Skip to content

Latest commit

 

History

History
212 lines (149 loc) · 9.3 KB

CHANGELOG.md

File metadata and controls

212 lines (149 loc) · 9.3 KB
Raw

Change log

9.4.0.5-r1 (2024-09)

  • Updated to MQ version 9.4.0.5
  • Changed build Dockerfile to reduce file duplication across image layers

9.4.0.0-r3 (2024-07)

  • Fix to diable FIPS mode for runmqakm key store generation, when FIPS is not enabled
  • Fix APAR IT46430

9.4.0.0 (2024-06)

  • Updated to MQ version 9.4.0.0
  • Based on Red Hat Universal Base Image 9.4-949.1716471857.
    • Note UBI 9 has pending FIPS 140-3 certification. UBI 9 is not supported on the POWER 8 architecture.
  • Added new optional value "mqsc" for the environment variable MQ_LOGGING_CONSOLE_SOURCE. This will reflect the contents of autocfgmqsc.LOG.
  • Environment variables MQ_ADMIN_PASSWORD and MQ_APP_PASSWORD are deprecated for the MQ Advanced for Developers image. Secrets should be used to set the passwords for app and admin users.
  • MQ Advanced for Developers image will no longer use mq.htpasswd file for the MQ Authorization Service. Secrets will be used to authorize the app and admin users.
  • chkmqstarted command updated for Native-HA deployments to additionally check if the queue manager instance is in-sync with one or more replicas.
  • New Model Queue DEV.APP.MODEL.QUEUE defined for MQ Advanced for Developers image with BROWSE, DISPLAY, GET, INQUIRE, PUT Authority for user app.

9.3.5.0 (2024-02)

  • Updated to MQ version 9.3.5.0

Security Fixes

  • Fixed a security issue, where unencrypted credentials in mqwebuser.xml would be copied to /var/mqm. A symbolic link is now used instead.
  • golang.org/x/crypto library has been upgraded to remediate CVE-2023-48795 vulnerability.
  • More secure sha512 algorithm will be used instead of sha256 to create self signed Certificate in the Web keystore.
  • The MQ container generates a PKCS#12 key store for use with the MQ web server.This keystore is generated using a legacy SHA-1 encryption,container code has been updated to use Pkcs12.Modern.Encode function which uses SHA-2 encryption.
  • Vulnerability has been reported on PathTraversal method usages which now have been fixed.

9.3.4.0 (2023-12)

  • Updated to MQ version 9.3.4.0
  • Fixed the signal handler so that it correctly processes control signals if a termination signal is received before startup is complete
  • The default value for the environment variable MQ_LOGGING_CONSOLE_SOURCE is now "qmgr,web" instead of "qmgr".
  • Removed MQ Explorer and MQ SDK samples from the "incubating" folder. IBM MQ Explorer was removed from the IBM MQ install package in 9.3.0.

9.3.3.2-r1 (2023-10)

  • Updated to MQ version 9.3.3.0

9.3.3.1-r1 (2023-08)

  • Updated to MQ version 9.3.3.0

9.3.3.0-r2 (2023-07)

  • Updated to MQ version 9.3.3.0

9.3.3.0 (2023-06)

  • Updated to MQ version 9.3.3.0

9.3.2.0 (2023-02)

  • Updated to MQ version 9.3.2.0
  • Queue manager certificates with the same Subject Distinguished Name (DN) as the issuer (CA) certificate are not supported. A certificate must have a unique Subject Distinguished Name.
  • New logging environment variables: MQ_LOGGING_CONSOLE_SOURCE, MQ_LOGGING_CONSOLE_FORMAT, MQ_LOGGING_CONSOLE_EXCLUDE_ID. The LOG_FORMAT variable is deprecated.
  • New environment variable: MQ_QMGR_LOG_FILE_PAGES

9.3.1.0-r2 (2022-11)

  • Queue manager attribute SSLKEYR is now set to blank instead of '/run/runmqserver/tls/key' if key and certificate are not supplied.

9.3.1.0 (2022-10)

  • Updated to MQ version 9.3.1.0

9.3.0.0 (2022-06)

  • Updated to MQ version 9.3.0.0
  • Use registry.access.redhat.com instead of registry.redhat.io, so that you don't need to login with a Red Hat account.
  • Updated default developer config to use TLS cipher ANY_TLS12_OR_HIGHER instead of ANY_TLS12
  • Added default jvm.options file fix issue with missing preferences file causing an error in the web server log.
  • Updated to allow building image from Podman on macOS (requires Podman 4.1)
  • Container builds are now faster
  • Updated signal handling to use a buffer, as recommended by the Go 1.17 vetting tool

9.2.5.0 (2022-03)

  • Updated to MQ version 9.2.5.0

9.2.4.0 (2021-11)

