vania-janet/multiturn-rag-retrieval-data huggingface dataset:
About agent versions 

The IBM Cloud Monitoring agent version consists of multiple parts:

X.Y.Z

Where



*  X represents the major version of an image.
*  Y represents the minor version of an image.
*  Z represents an incremental ID that determines the latest patched minor version.



For more information about the agent new features and new versions, see [Sysdig Agent Release Notes](https://docs.sysdig.com/en/docs/release-notes/sysdig-agent-release-notes/).



  End of support 

The IBM Cloud Monitoring service supports n-3 versions back based on the minor number.





  Deprecation 

When an agent version becomes unsupported, the agent version is maintained for vulnerabilities for 3 years. After 3 years, the image is deprecated and unavailable.

Unsupported versions of the IBM Cloud Monitoring agent have a 3-year deprecation policy.





  Determining installed Monitoring agent versions 

Use the Sysdig Agent Health & Status dashboard to determine the IBM Cloud® Monitoring agent versions that you have configured in your hosts.

Complete the following steps:



1.  [Access your Monitoring instance](https://cloud.ibm.com/docs/monitoring?topic=monitoring-launch).
2.  Click ![Dashboard](https://cloud.ibm.com/docs-content/v1/content/220cdcbf6f4421bd7fee83fd1028048dba3f16c8/monitoring/images/dashboards.png).
3.  Click Host Infrastructure > Sysdig Agent Health & Status.



The dashboard displays the agent versions corresponding to each host in the instance.

Zoom

![Sysdig Agent Health & Status dashboard showing agent versions](https://cloud.ibm.com/docs-content/v1/content/220cdcbf6f4421bd7fee83fd1028048dba3f16c8/monitoring/images/agent_version.png)

Figure 1. Sysdig Agent Health & Status dashboard showing agent versions
Review the changes that are in version 1.9.3 of the managed Istio add-on.

Previous version
: 1.9.2

Current version
: 1.9.3

Updates in this version
: See the Istio release notes for [Istio 1.9.3](https://istio.io/latest/news/releases/1.9.x/announcing-1.9.3/).
: Resolves the following CVEs



* [CVE-2021-28683](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28683)
* [CVE-2021-28682](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28682)
* [CVE-2021-29258](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29258)
* [CVE-2021-3449](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449)
* [CVE-2021-22876](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876)
* [CVE-2021-22890](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890)
* [usn-4891-1](https://ubuntu.com/security/notices/USN-4891-1/)
* [usn-4898-1](https://ubuntu.com/security/notices/USN-4898-1/).
* [CVE-2022-4450](https://nvd.nist.gov/vuln/detail/CVE-2022-4450)
* [CVE-2023-0215](https://nvd.nist.gov/vuln/detail/CVE-2023-0215)
* [CVE-2023-0286](https://nvd.nist.gov/vuln/detail/CVE-2023-0286)







 1.3.1_3704_iks, released 30 January 2023 

Updates the golang version to 1.19.5.





 1.3.1_3685_iks, released 24 January 2023 

Introduces support for multiple platform architectures such as AMD64 and s390x.





 1.3.1_3538_iks, released 3 January 2023 



* [CVE-2022-43551](https://nvd.nist.gov/vuln/detail/CVE-2022-43551)
* [CVE-2022-43552](https://nvd.nist.gov/vuln/detail/CVE-2022-43552)







 1.3.1_3298_iks, released 15 December 2022 

[CVE-2022-41717](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41717)





 1.3.1_3192_iks, released 8 December 2022 

Updated the golang version to 1.19.3.





 1.3.1_3108_iks, released 30 November 2022 

Initial release of 1.3.1. For more information, see the [community release documentation](https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v1.3.1).







 Version 1.3.0 (unsupported) 

Version 1.3.0 is no longer supported.
Version 0.33.0_1198_iks, released on 19 April 2021 



* [CVE-2021-20305](https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-20305)
* [CVE-2021-28851](https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-28851)
* [CVE-2021-28852](https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-28852)







 Version 0.33.0_1154_iks, released on 12 April 2021 



* [CVE-2021-3449](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449)
* [CVE-2021-3450](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450)







 Version updates, released on 25 March 2021 

In the ibm-k8s-controller-config ConfigMap, sets the server-tokens field to False so that the NGINX version is not returned in response headers.





