# Announcements **URL:** https://discuss.elastic.co/c/announcements/5.md?page=10 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 11 --- ## [Kibana 8.14.0/7.17.22 Security Update (ESA-2024-10)](https://discuss.elastic.co/t/kibana-8-14-0-7-17-22-security-update-esa-2024-10/361502)
**Author:** [@rodrigo\_silva](https://discuss.elastic.co/u/rodrigo_silva)\ **Replies:** 0\ **Last updated:** [June 14, 2024, 2:09pm UTC](https://discuss.elastic.co/t/kibana-8-14-0-7-17-22-security-update-esa-2024-10/361502 "2024-06-14T14:09:17Z")
Kibana open redirect issue (ESA-2024-10). An open redirect issue was discovered in Kibana that could lead to a user being redirected to an arbitrary website if they use a maliciously crafted Kibana URL. Affected Versio… --- ## [Error when restoring snapshots on ES8](https://discuss.elastic.co/t/error-when-restoring-snapshots-on-es8/361467)
**Author:** [@dxygit1](https://discuss.elastic.co/u/dxygit1)\ **Replies:** 0\ **Last updated:** [June 14, 2024, 7:50am UTC](https://discuss.elastic.co/t/error-when-restoring-snapshots-on-es8/361467 "2024-06-14T07:50:21Z")
When using the \_restore API for recovery, no error occurs, but the index appears empty without data. Checking via the API does not show the index, but it appears in Kibana. curl -X POST "localhost:9200/\_snapshot/es-bac… --- ## [Elasticsearch 8.14.0 Security Update (ESA-2024-14)](https://discuss.elastic.co/t/elasticsearch-8-14-0-security-update-esa-2024-14/361007)
**Author:** [@rodrigo\_silva](https://discuss.elastic.co/u/rodrigo_silva)\ **Replies:** 0\ **Last updated:** [June 7, 2024, 4:06am UTC](https://discuss.elastic.co/t/elasticsearch-8-14-0-security-update-esa-2024-14/361007 "2024-06-07T04:06:51Z")
Elasticsearch StackOverflow vulnerability (ESA-2024-14) A flaw was discovered in Elasticsearch, affecting document ingestion when an index template contains a dynamic field mapping of “passthrough” type. Under certain c… --- ## [Kibana 8.14.0 Security Update (ESA-2024-15)](https://discuss.elastic.co/t/kibana-8-14-0-security-update-esa-2024-15/360887)
**Author:** [@rodrigo\_silva](https://discuss.elastic.co/u/rodrigo_silva)\ **Replies:** 0\ **Last updated:** [June 5, 2024, 8:45pm UTC](https://discuss.elastic.co/t/kibana-8-14-0-security-update-esa-2024-15/360887 "2024-06-05T20:45:40Z")
Kibana Broken Access Control issue (ESA-2024-15) A flaw was discovered in Kibana, allowing view-only users of alerting to use the run\_soon API making the alerting rule run continuously, potentially affecting the system … --- ## [🎉 What’s new in Elastic 8.14](https://discuss.elastic.co/t/what-s-new-in-elastic-8-14/360940)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [June 6, 2024, 8:27am UTC](https://discuss.elastic.co/t/what-s-new-in-elastic-8-14/360940 "2024-06-06T08:27:41Z")
:tada: What’s new in Elastic 8.14 Learn about Elastic 8.14 which includes the GA of ES|QL, improvements in vector search, new generative AI Attack Discovery security capabilities, and more. Elastic Search helps devel… --- ## [Elasticsearch 8.14.0 Security Update (ESA-2024-13)](https://discuss.elastic.co/t/elasticsearch-8-14-0-security-update-esa-2024-13/360898)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [June 6, 2024, 3:32am UTC](https://discuss.elastic.co/t/elasticsearch-8-14-0-security-update-esa-2024-13/360898 "2024-06-06T03:32:51Z")
