From 4d44d5e4c838712f1cc86a87e25ca358567f07c0 Mon Sep 17 00:00:00 2001 From: "Adam C. Emerson" Date: Wed, 23 Jul 2025 14:01:08 -0400 Subject: [PATCH] doc/releases/squid: More notable changes in RGW Signed-off-by: Adam C. Emerson Signed-off-by: Yuri Weinstein --- doc/releases/releases.yml | 2 +- doc/releases/squid.rst | 6 ++++++ 2 files changed, 7 insertions(+), 1 deletion(-) diff --git a/doc/releases/releases.yml b/doc/releases/releases.yml index c4329b56e30a7..6d15c78f651b0 100644 --- a/doc/releases/releases.yml +++ b/doc/releases/releases.yml @@ -20,7 +20,7 @@ releases: target_eol: 2026-09-19 releases: - version: 19.2.3 - released: 2025-07-22 + released: 2025-07-28 - version: 19.2.2 released: 2025-04-10 - version: 19.2.1 diff --git a/doc/releases/squid.rst b/doc/releases/squid.rst index ceeb4a410712c..4e0e3eae71737 100644 --- a/doc/releases/squid.rst +++ b/doc/releases/squid.rst @@ -25,6 +25,12 @@ Notable Changes * MGR: MGR's always-on modulues/plugins can now be force-disabled. This can be necessary in cases where MGR(s) needs to be prevented from being flooded by the module commands when coresponding Ceph service is down/degraded. +* RGW: An authentication bypass vulnerability in STS + [CVE-2023-43040] has been fixed. +* RGW: S3 policy now enforces ARN-based conditionals. +* RGW: Copying an object to itself no longer causes data + loss. Potential corruption on ETIMEDOUT (not enabled by default), + was also fixed. Changelog --------- -- 2.39.5