 Version 0.33.0_1097_iks, released on 22 March 2021 



* [CVE-2021-3114](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3114)
* [CVE-2021-3115](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3115)







 Version 0.33.0_865_iks, released on 07 January 2021 



* [CVE-2020-28241](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28241).
* [CVE-2022-48303](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48303)
* [CVE-2023-27320](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27320)
* [usn-5964-1](https://ubuntu.com/security/notices/USN-5964-1)
* [usn-5891-1](https://ubuntu.com/security/notices/USN-5891-1)
* [usn-5901-1](https://ubuntu.com/security/notices/USN-5901-1)
* [usn-5900-1](https://ubuntu.com/security/notices/USN-5900-1)
* [usn-5908-1](https://ubuntu.com/security/notices/USN-5908-1)







 Change log for 1.16.3, released 9 March 2023 

Review the changes that are included in version 1.16.3 of the managed Istio add-on.

Previous version
: 1.16.2

Current version
: 1.16.3

Updates in this version
: See the Istio release notes for [Istio 1.16.3](https://istio.io/latest/news/releases/1.16.x/announcing-1.16.3/.).
: Resolves the following CVEs:



* [CVE-2022-28321](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28321)
* [CVE-2023-29402](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29402).
* [CVE-2023-29403](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29403).
* [CVE-2023-29404](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29404).
* [CVE-2023-29405](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29405).
* [CVE-2023-26604](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26604).







 Version 1.0.0_1633, released on 15 June 2023 



* Resolves [CVE-2023-24540](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24540).







 Version 1.0.0_1523, released on 2 May 2023 



* Dependency updates.







 Version 1.0.0_1362, released on 1 March 2023 



* Updates go version to 1.20.1.







 Version 1.0.0_1329, released on 8 February 2023 



* Updates go version to 1.19.5.







 Version 1.0.0_1269, released on 15 December 2022 



* Updates go version to 1.19.4.
* Adds security context changes.







 Version 1.0.0_1200, released on 27 October 2022
: Protocol sniffing is now enabled for Addon-Istio.
: Addon-Istio pods now have a nodeAffinity for amd64 architecture nodes.
: Adjusts how meshConfig sets enableAutoMtls, enableTracing, and protocolDetectionTimeout to their current values. This results in a no operation change because the values are not changing. The only change is whether they are set implicitly or explicitly.
: Sets the security context explicitly in the Istio Operator CR. This results in a no operation change because the values are not changing. The only change is whether they are set implicitly or explicitly.
: Resolves the following CVEs:



* [CVE-2023-1667](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1667)
* [CVE-2023-2283](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2283)
* [usn-6138-1](https://ubuntu.com/security/notices/USN-6138-1)









 Version 1.17 



 Change log for 1.17.3, released 22 June 2023 

Review the changes that are included in version 1.17.3 of the managed Istio add-on.

Previous version
: 1.17.2

Current version
: 1.17.3

Updates in this version
: See the Istio release notes for [Istio 1.17.3](https://istio.io/latest/news/releases/1.17.x/announcing-1.17.3/).
: Resolves the following CVEs:



* [CVE-2019-17594](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17594)
IBM Cloud File Storage for Classic plug-in and monitor 389 390 Updated to use Go version 1.15.9 and for [CVE-2020-28851](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28851) and [CVE-2021-3121](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3121). 
 IBM Cloud RBAC Operator 3dd6bbc b6a694b Updated image for [CVE-2021-3449](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449) and [CVE-2021-3450](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450). 
 Key Management Service provider v2.2.5 v2.3.3 Updated to use Go version 1.15.11. Updated image to implement additional IBM security controls and for [CVE-2021-3449](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449), [CVE-2021-3450](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450), and [CVE-2021-20305](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20305). 
 OpenVPN client 2.4.6-r3-IKS-301 2.4.6-r3-IKS-386 Updated image to implement additional IBM security controls. 
 OpenVPN Operator image v1.2.0 v1.3.0 Added OpenVPN support to the Red Hat OpenShift API server to support webhooks.
* Staging - Staging ensures that the patches and extensions are downloaded to the vSphere ESXi hosts before the remediation and is an optional step to minimize the time hosts are in maintenance mode.
* Remediation - Remediation is the process in which VUM applies patches, extensions, and upgrades to the inventory object or objects.



