https://silo.pgsty.com/tags/version-id/Recent content in Version ID on SILOHugoenWed, 05 Aug 2026 07:48:52 +0800https://silo.pgsty.com/blog/security/s3-versionid-conditions/Tue, 04 Aug 2026 00:00:00 +0000https://silo.pgsty.com/blog/security/s3-versionid-conditions/<p><strong>Status:</strong> Fixed on the local <code>pgsty/minio</code> branch as <code>744a9dcd7</code>, <strong>unreleased</strong> <strong>Classification:</strong> Policy-enforcement correctness — a fail-<strong>closed</strong> report, a fail-<strong>open</strong> trap avoided, and one narrow trim bypass closed. <strong>Not a headline CVE</strong> — see <a href="https://silo.pgsty.com/blog/security/s3-versionid-conditions/#not-a-cve">How we classify this</a> <strong>Affected scope:</strong> Any deployment with a bucket/IAM policy using <code>Null</code> or <code>StringEquals</code> on <code>s3:versionid</code>; the reported break is on <code>DeleteObject</code>/<code>DeleteObjects</code> <strong>Tracking:</strong> upstream <code>minio/minio</code> issue #21735 (reporter iTrooz, 2026-01-10); upstream repository archived read-only since 2026-04-25</p>