Minio - RELEASE.2023-08-04T17-40-21Z

Security

Highlights

This release contains many fixes and is built with Go1.19.12 (includes a Golang security fix in crypto/tls).

What's Changed

  • return tags as part of Head/Get calls by @harshavardhana in https://github.com/minio/minio/pull/17635
  • don't error when asked for 0-based range on empty objects by @flisk in https://github.com/minio/minio/pull/17708
  • Revert "don't error when asked for 0-based range on empty objects (#17708) by @klauspost in https://github.com/minio/minio/pull/17713
  • fix: Create metrics slice when necessary in getCacheMetrics() by @drivebyer in https://github.com/minio/minio/pull/17711
  • remove serializing WalkDir() across all buckets/prefixes on SSDs by @harshavardhana in https://github.com/minio/minio/pull/17707
  • allow DNS cache TTL to be configurable by @harshavardhana in https://github.com/minio/minio/pull/17709
  • Use decrypted object size while computing object size summary by @poornas in https://github.com/minio/minio/pull/17717
  • Add slow drive timeouts to match with active disk monitoring by @harshavardhana in https://github.com/minio/minio/pull/17701
  • replication: limit larger uploads to a subset of workers by @poornas in https://github.com/minio/minio/pull/17687
  • protect disk monitoring to avoid busy loop configuration by @harshavardhana in https://github.com/minio/minio/pull/17723
  • avoid Access() calls on known bucket paths by @harshavardhana in https://github.com/minio/minio/pull/17719
  • Added bucket specific grafana dashboard by @shtripat in https://github.com/minio/minio/pull/17727
  • Include SuccessorModTime for FileInfo quorum by @krisis in https://github.com/minio/minio/pull/17732
  • introduce deadlines on READ operations by @harshavardhana in https://github.com/minio/minio/pull/17724
  • Update nats server dependency by @klauspost in https://github.com/minio/minio/pull/17734
  • fix: missing disk metrics when query metric api from peer by @drivebyer in https://github.com/minio/minio/pull/17738
  • check if metadata headers/url values are equal with signed headers by @ruspaul013 in https://github.com/minio/minio/pull/17737
  • Get the signed headers in the order they were signed by @ruspaul013 in https://github.com/minio/minio/pull/17690
  • update all deps and add credits by @harshavardhana in https://github.com/minio/minio/pull/17740
  • export cluster health as prometheus metrics by @harshavardhana in https://github.com/minio/minio/pull/17741
  • s3: Return invalid bucket name the first thing in all S3 calls by @vadmeste in https://github.com/minio/minio/pull/17742
  • fix: prevCertificate save not correct in loop by @jiuker in https://github.com/minio/minio/pull/17744
  • add ReadFileStream deadline for disk call by @harshavardhana in https://github.com/minio/minio/pull/17745
  • logger: Avoid slow calls in http logger Send() function by @vadmeste in https://github.com/minio/minio/pull/17747
  • allow disabling O_DIRECT for write ops by @harshavardhana in https://github.com/minio/minio/pull/17751
  • update NTP package to fix ipv6 bug by @harshavardhana in https://github.com/minio/minio/pull/17752
  • capture total errors data availability and any timeout errors by @harshavardhana in https://github.com/minio/minio/pull/17748
  • introduce 'mc admin config set alias/ api odirect=on' by @harshavardhana in https://github.com/minio/minio/pull/17753
  • fix: allow mc executable inside minio containers by @naviator in https://github.com/minio/minio/pull/17755
  • Send events for extracted objects by @klauspost in https://github.com/minio/minio/pull/17760
  • update-notifier.go: misleading version age message by @shoce in https://github.com/minio/minio/pull/17750
  • fixed readme grammar(releases -> realease & wish choose -> wish to choose) by @gapirajat in https://github.com/minio/minio/pull/17754
  • fix: optimize DiskInfo() call avoid metrics when not needed by @harshavardhana in https://github.com/minio/minio/pull/17763
  • do not crash on invalid metric values by @harshavardhana in https://github.com/minio/minio/pull/17764
  • Fix trailing header signature mismatch by @klauspost in https://github.com/minio/minio/pull/17774
  • fix: make sure to correctly initialize health checks by @harshavardhana in https://github.com/minio/minio/pull/17765
  • replication resync: fix queueing by @poornas in https://github.com/minio/minio/pull/17775
  • add new errors for Disks with timeouts by @harshavardhana in https://github.com/minio/minio/pull/17770
  • add deadlines for readMetadata() in listing by @harshavardhana in https://github.com/minio/minio/pull/17776
  • avoid overwriting metrics on success, save it in defer by @harshavardhana in https://github.com/minio/minio/pull/17780
  • Avoid logging errors twice during transitioned objects expiration by @vadmeste in https://github.com/minio/minio/pull/17782
  • fix: honor requested allow origin settings properly by @harshavardhana in https://github.com/minio/minio/pull/17789
  • allow healing to prefer local disks over remote by @harshavardhana in https://github.com/minio/minio/pull/17788
  • fix: prioritize audit_webhook and logger_webhook ENVs over the config KVS by @Praveenrajmani in https://github.com/minio/minio/pull/17783
  • sts: validate if iam subsystem initialized in handlers by @poornas in https://github.com/minio/minio/pull/17796
  • fix: crash in globalTierJournal when TierConfig is not initialized by @harshavardhana in https://github.com/minio/minio/pull/17791
  • error out by default beyond 10000 versions per object by @harshavardhana in https://github.com/minio/minio/pull/17803

New Contributors

  • @flisk made their first contribution in https://github.com/minio/minio/pull/17708
  • @ruspaul013 made their first contribution in https://github.com/minio/minio/pull/17737
  • @naviator made their first contribution in https://github.com/minio/minio/pull/17755
  • @shoce made their first contribution in https://github.com/minio/minio/pull/17750
  • @gapirajat made their first contribution in https://github.com/minio/minio/pull/17754

Full Changelog: https://github.com/minio/minio/compare/RELEASE.2023-07-21T21-12-44Z...RELEASE.2023-08-04T17-40-21Z


Security

Security wording was detected, but no CVEs were found.

Details

date
Aug. 4, 2023, 7:43 p.m.
name
Security and Bugfix Release
type
Patch
👇
Register or login to:
  • 🔍View and search all Minio releases.
  • 🛠️Create and share lists to track your tools.
  • 🚨Setup notifications for major, security, feature or patch updates.
  • 🚀Much more coming soon!
Continue with GitHub
Continue with Google
or