Therefore, the VUM process is as follows:



* An inventory object, or a group of objects, are scanned for compliance against a baseline or a baseline group.
* After a review, patches and extensions can be optionally staged, before remediated.



The downloading of upgrades, host patches, extensions, and related metadata is a predefined automatic process that can be modified. By default, at regular configurable intervals, VUM contacts VMware or third-party sources to gather the following information about available upgrades, patches, or extensions:



* Metadata about all ESXi 5.5 and ESXi 6.x patches regardless of whether you have hosts of such versions in your environment.
* Metadata about ESXi 5.5 and ESXi 6.x patches and about extensions from third-party vendor URL addresses.
* Notifications, alerts, and patch recalls for ESXi 5.5 and ESXi 6.x hosts.
* Metadata about upgrades for virtual appliances.



VUM supports the recall of patches for hosts that are running ESXi 5.0 or later. A patch is recalled if the released patch has problems or potential issues. After you scan the hosts in your VMware vCenter Server® instance, VUM alerts you if the recalled patch is installed on a certain host. Recalled patches cannot be installed on hosts with VUM. VUM also deletes all the recalled patches from the patch repository. After a patch fix to the problem is released, VUM downloads the new patch to its patch repository. If you installed the problematic patch, VUM notifies you that a fix was released and prompts you to apply the new patch.

The VUM client interface provides the following views:



* Administration view
* Compliance view





 Administration view 

To access the administration view, go to Home > Update Manager and select the IP address of the Update Manager instance.
* Updates the UBI to version 8.7-1085.1679482090.







 Revision 3, released 21 March 2023 



* Resolves the following CVEs: [CVE-2023-23916](https://nvd.nist.gov/vuln/detail/CVE-2023-23916)
* Updates the UBI to version 8.7-1085.
* Updates Go to version 1.19.6.







 Revision 2, released 6 March 2023 



* Resolves the following CVEs: [CVE-2022-4415](https://nvd.nist.gov/vuln/detail/CVE-2022-4415)[CVE-2020-10735](https://nvd.nist.gov/vuln/detail/CVE-2020-10735)[CVE-2021-28861](https://nvd.nist.gov/vuln/detail/CVE-2021-28861)[CVE-2022-45061](https://nvd.nist.gov/vuln/detail/CVE-2022-45061)[CVE-2022-40897](https://nvd.nist.gov/vuln/detail/CVE-2022-40897)[CVE-2022-41723](https://nvd.nist.gov/vuln/detail/CVE-2022-41723)[CVE-2022-41724](https://nvd.nist.gov/vuln/detail/CVE-2022-41724)
* Updates the UBI to version 8.7-1085.
* Updates Go to version 1.19.6.







 Revision 1, released 20 February 2023 



* Resolves the following CVEs: [CVE-2022-47629](https://nvd.nist.gov/vuln/detail/CVE-2022-47629)
* Updates the UBI to version 8.7-1049.1675784874.
VRVDR-55624 Critical IPSec RA server and client not working after upgrade to 2009 or later 
 VRVDR-55367 Critical BMC Health check is very noisy in the system logs, with 5 entries every minute, in a passing state 
 VRVDR-55367 Critical BMC Health check is very noisy in the system logs, with 5 entries every minute, in a passing state 







 Security Vulnerabilities Resolved 



Security vulnerabilities resolved for 2012m

 Issue Number CVSS score Advisory Summary 

 VRVDR-58293 7.8 DSA-5173-1 CVE-2021-4197, CVE-2022-0494, CVE-2022-0812, CVE-2022-0854, CVE-2022-1011, CVE-2022-1012, CVE-2022-1016, CVE-2022-1048, CVE-2022-1184,CVE-2022-1195, CVE-2022-1198, CVE-2022-1199, CVE-2022-1204, CVE-2022-1205, CVE-2022-1353, CVE-2022-1419, CVE-2022-1516, CVE-2022-1652, CVE-2022-1729, CVE-2022-1734, CVE-2022-1974, CVE-2022-1975, CVE-2022-2153, CVE-2022-21123, CVE-2022-21125, CVE-2022-21166, CVE-2022-23960, CVE-2022-26490, CVE-2022-27666, CVE-2022-28356, CVE-2022-28388, CVE-2022-28389, CVE-2022-28390, CVE-2022-29581, CVE-2022-30594, CVE-2022-32250, CVE-2022-32296, CVE-2022-33981: Debian DSA-5173-1: linux – security update
IBM Cloud File Storage for Classic plug-in and monitor 389 390 Updated to use Go version 1.15.9 and for [CVE-2020-28851](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28851), and [CVE-2021-3121](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3121). 
 IBM Cloud RBAC Operator 3dd6bbc b6a694b Updated image for [CVE-2021-3449](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449) and [CVE-2021-3450](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450). 
 Key Management Service provider v2.2.5 v2.3.3 Updated to use Go version 1.15.11. Updated image to implement additional IBM security controls and for [CVE-2021-3449](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449), [CVE-2021-3450](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450), and [CVE-2021-20305](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20305). 
 Red Hat OpenShift 4.5.35 4.5.37 See the [Red Hat OpenShift release notes](https://docs.openshift.com/container-platform/4.5/release_notes/ocp-4-5-release-notes.htmlocp-4-5-37).
* [CVE-2021-3450](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450).







