Impact Score: 5/10
MinIO: Security fix release
Source available โ automated, not human-reviewed
Component: minio ยท Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
โก Executive Summary (TL;DR)
MinIO RELEASE.2018-01-02T23-07-00Z. Source highlight: This release includes an **important security fix**. We strongly recommend that you update all your Minio deployments immediately. More details about the issue are published here.
Who Does This Impact? (Role-Based Analysis)
๐ป Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
๐ Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
โ๏ธ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
๐ง Bug Fixes & Patches (4)
- fix timing oracle attack against signature V2/V4 verification (#5335) (17 hours ago)
- Fix PostPolicy form tests without hardcoded dates (#5337) (2 days ago)
- fix: Better printing of XL config init error (#5284) (5 days ago)
- Fix config.json parsing to fetch correct storage class (#5327) (6 days ago)
๐ View Raw Release Notes (Original Developer Log)
# Highlights
This release includes an **important security fix**. We strongly recommend that you update all your Minio deployments immediately. More details about the issue are published [here](https://blog.minio.io/minio-release-jan-2nd-2018-security-advisory-ef0342a4ddba).
# Changelog
- fix timing oracle attack against signature V2/V4 verification (#5335) (17 hours ago)
- Fix PostPolicy form tests without hardcoded dates (#5337) (2 days ago)
- Integrate existing remove bucket functionality from newux to current UI (#5289) (4 days ago)
- Update config.json guide with details of version 22 (#5328) (5 days ago)
- fix: Better printing of XL config init error (#5284) (5 days ago)
- Fix config.json parsing to fetch correct storage class (#5327) (6 days ago)
- Update yaml files to lastest version RELEASE.2017-12-28T01-21-00Z (6 days ago)