From: Adam C. Emerson Date: Wed, 23 Jul 2025 18:01:08 +0000 (-0400) Subject: doc/releases/squid: More notable changes in RGW X-Git-Url: http://git-server-git.apps.pok.os.sepia.ceph.com/?a=commitdiff_plain;h=4d44d5e4c838712f1cc86a87e25ca358567f07c0;p=ceph.git doc/releases/squid: More notable changes in RGW Signed-off-by: Adam C. Emerson Signed-off-by: Yuri Weinstein --- diff --git a/doc/releases/releases.yml b/doc/releases/releases.yml index c4329b56e30a..6d15c78f651b 100644 --- a/doc/releases/releases.yml +++ b/doc/releases/releases.yml @@ -20,7 +20,7 @@ releases: target_eol: 2026-09-19 releases: - version: 19.2.3 - released: 2025-07-22 + released: 2025-07-28 - version: 19.2.2 released: 2025-04-10 - version: 19.2.1 diff --git a/doc/releases/squid.rst b/doc/releases/squid.rst index ceeb4a410712..4e0e3eae7173 100644 --- a/doc/releases/squid.rst +++ b/doc/releases/squid.rst @@ -25,6 +25,12 @@ Notable Changes * MGR: MGR's always-on modulues/plugins can now be force-disabled. This can be necessary in cases where MGR(s) needs to be prevented from being flooded by the module commands when coresponding Ceph service is down/degraded. +* RGW: An authentication bypass vulnerability in STS + [CVE-2023-43040] has been fixed. +* RGW: S3 policy now enforces ARN-based conditionals. +* RGW: Copying an object to itself no longer causes data + loss. Potential corruption on ETIMEDOUT (not enabled by default), + was also fixed. Changelog ---------