# MinIO RELEASE.2019-04-04T18-31-46Z — Release & Upgrade Intelligence
- **Product:** MinIO (https://min.io)
- **Version:** RELEASE.2019-04-04T18-31-46Z
- **Released:** Apr 04, 2019
- **Impact Score:** 5/10
- **Breaking Changes:** Not verified
- **Canonical Analysis:** https://changelogs.us/minio/updates/RELEASE.2019-04-04T18-31-46Z/

## Executive Summary (TL;DR)
MinIO RELEASE.2019-04-04T18-31-46Z. Source highlight: Two critical security issues related to privilege escalation are fixed in #7474 & #7476.  **Upgrade immediately**, if you do user management with MinIO's in-built user management system or with an external Identity Provider. MinIO Gateway deployments are not affected. See here for specifc details.

## New Features
- Add check for extra input field (#7437) (04/02/19) <Ashish Kumar Sinha>

## Bug Fixes
- Two critical security issues related to privilege escalation are fixed in #7474 & #7476.  **Upgrade immediately**, if you do user management with MinIO's in-built user management system or with an external Identity Provider. MinIO Gateway deployments are not affected. See here for specifc details.
- Miscellaneous bug fix improvements in the areas of S3 Select, Policy nesting and various other areas.
- Fix docker files to enable GO111MODULE (04/04/19) <Harshavardhana>
- fix privilege escalation against inter-node communication (#7474) (04/03/19) <Andreas Auernhammer>
- fix mysql config for native password authentication (#7436) (03/28/19) <poornas>
- Fix markdown table formatting (#7435) (03/27/19) <Harshavardhana>
