Livepatch Server release notes

The Livepatch Server K8s charm is the recommended method for deploying the Livepatch Server on Kubernetes. The charm configures and runs the Livepatch Server, which serves live kernel patches and associated metadata to clients. Use the latest/stable channel charm for production environments.

v1.20.0

New features

  • Excluded CVEs are now returned grouped by LSN ID when client configuration settings block patches. This integration uses the CVE service, which now exposes LSN information.

  • Database query optimizations for listing patches.

  • More robust input validation rules for API endpoints.

v1.18.1

New features

  • Scripts for migrating Livepatch Server configuration from the old reactive machine charm format to the new format.

  • A new configuration value, PingBucket, determines the Influx bucket for patch ping data. If left blank, pings are sent to the bucket specified by the existing Bucket value for backwards compatibility. This enables separate retention policies for ping data and server KPI metrics.

Bug fixes

  • Fixed a race condition in PostgreSQL patch storage.

v1.17.17

New features

  • UX improvements for the patch-delay and cutoff-date features.

Bug fixes

  • Fixed an issue where the patch sync progress indicator incremented incorrectly when patches were skipped due to errors.

v1.17.12

New features

  • Added caching support for CVE endpoints using hashes and ETag and If-None-Match headers.

  • The timeout for the CVE sync client is now configurable.

  • Security events (authentication, authorization, user and system related) are now logged by the Livepatch Server.