Elasticsearch Remote Cluster Search Cross Cluster API Key insufficient restrictions (ESA-2024-13) It was identified that if a cross-cluster API key restricts search for a given index using the query or the field\_security … --- ## [Elastic Cloud Enterprise 3.7.1 Security Update (ESA-2024-08)](https://discuss.elastic.co/t/elastic-cloud-enterprise-3-7-1-security-update-esa-2024-08/360888)
**Author:** [@rodrigo\_silva](https://discuss.elastic.co/u/rodrigo_silva)\ **Replies:** 0\ **Last updated:** [June 5, 2024, 8:57pm UTC](https://discuss.elastic.co/t/elastic-cloud-enterprise-3-7-1-security-update-esa-2024-08/360888 "2024-06-05T20:57:45Z")
Elastic Cloud Enterprise - Uncontrolled Resource Consumption through HTTP/2 endpoints - CVE-2023-45288 (ESA-2024-08) On April 4, 2024, the Go Project announced CVE-2023-45288, which can lead to CPU exhaustion as an atta… --- ## [Rally 2.11.0](https://discuss.elastic.co/t/rally-2-11-0/360561)
**Author:** [@gareth-ellis](https://discuss.elastic.co/u/gareth-ellis)\ **Replies:** 0\ **Last updated:** [May 30, 2024, 11:38am UTC](https://discuss.elastic.co/t/rally-2-11-0/360561 "2024-05-30T11:38:10Z")
Rally 2.11.0 has just been released. This release brings support for Python 3.12. Highlights #1839: Add support for Python 3.12 Enhancements #1851: Assume no operator if security not enabled in serverless #1846: Upda… --- ## [Elastic Agent vs Beats](https://discuss.elastic.co/t/elastic-agent-vs-beats/360078)
**Author:** [@NasrJBr](https://discuss.elastic.co/u/NasrJBr)\ **Replies:** 1\ **Last updated:** [May 23, 2024, 2:24pm UTC](https://discuss.elastic.co/t/elastic-agent-vs-beats/360078 "2024-05-23T14:24:17Z")
Hello, please i want to know, what are the differences between elastic agent and Beats and which one to use ? --- ## [Elastic Security Statement for CVE-2024-3094, xz versions 5.6.0 and 5.6.1](https://discuss.elastic.co/t/elastic-security-statement-for-cve-2024-3094-xz-versions-5-6-0-and-5-6-1/357894)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [April 22, 2024, 9:19am UTC](https://discuss.elastic.co/t/elastic-security-statement-for-cve-2024-3094-xz-versions-5-6-0-and-5-6-1/357894 "2024-04-22T09:19:38Z")
Elastic Products are not affected by this issue. On March 29th, 2024, Elastic became aware of the malicious code planted in the xz package. Elastic has performed an investigation to identify any Elastic Products which … --- ## [DEBUG | does logstash supports startup debug? just like idea tools did? How should I do that?](https://discuss.elastic.co/t/debug-does-logstash-supports-startup-debug-just-like-idea-tools-did-how-should-i-do-that/357469)
**Author:** [@LiYuzhuo2020](https://discuss.elastic.co/u/LiYuzhuo2020)\ **Replies:** 0\ **Last updated:** [April 16, 2024, 2:33am UTC](https://discuss.elastic.co/t/debug-does-logstash-supports-startup-debug-just-like-idea-tools-did-how-should-i-do-that/357469 "2024-04-16T02:33:13Z")
I want to debug the logstash startup process, does anyone knows how to do that? --- ## [Logstash 8.12.2 restart many times may encounter string index out of range -1 error](https://discuss.elastic.co/t/logstash-8-12-2-restart-many-times-may-encounter-string-index-out-of-range-1-error/356849)
