rabbitmq-server (4.0.5-10ubuntu5) resolute; urgency=medium

  * d/rabbitmq-server.postinst: Fix port warning message displaying
    unnecessarily for non-systemd systems (LP: #2148342).

 -- Lena Voytek <lena.voytek@canonical.com>  Tue, 14 Apr 2026 14:52:21 -0400

rabbitmq-server (4.0.5-10ubuntu4) resolute; urgency=medium

  * d/rules: Fix regression due to not installing init script, but allow the
    service to fail to start (LP: #2146490).

 -- Lena Voytek <lena.voytek@canonical.com>  Fri, 27 Mar 2026 08:49:29 -0400

rabbitmq-server (4.0.5-10ubuntu3) resolute; urgency=medium

  * d/rabbitmq-server.service: fix infinite restart loop (LP: #2142374)

 -- Guilherme Puida Moreira <guilherme.moreira@canonical.com>  Fri, 27 Feb 2026 09:32:48 -0300

rabbitmq-server (4.0.5-10ubuntu2) resolute; urgency=medium

  * Avoid rabbitmq-server installation failure when port 5672 is taken by
    another package (LP: #2130487)
    - d/rabbitmq-server.postinst: Warn user when rabbitmq-server.service will
      fail to start due to port conflict
    - d/rules: Allow dh_systemd_start to handle service startup by blocking
      dh_installinit. This allows rabbitmq-server.service to fail to start
      without breaking the package installation.
    - d/control: Add explicit dependency on iproute2.

 -- Lena Voytek <lena.voytek@canonical.com>  Thu, 15 Jan 2026 08:38:21 -0500

rabbitmq-server (4.0.5-10ubuntu1) resolute; urgency=medium

  * Merge with Debian unstable (LP: #2126011). Remaining changes:
    - d/rules: Enable rabbitmq-streams entrypoint.
    - d/p/rabbitmq-dist.mk.patch: Drop, no longer needed.
  * Dropped:
    - SECURITY UPDATE: authorization headers logged in plaintext (in base64)
      + debian/patches/CVE-2025-50200.patch: fix the exception logged by
        Cowboy caused by double reply in  src/rabbit_mgmt_util.erl,
        src/rabbit_mgmt_wm_exchange_publish.erl,
        src/rabbit_mgmt_wm_queue_actions.erl,
        src/rabbit_mgmt_wm_queue_get.erl.
      + CVE-2025-50200
      [In 4.0.5-9]

 -- Andreas Hasenack <andreas.hasenack@canonical.com>  Tue, 06 Jan 2026 14:51:20 -0300

rabbitmq-server (4.0.5-10) unstable; urgency=medium

  * Removed python3-simplejson build-depends (Closes: #1093307).

 -- Thomas Goirand <zigo@debian.org>  Mon, 18 Aug 2025 23:31:11 +0200

rabbitmq-server (4.0.5-9) unstable; urgency=high

  * CVE-2025-50200: In versions 3.13.7 and prior, RabbitMQ is logging
    authorization headers in plaintext encoded in base64. When querying
    RabbitMQ api with HTTP/s with basic authentication it creates logs with all
    headers in request, including authorization headers which show base64
    encoded username:password. This is easy to decode and afterwards could be
    used to obtain control to the system depending on credentials.
    Added upstream patch: Fix_Cowboy_crashes_caused_by_double_reply.patch.
    (Closes: #1108075)

 -- Thomas Goirand <zigo@debian.org>  Mon, 18 Aug 2025 18:37:26 +0200

rabbitmq-server (4.0.5-8ubuntu2) questing; urgency=medium

  * SECURITY UPDATE: authorization headers logged in plaintext (in base64)
    - debian/patches/CVE-2025-50200.patch: fix the exception logged by
      Cowboy caused by double reply in  src/rabbit_mgmt_util.erl,
      src/rabbit_mgmt_wm_exchange_publish.erl,
      src/rabbit_mgmt_wm_queue_actions.erl,
      src/rabbit_mgmt_wm_queue_get.erl.
    - CVE-2025-50200

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Fri, 19 Sep 2025 11:36:28 -0400

rabbitmq-server (4.0.5-8ubuntu1) questing; urgency=medium

  * Merge with Debian unstable (LP: #2120563). Remaining changes:
    - d/rules: Enable rabbitmq-streams entrypoint.
    - d/p/rabbitmq-dist.mk.patch: Drop, no longer needed.
  * Dropped:
    - Added new dep8 tests (LP #1679386)
      [In 4.0.5-7]
    - d/rules: Set PROJECT_VERSION to fix internal module versioning
      issues.
      [In 4.0.5-8]

 -- Andreas Hasenack <andreas@canonical.com>  Wed, 13 Aug 2025 11:00:09 -0300

rabbitmq-server (4.0.5-8) unstable; urgency=medium

  * Fix rabbitmq-server broken plugin versions by applying patch from the BTS.
    Thanks to Stefan Bühler <stefan.buehler@tik.uni-stuttgart.de> for it
    (Closes: #1110519).

 -- Thomas Goirand <zigo@debian.org>  Mon, 11 Aug 2025 14:31:10 +0200

rabbitmq-server (4.0.5-7) unstable; urgency=medium

  [ Andreas Hasenack ]
  * Add many autopkgtest.

