RHBA-2023:1653 - Bug Fix Advisory

Topic

This is the multiarch release of the AMQ Broker 7.11.0 aligned Operator and associated container images on Red Hat Enterprise Linux 8 for the OpenShift Container Platform.

Description

Red Hat Middleware for OpenShift provides images for many of the Red Hat Middleware products for use within the OpenShift Container Platform cloud computing Platform-as-a-Service (PaaS) for on-premise or private cloud deployments.

For information on supported configurations, see Red Hat AMQ Broker 7 Supported Configurations at https://access.redhat.com/articles/2791941

Solution

To update to the latest image please refer to the AMQ container images in the Red Hat Container catalog.

Affected Products

• Red Hat JBoss Middleware 1 x86_64
• Red Hat OpenShift Container Platform for Power 4.10 for RHEL 8 ppc64le
• Red Hat OpenShift Container Platform for ARM 64 4.10 aarch64

Fixes

• ENTMQBR-6374 - [Operator] Expose custom annotations in deployment spec
• ENTMQBR-6586 - [docs] Document how to manage user's passwords in a secret using ActiveMQArtemisSecurity CR?
• ENTMQBR-6684 - address and security CRD not synced
• ENTMQBR-6776 - Operator still does not honor broker version if upgrades are not enabled
• ENTMQBR-6881 - Version is ignored if Upgrade is set to false
• ENTMQBR-7054 - consoleDomain.name in ActiveMQArtemisSecurity is not reflected in artemis.profile ( -Dhawtio.realm is not changed)
• ENTMQBR-7105 - The update of spec.version in ActiveMQArtemis CR doesn't trigger the rolling update strategy
• ENTMQBR-7151 - Log messages on controller_v1beta1activemqartemisscaledown skipping namespaces should have DEBUG level, not INFO
• ENTMQBR-7354 - ActiveMQArtemisAddress does not persist after a restart on AMQ operator pods and the broker pods
• ENTMQBR-7377 - AMQ Broker CR instance cannot be cascade-deleted without graceful shutdown
• ENTMQBR-7715 - OLM Operator rename from "AMQ Broker Operator" to "ControllerManager"

CVEs

• CVE-2020-10735
• CVE-2021-28861
• CVE-2022-4304
• CVE-2022-4415
• CVE-2022-4450
• CVE-2022-40897
• CVE-2022-45061
• CVE-2022-48303
• CVE-2023-0215
• CVE-2023-0286
• CVE-2023-23916

References

• https://access.redhat.com/documentation/en-us/red_hat_amq_broker/