RHBA-2020:3193 - Bug Fix Advisory

Topic

Red Hat Fuse 7.7.0 release of 'Fuse on OpenShift' and 'Fuse Online' images.

Description

This advisory makes available the images for Fuse on OpenShift and Fuse Online for Red Hat Fuse 7.7.0.

Solution

This release consists of the following parts:

• Fuse on OpenShift images (provided through the Red Hat container catalog)
• Fuse Online images (provided through the Red Hat container catalog)
• Maven dependencies (provided through the Red Hat Maven repository)

These images are intended for use with the following components:

• Red Hat Fuse version: 7.7.0.fuse-770012-redhat-00003
• Maven archetype version: 2.2.0.fuse-770011-redhat-00003
• Spring Boot 2 Maven archetype version: 2.2.0.fuse-sb2-770017-redhat-00001

To update your Maven POM file for the new-style BOM:

• redhat-fuse BOM Version: 7.7.0.fuse-770012-redhat-00003

The base URL for the Fuse on OpenShift image streams and templates in this release is:
https://github.com/jboss-fuse/application-templates/tree/application-templates-2.1.0.fuse-770012-redhat-00004

The base URL for the Spring Boot 2 templates in this release is:
https://raw.githubusercontent.com/jboss-fuse/application-templates/application-templates-2.1.0.fuse-sb2-770017-redhat-00001

In this release, the Fuse on OpenShift images are distributed through the registry.redhat.io image registry. This is a secure registry that requires you to create authentication credentials in your OpenShift cluster before you can install the images.
For more details, see https://access.redhat.com/documentation/en-us/red_hat_fuse/7.7/html-single/fuse_on_openshift_guide/index#configure-container-registry.

To install the Fuse on OpenShift image streams, log in to OpenShift as an administrator and enter the following command:

oc create -n openshift -f \
https://raw.githubusercontent.com/jboss-fuse/application-templates/application-templates-2.1.0.fuse-770012-redhat-00004/fis-image-streams.json

And to install the Fuse on OpenShift templates, enter the following command:

for template in eap-camel-amq-template.json \
eap-camel-cdi-template.json \
eap-camel-cxf-jaxrs-template.json \
eap-camel-cxf-jaxws-template.json \
eap-camel-jpa-template.json \
karaf-camel-amq-template.json \
karaf-camel-log-template.json \
karaf-camel-rest-sql-template.json \
karaf-cxf-rest-template.json \
spring-boot-camel-amq-template.json \
spring-boot-camel-config-template.json \
spring-boot-camel-drools-template.json \
spring-boot-camel-infinispan-template.json \
spring-boot-camel-rest-sql-template.json \
spring-boot-camel-teiid-template.json \
spring-boot-camel-template.json \
spring-boot-camel-xa-template.json \
spring-boot-camel-xml-template.json \
spring-boot-cxf-jaxrs-template.json \
spring-boot-cxf-jaxws-template.json ;
do
oc create -n openshift -f \
https://raw.githubusercontent.com/jboss-fuse/application-templates/application-templates-2.1.0.fuse-770012-redhat-00004/quickstarts/${template}
done

To install the templates for Fuse Console (Hawtio), enter the following commands:

oc create -n openshift -f https://raw.githubusercontent.com/jboss-fuse/application-templates/application-templates-2.1.0.fuse-770012-redhat-00004/fis-console-cluster-template.json oc create -n openshift -f https://raw.githubusercontent.com/jboss-fuse/application-templates/application-templates-2.1.0.fuse-770012-redhat-00004/fis-console-namespace-template.json

To install the template for Apicurito, enter the following command:

oc create -n openshift -f https://raw.githubusercontent.com/jboss-fuse/application-templates/application-templates-2.1.0.fuse-770012-redhat-00004/fuse-apicurito.yml

Affected Products

• Red Hat OpenShift Container Platform 3.11 x86_64
• Red Hat OpenShift Container Platform 3.10 x86_64

Fixes

CVEs

• CVE-2015-2716
• CVE-2015-8035
• CVE-2016-5131
• CVE-2017-15412
• CVE-2017-18258
• CVE-2018-10360
• CVE-2018-14404
• CVE-2018-14567
• CVE-2018-20852
• CVE-2019-3820
• CVE-2019-5436
• CVE-2019-9924
• CVE-2019-13232
• CVE-2019-16056
• CVE-2020-12049
• CVE-2020-14556
• CVE-2020-14577
• CVE-2020-14578
• CVE-2020-14579
• CVE-2020-14583
• CVE-2020-14593
• CVE-2020-14621

References

(none)