 -- Thomas Goirand <zigo@debian.org>  Mon, 30 Jun 2025 11:27:51 +0200

rabbitmq-server (4.0.5-6ubuntu1) questing; urgency=medium

  * Merge with Debian unstable (LP: #2110429). Remaining changes:
    - Added new dep8 tests (LP #1679386):
      + d/t/hello-world
      + d/t/publish-subscribe
      + d/t/rpc
      + d/t/work-queue
      + d/t/smoke-test: remove unnecessary redirection and shell set
    - d/rules: Set PROJECT_VERSION to fix internal module versioning
      issues.
    - d/rules: Enable rabbitmq-streams entrypoint.
    - d/p/rabbitmq-dist.mk.patch: Drop, no longer needed.
  * Dropped:
    - d/rules: remove commented commands
      [Previously undocumented. No need to add delta for this]
    - d/p/elixir-1.18-compat.patch: Compatibility patch for conflict with
      JSON module in newer Elixir versions (LP #2097790).
      [In 4.0.5-6]

 -- Andreas Hasenack <andreas@canonical.com>  Thu, 26 Jun 2025 21:01:32 -0300

rabbitmq-server (4.0.5-6) unstable; urgency=medium

  * Add elixir-1.18-compat.patch to fix json output of rabbitmctl
    (Closes: #1108307).

 -- Thomas Goirand <zigo@debian.org>  Thu, 26 Jun 2025 10:36:03 +0200

rabbitmq-server (4.0.5-5) unstable; urgency=medium

  * Fix rabbitmq-plugins script to automatically set PLUGINS_DIR.

 -- Thomas Goirand <zigo@debian.org>  Tue, 27 May 2025 15:57:44 +0200

rabbitmq-server (4.0.5-4) unstable; urgency=medium

  * Fix /var/log/rabbitmq group ownership to adm.

 -- Thomas Goirand <zigo@debian.org>  Tue, 13 May 2025 11:24:03 +0200

rabbitmq-server (4.0.5-3) unstable; urgency=medium

  [ Antonio Terceiro ]
  * Demote logrotate from Depends: to Recommends:.

 -- Thomas Goirand <zigo@debian.org>  Mon, 10 Mar 2025 17:04:30 +0100

rabbitmq-server (4.0.5-2ubuntu2) plucky; urgency=medium

  * d/rules: Set PROJECT_VERSION to fix internal module versioning
    issues.
  * d/rules: Enable rabbitmq-streams entrypoint.
  * d/p/elixir-1.18-compat.patch: Compatibility patch for conflict with
    JSON module in newer Elixir versions (LP: #2097790).
  * d/p/rabbitmq-dist.mk.patch: Drop, no longer needed.
  * d/p/publish-subscribe: Check use of JSON formatter.

 -- James Page <james.page@ubuntu.com>  Thu, 06 Mar 2025 13:17:43 +0000

rabbitmq-server (4.0.5-2ubuntu1) plucky; urgency=medium

  * Merge from Debian Unstable. Remaining changes:
    - Added new dep8 tests (LP: #1679386):
      + d/t/hello-world
      + d/t/publish-subscribe
      + d/t/rpc
      + d/t/work-queue
      + d/t/smoke-test: remove unnecessary redirection and shell set

 -- Simon Quigley <tsimonq2@ubuntu.com>  Fri, 31 Jan 2025 11:04:06 -0600

rabbitmq-server (4.0.5-2) unstable; urgency=medium

  * Works with Erlang 27 (Closes: #1090027).
  * Removed erlang-erl-docgen build-depends.
  * Depends on erlang >= 27.
  * Fixed Extra # in debian/rabbitmq-env.conf thanks to g0tmi1k.

 -- Thomas Goirand <zigo@debian.org>  Mon, 20 Jan 2025 17:30:15 +0100

rabbitmq-server (4.0.5-1) unstable; urgency=medium

  [ Mitchell Dzurick ]
  * Update d/watch to get tarball & verify signature.

  [ Thomas Goirand ]
  * New upstream release.
  * Removed erlang-erl-docgen build-depends.

 -- Thomas Goirand <zigo@debian.org>  Tue, 17 Dec 2024 10:23:14 +0100

rabbitmq-server (3.12.1-1ubuntu2) oracular; urgency=medium

  * Added new dep8 tests (LP: #1679386):
    - d/t/hello-world
    - d/t/publish-subscribe
    - d/t/rpc
    - d/t/work-queue
    - d/t/smoke-test: remove unnecessary redirection and shell set
  * d/watch: update to find upstream tarball, and verify its signature
  * d/upstream/signing-key.asc: added, downloaded from
    https://github.com/rabbitmq/signing-keys/releases/download/3.0/rabbitmq-release-signing-key.asc

 -- Mitchell Dzurick <mitchell.dzurick@canonical.com>  Tue, 23 Jul 2024 11:43:35 -0700

rabbitmq-server (3.12.1-1ubuntu1) noble; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2023-46118-*.patch: Introduce HTTP request body limit
      for definition uploads and Reduce default HTTP API request body size limit
      to 10 MiB in deps/rabbitmq_management/Makefile, include/rabbit_mgmt.hrl,
      priv/schema/rabbitmq_management.schema, src/rabbit_mgmt_util.erl,
      src/rabbit_mgmt_wm_definitions.erl.
    - CVE-2023-46118

 -- Leonidas Da Silva Barbosa <leo.barbosa@canonical.com>  Wed, 22 Nov 2023 16:07:37 -0300

rabbitmq-server (3.12.1-1) experimental; urgency=medium

  * New upstream release. 
  * d/p/*: Refresh. 
  * d/control: Bump minimum Erlang version to 25.0.
  * d/copyright: Tidy for new upstream release, fix stanza ordering.
  * d/source.lintian-overrides: Refresh overrides with correct match.
  * d/control: Drop Depends on lsb-base.
  * d/control: Bump Standards-Version to 4.6.2, no changes.

 -- James Page <james.page@ubuntu.com>  Tue, 18 Jul 2023 09:35:50 +0100

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog rabbitmq-server`.
