File rabbitmq-server.changes of Package rabbitmq-server

-------------------------------------------------------------------
Tue Aug 11 13:15:12 UTC 2020 - Jacek Tomasiak <jtomasiak@suse.com>

- add explanation-format.patch to fix CVE-2019-11287 (bsc#1157665)

-------------------------------------------------------------------
Wed Jul  1 13:19:25 UTC 2020 - Keith Berger <kberger@suse.com>

- Apply patches to resolve CVE-2017-4967,CVE-2017-4965 (bsc#1037777)
   0001-Escape-HTML-tags-in-policy-definition-fields.patch
   0002-Don-t-echo-provided-encoding-value-back.patch
   0003-Strip-off-pids-and-format-consumer-details-for-2-end.patch
   0004-Format-Web-contexts.patch

-------------------------------------------------------------------
Fri Jan 12 13:13:53 UTC 2018 - vuntz@suse.com

- Update rabbitmq-server-ha.ocf from git, and remove
  ocf-pull-request-63.patch, ocf-pull-request-64.patch,
  ocf-pull-request-66.patch (bsc#1069466)

-------------------------------------------------------------------
Wed Dec 20 16:24:02 UTC 2017 - vuntz@suse.com

- Add 0001-Don-t-die-in-case-of-faulty-node.patch: this should help
  with "Error: unable to connect to node 'rabbit@foobar': nodedown"
  errors that are being seen when using clustered rabbitmq.

-------------------------------------------------------------------
Wed Dec 13 12:11:10 UTC 2017 - vuntz@suse.com

- Add ocf-pull-request-66.patch: do not consider transient local
  failures as failures of remote nodes.

-------------------------------------------------------------------
Wed Dec 13 09:38:52 UTC 2017 - vuntz@suse.com

- Add ocf-pull-request-63.patch and ocf-pull-request-64.patch:
  fixes to avoid moving master unnecessarily, and to make start
  notification handler more reliable.

-------------------------------------------------------------------
Mon Dec 11 15:20:14 UTC 2017 - ilausuch@suse.com

- modified logrotate configuration to use rabbitmqctl to force
  creation of log after logrotation

-------------------------------------------------------------------
Wed Nov 22 10:22:01 UTC 2017 - vuntz@suse.com

- Add make-ha-ocf-reliable.patch: our version of rabbitmq is old,
  and the rabbitmq-server-ha OCF resource agent is impacted by some
  unexpected behaviors due to this. The patch simplifies the
  resource agent a bit to make it more solid.

-------------------------------------------------------------------
Thu Nov 16 15:49:29 UTC 2017 - dmueller@suse.com

- add https://github.com/rabbitmq/rabbitmq-management/commit/27fcfd890380f08ddab86daa55cf262a2151a09b.patch
  to solve issues with rabbitmq failing to start in clustered mode

-------------------------------------------------------------------
Fri Aug 25 13:41:23 UTC 2017 - aplanas@suse.com

- Add detect_missing_user_process.patch (bsc#1054243)

-------------------------------------------------------------------
Tue May  9 13:28:47 UTC 2017 - mlakat@suse.com

- Synchronize rabbitmq-server OCF resource agents as per:
  https://github.com/rabbitmq/rabbitmq-server-release/pull/29
  Main Changes:
    - log output of rabbitmqctl on non-zero exit value
- Add rabbitmq-server-ha OCF resource agent from upstream, as it
  makes it easier to implement clustering with pacemaker.

-------------------------------------------------------------------
Mon Aug  8 13:11:57 UTC 2016 - aplanas@suse.com

- Fix bsc#973999
  - rabbitmq-server.service: increase NOFILE limit per documentation
  - rabbitqm-server.ocf: add OCF_RESKEY_limit_nofile parameter default
    as 65535

-------------------------------------------------------------------
Tue Dec  8 16:45:47 UTC 2015 - vuntz@suse.com

- create rcrabbitmq-server for the systemd case

-------------------------------------------------------------------
Tue Sep 29 08:29:52 UTC 2015 - vuntz@suse.com

- Fix rabbitmq-script-wrapper to not fail due to bad syntax.

