Security/CVE RELEASE.2025-10-15T17-29-55Z

Note

此项目是官方项目的fork版本，仅仅为了发布二进制和docker，无其他任何更改。
This project is a fork version of the official project, only for releasing binaries and docker without any other changes.

Security

A CVE was reported Privilege Escalation via Session Policy Bypass in Service Accounts and STS and fixed in this release,

All users are advised to download and upgrade their MinIO setup immediately.

Changelog

• ba3c0fd Bump Go version in toolchain directive to 1.24.8 (minio#21629)
• 334c313 Change documentation link in README (minio#21636)
• 62383df Fix formatting of features in README.md
• d51a4a4 Update README with Docker and Helm installation instructions (minio#21627)
• bde0d5a Updating readme for MinIO docs (minio#21625)
• b8631cf Use new gofumpt (minio#21613)
• 30f4c45 add github cicd
• 7a80ec1 fix: LDAP TLS handshake fails with StartTLS and tls_skip_verify=off (minio#21582)
• 456d946 fix: after saveRebalanceStats cancel will be empty (minio#21597)
• 1b8ac0a fix: allow trailing slash in AWS S3 POST policies (minio#21612)
• c1a4949 fix: check sub-policy properly when present (minio#21642)
• 756f3c8 fix: incorrect poolID when after decommission adding pools (minio#21590)
• ae71d76 fix: remove unnecessary replication checks (minio#21569)
• 534f4a9 fix: timeN function return final closure not be called (minio#21615)
• 9e49d5e update README.md and other docs to point to source only releases
• 05e5699 update scripts pointing to internal registry for community releases

Docker Images

Docker Hub: docker pull beck8/minio:RELEASE.2025-10-15T17-29-55Z

GitHub Container Registry: docker pull ghcr.io/beck-8/minio:RELEASE.2025-10-15T17-29-55Z

Supported Architectures

• linux/amd64
• linux/arm64
• linux/ppc64le