Minio - RELEASE.2023-08-04T17-40-21Z
Security
Highlights
This release contains many fixes and is built with Go1.19.12 (includes a Golang security fix in crypto/tls
).
What's Changed
- return tags as part of Head/Get calls by @harshavardhana in https://github.com/minio/minio/pull/17635
- don't error when asked for 0-based range on empty objects by @flisk in https://github.com/minio/minio/pull/17708
- Revert "don't error when asked for 0-based range on empty objects (#17708) by @klauspost in https://github.com/minio/minio/pull/17713
- fix: Create metrics slice when necessary in getCacheMetrics() by @drivebyer in https://github.com/minio/minio/pull/17711
- remove serializing WalkDir() across all buckets/prefixes on SSDs by @harshavardhana in https://github.com/minio/minio/pull/17707
- allow DNS cache TTL to be configurable by @harshavardhana in https://github.com/minio/minio/pull/17709
- Use decrypted object size while computing object size summary by @poornas in https://github.com/minio/minio/pull/17717
- Add slow drive timeouts to match with active disk monitoring by @harshavardhana in https://github.com/minio/minio/pull/17701
- replication: limit larger uploads to a subset of workers by @poornas in https://github.com/minio/minio/pull/17687
- protect disk monitoring to avoid busy loop configuration by @harshavardhana in https://github.com/minio/minio/pull/17723
- avoid Access() calls on known bucket paths by @harshavardhana in https://github.com/minio/minio/pull/17719
- Added bucket specific grafana dashboard by @shtripat in https://github.com/minio/minio/pull/17727
- Include SuccessorModTime for FileInfo quorum by @krisis in https://github.com/minio/minio/pull/17732
- introduce deadlines on READ operations by @harshavardhana in https://github.com/minio/minio/pull/17724
- Update nats server dependency by @klauspost in https://github.com/minio/minio/pull/17734
- fix: missing disk metrics when query metric api from peer by @drivebyer in https://github.com/minio/minio/pull/17738
- check if metadata headers/url values are equal with signed headers by @ruspaul013 in https://github.com/minio/minio/pull/17737
- Get the signed headers in the order they were signed by @ruspaul013 in https://github.com/minio/minio/pull/17690
- update all deps and add credits by @harshavardhana in https://github.com/minio/minio/pull/17740
- export cluster health as prometheus metrics by @harshavardhana in https://github.com/minio/minio/pull/17741
- s3: Return invalid bucket name the first thing in all S3 calls by @vadmeste in https://github.com/minio/minio/pull/17742
- fix: prevCertificate save not correct in loop by @jiuker in https://github.com/minio/minio/pull/17744
- add ReadFileStream deadline for disk call by @harshavardhana in https://github.com/minio/minio/pull/17745
- logger: Avoid slow calls in http logger Send() function by @vadmeste in https://github.com/minio/minio/pull/17747
- allow disabling O_DIRECT for write ops by @harshavardhana in https://github.com/minio/minio/pull/17751
- update NTP package to fix ipv6 bug by @harshavardhana in https://github.com/minio/minio/pull/17752
- capture total errors data availability and any timeout errors by @harshavardhana in https://github.com/minio/minio/pull/17748
- introduce 'mc admin config set alias/ api odirect=on' by @harshavardhana in https://github.com/minio/minio/pull/17753
- fix: allow mc executable inside minio containers by @naviator in https://github.com/minio/minio/pull/17755
- Send events for extracted objects by @klauspost in https://github.com/minio/minio/pull/17760
- update-notifier.go: misleading version age message by @shoce in https://github.com/minio/minio/pull/17750
- fixed readme grammar(releases -> realease & wish choose -> wish to choose) by @gapirajat in https://github.com/minio/minio/pull/17754
- fix: optimize DiskInfo() call avoid metrics when not needed by @harshavardhana in https://github.com/minio/minio/pull/17763
- do not crash on invalid metric values by @harshavardhana in https://github.com/minio/minio/pull/17764
- Fix trailing header signature mismatch by @klauspost in https://github.com/minio/minio/pull/17774
- fix: make sure to correctly initialize health checks by @harshavardhana in https://github.com/minio/minio/pull/17765
- replication resync: fix queueing by @poornas in https://github.com/minio/minio/pull/17775
- add new errors for Disks with timeouts by @harshavardhana in https://github.com/minio/minio/pull/17770
- add deadlines for readMetadata() in listing by @harshavardhana in https://github.com/minio/minio/pull/17776
- avoid overwriting metrics on success, save it in defer by @harshavardhana in https://github.com/minio/minio/pull/17780
- Avoid logging errors twice during transitioned objects expiration by @vadmeste in https://github.com/minio/minio/pull/17782
- fix: honor requested allow origin settings properly by @harshavardhana in https://github.com/minio/minio/pull/17789
- allow healing to prefer local disks over remote by @harshavardhana in https://github.com/minio/minio/pull/17788
- fix: prioritize audit_webhook and logger_webhook ENVs over the config KVS by @Praveenrajmani in https://github.com/minio/minio/pull/17783
- sts: validate if iam subsystem initialized in handlers by @poornas in https://github.com/minio/minio/pull/17796
- fix: crash in globalTierJournal when TierConfig is not initialized by @harshavardhana in https://github.com/minio/minio/pull/17791
- error out by default beyond 10000 versions per object by @harshavardhana in https://github.com/minio/minio/pull/17803
New Contributors
- @flisk made their first contribution in https://github.com/minio/minio/pull/17708
- @ruspaul013 made their first contribution in https://github.com/minio/minio/pull/17737
- @naviator made their first contribution in https://github.com/minio/minio/pull/17755
- @shoce made their first contribution in https://github.com/minio/minio/pull/17750
- @gapirajat made their first contribution in https://github.com/minio/minio/pull/17754
Full Changelog: https://github.com/minio/minio/compare/RELEASE.2023-07-21T21-12-44Z...RELEASE.2023-08-04T17-40-21Z
Security
Security wording was detected, but no CVEs were found.
Details
date
Aug. 4, 2023, 7:43 p.m.
name
Security and Bugfix Release
type
Patch
👇
Register or login to:
- 🔍View and search all Minio releases.
- 🛠️Create and share lists to track your tools.
- 🚨Setup notifications for major, security, feature or patch updates.
- 🚀Much more coming soon!