Signed-off-by: Adam C. Emerson <aemerson@redhat.com>
Signed-off-by: Yuri Weinstein <yweinste@redhat.com>
target_eol: 2026-09-19
releases:
- version: 19.2.3
- released: 2025-07-22
+ released: 2025-07-28
- version: 19.2.2
released: 2025-04-10
- version: 19.2.1
* MGR: MGR's always-on modulues/plugins can now be force-disabled. This can be
necessary in cases where MGR(s) needs to be prevented from being flooded by
the module commands when coresponding Ceph service is down/degraded.
+* RGW: An authentication bypass vulnerability in STS
+ [CVE-2023-43040] has been fixed.
+* RGW: S3 policy now enforces ARN-based conditionals.
+* RGW: Copying an object to itself no longer causes data
+ loss. Potential corruption on ETIMEDOUT (not enabled by default),
+ was also fixed.
Changelog
---------