<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>Object Lock on SILO</title>
    <link>https://silo.pgsty.com/zh/tags/object-lock/</link>
    <description>Recent content in Object Lock on SILO</description>
    <generator>Hugo</generator>
    <language>zh-CN</language>
    
    
    
      <lastBuildDate>Mon, 28 Sep 2026 07:36:54 +0800</lastBuildDate>
    
    
      <atom:link href="https://silo.pgsty.com/zh/tags/object-lock/index.xml" rel="self" type="application/rss+xml" />
    
    <item>
        <title>SN-2026-015：PutObjectRetention 授权绕过</title>
        <link>https://silo.pgsty.com/zh/blog/security/20260926-governance-retention-bypass/</link>
        <pubDate>Sat, 26 Sep 2026 00:00:00 +0000</pubDate>
        
        <guid>https://silo.pgsty.com/zh/blog/security/20260926-governance-retention-bypass/</guid>
        <description>&lt;p&gt;&lt;strong&gt;2026-09-26 状态：设计阶段，尚未修复。&lt;/strong&gt; 本文是待评审的修复设计。&#xA;目前没有任何 SILO 发布修复此缺陷。所有已发布的 Server 版本都受影响，包括&#xA;&lt;code&gt;RELEASE.2026-09-16T00-00-00Z&lt;/code&gt;；Server main&#xA;&lt;a href=&#34;https://github.com/pgsty/silo/commit/b0a540190&#34;&gt;&lt;code&gt;b0a540190&lt;/code&gt;&lt;/a&gt; 同样受影响。&#xA;这段代码继承自上游 MinIO，上游 master 是同样的逻辑。&lt;/p&gt;</description>
      </item>
    
  </channel>
</rss>
