MinIO: Major Bug Fix Release

Source available — automated, not human-reviewed

Component: minio · Channel: stable. Automated analysis, not a compatibility certification. How this works.

Analysis updated: 2026-11-01.

Compatibility not verified — check source notes

📄 .MD

✨ Features 1 🔧 Bug Fixes 6

⚡ Executive Summary (TL;DR)

MinIO RELEASE.2019-04-04T18-31-46Z. Source highlight: Two critical security issues related to privilege escalation are fixed in #7474 & #7476. **Upgrade immediately**, if you do user management with MinIO's in-built user management system or with an external Identity Provider. MinIO Gateway deployments are not affected. See here for specifc details.

Visit MinIO Official Site ↗ Official Release Source ↗ All MinIO Releases 📡 MinIO RSS

Who Does This Impact? (Role-Based Analysis)

💻 Software Engineers & Devs

Check the source notes against the package and APIs you use before upgrading.

📊 Product & Engineering Leads

Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.

⚙️ DevOps & Security

Verify the target version, runtime requirements and rollback procedure in the official documentation.

✨ New Features & Capabilities (1)

Add check for extra input field (#7437) (04/02/19) <Ashish Kumar Sinha>

🔧 Bug Fixes & Patches (6)

Two critical security issues related to privilege escalation are fixed in #7474 & #7476. **Upgrade immediately**, if you do user management with MinIO's in-built user management system or with an external Identity Provider. MinIO Gateway deployments are not affected. See here for specifc details.
Miscellaneous bug fix improvements in the areas of S3 Select, Policy nesting and various other areas.
Fix docker files to enable GO111MODULE (04/04/19) <Harshavardhana>
fix privilege escalation against inter-node communication (#7474) (04/03/19) <Andreas Auernhammer>
fix mysql config for native password authentication (#7436) (03/28/19) <poornas>
Fix markdown table formatting (#7435) (03/27/19) <Harshavardhana>

📄 View Raw Release Notes (Original Developer Log)

## Highlights - Two critical security issues related to privilege escalation are fixed in #7474 & #7476. **Upgrade immediately**, if you do user management with MinIO's in-built user management system or with an external Identity Provider. MinIO Gateway deployments are not affected. See [here](https://blog.minio.io/minio-release-2019-04-04t18-31-46z-security-advisory-6dcad1a115b8) for specifc details. - Miscellaneous bug fix improvements in the areas of S3 Select, Policy nesting and various other areas. ## Changelog - Fix docker files to enable GO111MODULE (04/04/19) <Harshavardhana> - Set S3 Select record message length to 128KiB (#7475) (04/04/19) <Aditya Manthramurthy> - Validate if bucket names are internal (#7476) (04/03/19) <Harshavardhana> - fix privilege escalation against inter-node communication (#7474) (04/03/19) <Andreas Auernhammer> - Migrate to go1.12 to simplify our cmd/http package (#7302) (04/02/19) <Harshavardhana> - rpc: Avoid using Pool since it conflicts with http2 (#7467) (04/02/19) <Anis Elleuch> - Do no access nsLockMap.lockMap when using dsync (#7464) (04/02/19) <Krishna Srinivas> - Show 401 unauthorized msg when nodes are started with different creds (#7433) (04/02/19) <Anis Elleuch> - Assign deploymentID for first minio server in distributed setup (#7427) (04/02/19) <Krishnan Parthasarathi> - Add check for extra input field (#7437) (04/02/19) <Ashish Kumar Sinha> - canonicalize ETag correctly (#7442) (04/01/19) <poornas> - Remove policy nesting errors (#7449) (03/31/19) <Harshavardhana> - fix mysql config for native password authentication (#7436) (03/28/19) <poornas> - Fix markdown table formatting (#7435) (03/27/19) <Harshavardhana> - Makefile: Fix getting misspell code when already installed (#7434) (03/28/19) <Anis Elleuch>

← Older Version MinIO RELEASE.2019-03-27T22-35-21Z Newer Version → MinIO RELEASE.2019-04-09T01-22-30Z