**Author:** [@LiYuzhuo2020](https://discuss.elastic.co/u/LiYuzhuo2020)\ **Replies:** 4\ **Last updated:** [April 9, 2024, 10:11am UTC](https://discuss.elastic.co/t/logstash-8-12-2-restart-many-times-may-encounter-string-index-out-of-range-1-error/356849 "2024-04-09T10:11:56Z")
Hi , last time I restart the logstash 8.12.2 many times (5 - 10 +) may encounter the plugin load errror, so I change mutate { rename =\> {"\[host\]\[name\]" =\> "\[host\]"} } to mutate { remove\_field =\> \["host"\] } and there's no… --- ## [Elasticsearch 8.11.1 Security Update (ESA-2024-05)](https://discuss.elastic.co/t/elasticsearch-8-11-1-security-update-esa-2024-05/356458)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [March 29, 2024, 11:12am UTC](https://discuss.elastic.co/t/elasticsearch-8-11-1-security-update-esa-2024-05/356458 "2024-03-29T11:12:33Z")
Elasticsearch Uncaught Exception (ESA-2024-05) An uncaught exception in Elasticsearch \>= 8.4.0 and \< 8.11.1 occurs when an encrypted PDF is passed to an attachment processor through the REST API. The Elasticsearch inges… --- ## [Logstash how to force to use particular jruby version?](https://discuss.elastic.co/t/logstash-how-to-force-to-use-particular-jruby-version/356447)
**Author:** [@LiYuzhuo2020](https://discuss.elastic.co/u/LiYuzhuo2020)\ **Replies:** 0\ **Last updated:** [March 29, 2024, 9:04am UTC](https://discuss.elastic.co/t/logstash-how-to-force-to-use-particular-jruby-version/356447 "2024-03-29T09:04:52Z")
I'm upgrading the logstash and encountered plugin load error when restart many times, I think this is caused by the jruby version so how can I force the logstash to use particular jruby version and is there any impact wi… --- ## [Elasticsearch 8.13.0 Security Update (ESA-2024-07)](https://discuss.elastic.co/t/elasticsearch-8-13-0-security-update-esa-2024-07/356315)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [March 27, 2024, 4:53pm UTC](https://discuss.elastic.co/t/elasticsearch-8-13-0-security-update-esa-2024-07/356315 "2024-03-27T16:53:56Z")
Elasticsearch Improper Authorization in the Remote Cluster Security API key based security model (ESA-2024-07) It was identified by the Elastic engineering team that the API key based security model for Remote Cluster S… --- ## [Elasticsearch 8.13.0 / 7.17.19 Security Update (ESA-2024-06)](https://discuss.elastic.co/t/elasticsearch-8-13-0-7-17-19-security-update-esa-2024-06/356314)
**Author:** [@rodrigo\_silva](https://discuss.elastic.co/u/rodrigo_silva)\ **Replies:** 0\ **Last updated:** [March 27, 2024, 4:53pm UTC](https://discuss.elastic.co/t/elasticsearch-8-13-0-7-17-19-security-update-esa-2024-06/356314 "2024-03-27T16:53:36Z")
Elasticsearch Uncontrolled Resource Consumption vulnerability (ESA-2024-06) A flaw was discovered in Elasticsearch, where processing a document in a deeply nested pipeline on an ingest node could cause the Elasticsearch… --- ## [🎉 What’s new in Elastic 8.13](https://discuss.elastic.co/t/what-s-new-in-elastic-8-13/356231)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [March 27, 2024, 8:07am UTC](https://discuss.elastic.co/t/what-s-new-in-elastic-8-13/356231 "2024-03-27T08:07:13Z")
Learn about Elastic 8.13 which includes the GA of Amazon Bedrock support within the Elastic AI Assistant for Observability, new vector search configurations, an integration filter plugin for Logstash, and more. Elast… --- ## [Okta apps validation](https://discuss.elastic.co/t/okta-apps-validation/355163)
