This release changes the default ListObjects pipeline and narrows the requirements for read-only container deployments. It updates grpc-health-probe to address CVE-2025-68121, while the grpc-gateway client migration remains internal-only.
Action needed (1)
securitycriticalThe
grpc-health-probedependency update for CVE-2025-68121The
grpc-health-probedependency is updated tov0.to address CVE-2025-68121.4. 45
Check if affected (1)
breakingInternal HTTP-to-gRPC communication over UDS
Applies if you use
--read-only.The HTTP server now communicates with the gRPC server internally over a UDS instead of a TCP socket. Read-only container deployments must also set
--tmpfs /tmpwhen using--read-only.