 Version update, released on 25 March 2021 

In the ibm-k8s-controller-config ConfigMap, sets the server-tokens field to False so that the NGINX version is not returned in response headers.





 Version 0.34.1_1096_iks, released on 22 March 2021 



* [CVE-2021-3114](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3114)
* [CVE-2021-3115](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3115)







 Version 0.34.1_866_iks, released on 07 January 2021 



* [CVE-2020-28241](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28241).







 Version 0.34.1_835_iks, released on 17 December 2020 



* [CVE-2020-1971](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1971).







 Version 0.34.1_764_iks, released on 14 December 2020 



* [CVE-2020-28362](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28362)
* [CVE-2020-28367](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28367)
* Resolves the following CVEs: [CVE-2022-4304](https://nvd.nist.gov/vuln/detail/CVE-2022-4304), [CVE-2022-4450](https://nvd.nist.gov/vuln/detail/CVE-2022-4450), [CVE-2023-0215](https://nvd.nist.gov/vuln/detail/CVE-2023-0215), [CVE-2023-0286](https://nvd.nist.gov/vuln/detail/CVE-2023-0286).



Because this update affects regional storage classes, you must uninstall and reinstall the 2.2.13 chart so the new storage classes are created in your cluster. This change primarily impacts single site clusters because the regional storage classes, such as ibmc-s3fs-standard-regional, now point to the single site COS endpoint instead of the regional endpoints. This change is not applied automatically to existing PVCs and pods. You must create new PVCs with the new storage classes for the changes to take effect. For more information on how to update your PVCs, refer to the [Adding object storage to apps](https://cloud.ibm.com/docs/containers?topic=containers-storage_cos_apps) documentation.





 Change log for version 2.2.12, released 20 March 2023 



* Updates Golang to 1.19.7.
* [CVE-2021-20305](https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-20305)
* [CVE-2021-28851](https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-28851)
* [CVE-2021-28852](https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-28852)







 Version 0.35.0_1155_iks, released on 12 April 2021 



* [CVE-2021-3449](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449)
* [CVE-2021-3450](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450)







 Version update, released on 25 March 2021 

In the ibm-k8s-controller-config ConfigMap, sets the server-tokens field to False so that the NGINX version is not returned in response headers.





 Version 0.35.0_1094_iks, released on 22 March 2021 



* [CVE-2021-3114](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3114)
* [CVE-2021-3115](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3115)







 Version 0.35.0_869_iks, released on 07 January 2021 



* [CVE-2020-28241](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28241)







 Version 0.35.0_826_iks, released on 17 December 202
IBM Cloud® Block Storage for Classic driver and plug-in v2.0.3 v2.0.4 Updated image for [CVE-2021-3449](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449) and [CVE-2021-3450](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450). 
 IBM Cloud File Storage for Classic plug-in and monitor 390 392 Improved the prerequisite validation logic for provisioning persistent volume claims (PVCs). Updated image to implement additional IBM security controls and for [CVE-2021-20305](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20305). 
 IBM Cloud RBAC Operator b6a694b 63cd064 Updated image to implement additional IBM security controls and for [CVE-2020-28483](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28483). 
 Key Management Service provider v2.3.3 v2.3.4 Updated image to implement additional IBM security controls and for [CVE-2020-28483](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28483) and [CVE-2020-26160](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26160). 
 Load balancer and load balancer monitor for IBM Cloud Provider 1274 1328 Updated to use Go version 1.15.11.
Providing "region" detail in storage classes is deprecated in this release, this will not cause any issues with either existing PVC or new PVC. For now the default behavior is to get the region detail from the node label only which is now mandatory for all cases.









