MinIO: Security bug fix release

Source available — automated, not human-reviewed

Component: minio · Channel: stable. Automated analysis, not a compatibility certification. How this works.

Analysis updated: 2026-11-01.

Compatibility not verified — check source notes

📄 .MD

✨ Features 1 ⚡ Improvements 1 🔧 Bug Fixes 3

⚡ Executive Summary (TL;DR)

MinIO RELEASE.2022-04-12T06-55-35Z. Source highlight: Fix a privilege escalation security issue - https://github.com/minio/minio/security/advisories/GHSA-2j69-jjmg-534q

Visit MinIO Official Site ↗ Official Release Source ↗ All MinIO Releases 📡 MinIO RSS

Who Does This Impact? (Role-Based Analysis)

💻 Software Engineers & Devs

Check the source notes against the package and APIs you use before upgrading.

📊 Product & Engineering Leads

Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.

⚙️ DevOps & Security

Verify the target version, runtime requirements and rollback procedure in the official documentation.

✨ New Features & Capabilities (1)

Add support for minio tier type

⚡ Performance & Enhancements (1)

Bump up dperf to 0.3.5

🔧 Bug Fixes & Patches (3)

Fix a privilege escalation security issue - https://github.com/minio/minio/security/advisories/GHSA-2j69-jjmg-534q
Fix a bug in object retention when applying ILM policies (#14732)
Fix service account privilege escalation

📄 View Raw Release Notes (Original Developer Log)

## Highlights - Fix a privilege escalation security issue - https://github.com/minio/minio/security/advisories/GHSA-2j69-jjmg-534q - Fix a bug in object retention when applying ILM policies (#14732) - Click [here](https://min.io/download) to download the latest version of MinIO. - Click [here](https://min.io/pricing) for production support. ## What's Changed * Console v0.15.10 by @dvaldivia in https://github.com/minio/minio/pull/14723 * align atomic variables once more for 32bit by @harshavardhana in https://github.com/minio/minio/pull/14721 * make sure to pass Lifecycle if set for List filtering by @harshavardhana in https://github.com/minio/minio/pull/14722 * Set permissions for GitHub actions by @naveensrinivasan in https://github.com/minio/minio/pull/14693 * Add support for minio tier type by @krisis in https://github.com/minio/minio/pull/14468 * fetch bucket retention config once for ILM evalAction by @harshavardhana in https://github.com/minio/minio/pull/14727 * Fix service account privilege escalation by @donatello in https://github.com/minio/minio/pull/14729 * Bump up dperf to 0.3.5 by @donatello in https://github.com/minio/minio/pull/14730 * Honor object retention when applying ILM policies by @krisis in https://github.com/minio/minio/pull/14732 * Bump up console to v0.15.11 by @donatello in https://github.com/minio/minio/pull/14734 **Full Changelog**: https://github.com/minio/minio/compare/RELEASE.2022-04-09T15-09-52Z...RELEASE.2022-04-12T06-55-35Z

← Older Version MinIO RELEASE.2022-04-09T15-09-52Z Newer Version → MinIO RELEASE.2022-04-16T04-26-02Z