RabbitMQ 3.4.1 发布,AMQP 消息服务器
时间:2014-10-30 09:27 来源:linux.it.net.cn 作者:it
基于Erlang的高级消息队列RabbitMQ 3.4.1发布.2014-10-30。这是2014-10-21的3.4.0的第一个补丁版.修正了管理插件的几个安全漏洞和Bug。遗留产品 3.3.5/3.2.4/3.1.5 在高级消息队列里,RabbitMQ应该最主流的。
完全改进:
Release: RabbitMQ 3.4.1
Security Fixes
==============
management plugin
-----------------
26437 prevent /api/* from returning text/html error messages which could
act as an XSS vector (since 2.1.0)
26433 fix response-splitting vulnerability in /api/downloads (since 2.1.0)
(thanks to Atholl Stewart for finding the above)
Release Highlights
==================
server
------
bug fixes
26425 ensure RABBITMQ_USE_LONGNAME / USE_LONGNAME is picked up correctly from
rabbitmq-env.conf (since 3.4.0)
enhancements
26429 add log messages when plugins are enabled or disabled at runtime
management plugin
-----------------
bug fixes
26431 fix web UI breakage when queue listing contains exclusive queues
(since 3.4.0)
26438 fix internal server error when requesting permissions for a user or
vhost which does not exist (since 2.1.0)
Java client
-----------
bug fixes
26434 prevent exchange binding recovery from swapping source and
destination (since 3.3.0)
26428 ensure pom.xml lists ASL 2.0 (since 3.4.0)
.NET client
-----------
bug fixes
26439 ensure attempt to open a channel on a closed connection fails
immediately (since 1.0.0)
26435 fix typos in documentation and remove references to immediate
publishing (since 3.3.0)
下载:http://www.rabbitmq.com/releases/rabbitmq-server/v3.4.1/rabbitmq-server-3.4.1.tar.gz
(责任编辑:IT)
基于Erlang的高级消息队列RabbitMQ 3.4.1发布.2014-10-30。这是2014-10-21的3.4.0的第一个补丁版.修正了管理插件的几个安全漏洞和Bug。遗留产品 3.3.5/3.2.4/3.1.5 在高级消息队列里,RabbitMQ应该最主流的。 完全改进: Release: RabbitMQ 3.4.1 Security Fixes ============== management plugin ----------------- 26437 prevent /api/* from returning text/html error messages which could act as an XSS vector (since 2.1.0) 26433 fix response-splitting vulnerability in /api/downloads (since 2.1.0) (thanks to Atholl Stewart for finding the above) Release Highlights ================== server ------ bug fixes 26425 ensure RABBITMQ_USE_LONGNAME / USE_LONGNAME is picked up correctly from rabbitmq-env.conf (since 3.4.0) enhancements 26429 add log messages when plugins are enabled or disabled at runtime management plugin ----------------- bug fixes 26431 fix web UI breakage when queue listing contains exclusive queues (since 3.4.0) 26438 fix internal server error when requesting permissions for a user or vhost which does not exist (since 2.1.0) Java client ----------- bug fixes 26434 prevent exchange binding recovery from swapping source and destination (since 3.3.0) 26428 ensure pom.xml lists ASL 2.0 (since 3.4.0) .NET client ----------- bug fixes 26439 ensure attempt to open a channel on a closed connection fails immediately (since 1.0.0) 26435 fix typos in documentation and remove references to immediate publishing (since 3.3.0) 下载:http://www.rabbitmq.com/releases/rabbitmq-server/v3.4.1/rabbitmq-server-3.4.1.tar.gz (责任编辑:IT) |