-------------------------------------------------------------------
Mon Sep 28 10:07:09 UTC 2015 - dmueller@suse.com

- update to 3.4.4:
  * several important bug fixes, see
  http://www.rabbitmq.com/release-notes/README-3.4.4.txt
- remove ocf-fixes.patch, merged into the ocf file we ship

-------------------------------------------------------------------
Mon Sep 28 10:01:29 UTC 2015 - dmueller@suse.com

- rabbitmqctl: clear CMDLINE before appending

-------------------------------------------------------------------
Fri Jun 26 10:23:33 UTC 2015 - dmueller@suse.com

- add rabbitmq-systemd-notification-support.patch

-------------------------------------------------------------------
Wed Jan 21 16:12:13 UTC 2015 - dmueller@suse.com

- update to 3.4.3:
   * prevent XSS attack in table key names (since 2.4.0)
     (CVE-2015-0862)
   * prevent XSS attack in policy names (since 3.4.0)
      (CVE-2015-0862)
   * prevent XSS attack in client details in the connections list
      (CVE-2015-0862)
   * prevent XSS attack in user names in the vhosts list or the vhost names
      in the user list (since 2.4.0)
      (CVE-2015-0862)
   * prevent XSS attack in the cluster name (since 3.3.0)
      (CVE-2015-0862)
   * prevent /api/* from returning text/html error messages which could
      act as an XSS vector (since 2.1.0)
   * fix response-splitting vulnerability in /api/downloads (since 2.1.0)
   * do not trust X-Forwarded-For header when enforcing 'loopback_users' 
     (CVE-2014-9494)
   * disable SSLv3 by default to prevent the POODLE attack

   * see https://www.rabbitmq.com/release-notes/README-3.4.3.txt
   * see https://www.rabbitmq.com/release-notes/README-3.4.2.txt
   * see https://www.rabbitmq.com/release-notes/README-3.4.1.txt
   * see https://www.rabbitmq.com/release-notes/README-3.4.0.txt

-------------------------------------------------------------------
Mon Nov 24 11:52:42 UTC 2014 - dmueller@suse.com

- ignore stop errors in %preun 

-------------------------------------------------------------------
Sun Sep 14 17:18:01 UTC 2014 - tbechtold@suse.com

- update to 3.3.5:
  * Bug fixes, see
    - https://www.rabbitmq.com/release-notes/README-3.3.2.txt
    - https://www.rabbitmq.com/release-notes/README-3.3.3.txt
    - https://www.rabbitmq.com/release-notes/README-3.3.4.txt
    - https://www.rabbitmq.com/release-notes/README-3.3.5.txt

-------------------------------------------------------------------
Sun Jul 20 20:04:39 UTC 2014 - p.drouand@gmail.com

- The package doesn't provide any sysvinit script or sysconfig file;
  remove dependencies to fillup or insserv if the package build with
  systemd support

-------------------------------------------------------------------
Mon May  5 12:49:05 UTC 2014 - dmueller@suse.com

- update to 3.3.1:
  * Bug fixes
  * Security fixes to MQTT and shovel
  * see http://www.rabbitmq.com/release-notes/README-3.3.1.txt

-------------------------------------------------------------------
Wed Apr 30 00:08:33 UTC 2014 - dmueller@suse.com

- do not install init script on systemd distros 

-------------------------------------------------------------------
Thu Apr 10 10:25:08 UTC 2014 - matwey.kornilov@gmail.com

- require epmd.socket in .service in order not to start earlier
  than epmd.socket

-------------------------------------------------------------------
Fri Apr  4 07:55:49 UTC 2014 - dmueller@suse.com

- update to 3.3.0:
  * long list of security, bugfixes and enhancements
  * see http://www.rabbitmq.com/release-notes/README-3.3.0.txt

-------------------------------------------------------------------
Wed Apr  2 21:03:09 UTC 2014 - vuntz@suse.com

- Add ocf-fixes.patch to fix issues in the OCF file:
  - use the wrapper function to call rabbitmqctl for stop, so that
    we interpret correctly the exit code.
  - accept 1 as valid exit code from "rabbitmqctl status", instead
    of totally breaking when we get it.
- We use a patch as the OCF file comes from upstream, so it's
  better to keep the changes isolated.

