Security Bugfix Release
minio-trusted
released this
04 Mar 03:31
·
3974 commits
to master
since this release
Highlights
- Click here to download the latest version of MinIO.
- Click here for production support.
- Bypassing readOnly policy by creating a temporary 'mc share upload' URL fixed by PR #11682
Security advisory published here - Add support for mTLS with Audit webhook targets.
- Optimizing memory usage for compressed objects.
- Implement GetBucketPolicyStatus API
Changelog
- Use actual size for buffer selection (#11687) (03/03/21) (Klaus Post)
- etag: add FromContentMD5 to parse content-md5 as ETag (#11688) (03/03/21) (Andreas Auernhammer)
- fix: prometheus metrics disks_online count when disks are down (#11689) (03/03/21) (Harshavardhana)
- Avoid notification event for replicas (#11683) (03/03/21) (Poorna Krishnamoorthy)
- fix: missing user policy enforcement in PostPolicyHandler (#11682) (03/03/21) (Harshavardhana)
- fix: Prometheus metrics to re-use storage disks (#11647) (03/02/21) (Harshavardhana)
- IAM: Block while loading users (#11671) (03/02/21) (Klaus Post)
- fix: do not deny admins to change other passwords (03/02/21) (Harshavardhana)
- fix: enforce deny if present for implicit permissions (#11680) (03/02/21) (Harshavardhana)
- [feat]: implement GetBucketPolicyStatus API (#11673) (03/01/21) (Harshavardhana)
- Add metric for internode RPC calls errors (#11669) (03/01/21) (Anis Elleuch)
- Add support for mTLS for Audit log target (#11645) (03/01/21) (Nitish Tiwari)
- fix: listObjectVersions Include object in marker (#11562) (03/01/21) (Klaus Post)
- fix: pool number not added for one server (#11670) (03/01/21) (Shireesh Anjal)
- update gopsutil to use the v3 API (#11638) (03/01/21) (Harshavardhana)
- Add PoolNumber field to madmin.ServerProperties (#11327) (03/01/21) (Bala FA)