|
基于Erlang的高级消息队列RabbitMQ 3.4.1发布.2014-10-30。这是2014-10-21的3.4.0的第一个补丁版.修正了管理插件的几个安全漏洞和Bug。遗留产品 3.3.5/3.2.4/3.1.5 在高级消息队列里，RabbitMQ应该最主流的。 完全改进： Release: RabbitMQ 3.4.1 Security Fixes ============== management plugin ----------------- 26437 prevent /api/* from returning text/html error messages which could act as an XSS vector (since 2.1.0) 26433 fix response-splitting vulnerability in /api/downloads (since 2.1.0) (thanks to Atholl Stewart for finding the above) Release Highlights ================== server ------ bug fixes 26425 ensure RABBITMQ_USE_LONGNAME / USE_LONGNAME is picked up correctly from rabbitmq-env.conf (since 3.4.0) enhancements 26429 add log messages when plugins are enabled or disabled at runtime management plugin ----------------- bug fixes 26431 fix web UI breakage when queue listing contains exclusive queues (since 3.4.0) 26438 fix internal server error when requesting permissions for a user or vhost which does not exist (since 2.1.0) Java client ----------- bug fixes 26434 prevent exchange binding recovery from swapping source and destination (since 3.3.0) 26428 ensure pom.xml lists ASL 2.0 (since 3.4.0) .NET client ----------- bug fixes 26439 ensure attempt to open a channel on a closed connection fails immediately (since 1.0.0) 26435 fix typos in documentation and remove references to immediate publishing (since 3.3.0) 下载：http://www.rabbitmq.com/releases/rabbitmq-server/v3.4.1/rabbitmq-server-3.4.1.tar.gz (责任编辑：IT) |