  • Updated to MQ version 9.2.4.0

9.2.3.0 (2021-07-22)

  • Updated to MQ version 9.2.3.0

9.2.2.0 (2021-03-26)

  • Updated to MQ version 9.2.2.0

9.2.1.0 (2020-02-18)

  • Updated to MQ version 9.2.1.0

9.2.0.1-LTS (2020-12-04)

  • Added support for MQ Long Term Support (production licensed only) in the mq-container

9.2.0.0 (2020-07-23)

  • Updated to MQ version 9.2.0.0
  • Use -ic arguments with crtmqm to process MQSC files in /etc/mqm. Replaces previous use of "runmqsc" commands

9.1.5.0 (2020-04-02)

  • Updated to MQ version 9.1.5.0
  • Can now run as a random user, instead of the "mqm" user, which has now been removed. This adds compatability for the Red Hat OpenShift restricted SCC. The default image UID is 1001.

9.1.4.0 (2019-12-06)

  • Updated to MQ version 9.1.4.0
  • Updated to use UBI8 as base image
  • Added required security settings to self signed certificates to align with macOS Catalina requirements

9.1.3.0 (2019-07-19)

  • Updated to MQ version 9.1.3.0
  • Allow generation of TLS certificate with given hostname
  • Fixes for the following issues:
    • MQ_EPHEMERAL_PREFIX UNIX sockets fix
    • Fix Makefile for Windows
    • Use -a option on crtmqdir
    • Remove check for certificate environment variable

9.1.2.0-UBI (2019-06-21)

Breaking changes:

  • UID of the mqm user is now 888. You need to run the container with an entrypoint of runmqserver -i under the root user to update any existing files.
  • MQSC files supplied will be verified before being run. Files containing invalid MQSC will cause the container to fail to start

Other changes:

  • Security fixes
  • Web console added to production image
  • Container built on RedHat host

9.1.2.0 (2019-03-21)

  • Updated to MQ version 9.1.2.0
  • Now runs using the "mqm" user instead of root. See new security doc
  • New IGNSTATE parameter used in default developer config
  • Termination log moved from /dev/termination-log to /run/termination-log, to make permissions easier to handle
  • Fixes for the following issues:
    • Brackets no longer appear in termination log
    • Test timeouts weren't being used correctly
    • Building on subscribed and unsubscribed hosts (#273)
    • Gosec failures (#286)
    • Security fix for perl-base (#253)

9.1.1.0 (2018-11-30)

  • Updated to MQ version 9.1.1.0
  • Created seperate RedHat Makefile for building images on RedHat machines with buildah
  • Enabled REST messaging capability for app user.
  • Added support for container supplementary groups
  • Removed IBM MQ version 9.0.5 details.
  • Added additional Diagnostics (#203)
  • Implementted GOSec to perform code scans for security vulnerabilities. ((#227))
  • Removed Queue manager create option from the MQ Console.
  • Fixes for the following issues:
    • Check explicitly for /mnt/mqm (#175)
    • Force string output in chkmqhealthy (#174)
    • Use -aG not -G when adding a group for a user
    • Security fixes for libsystemd0 systemd systemd-sysv & libudev1

9.1.0.0 (2018-07-23)

  • Updated to MQ version 9.1.0.0
  • Added Docker 1.12 tests
  • Added MQ SDK Docker image sample
  • Added MQ Golang SDK Docker image sample
  • Added Prometheus metric gathering implementation
  • Added MQ Internet Pass-Thru (MS81) Docker image sample
  • Added POWER & z/Linux image builds
  • devjmstest image now built with Maven instead of gradle
  • Added FAT manifests for Docker Hub/Docker Store
  • Added Red Hat Enterprise Linux image build
  • Added basic versioning debug information into golang programs
  • Removed 9.0.4

9.0.5.0 (2018-03-13)

  • Updated to MQ version 9.0.5.0
  • Container's stdout can now be set to JSON format (set LOG_FORMAT=json)
  • MQ error logs (in JSON or plain text) are now mirrored on stdout for the container.
  • chkmqready now waits until MQSC scripts in /etc/mqm have been applied
  • chkmqready and chkmqhealthy now run as the "mqm" user
  • Added ability to optionally use an alternative base image
  • Various build and test improvements
  • Removed 9.0.3

9.0.4 (2017-11-06)

  • Updated to MQ version 9.0.4.0
  • Updated to Go version 9
  • Removed packages curl, ca-certificates, and their dependencies, which were only used at build time
  • Improved logging
  • Helm charts now work on Kubernetes V1.6
  • Production Helm chart now includes a default image repository and tag
  • Updated to use multi-stage Docker build, so that Go code is built inside a container

9.0.3 (2017-10-17)

  • Initial version