Minio - RELEASE.2024-02-04T22-36-13Z

Security

Highlights

  • Fixes a regression in service accounts/access keys for the root-user stopped working in the last release,
    a side-affect of a security bug-fix has been addressed.

  • Fixes for rename2() usage in decommission and rebalance on versioned buckets with objects having
    more than a version. this can lead to an inconsistent state() on the object requiring manual intervention.
    If you are planning to rebalance or decommission on a cluster you are advised to upgrade to this
    release - #18964

  • Fixes for memory leaks observed in the new websockets implementations, causing a gradual build-up
    of memory in GiBs on busy clusters with heavy READ operations.

  • Optimizations for internode communication for variety of APIs ranging from IAM, Bucket Metadata.
    reducing internode connections to bare-minimum, there will be some more optimizations coming in this
    area for deploying MinIO at > 300 node clusters.

What's Changed

  • move a collection of peer APIs to websockets by @harshavardhana in https://github.com/minio/minio/pull/18936
  • Improve object reuse for grid messages by @klauspost in https://github.com/minio/minio/pull/18940
  • batch: Fix a typo while validating smallerThan field by @vadmeste in https://github.com/minio/minio/pull/18942
  • fix: null inline policy handling for access keys by @donatello in https://github.com/minio/minio/pull/18945
  • log: Use error log type instead of Application/MinIO type by @vadmeste in https://github.com/minio/minio/pull/18930
  • Fix some leftover issues from PR 18936 by @fwessels in https://github.com/minio/minio/pull/18946
  • simplify deadlineWriter, re-use WithDeadline by @harshavardhana in https://github.com/minio/minio/pull/18948
  • Fix ineffective recycling by @klauspost in https://github.com/minio/minio/pull/18952
  • deprecate disk tokens, instead rely on deadlines and active monitoring by @harshavardhana in https://github.com/minio/minio/pull/18947
  • move Make,Delete,Head,Heal bucket calls to websockets by @harshavardhana in https://github.com/minio/minio/pull/18951
  • Fix mux client memory leak by @klauspost in https://github.com/minio/minio/pull/18956
  • disconnected returns, an unexpected error to List() returning 500s by @harshavardhana in https://github.com/minio/minio/pull/18959
  • xl: Disable rename2 in decommissioning/rebalance by @vadmeste in https://github.com/minio/minio/pull/18964
  • Fix typo in api-router.go by @fwessels in https://github.com/minio/minio/pull/18955
  • Add more advanced cases for dangling by @harshavardhana in https://github.com/minio/minio/pull/18968

Full Changelog: https://github.com/minio/minio/compare/RELEASE.2024-01-31T20-20-33Z...RELEASE.2024-02-04T22-36-13Z


Security

Security wording was detected, but no CVEs were found.

Details

date
Feb. 5, 2024, 12:55 a.m.
name
Bugfix release
type
Patch
👇
Register or login to:
  • 🔍View and search all Minio releases.
  • 🛠️Create and share lists to track your tools.
  • 🚨Setup notifications for major, security, feature or patch updates.
  • 🚀Much more coming soon!
Continue with GitHub
Continue with Google
or