-------------------------------------------------------------------
Thu Mar 27 11:20:12 UTC 2014 - dmueller@suse.com

- update to 3.2.4:
  * Several bug fixes, no detailed changelog available
- remove fix-syntax-error-in-example-conf.patch: merged upstream

-------------------------------------------------------------------
Fri Jan 24 09:17:00 UTC 2014 - dmueller@suse.com

- update to 3.2.3:
  * This release fixes a number of bugs in the broker and federation plugin
  * Improvements to the LDAP and shovel plugins are also included

-------------------------------------------------------------------
Thu Jan 23 12:29:39 UTC 2014 - dmueller@suse.com

- install a config file by default 
  add fix-syntax-error-in-example-conf.patch

-------------------------------------------------------------------
Tue Jan 21 13:03:33 UTC 2014 - dmueller@suse.com

- update to 3.2.2:
  * federated queues and features enhanced policies for aspects of the broker
  * This release fixes a number of bugs in the broker and plugins

-------------------------------------------------------------------
Tue Jan  7 09:43:57 UTC 2014 - matwey.kornilov@gmail.com

- add Provides: erlang-gen_server2 to erlang-rabbitmq_client
(many people want gen_server2, which is a part of rabbitmq)

-------------------------------------------------------------------
Fri Sep 20 13:26:43 UTC 2013 - dmueller@suse.com

- fix syntax error in wrapper script 

-------------------------------------------------------------------
Fri Sep 13 19:22:37 UTC 2013 - dmueller@suse.com

- update to 3.1.5:
  * various security fixes and bugfixes
  * see http://www.rabbitmq.com/release-notes/README-3.1.5.txt
  * see http://www.rabbitmq.com/release-notes/README-3.1.4.txt

-------------------------------------------------------------------
Wed Jul  3 15:28:04 UTC 2013 - dmueller@suse.com

- update to 3.1.3:
  * Eager synchronisation of mirror queue slaves
  * Automatic cluster partition healing
  * Charts in the management plugin
  * Queue length limits
  * Bug fixes
  * Fixes a security bug in federation

-------------------------------------------------------------------
Wed Apr 24 12:25:15 UTC 2013 - tpaszkowski@novell.com

- fix rabbitmq-server startup on systemd enabled systems (create
  /var/run/rabbitmq-server directory using systemd-tmpfiles mechanism)

------------------------------------------------------------------
Wed Apr  3 12:00:36 UTC 2013 - dmueller@suse.com

- Change init script to properly daemonize (patch by jdsn) (bnc#807540)

-------------------------------------------------------------------
Sun Mar 17 10:04:09 UTC 2013 - matwey.kornilov@gmail.com

- Added systemd .service file

-------------------------------------------------------------------
Wed Mar 13 11:28:33 CET 2013 - berendt@b1-systems.de

- updated to version 3.0.4
  * 3.0.4: This release fixes a bug in the federation plugin
    where upstream credentials were leaked in the
    x-received-from header. This bug had been in the federation
    plugin since RabbitMQ 3.0.0. There are no other changes
    from RabbitMQ 3.0.3.
  * 3.0.3: This release fixes a small number of bugs in 3.0.2
    and earlier versions.
  * 3.0.2: This release fixes a number of bugs in 3.0.1 and
    earlier versions.
  * 3.0.1: This release fixes a number of bugs in 3.0.0 and
    earlier versions.
  * 3.0.0: This release introduces dynamic, policy-based control
    of mirroring and federation, improves the user friendliness
    of clustering, adds support for per-message TTL, introduces
    plugins for web-STOMP and MQTT, and adds many smaller new
    features and bug fixes.
- rebased no-remove-common.patch

-------------------------------------------------------------------
Fri Dec 14 13:11:56 UTC 2012 - rhafer@suse.com

- sysconfig file cleanup
  * remove unused Variables
  * removed variables which can also be set in rabbitmq-env.conf
    to avoid sysconfig settings overriding settings from the env
    file (bnc#771151)
- Use rc.status functions in init script for prettier startup
- Remove "set -e" from init script (bnc#768175)
- Include OCF RA for use with Pacemaker
- Updated script-wrapper to the latest upstream code

-------------------------------------------------------------------
Fri Dec 14 12:25:37 UTC 2012 - saschpe@suse.de

- Don't use download_files service, or at least only in mode="localonly"
  or mode="disabled". But why using it at all, it makes no sense.

