Impact Score: 5/10
MinIO: Security Bugfix Release
Source available โ automated, not human-reviewed
Component: minio ยท Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
โก Executive Summary (TL;DR)
MinIO RELEASE.2022-07-29T19-40-48Z. Source highlight: 'mc admin update' allowed reading path traversals on accessible files and folders, refer to our advisory
Who Does This Impact? (Role-Based Analysis)
๐ป Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
๐ Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
โ๏ธ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
โก Performance & Enhancements (1)
- Improvements in logging, refer #15408
๐ง Bug Fixes & Patches (5)
- Go-routine leak fixed with kafka client library for audit and bucket events, refer #15434
- Fix typo in json key for DeploymentID
- fix: cluster healthcheck for single drive setups
- Fix passing application configuration to console
- fix: regression in resolving the right versions
๐ View Raw Release Notes (Original Developer Log)
## Highlights
- 'mc admin update' allowed reading path traversals on accessible files and folders, refer to our [advisory](https://github.com/minio/minio/security/advisories/GHSA-gr9v-6pcm-rqvg)
- Go-routine leak fixed with kafka client library for audit and bucket events, refer #15434
- Improvements in logging, refer #15408
## What's Changed
* Fix typo in json key for DeploymentID by @anjalshireesh in https://github.com/minio/minio/pull/15406
* Remove internal usage of consoleAdmin by @donatello in https://github.com/minio/minio/pull/15402
* use logger.LogOnce to reduce printing disconnection logs by @harshavardhana in https://github.com/minio/minio/pull/15408
* optimize speedtest for smaller setups by @harshavardhana in https://github.com/minio/minio/pull/15414
* fix: cluster healthcheck for single drive setups by @harshavardhana in https://github.com/minio/minio/pull/15415
* Optionally run a command when completing jobs by @andrewhibbert in https://github.com/minio/minio/pull/15017
* chore(deps): Included dependency review by @naveensrinivasan in https://github.com/minio/minio/pull/14958
* Do not update directory access time by @vadmeste in https://github.com/minio/minio/pull/15426
* replication: Include Replica object versions in resync by @poornas in https://github.com/minio/minio/pull/15427
* do not allow filesystem fallback in server download by @harshavardhana in https://github.com/minio/minio/pull/15429
* Fix passing application configuration to console by @donatello in https://github.com/minio/minio/pull/15409
* choose starting concurrency based on number of local disks by @harshavardhana in https://github.com/minio/minio/pull/15428
* Download binary once and push it to other servers by @cniackz in https://github.com/minio/minio/pull/15407
* fix: regression in resolving the right versions by @harshavardhana in https://github.com/minio/minio/pull/15430
* Update kafka library by @vadmeste in https://github.com/minio/minio/pull/15434
## New Contributors
* @andrewhibbert made their first contribution in https://github.com/minio/minio/pull/15017
**Full Changelog**: https://github.com/minio/minio/compare/RELEASE.2022-07-26T00-53-03Z...RELEASE.2022-07-29T19-40-48Z