Impact Score: 5/10
MinIO: Security and Bugfix Release
Source available โ automated, not human-reviewed
Component: minio ยท Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
โก Executive Summary (TL;DR)
MinIO RELEASE.2023-08-04T17-40-21Z. Source highlight: This release contains many fixes and is built with Go1.19.12 (includes a Golang security fix in `crypto/tls`).
Who Does This Impact? (Role-Based Analysis)
๐ป Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
๐ Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
โ๏ธ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
โจ New Features & Capabilities (6)
- Add slow drive timeouts to match with active disk monitoring
- Added bucket specific grafana dashboard
- introduce deadlines on READ operations
- update all deps and add credits
- add ReadFileStream deadline for disk call
- introduce 'mc admin config set alias/ api odirect=on'
๐ง Bug Fixes & Patches (6)
- fix: Create metrics slice when necessary in getCacheMetrics()
- fix: missing disk metrics when query metric api from peer
- fix: prevCertificate save not correct in loop
- update NTP package to fix ipv6 bug
- fix: allow mc executable inside minio containers
- fixed readme grammar(releases -> realease & wish choose -> wish to choose)
๐ View Raw Release Notes (Original Developer Log)
## Highlights
This release contains many fixes and is built with Go1.19.12 (includes a Golang security fix in `crypto/tls`).
## What's Changed
* return tags as part of Head/Get calls by @harshavardhana in https://github.com/minio/minio/pull/17635
* don't error when asked for 0-based range on empty objects by @flisk in https://github.com/minio/minio/pull/17708
* Revert "don't error when asked for 0-based range on empty objects (#17708) by @klauspost in https://github.com/minio/minio/pull/17713
* fix: Create metrics slice when necessary in getCacheMetrics() by @drivebyer in https://github.com/minio/minio/pull/17711
* remove serializing WalkDir() across all buckets/prefixes on SSDs by @harshavardhana in https://github.com/minio/minio/pull/17707
* allow DNS cache TTL to be configurable by @harshavardhana in https://github.com/minio/minio/pull/17709
* Use decrypted object size while computing object size summary by @poornas in https://github.com/minio/minio/pull/17717
* Add slow drive timeouts to match with active disk monitoring by @harshavardhana in https://github.com/minio/minio/pull/17701
* replication: limit larger uploads to a subset of workers by @poornas in https://github.com/minio/minio/pull/17687
* protect disk monitoring to avoid busy loop configuration by @harshavardhana in https://github.com/minio/minio/pull/17723
* avoid Access() calls on known bucket paths by @harshavardhana in https://github.com/minio/minio/pull/17719
* Added bucket specific grafana dashboard by @shtripat in https://github.com/minio/minio/pull/17727
* Include SuccessorModTime for FileInfo quorum by @krisis in https://github.com/minio/minio/pull/17732
* introduce deadlines on READ operations by @harshavardhana in https://github.com/minio/minio/pull/17724
* Update nats server dependency by @klauspost in https://github.com/minio/minio/pull/17734
* fix: missing disk metrics when query metric api from peer by @drivebyer in https://github.com/minio/minio/pull/17738
* check if metadata headers/url values are equal with signed headers by @ruspaul013 in https://github.com/minio/minio/pull/17737
* Get the signed headers in the order they were signed by @ruspaul013 in https://github.com/minio/minio/pull/17690
* update all deps and add credits by @harshavardhana in https://github.com/minio/minio/pull/17740
* export cluster health as prometheus metrics by @harshavardhana in https://github.com/minio/minio/pull/17741
* s3: Return invalid bucket name the first thing in all S3 calls by @vadmeste in https://github.com/minio/minio/pull/17742
* fix: prevCertificate save not correct in loop by @jiuker in https://github.com/minio/minio/pull/17744
* add ReadFileStream deadline for disk call by @harshavardhana in https://github.com/minio/minio/pull/17745
* logger: Avoid slow calls in http logger Send() function by @vadmeste in https://github.com/minio/minio/pull/17747
* allow disabling O_DIRECT for write ops by @harshavardhana in https://github.com/minio/minio/pull/17751
* update NTP package to fix ipv6 bug by @harshavardhana in https://github.com/minio/minio/pull/17752
* capture total errors data availability and any timeout errors by @harshavardhana in https://github.com/minio/minio/pull/17748
* introduce 'mc admin config set alias/ api odirect=on' by @harshavardhana in https://github.com/minio/minio/pull/17753
* fix: allow mc executable inside minio containers by @naviator in https://github.com/minio/minio/pull/17755
* Send events for extracted objects by @klauspost in https://github.com/minio/minio/pull/17760
* update-notifier.go: misleading version age message by @shoce in https://github.com/minio/minio/pull/17750
* fixed readme grammar(releases -> realease & wish choose -> wish to choose) by @gapirajat in https://github.com/minio/minio/pull/17754
* fix: optimize DiskInfo() call avoid metrics when not needed by @harshavardhana in https://github.com/minio/minio/pull/17763
* do not crash on invalid metric values by @harshavardhana in https://github.com/minio/minio/pull/17764
* Fix trailing header signature mismatch by @klauspost in https://github.com/minio/minio/pull/17774
* fix: make sure to correctly initialize health checks by @harshavardhana in https://github.com/minio/minio/pull/17765
* replication resync: fix queueing by @poornas in https://github.com/minio/minio/pull/17775
* add new errors for Disks with timeouts by @harshavardhana in https://github.com/minio/minio/pull/17770
* add deadlines for readMetadata() in listing by @harshavardhana in https://github.com/minio/minio/pull/17776
* avoid overwriting metrics on success, save it in defer by @harshavardhana in https://github.com/minio/minio/pull/17780
* Avoid logging errors twice during transitioned objects expiration by @vadmeste in https://github.com/minio/minio/pull/17782
* fix: honor requested allow origin settings properly by @harshavardhana in https://github.com/minio/minio/pull/17789
* allow healing to prefer local disks over remote by @harshavardhana in https://github.com/minio/minio/pull/17788
* fix: prioritize audit_webhook and logger_webhook ENVs over the config KVS by @Praveenrajmani in https://github.com/minio/minio/pull/17783
* sts: validate if iam subsystem initialized in handlers by @poornas in https://github.com/minio/minio/pull/17796
* fix: crash in globalTierJournal when TierConfig is not initialized by @harshavardhana in https://github.com/minio/minio/pull/17791
* error out by default beyond 10000 versions per object by @harshavardhana in https://github.com/minio/minio/pull/17803
## New Contributors
* @flisk made their first contribution in https://github.com/minio/minio/pull/17708
* @ruspaul013 made their first contribution in https://github.com/minio/minio/pull/17737
* @naviator made their first contribution in https://github.com/minio/minio/pull/17755
* @shoce made their first contribution in https://github.com/minio/minio/pull/17750
* @gapirajat made their first contribution in https://github.com/minio/minio/pull/17754
**Full Changelog**: https://github.com/minio/minio/compare/RELEASE.2023-07-21T21-12-44Z...RELEASE.2023-08-04T17-40-21Z