Skip to content

Latest commit

 

History

History
234 lines (129 loc) · 9.55 KB

3.6.6.md

File metadata and controls

234 lines (129 loc) · 9.55 KB

RabbitMQ 3.6.6

3.6.6 is a maintenance release that includes a fix for an important security vulnerability (CVE-2016-9877) in the MQTT plugin.

Upgrades and Compatibility

⚠️ Upgrading from versions between 3.6.0 and 3.6.5 to this release requires a cluster shutdown. This is also true for versions prior to 3.6.0. See the "Upgrading clusters" section of the documentation.

Server

Bug Fixes

  • Changing queue mode to lazy could block queue process in certain circumstances.

    GitHub issue: rabbitmq-server#850

  • Mirroring implementation didn't handle certain internal protocol messages arriving out of order.

    GitHub issue: rabbitmq-server#922

  • Mirror set changes weren't handled gracefully in certain circumstances (e.g. in the middle of a mirror promotion).

    GitHub issue: rabbitmq-server#914

  • Mirrored queue could terminate after promotion if HA policy was reapplied during sync.

    GitHub issue: rabbitmq-server#803

  • Autoheal partition handling mode could run into a multi-node deadlock.

    GitHub issue: rabbitmq-server#928

  • Queue mirror group membership now correctly handles certain partial partition cases.

    GitHub issues: rabbitmq-server#950, rabbitmq-server#953

  • Eager queue sync will now stop as soon as a mirror shutdown/unavailability is detected.

    GitHub issue: rabbitmq-server#975

  • Lazy queues now trigger runtime GC significantly less frequently, making moving data to the message store more efficient.

    GitHub issue: rabbitmq-server#973

  • Mirroring policies now respect the nodes parameter when re-electing a master.

    GitHub issue:

  • After a partial network partitions, nodes with newly elected masters will now be more defensive about the (no longer relevant) policy change notifications.

    GitHub issue: rabbitmq-server#1007

  • Late responses from peers in certain partial network partition scenarios are now ignored by channels.

    GitHub issue: rabbitmq-server#1005

  • After a partial network partitions, nodes with newly elected masters will now be more defensive about the (no longer relevant) synchronization start requests.

    GitHub issue: rabbitmq-server#1006

  • Network partition triggered late and duplicate acknowledgements are now ignored/filterd out by queue leader processes.

    GitHub issue: rabbitmq-server#960

  • Queue mirrors now try detect leader replica changes during partial partitions and do a clean stop instead of failing because their state is in sync with the old leader and not the newly promoted one.

    GitHub issue: rabbitmq-server#944

  • rabbitmqctl and server startup could be affected by some DNS configurations.

    GitHub issue: rabbitmq-server#890

  • RPM package was split into two: for CentOS 6 and 7. The latter includes systemd support.

    GitHub issue: rabbitmq-server#932

  • Workaround for Erlang/OTP bug OTP-13425 where crash dump generation failed on UNIX platforms.

    GitHub issue: rabbitmq-server#956

Enhancements

  • Inter-node traffic buffer increased to 32 MB by default, configurable with RABBITMQ_DISTRIBUTION_BUFFER_SIZE (in kilobytes).

    This improves network bandwidth utilization for inter-node traffic and reduces the probability of spurious network partitions due to latency spikes caused by the buffer being full.

    GitHub issue: rabbitmq-server#908

  • Default flow control settings were increased to {200, 100}. This helps with consumer throughput in some cases. The value still can be configured using the rabbit.credit_flow_default_credit setting.

    GitHub issue: rabbitmq-server#949

  • rabbitmqctl list_queues now has more filtering options.

    GitHub issue: rabbitmq-server#851

  • RABBITMQ_IGNORE_SIGINT is a new environment variable that lets the user disable the +B VM flag that is known to have issues in Erlang 18.x series (prevents crash dumps from being produced).

    GitHub issue: rabbitmq-server#956

  • The pg2_fixed module is now replaced by the standard pg2 from a newer Erlang/OTP release.

    GitHub issue: rabbitmq-server#980

MQTT Plugin

Bug Fixes

  • Authentication with correct username but omitted password succeeded when TLS/x509 certificate wasn't provided by the client. CVE allocation for this vulnerability is pending.

    GitHub issue: rabbitmq-mqtt#96

JMS Topic Exchange Plugin

Bug Fixes

  • The plugin no longer tries to check if JMS client's version is identical/compatible. This caused certain legitimate use cases, such as exchange declaration over HTTP API, to fail.

    GitHub issue: rabbitmq-jms-topic-exchange#9

Java Client

Bug Fixes

  • Fixed a NPE that can occur when a thread attempts to create a new channel after a connection has been recovered but before channel recovery has completed.

    GitHub issue: rabbitmq-java-client#197

    Contributed by Michael Dent.

  • Binding cache entries of auto-delete queues should be cleaned up when the last consumer is cancelled.

    GitHub issue: rabbitmq-java-client#199

    Contributed by Michael Dent.

  • When a channel is closed, consumers will be correctly cleaned up from AutorecoveringConnection cache.

    GitHub issue: rabbitmq-java-client#208

  • junit is no longer listed as a dependency in the OSGi manifest

    GitHub issue: rabbitmq-java-client#211

Enhancements

  • com.rabbitmq.client.AddressResolver is a new interface that can be used to "expand" endpoints into groups of IP addresses, e.g. to a list of IP addresses resolved from a DNS record.

    GitHub issue: rabbitmq-java-client#153

  • Building on the new AddressResolver interface, the client now includes a resolver that uses DNS SVR records to discover endpoints.

    GitHub issue: rabbitmq-java-client#104

  • com.rabbitmq.client.BuiltinExchangeType is an enum that contains built-in exchange types.

    GitHub issue: rabbitmq-java-client#150

.NET Client

Bug Fixes

Federation Plugin

Enhancements

  • Federation links now specify a name which makes them easier to tell from other connections in the management UI (requires RabbitMQ 3.6.3+).

    GitHub issue: rabbitmq-federation#39

Shovel Plugin

Enhancements

  • Shovel connections now specify a name which makes them easier to tell from other connections in the management UI (requires RabbitMQ 3.6.3+).

    GitHub issue: rabbitmq-shovel#19

Release Artifacts

Available from:

Upgrading

To upgrade a non-clustered RabbitMQ simply install the new version. All configuration and persistent message data are retained. When upgrading using definitions export/import from versions earlier than 3.6.0, see http://rabbitmq.com/passwords.html.

To upgrade a RabbitMQ cluster, follow the instructions in RabbitMQ documentation.

Source code archives

Warning: The source code archive provided by GitHub only contains the source of the broker, not the plugins or the client libraries. Please download the archive named rabbitmq-3.6.6.tar.gz.