[Buildroot] rabbitmq-server support in Buildroot

[Arnout Vandecappelle]

On 20/11/2022 18:38, Peter Korsgaard wrote:
> Hi Frank,

  Sending to the right Frank now...

  Regards,
  Arnout

> 
> You are listed in the Buildroot DEVELOPERS file for rabbitmq-server, but
> it has not seen any updates since:
> 
> commit 27df8b7b0d7c6c331d2e4fe7b6ea2bd1596acd75
> Author: Frank Vanbever <frank.vanbever at essensium.com>
> Date:   Thu Feb 13 16:14:14 2020 +0100
> 
>      package/rabbitmq-server: bump version to 3.8.2
> 
> Are you still interested in maintaining it? If not, are anybody else?
> Otherwise I suggest we remove it before the 2022.11 release.
> 
> The 3.8.x series looks to still be maintained upstream, and 3.8.2 is
> vulnerable to a number of security issues, E.G.:
> 
> https://nvd.nist.gov/vuln/detail/CVE-2020-5419 (Windows only)
> https://tanzu.vmware.com/security/cve-2021-22116
> https://tanzu.vmware.com/security/cve-2021-22117 (Windows only)
> https://github.com/rabbitmq/rabbitmq-server/security/advisories
> 
> rabbitmq-server >= 3.8.16 unfortunately requires erlang 23, so udating
> is not trivial:
> 
> https://github.com/rabbitmq/rabbitmq-server/releases/tag/v3.8.16
> 
> What do you say?
>