megachangelog
MinIO logo

MinIO Changelog

MinIO — Data, Storage product updates and releases, tracked on megachangelog.


Security

Security and bug fix release

This release addresses security vulnerability CVE-2025-31489 and includes multiple bug fixes, dependency updates, and improvements including JWT dependency bumps, template fixes, STS token revocation API, and various stability enhancements across the codebase.

securitybug-fixapistability
FixRELEASE.2025-04-08T15-41-24Z

Bugfix Release

Fixed decommissioning to ignore orphan delete markers during verification and corrected ILM scanning to properly handle objects with only free versions.

bugfixdecommissioningilmstability
Fix2025-04-22

Bugfix Release

Multiple bug fixes and dependency updates including corrections to buffered streams, error handling, KMS credentials support, and security patches for Go libraries. Upgraded to Go 1.24 and improved batch expiry job reporting.

bugfixstabilitysecuritydependencies
BreakingRELEASE.2025-05-24T17-08-30Z

Breaking Release

Major breaking changes including removal of boringcrypto support, deprecation of embedded UI Console, and removal of external IDP logins via LDAP/OIDC. These features are now available in the AiStor product, with AiStor binaries maintaining backwards compatibility for existing open source deployments.

breakingcryptoauthuimigration
Fix2025-06-13

Bugfix Release

Multiple bug fixes including S3 listing with ILM enabled, empty filename handling, multipart uploads filtering, and cross-compilation support for RISC-V 64. Several stability improvements and metrics enhancements.

s3ilmbugfixstabilityreplication
FixRELEASE.2025-07-18T21-56-31Z

Bugfix Release

MinIO updates the console to the latest version, fixes CopyObject to preserve checksums with encryption, resolves admin API nil dereference, and corrects lambda handler response status matching.

bugfixconsoleapiadminsecurity
Improvement2025-07-23T15-54-02Z

MinIO Release 2025-07-23

This release adds support for X25519MLKEM768 encryption, fixes issues with SinglePool restrictions and metadata reads for parity scenarios, corrects a boundary value bug in object timestamp handling, and simplifies policy mapping validation.

encryptionstabilityperformancebugfix
Announcement2025-09-07T16-13-09Z

Release 2025-09-07

This release includes console updates to v2.0.3, numerous bug fixes for multipart uploads, OIDC authentication, replication, and conditional writes, plus improvements to Helm charts, logging, LDAP, and object-browser components. Multiple stability and functionality enhancements across the MinIO object storage system.

releasestorageapisecuritybugfix
SecurityRELEASE.2025-10-15T17-29-55Z

Security/CVE: Privilege Escalation via Session Policy Bypass

A privilege escalation vulnerability in Service Accounts and STS was reported and fixed. All users are advised to upgrade immediately to this security release.

securitycveprivilege-escalationstsauth
Announcement2025-09-06T17-38-46Z

MinIO Release 2025-09-06

MinIO release version 2025-09-06T17-38-46Z containing updates and improvements to the MinIO object storage platform.

minioreleasestorageobject-storage