MinIO RELEASE.2025-01-20T14-49-07Z → RELEASE.2025-02-28T09-55-16Z
4 releases · 0 breaking changes · 1 security fix · 0 advisories fixed
1security0breaking0deprecated6feature9fix
Is RELEASE.2025-01-20T14-49-07Z affected? · What changed up to RELEASE.2025-10-15T17-29-55Z
Breaking changes
None in the release notes.
Security changes
- security This release contains a fix for the security vulnerability that is the subject of this advisory: https://github.com/minio/minio/security/advisories/GHSA-wc79-7x8x-2p58. All deployments with SFTP access using LDAP as identity provider are advised to upgrade immediately. in RELEASE.2025-02-28T09-55-16Z
Every release in between
securityThis release contains a fix for the security vulnerability that is the subject of this advisory: https://github.com/minio/minio/security/advisories/GHSA-wc79-7x8x-2p58. All deployments with SFTP access using LDAP as identity provider are advised to upgrade immediately.
fixFix importIAM issue with importing implied policies
featureUpdate SRSvcAccCreate with new type
otherbuild(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5
fixFix typos
otherUpdate golang.org/x/crypto to address govulncheck complaint
featureAllow disabling of all X-Forwarded-For header processing
othercheck for errors on bitrotWriter Close()
otherreplication: set checksum type correctly
fixfix: SFTP auth bypass with no pub key in LDAP
fixFix healing probability for skipped folders
fixFix nil pointer deref in PeerPolicyMappingHandler
other(s)ftp: Enable trailing headers for upload
otherQuick patch for Snowball AutoExtract: #20883
otherUpdate console to 1.7.6
fixFix missing authorization check for PutObjectRetentionHandler
otherftp: Enable trailing headers, just like sftp
otherchore: remove unused and incorrect IsEmpty method from TargetIDSet
fixfix(docs): update mc admin trace link to MinIO official docs
otherExtract all files from encrypted stream with inspect
otherTest checksum types for invalid combinations
othertests: Do not allow forced type asserts
otherreplication: default tag timestamps in CopyObject call
featurests: allow client-provided intermediate CAs
fixFix multipart replication with 1 part objects
featurekms: add MINIO_KMS_REPLICATE_KEYID option
otherdo not expose secret-key to lambda event handler
featureAllow URLs up to 32KB and improve parsing speed
otherDeleteObjects: Send delete to all pools (#172)
otherCheck for valid checksum
featureAdd lock overload protection
otherRedact sensitive fields from DescribeBatchJob
fixfix: proxy requests to honor global transport