# MinIO AIStor RELEASE.2026-03-20T23-11-32Z Released: March 21, 2026 This release resolves several authentication and IAM-related bugs affecting distributed clusters, including intermittent 403 errors when LDAP and MinIO built-in IDP are used together, and a policy broadcast race that could revert recently applied policies. It also fixes bucket visibility in multi-pool single-node setups and restores S3 API event delivery to legacy audit webhook targets. --- ## Downloads ### Binary Downloads | Platform | Architecture | Download | | -------- | ------------ | --------------------------------------------------------------------------- | | Linux | amd64 | [minio](https://dl.min.io/aistor/minio/release/linux-amd64/minio) | | Linux | arm64 | [minio](https://dl.min.io/aistor/minio/release/linux-arm64/minio) | | macOS | arm64 | [minio](https://dl.min.io/aistor/minio/release/darwin-arm64/minio) | | macOS | amd64 | [minio](https://dl.min.io/aistor/minio/release/darwin-amd64/minio) | | Windows | amd64 | [minio.exe](https://dl.min.io/aistor/minio/release/windows-amd64/minio.exe) | ### FIPS Binaries | Platform | Architecture | Download | | -------- | ------------ | --------------------------------------------------------------------------- | | Linux | amd64 | [minio.fips](https://dl.min.io/aistor/minio/release/linux-amd64/minio.fips) | | Linux | arm64 | [minio.fips](https://dl.min.io/aistor/minio/release/linux-arm64/minio.fips) | ### Package Downloads | Format | Architecture | Download | | ------ | ------------ | ----------------------------------------------------------------------------------------------------------------------------------- | | DEB | amd64 | [minio_20260320231132.0.0_amd64.deb](https://dl.min.io/aistor/minio/release/linux-amd64/minio_20260320231132.0.0_amd64.deb) | | DEB | arm64 | [minio_20260320231132.0.0_arm64.deb](https://dl.min.io/aistor/minio/release/linux-arm64/minio_20260320231132.0.0_arm64.deb) | | RPM | amd64 | [minio-20260320231132.0.0-1.x86_64.rpm](https://dl.min.io/aistor/minio/release/linux-amd64/minio-20260320231132.0.0-1.x86_64.rpm) | | RPM | arm64 | [minio-20260320231132.0.0-1.aarch64.rpm](https://dl.min.io/aistor/minio/release/linux-arm64/minio-20260320231132.0.0-1.aarch64.rpm) | ### Container Images ```bash # Standard docker pull quay.io/minio/aistor/minio:RELEASE.2026-03-20T23-11-32Z podman pull quay.io/minio/aistor/minio:RELEASE.2026-03-20T23-11-32Z # FIPS docker pull quay.io/minio/aistor/minio:RELEASE.2026-03-20T23-11-32Z.fips podman pull quay.io/minio/aistor/minio:RELEASE.2026-03-20T23-11-32Z.fips ``` ### Homebrew (macOS) ```bash brew install minio/aistor/minio ``` Note: Homebrew is only available for RELEASE builds, not EDGE builds. --- ## Bug Fixes ### IAM & Authentication - **Resolved intermittent 403 errors with LDAP + MinIO built-in IDP** -- LDAP configuration caches were not included in IAM broadcasts, leaving non-leader nodes with empty LDAP cache data. Broadcasts now serialize LDAP caches and include them in state hash calculations so changes propagate correctly to all peers. Also fixed a race condition in `MergePolicies` where concurrent cache reloads could leave policy documents transiently missing, and corrected broadcast hash dedup logic that could silently drop updates on stale nodes. (#3452) - **Fixed IAM policy broadcast reverting to previous policy** -- A race condition in IAM policy broadcasts could cause a recently applied policy to be overwritten by the previous version during peer synchronization. (#3450) - **Fixed nil dereference in admin API handlers** -- Resolved a nil pointer dereference in admin user management handlers that could cause server panics. (#3437) ### Storage & Bucket Operations - **Fixed bucket visibility in multi-pool single-node setups** -- When a single node hosts drives across multiple pools (e.g., after pool expansion), bucket listing and existence checks computed quorum as total local drives divided by two. Since a bucket created with one pool only has directories on that pool's drives, it failed the inflated quorum check and became invisible. Quorum is now computed per pool, and a bucket is visible if it meets quorum in any single pool. This also fixes the pool-expansion bootstrap path where existing buckets were not discovered correctly. (#3423) ### S3 API & Events - **Restored S3 API event delivery to legacy audit webhook targets** -- When log recorders were introduced, S3 API handlers stopped sending events to `audit_webhook` and `audit_kafka` targets, only sending to the newer `log_api_webhook` targets. Events now flow to both new and legacy audit targets. (#3442) - **Fixed region defaulting for internal minio-go clients** -- When no region is configured, internal minio-go clients (used by delta sharing, FTP/SFTP, object lambda, and prompt handlers) made unnecessary `GetBucketLocation` requests that could fail with 403 if the session policy lacked `s3:GetBucketLocation`. The region now defaults to `us-east-1` to avoid these extraneous calls. (#3430) --- ## Security & Compliance ### Software Bill of Materials (SBOM) This release includes comprehensive SBOM documentation in multiple formats: - [SPDX JSON](sbom-RELEASE.2026-03-20T23-11-32Z.spdx.json) - Standard SBOM format - [CycloneDX JSON](sbom-RELEASE.2026-03-20T23-11-32Z.cyclonedx.json) - Security scanner compatible - [Go Modules](go-modules-RELEASE.2026-03-20T23-11-32Z.txt) - Human-readable dependency list SBOM files document all direct and transitive dependencies for security auditing and compliance requirements. --- ## Upgrade Instructions For detailed upgrade instructions, please read: https://docs.min.io/enterprise/aistor-object-store/upgrade-aistor-server/ Platform-specific upgrade guides: - **Linux/Bare Metal**: https://docs.min.io/enterprise/aistor-object-store/upgrade-aistor-server/upgrade-aistor-linux/ - **Kubernetes with Helm**: https://docs.min.io/enterprise/aistor-object-store/upgrade-aistor-server/upgrade-aistor-kubernetes-helm/ ### Support For enterprise support: - SUBNET Support: https://subnet.min.io - Documentation: https://docs.min.io