Home / CLOUD / MinIO / RELEASE.2025-02-28T09-55-16Z
MinIO RELEASE.2025-02-28T09-55-16Zstable Released Feb 28, 2025
Impact Score: 5/10

MinIO: Security and bug fix release

Source available — automated, not human-reviewed

Component: minio · Channel: stable. Automated analysis, not a compatibility certification. How this works.

Analysis updated: 2026-11-01.

Compatibility not verified — check source notes
📄 .MD
🔧 Bug Fixes 4
⚡ Executive Summary (TL;DR)

MinIO RELEASE.2025-02-28T09-55-16Z. Source highlight: This release contains a fix for the security vulnerability that is the subject of this advisory: https://github.com/minio/minio/security/advisories/GHSA-wc79-7x8x-2p58. All deployments with SFTP access using LDAP as identity provider are advised to upgrade immediately.

Visit MinIO Official Site ↗ Official Release Source ↗ All MinIO Releases 📡 MinIO RSS
Who Does This Impact? (Role-Based Analysis)

💻 Software Engineers & Devs

Check the source notes against the package and APIs you use before upgrading.

📊 Product & Engineering Leads

Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.

⚙️ DevOps & Security

Verify the target version, runtime requirements and rollback procedure in the official documentation.

🔧 Bug Fixes & Patches (4)

  • Fix importIAM issue with importing implied policies
  • Fix typos
  • fix: SFTP auth bypass with no pub key in LDAP
  • Fix healing probability for skipped folders
📄 View Raw Release Notes (Original Developer Log)
## Highlights This release contains a fix for the security vulnerability that is the subject of this advisory: https://github.com/minio/minio/security/advisories/GHSA-wc79-7x8x-2p58. All deployments with SFTP access using LDAP as identity provider are advised to upgrade immediately. ## What's Changed * Fix importIAM issue with importing implied policies by @taran-p in https://github.com/minio/minio/pull/20956 * Update SRSvcAccCreate with new type by @taran-p in https://github.com/minio/minio/pull/20974 * build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 by @dependabot in https://github.com/minio/minio/pull/20976 * Fix typos by @triplechecker-com in https://github.com/minio/minio/pull/20970 * Update golang.org/x/crypto to address govulncheck complaint by @vadmeste in https://github.com/minio/minio/pull/20983 * Allow disabling of all X-Forwarded-For header processing by @marktheunissen in https://github.com/minio/minio/pull/20977 * check for errors on bitrotWriter Close() by @vadmeste in https://github.com/minio/minio/pull/20982 * replication: set checksum type correctly by @poornas in https://github.com/minio/minio/pull/20985 * fix: SFTP auth bypass with no pub key in LDAP by @donatello in https://github.com/minio/minio/pull/20986 * Fix healing probability for skipped folders by @klauspost in https://github.com/minio/minio/pull/20988 ## New Contributors * @triplechecker-com made their first contribution in https://github.com/minio/minio/pull/20970 **Full Changelog**: https://github.com/minio/minio/compare/RELEASE.2025-02-18T16-25-55Z...RELEASE.2025-02-28T09-55-16Z
← Older Version MinIO RELEASE.2025-02-18T16-25-55Z