Skip to content

Security Bugfix Release

Compare
Choose a tag to compare
@minio-trusted minio-trusted released this 04 Mar 03:31
· 3974 commits to master since this release
RELEASE.2021-03-04T00-53-13Z
c3217bd

Highlights

  • Click here to download the latest version of MinIO.
  • Click here for production support.
  • Bypassing readOnly policy by creating a temporary 'mc share upload' URL fixed by PR #11682
    Security advisory published here
  • Add support for mTLS with Audit webhook targets.
  • Optimizing memory usage for compressed objects.
  • Implement GetBucketPolicyStatus API

Changelog

  • Use actual size for buffer selection (#11687) (03/03/21) (Klaus Post)
  • etag: add FromContentMD5 to parse content-md5 as ETag (#11688) (03/03/21) (Andreas Auernhammer)
  • fix: prometheus metrics disks_online count when disks are down (#11689) (03/03/21) (Harshavardhana)
  • Avoid notification event for replicas (#11683) (03/03/21) (Poorna Krishnamoorthy)
  • fix: missing user policy enforcement in PostPolicyHandler (#11682) (03/03/21) (Harshavardhana)
  • fix: Prometheus metrics to re-use storage disks (#11647) (03/02/21) (Harshavardhana)
  • IAM: Block while loading users (#11671) (03/02/21) (Klaus Post)
  • fix: do not deny admins to change other passwords (03/02/21) (Harshavardhana)
  • fix: enforce deny if present for implicit permissions (#11680) (03/02/21) (Harshavardhana)
  • [feat]: implement GetBucketPolicyStatus API (#11673) (03/01/21) (Harshavardhana)
  • Add metric for internode RPC calls errors (#11669) (03/01/21) (Anis Elleuch)
  • Add support for mTLS for Audit log target (#11645) (03/01/21) (Nitish Tiwari)
  • fix: listObjectVersions Include object in marker (#11562) (03/01/21) (Klaus Post)
  • fix: pool number not added for one server (#11670) (03/01/21) (Shireesh Anjal)
  • update gopsutil to use the v3 API (#11638) (03/01/21) (Harshavardhana)
  • Add PoolNumber field to madmin.ServerProperties (#11327) (03/01/21) (Bala FA)