Derek Coleman & Associates Inc logoDerek Coleman & Associates Inc

Home / Release notes / DCA Hardened Message Broker

DCA Hardened Message Broker — release notes

Current: RabbitMQ 4.3.6 on Erlang/OTP 27.3.4.18 (Team RabbitMQ's signed apt repositories, versions pinned), Ubuntu 24.04 LTS; Google Cloud image built 2026-10-07. Exact image version: see the listing.

DateLabelChange
2026-10-07ImportantFive hardened Compute Engine images built for Google Cloud Marketplace — Valkey™ 9.1.2, Keycloak™ 26.8.0, OpenBao™ 2.7.1, a message broker based on the RabbitMQ software 4.3.6 (Erlang/OTP 27.3.4.18), and Jenkins® LTS 2.580.1 with 70 pinned plugins. Each build is gated on zero fixable HIGH/CRITICAL findings and verified on booted VMs: credentials generated per VM on first boot, every listener on loopback, data surviving a restart and a reboot. Listings are in preparation; configuration guides are in the docs.
2026-09-03ImportantFull AWS Marketplace catalog public: the wave-5 products (MySQL, OpenSearch, ClickHouse, etcd, Meilisearch) completed AWS review and joined the 18 earlier listings. Product pages now deep-link to every listing.
2026-07-21OptionalNew offer published and live on the Azure Marketplace.
2026-07-20ImportantFull AWS catalog public. Monthly CVE-rebuild cadence active; versions rebuilt against current advisories before each submission.
2026-07-12ImportantMonthly rebuild + re-certification wave across live Azure offers (continuous listing freshness).
Each marketplace listing also ships per-version notes with the image itself. Full documentation: DCA Hardened Message Broker docs. Labels: Critical (security — act now), Important, Optional.

This product is based on the open-source RabbitMQ software (MPL-2.0). RabbitMQ is a trademark of its owner, Broadcom; Derek Coleman & Associates Inc is not affiliated with or endorsed by Broadcom.