IAM

Decision, 2026-10-16: GO; source acceptance and merge complete. Server PR #242 merged the signed repair commit 2616d43fb into main as 4e55fc7db. The final candidate was verified directly on main’s 00a375c4e baseline, independently of the pending LIST …

Status on 2026-10-15: The complete repair in PR #234 (14042b5aa) and PR #235 (0d3ba5d4c) first shipped in RELEASE.2026-10-15T00-00-00Z. The previously published RELEASE.2026-09-16T00-00-00Z remains affected. See the advisory and release notes for …

First fixed release: RELEASE.2026-10-15T00-00-00Z (2026-10-15). It contains the complete repairs for SN-2026-015 and SN-2026-016, merged through PR #234 and PR #235. Server RELEASE.2026-09-16T00-00-00Z and the earlier tested …

Publication update, 2026-09-17: The September source repairs discussed here shipped in Server 20260916. Coordinated upgrades, opt-in prerequisites and remaining limitations still apply. Dated source-status and validation records below retain their …

Released in SILO 20260903. These fixes are part of RELEASE.2026-09-03T13-18-01Z. See the complete release notes for the 20260806-to-20260903 upgrade boundary, components, verification evidence, and known deferrals. This bulletin collects five …

Release status: this change is implemented in pgsty/silo#104, tracking issue #58. Publishing this note does not by itself mean that a server release, package, image, or deployment contains the change. SILO now maps object-delete authorization to the …

Release check (2026-09-16): the original repair described here is included in Server 20260903. Dated review and test accounts below record their original evidence, not a still-pending release or acceptance of a particular production installation. …

Status: Inherited and released First Silo community release: RELEASE.2025-12-03T12-00-00Z Upstream fixed release: RELEASE.2025-10-15T17-29-55Z GitHub advisory: GHSA-jjjj-jwhf-8rgr Upstream fix: minio/minio#21642 A service account or STS account with …