MinIO RELEASE.2018-01-18T20-33-21Zstable Released Jan 18, 2018
Impact Score: 5/10

MinIO: Critical security fix release

Source available โ€” automated, not human-reviewed

Component: minio ยท Channel: stable. Automated analysis, not a compatibility certification. How this works.

Analysis updated: 2026-11-01.

Compatibility not verified โ€” check source notes
๐Ÿ“„ .MD
โšก Executive Summary (TL;DR)

MinIO RELEASE.2018-01-18T20-33-21Z. Source highlight: This release includes a **critical security fix**. We strongly recommend that you update all your Minio deployments immediately. More details about the issue are published here.

Who Does This Impact? (Role-Based Analysis)

๐Ÿ’ป Software Engineers & Devs

Check the source notes against the package and APIs you use before upgrading.

๐Ÿ“Š Product & Engineering Leads

Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.

โš™๏ธ DevOps & Security

Verify the target version, runtime requirements and rollback procedure in the official documentation.

โœจ New Features & Capabilities (5)

  • Add validation of xlMeta ErasureInfo field (#5389) (6 days ago)
  • Add chroot environment doc for minio (#5366) (7 days ago)
  • Add custom secret names for Docker (#5355) (10 days ago)
  • gateway/manta: Add support for RBAC (#5332) (2 weeks ago)
  • add support for encrypted TLS private keys (#5308) (2 weeks ago)

๐Ÿ”ง Bug Fixes & Patches (6)

  • Fix free and total space reported in startup banner (#5419) (25 hours ago)
  • fix authentication bypass against Admin-API (#5412) (26 hours ago)
  • Fix multi-file dropzone upload issue causing bucket listing duplication (#5392) (5 days ago)
  • Fix a possible race during PutObject() (#5376) (5 days ago)
  • Fix config set handler (#5384) (8 days ago)
  • Fix storage class related issues (#5338) (2 weeks ago)
๐Ÿ“„ View Raw Release Notes (Original Developer Log)
# Highlights This release includes a **critical security fix**. We strongly recommend that you update all your Minio deployments immediately. More details about the issue are published [here](https://blog.minio.io/minio-release-jan-18-2018-security-advisory-4c64ca87721b). # Changelog - Fix free and total space reported in startup banner (#5419) (25 hours ago) - replace all "crypto/sha256" with "github.com/minio/sha256-simd" (#5391) (26 hours ago) - gateway/manta: Bump manta dependencies (#5414) (26 hours ago) - fix authentication bypass against Admin-API (#5412) (26 hours ago) - Removes logrus package and refactors logging messages (#5293) (29 hours ago) - Document pre-existing data in fs mode (#5365) (30 hours ago) - Update storage class related documents (#5399) (35 hours ago) - Don't delete lock ops entry during state change (#5388) (2 days ago) - Remove upload healing related dead code (#5404) (3 days ago) - Fix multi-file dropzone upload issue causing bucket listing duplication (#5392) (5 days ago) - Fix a possible race during PutObject() (#5376) (5 days ago) - Move nslocking from s3 layer to object layer (#5382) (6 days ago) - restrict TLS cipher suites of the server (#5245) (6 days ago) - Add validation of xlMeta ErasureInfo field (#5389) (6 days ago) - Add chroot environment doc for minio (#5366) (7 days ago) - Update madmin package to return storage class parity (#5387) (7 days ago) - Remove healing of incomplete multipart uploads (#5390) (7 days ago) - Remove unnecessary errors printed on the console (#5386) (7 days ago) - Update error response when heal is not implemented (#5383) (7 days ago) - Assume standard storage class if not set in metadata (#5370) (7 days ago) - Fix config set handler (#5384) (8 days ago) - Remove requirement for issued at JWT claims (#5364) (8 days ago) - Update Elasticsearch documentation with authentication information (#5381) (9 days ago) - (admin-config) Allow x-amz-content-sha256 to be optional for PutObject() (#5340) (10 days ago) - Refactor storage class parsing for Gateway mode (#5331) (10 days ago) - Add custom secret names for Docker (#5355) (10 days ago) - Separate the codebase for XL and FS format.json related code (#5317) (10 days ago) - Remove incomplete older chinese translation doc (#5368) (11 days ago) - Remove duplicate http constants (#5367) (11 days ago) - Save http trace to a file (#5300) (13 days ago) - Correct color code of Excel file icon (#5361) (13 days ago) - gateway/manta: Add support for RBAC (#5332) (2 weeks ago) - add support for encrypted TLS private keys (#5308) (2 weeks ago) - Exitcode with '1' when update is available (#5354) (2 weeks ago) - Fix storage class related issues (#5338) (2 weeks ago) - Honor browser enabled config value in startup message (#5313) (2 weeks ago) - Automatically set goroutines based on shardSize (#5346) (2 weeks ago) - Update yaml files to latest version RELEASE.2018-01-02T23-07-00Z (2 weeks ago)