Impact Score: 5/10
MinIO: Critical security fix release
Source available โ automated, not human-reviewed
Component: minio ยท Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
โก Executive Summary (TL;DR)
MinIO RELEASE.2018-01-18T20-33-21Z. Source highlight: This release includes a **critical security fix**. We strongly recommend that you update all your Minio deployments immediately. More details about the issue are published here.
Who Does This Impact? (Role-Based Analysis)
๐ป Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
๐ Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
โ๏ธ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
โจ New Features & Capabilities (5)
- Add validation of xlMeta ErasureInfo field (#5389) (6 days ago)
- Add chroot environment doc for minio (#5366) (7 days ago)
- Add custom secret names for Docker (#5355) (10 days ago)
- gateway/manta: Add support for RBAC (#5332) (2 weeks ago)
- add support for encrypted TLS private keys (#5308) (2 weeks ago)
๐ง Bug Fixes & Patches (6)
- Fix free and total space reported in startup banner (#5419) (25 hours ago)
- fix authentication bypass against Admin-API (#5412) (26 hours ago)
- Fix multi-file dropzone upload issue causing bucket listing duplication (#5392) (5 days ago)
- Fix a possible race during PutObject() (#5376) (5 days ago)
- Fix config set handler (#5384) (8 days ago)
- Fix storage class related issues (#5338) (2 weeks ago)
๐ View Raw Release Notes (Original Developer Log)
# Highlights
This release includes a **critical security fix**. We strongly recommend that you update all your Minio deployments immediately. More details about the issue are published [here](https://blog.minio.io/minio-release-jan-18-2018-security-advisory-4c64ca87721b).
# Changelog
- Fix free and total space reported in startup banner (#5419) (25 hours ago)
- replace all "crypto/sha256" with "github.com/minio/sha256-simd" (#5391) (26 hours ago)
- gateway/manta: Bump manta dependencies (#5414) (26 hours ago)
- fix authentication bypass against Admin-API (#5412) (26 hours ago)
- Removes logrus package and refactors logging messages (#5293) (29 hours ago)
- Document pre-existing data in fs mode (#5365) (30 hours ago)
- Update storage class related documents (#5399) (35 hours ago)
- Don't delete lock ops entry during state change (#5388) (2 days ago)
- Remove upload healing related dead code (#5404) (3 days ago)
- Fix multi-file dropzone upload issue causing bucket listing duplication (#5392) (5 days ago)
- Fix a possible race during PutObject() (#5376) (5 days ago)
- Move nslocking from s3 layer to object layer (#5382) (6 days ago)
- restrict TLS cipher suites of the server (#5245) (6 days ago)
- Add validation of xlMeta ErasureInfo field (#5389) (6 days ago)
- Add chroot environment doc for minio (#5366) (7 days ago)
- Update madmin package to return storage class parity (#5387) (7 days ago)
- Remove healing of incomplete multipart uploads (#5390) (7 days ago)
- Remove unnecessary errors printed on the console (#5386) (7 days ago)
- Update error response when heal is not implemented (#5383) (7 days ago)
- Assume standard storage class if not set in metadata (#5370) (7 days ago)
- Fix config set handler (#5384) (8 days ago)
- Remove requirement for issued at JWT claims (#5364) (8 days ago)
- Update Elasticsearch documentation with authentication information (#5381) (9 days ago)
- (admin-config) Allow x-amz-content-sha256 to be optional for PutObject() (#5340) (10 days ago)
- Refactor storage class parsing for Gateway mode (#5331) (10 days ago)
- Add custom secret names for Docker (#5355) (10 days ago)
- Separate the codebase for XL and FS format.json related code (#5317) (10 days ago)
- Remove incomplete older chinese translation doc (#5368) (11 days ago)
- Remove duplicate http constants (#5367) (11 days ago)
- Save http trace to a file (#5300) (13 days ago)
- Correct color code of Excel file icon (#5361) (13 days ago)
- gateway/manta: Add support for RBAC (#5332) (2 weeks ago)
- add support for encrypted TLS private keys (#5308) (2 weeks ago)
- Exitcode with '1' when update is available (#5354) (2 weeks ago)
- Fix storage class related issues (#5338) (2 weeks ago)
- Honor browser enabled config value in startup message (#5313) (2 weeks ago)
- Automatically set goroutines based on shardSize (#5346) (2 weeks ago)
- Update yaml files to latest version RELEASE.2018-01-02T23-07-00Z (2 weeks ago)