c567adc262
- update to 3.4.3:
* prevent XSS attack in table key names (since 2.4.0)
(CVE-2015-0862)
* prevent XSS attack in policy names (since 3.4.0)
(CVE-2015-0862)
* prevent XSS attack in client details in the connections list
(CVE-2015-0862)
* prevent XSS attack in user names in the vhosts list or the vhost names
in the user list (since 2.4.0)
(CVE-2015-0862)
* prevent XSS attack in the cluster name (since 3.3.0)
(CVE-2015-0862)
* prevent /api/* from returning text/html error messages which could
act as an XSS vector (since 2.1.0)
* fix response-splitting vulnerability in /api/downloads (since 2.1.0)
* do not trust X-Forwarded-For header when enforcing 'loopback_users'
(CVE-2014-9494)
* disable SSLv3 by default to prevent the POODLE attack
* see https://www.rabbitmq.com/release-notes/README-3.4.3.txt
* see https://www.rabbitmq.com/release-notes/README-3.4.2.txt
* see https://www.rabbitmq.com/release-notes/README-3.4.1.txt
* see https://www.rabbitmq.com/release-notes/README-3.4.0.txt
OBS-URL: https://build.opensuse.org/request/show/282244
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/rabbitmq-server?expand=0&rev=25