**Release Date:** Jun 17, 2026

* Update MinIO BOSH Release to minio-boshrelease-2026-06-06T02-44-06Z.tgz
* Switches to the enterprise AIStor binary RELEASE.2026-06-06T02-44-06Z (bundles AIStor mc RELEASE.2026-04-21T04-26-49Z)
* Fixes security issues:
  * [MSA-2026-011](https://subnet.min.io/security-advisories/MSA-2026-011) — `aws:SourceIp` policy condition spoofable via the `X-Forwarded-For` header
  * [MSA-2026-012](https://subnet.min.io/security-advisories/MSA-2026-012) — `s3:ExistingObjectTag` policy condition poisoning via the `PutObjectTagging` request body

**Product Dependencies**
| Product               | Behavior                     | Version Specifier         |
|---------------------------|------------------------------|---------------------------|
| elastic-runtime           | Float on a Version Line      | 6.0, 10.0, 10.2                     |
| ops-manager               | Float on a Version Line      | 3.0                       |
| stemcells-ubuntu-jammy    | Float on a Version Line      | 1                         |

## Files
| Name                          | Size (bytes)   |
|-------------------------------|----------------|
| minio-internal-blobstore-1.0.28.pivotal | 370797719 |