-------------------------------------------------------------------
Mon Dec 10 16:47:53 UTC 2012 - rhafer@suse.com

- Update to 2.8.7 changes since:
  * 2.8.6: This release fixes a number of bugs in the broker,
    Erlang client and STOMP and management plugins.
  * 2.8.5: This release fixes a number of bugs, including one
    introduced in 2.8.5 that could cause an error during shutdown
    of mirrored queues.
  * 2.8.4: This is primarily a bugfix release, with several
    improvements to HA queues.

-------------------------------------------------------------------
Fri Aug 17 10:01:57 UTC 2012 - mbarringer@suse.com

- Fixing logrotate errors (bnc#775867)

-------------------------------------------------------------------
Mon Jul 16 15:52:52 UTC 2012 - matwey.kornilov@gmail.com

- Updated to 2.8.4

-------------------------------------------------------------------
Wed May 09 07:27:17 UTC 2012 - matwey.kornilov@gmail.com

- Updated to 2.8.2

-------------------------------------------------------------------
Fri Apr 13 07:31:46 UTC 2012 - jblunck@opensuse.org

- Require python >= 2.6 for json
- Add _initddir define for SLE11 build

-------------------------------------------------------------------
Tue Feb 14 09:56:04 UTC 2012 - saschpe@suse.de

- Fixed doubled preamble entries

-------------------------------------------------------------------
Thu Feb  2 15:25:23 UTC 2012 - bwiedemann@suse.com

- fix /var/run/rabbitmq ownership

-------------------------------------------------------------------
Tue Jan 10 12:01:48 UTC 2012 - prusnak@opensuse.org

- updated to 2.7.1
- don't use nmap during the build (no-nmap.patch)
- don't use /var/lock/subsys in initscript
- create /var/run/rabbitmq in initscript
- import changes from Fedora package

-------------------------------------------------------------------
Mon Oct  5 00:00:00 CEST 2009 - dpw@lshift.net

- New upstream release

-------------------------------------------------------------------
Wed Jun 17 00:00:00 CEST 2009 - matthias@lshift.net

- New upstream release

-------------------------------------------------------------------
Tue May 19 00:00:00 CEST 2009 - matthias@lshift.net

- Maintenance release for the 1.5.x series

-------------------------------------------------------------------
Mon Apr  6 00:00:00 CEST 2009 - matthias@lshift.net

- Maintenance release for the 1.5.x series

-------------------------------------------------------------------
Tue Feb 24 00:00:00 CET 2009 - tonyg@lshift.net

- Maintenance release for the 1.5.x series

-------------------------------------------------------------------
Mon Feb 23 00:00:00 CET 2009 - tonyg@lshift.net

- Maintenance release for the 1.5.x series

-------------------------------------------------------------------
Mon Jan 19 00:00:00 CET 2009 - 0x6e6562@gmail.com

- Maintenance release for the 1.5.x series

-------------------------------------------------------------------
Wed Dec 17 00:00:00 CET 2008 - matthias@lshift.net

- New upstream release

-------------------------------------------------------------------
Thu Jul 24 00:00:00 CEST 2008 - tonyg@lshift.net

- New upstream release

-------------------------------------------------------------------
Mon Mar  3 00:00:00 CET 2008 - adrian@lshift.net

- New upstream release

-------------------------------------------------------------------
Wed Sep 26 00:00:00 CEST 2007 - simon@lshift.net

- New upstream release

-------------------------------------------------------------------
Wed Aug 29 00:00:00 CEST 2007 - simon@lshift.net

- New upstream release

-------------------------------------------------------------------
Mon Jul 30 00:00:00 CEST 2007 - simon@lshift.net

- New upstream release

-------------------------------------------------------------------
Tue Jun 12 00:00:00 CEST 2007 - hubert@lshift.net

- Building from source tarball, added starting script, stopping

-------------------------------------------------------------------
Mon May 21 00:00:00 CEST 2007 - hubert@lshift.net

- Initial build of server library of RabbitMQ package

openSUSE Build Service is sponsored by