Impact Score: 5/10
MinIO: Security Bugfix Release
Source available — automated, not human-reviewed
Component: minio · Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
⚡ Executive Summary (TL;DR)
MinIO RELEASE.2024-01-31T20-20-33Z. Source highlight: This release fixes a security issue related to service accounts and their permissions for more details
Who Does This Impact? (Role-Based Analysis)
💻 Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
📊 Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
⚙️ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
✨ New Features & Capabilities (2)
- Add cgroup v2 support for memory limit
- add total usable capacity, free and used to DataUsageInfo()
⚡ Performance & Enhancements (2)
- Performance improvement for large clusters with high IOPs requirements.
- Improve tracing & notification scalability
🔧 Bug Fixes & Patches (4)
- This release fixes a security issue related to service accounts and their permissions for more details
- fix: bucket metric of data usage for replication info will be ignore
- fix metrics panic in node metrics endpoint
- fix: permission checks for editing access keys
📄 View Raw Release Notes (Original Developer Log)
## Highlights
- This release fixes a security issue related to service accounts and their permissions for more [details](https://github.com/minio/minio/security/advisories/GHSA-xx8w-mq23-29g4)
- Performance improvement for large clusters with high IOPs requirements.
## What's Changed
* fix: bucket metric of data usage for replication info will be ignore by @jiuker in https://github.com/minio/minio/pull/18895
* fix metrics panic in node metrics endpoint by @poornas in https://github.com/minio/minio/pull/18894
* Update list.md by @dvaldivia in https://github.com/minio/minio/pull/18907
* allow configuring maximum idle connections per host by @harshavardhana in https://github.com/minio/minio/pull/18908
* enable xattr capture by default by @harshavardhana in https://github.com/minio/minio/pull/18911
* reuse transports for callhome and remote tgt validation by @poornas in https://github.com/minio/minio/pull/18912
* exclude veeam virtual objects from replication by @poornas in https://github.com/minio/minio/pull/18918
* Add cgroup v2 support for memory limit by @vadmeste in https://github.com/minio/minio/pull/18905
* remove checkBucketExist check entirely to avoid fan-out calls by @harshavardhana in https://github.com/minio/minio/pull/18917
* Improve tracing & notification scalability by @klauspost in https://github.com/minio/minio/pull/18903
* use all the available nr_requests for NVMe by @harshavardhana in https://github.com/minio/minio/pull/18920
* add total usable capacity, free and used to DataUsageInfo() by @harshavardhana in https://github.com/minio/minio/pull/18921
* remove all the frivolous logs, that may or may not be actionable by @harshavardhana in https://github.com/minio/minio/pull/18922
* Update service file version in makefile by @donatello in https://github.com/minio/minio/pull/18925
* Correct small typo by @fwessels in https://github.com/minio/minio/pull/18923
* fix: permission checks for editing access keys by @donatello in https://github.com/minio/minio/pull/18928
* Keep ServiceV1 admin stop/restart API and mark as deprecated by @vadmeste in https://github.com/minio/minio/pull/18932
**Full Changelog**: https://github.com/minio/minio/compare/RELEASE.2024-01-29T03-56-32Z...RELEASE.2024-01-31T20-20-33Z