn-5825-1](https://ubuntu.com/security/notices/USN-5825-1)
* [usn-5811-1](https://ubuntu.com/security/notices/USN-5811-1)







 Change log for 1.15.4, released 10 January 2023 

Previous version
: 1.15.3

Current version
: 1.15.4

Updates in this version
: See the Istio release notes for [Istio 1.15.4](https://istio.io/latest/news/releases/1.15.x/announcing-1.15.4/).
: Fixes a podAntiAffinity label bug where the value was incorrect.
: Resolves the following CVEs:
IBM Cloud® Block Storage for Classic driver and plug-in v2.0.3 v2.0.4 Updated image for [CVE-2021-3449](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449) and [CVE-2021-3450](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450). 
 IBM Cloud Controller Manager v1.19.10-1 v1.19.11-3 Updated to support the Kubernetes 1.19.11 release and to use Go version 1.15.12. 
 IBM Cloud File Storage for Classic plug-in and monitor 390 392 Improved the prerequisite validation logic for provisioning persistent volume claims (PVCs). Updated image to implement additional IBM security controls and for [CVE-2021-20305]([https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20305](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20305){: external}). 
 IBM Cloud RBAC Operator b6a694b 63cd064 Updated image to implement additional IBM security controls and for [CVE-2020-28483](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28483). 
 Key Management Service provider v2.3.3 v2.3.4 Updated image to implement additional IBM security controls and for [CVE-2020-28483](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28483) and [CVE-2020-26160](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26160).