Project: RabbitMQ (App Definition and Development / Streaming & Messaging)
File: 3.7.18.md

RabbitMQ `3.7.18` is a maintenance release that includes a fix to . Kudos to for responsibly disclosing the vulnerability. The release also contains bug fixes and internal API changes that refine the common plugin API with the . Per the new Erlang version support policy in effect starting with January 2019, this release . Make sure a is used before upgrading. explains what package repositories and tools can be used to provision latest patch versions of Erlang `21.3.x` and `22.x`. This release introduces credential obfuscation for Shovel connections and Federation links. This requires one more application (library) from Erlang/OTP, `tools`. Operators must make sure that the Erlang runtime provides it. On Debian-based systems, the package must be installed. This release contains a breaking change to the plugin API around queue state access introduced in `3.7.17`. Plugins that do not use that API revision are not affected. All plugins that ship with RabbitMQ have been updated as necessary. This revision was necessary to maintain a single API with the upcoming `3.8.0` release. When upgrading to this release and upgrading Erlang to 21.x or later at the same time, extra care has to be taken. Since CLI tools from RabbitMQ releases older than 3.7.7 will fail on Erlang 21 or later, RabbitMQ must be upgraded before Erlang. See upgrade and compatibility notes first if upgrading from an earlier release. See the for general documentation on upgrades and for release notes of other releases. Any questions about this release, upgrades or RabbitMQ in general are welcome on the . New style config file parser is now more forgiving, handles trailing whitespace and empty lines better. GitHub issue: `genserver2` now includes two new functions, `stop/1` and `stop/3`, which `genserver` in OTP introduced a couple of releases ago. Contributed by @codeadict. GitHub issue: Log rotation is functional again on Windows. GitHub issue: White space characters in `RABBITMQ_BASE` and other are now handled better on Windows. GitHub issue: Eliminate a "deprecated Ranch options" log warning. GitHub issue: Two more TLS listener options are now available via new style configuration file: `management.ssl.verify` and `management.ssl.failifnopeercert`. GitHub issue: HTTP API documentation correction. GitHub issue: Connections that fail due to insufficient client permissions (authorisation failures) are now handled gracefully with reasonable log messages. GitHub issue: Sensitive values in Shovel connection state (namely, the connection credentials) are now stored in encrypted form. This avoids unintentional credential logging by the runtime (exception logger) at the cost of making troubleshooting authentication failures harder. GitHub issue: Sensitive values in Federation link state (namely, the connection credentials) are now stored in encrypted form. This avoids unintentional credential logging by the runtime (exception logger) at the cost of making troubleshooting authentication failures harder. GitHub issue: Sensitive values in connection state (namely, the connection credentials) are now stored in encrypted form. This avoids unintentional credential logging by the runtime (exception logger) at the cost of making troubleshooting authentication failures harder. GitHub issue: jQuery was upgraded to `3.4.x`. GitHub issue: jQuery was upgraded to `3.4.x`. GitHub issue: Warning: The source code archive provided by GitHub only contains the source of the broker, not the plugins or the client libraries. Please download the archive named `rabbitmq-server-3.7.18.tar.xz`.