 Version 4.2 



 Change log for version 4.2.6_1161, released 12 May 2022 



* Updates armada-storage-secret to v1.1.10
* Resolves the following CVEs: [CVE-2021-3634](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3634), [CVE-2021-3737](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3737), [CVE-2021-4189](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4189).







 Change log for version 4.2.5_1106, released 12 May 2022 



* Updates armada-storage-secret to v1.1.9
* Updates the UBI version to 8.5-243.1651231653
* Resolves [CVE-2022-1271](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1271).







 Change log for version 4.2.3_983, released 11 April 2022 



* Updates armada-storage-secret to v1.1.8
* Resolves [CVE-2022-0778](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778).







 Change log for version 4.2.2_900, released 24 March 2022 



* Updates armada-storage-secret to v1.1.7
* [CVE-2022-1304](https://nvd.nist.gov/vuln/detail/CVE-2022-1304)









 Change log for version 5.0.1_1695, released 9 November 2022 



* Updates the storage-secret-sidecar image to v1.2.10
* Updates the csi-node-driver-registrar to v2.5.0
* Updates the livenessprobe to v2.6.0
* Updates the csi-provisioner to v3.2.1
* Updates the csi-attacher to v3.5.0
* Updates the csi-resizer to v1.5.0
* Resolves the following CVEs:



* [CVE-2022-37434](https://nvd.nist.gov/vuln/detail/CVE-2022-37434)
* [CVE-2022-2509](https://nvd.nist.gov/vuln/detail/CVE-2022-2509)
* [CVE-2022-40674](https://nvd.nist.gov/vuln/detail/CVE-2022-40674)
* [CVE-2020-35525](https://nvd.nist.gov/vuln/detail/CVE-2020-35525)
* [CVE-2020-35527](https://nvd.nist.gov/vuln/detail/CVE-2020-35527)
* [CVE-2022-3515](https://nvd.nist.gov/vuln/detail/CVE-2022-3515)









 Change log for version 5.0, released 11 October 2022 



* Adds snapshot support for cluster versions 1.25 and later.
* Makes the resource requests and limits of the vpc-block-csi-driver containers configurable. To view the config run kubectl get cm -n kube-system addon-vpc-block-csi-driver-configmap -o yaml
* VM Hardware Upgrade to Match Host (Predefined) - Checks the virtual hardware of a virtual machine for compliance with the latest version that is supported by the host.
* VA Upgrade to Latest (Predefined) - Checks virtual appliance compliance with the latest released virtual appliance version.



To use baselines and baseline groups, you must attach them to selected inventory objects such as container objects, virtual machines, virtual appliances, or hosts. Although you can attach baselines and baseline groups to individual objects, a more efficient method is to attach them to container objects, such as folders, vApps, clusters or data centers. In this step, we use the predefined baselines against the hosts in the cluster.



1. Using the vSphere® web Client, go to Home > Hosts and Clusters.
2. Click the cluster object that you want to scan.
3. Go to VUM, click Attach Baseline, and then select the two pre-defined Patch Baselines. Click OK.





 Related links 



* [VMware HCX solution architecture](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-hcx-archi-introhcx-archi-intro)
* [IBM Cloud for VMware Solutions Demos](https://www.ibm.com/demos/collection/IBM-Cloud-for-VMware-Solutions/) (demonstrations)
Refer to the following table for a summary of changes for each build of version 0.35.0 of the Kubernetes Ingress image that IBM Cloud Kubernetes Service releases.



 Version 0.35.0_1374_iks, released on 06 July 2021 



* [CVE-2019-20633](https://cve.mitre.org/cgi-bin/cvename.cgi?name=2019-20633).







 Version 0.35.0_1330_iks, released on 21 Jun 2021 



* [CVE-2021-22898](https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-22898)
* [CVE-2021-22897](https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-22897)
* [CVE-2021-22901](https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-22901)
* [CVE-2021-33194](https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-33194)
* [CVE-2021-31525](https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-31525)







 Version 0.35.0_1182_iks, released on 19 April 2021 



* [CVE-2021-20305](https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-20305)
* [CVE-2021-28851](https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-28851)
* [CVE-2021-28852](https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-28852)