RHBA-2020:0511 - Bug Fix Advisory

Topic

This is an updated release of the AMQ Broker container image based on the standalone 7.4.2 release, for deployment on OpenShift Container Platform. It contains updates related to SQLite CVE.

Description

Red Hat Middleware for OpenShift provides images for many of the Red Hat Middleware products for use within the OpenShift Container Platform cloud computing Platform-as-a-Service (PaaS) for on-premise or private cloud deployments.

This image can be used with OpenShift Container Platform 3.9+, or 4.1.

Solution

To update to the latest image, perform the following steps:

1. On your master host(s), ensure you are logged into the CLI as a cluster
administrator or user that has project administrator access to the global
"openshift" project. For example:

$ oc login -u system:admin

2. Run the following commands to update the core set of OpenShift image streams in the "openshift" project:

$ oc create -n openshift -f \
https://raw.githubusercontent.com/jboss-container-images/jboss-amq-7-broker-openshift-image/74-7.4.2.GA/amq-broker-7-image-streams.yaml $ oc replace -n openshift -f \
https://raw.githubusercontent.com/jboss-container-images/jboss-amq-7-broker-openshift-image/74-7.4.2.GA/amq-broker-7-image-streams.yaml

Note that you will receive warnings about items that already exist when issuing the first command; this is expected.

3. Run the following commands to update / import the AMQ Broker templates, for OpenShift in the "openshift" project:

for resource in amq-broker-74-basic.yaml \
amq-broker-74-ssl.yaml \
amq-broker-74-custom.yaml \
amq-broker-74-persistence.yaml \
amq-broker-74-persistence-ssl.yaml \
amq-broker-74-persistence-clustered.yaml \
amq-broker-74-persistence-clustered-ssl.yaml;
do
oc replace -n openshift --force -f https://raw.githubusercontent.com/jboss-container-images/jboss-amq-7-broker-openshift-image/74-7.4.2.GA/templates/${resource}
done

4. Run the following command to install the AMQ Broker 7.4 OpenShift image streams in the "openshift" project:

$ oc -n openshift import-image amq-broker:7.4

Affected Products

• Red Hat OpenShift Container Platform 3.11 x86_64

Fixes

CVEs

• CVE-2019-13734
• CVE-2020-2583
• CVE-2020-2590
• CVE-2020-2593
• CVE-2020-2601
• CVE-2020-2604
• CVE-2020-2654
• CVE-2020-2659

References

• https://access.redhat.com/documentation/en-us/red_hat_amq/