**Author:** [@sai\_chinnu1852](https://discuss.elastic.co/u/sai_chinnu1852)\ **Replies:** 1\ **Last updated:** [March 12, 2024, 10:07am UTC](https://discuss.elastic.co/t/okta-apps-validation/355163 "2024-03-12T10:07:24Z")
I have 3 okta apps setup. Okta app for backend Okta spa app Okta web app The Okta spa app is able to use the access token it got and pass to Okta app for backend and the token is validated. However, the Okta web app a… --- ## [Kibana 8.12.1, 7.17.18 Security Update (ESA-2024-04)](https://discuss.elastic.co/t/kibana-8-12-1-7-17-18-security-update-esa-2024-04/352805)
**Author:** [@rodrigo\_silva](https://discuss.elastic.co/u/rodrigo_silva)\ **Replies:** 0\ **Last updated:** [February 7, 2024, 10:07pm UTC](https://discuss.elastic.co/t/kibana-8-12-1-7-17-18-security-update-esa-2024-04/352805 "2024-02-07T22:07:29Z")
Kibana heap buffer overflow vulnerability (ESA-2024-04) This issue requires authenticated access to Kibana. On Dec 21, 2023, Google Chrome announced CVE-2023-7024, described as “Heap buffer overflow in WebRTC in Google… --- ## [Elastic Network Drive Connector 8.12.1 Security Update (ESA-2024-02)](https://discuss.elastic.co/t/elastic-network-drive-connector-8-12-1-security-update-esa-2024-02/352687)
**Author:** [@rodrigo\_silva](https://discuss.elastic.co/u/rodrigo_silva)\ **Replies:** 0\ **Last updated:** [February 6, 2024, 10:23pm UTC](https://discuss.elastic.co/t/elastic-network-drive-connector-8-12-1-security-update-esa-2024-02/352687 "2024-02-06T22:23:10Z")
Elastic Network Drive Connector Improper Access Control (ESA-2024-02) An issue was discovered in the Windows Network Drive Connector when using Document Level Security to assign permissions to a file, with explicit allo… --- ## [Kibana 8.12.1 Security Update (ESA-2024-01)](https://discuss.elastic.co/t/kibana-8-12-1-security-update-esa-2024-01/352686)
**Author:** [@rodrigo\_silva](https://discuss.elastic.co/u/rodrigo_silva)\ **Replies:** 0\ **Last updated:** [February 6, 2024, 10:13pm UTC](https://discuss.elastic.co/t/kibana-8-12-1-security-update-esa-2024-01/352686 "2024-02-06T22:13:13Z")
Kibana Broken Access Control issue (ESA-2024-01) An issue was discovered by Elastic, whereby the Detection Engine Search API does not respect Document-level security (DLS) or Field-level security (FLS) when querying the… --- ## [🎉 What’s new in Elastic 8.12](https://discuss.elastic.co/t/what-s-new-in-elastic-8-12/351339)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [January 18, 2024, 9:27am UTC](https://discuss.elastic.co/t/what-s-new-in-elastic-8-12/351339 "2024-01-18T09:27:59Z")
:tada: What’s new in Elastic 8.12 Learn about Elastic 8.12 which includes the GA of the Elastic AI Assistant for Observability, update to Apache Lucene 9.9 with scalar quantization, new machine learning capabilities, CSP… --- ## [Beats and Elastic Agent 8.11.3 / 7.17.16 Security Update (ESA-2023-30)](https://discuss.elastic.co/t/beats-and-elastic-agent-8-11-3-7-17-16-security-update-esa-2023-30/349180)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [December 12, 2023, 5:00pm UTC](https://discuss.elastic.co/t/beats-and-elastic-agent-8-11-3-7-17-16-security-update-esa-2023-30/349180 "2023-12-12T17:00:31Z")
Beats and Elastic Agent Insertion of Sensitive Information into Log File An issue was discovered by Elastic whereby Beats and Elastic Agent would log a raw event in its own logs at the WARN or ERROR level if ingesting th… --- ## [Kibana 8.11.2, 7.17.16 Security Update (ESA-2023-27)](https://discuss.elastic.co/t/kibana-8-11-2-7-17-16-security-update-esa-2023-27/349182)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [December 12, 2023, 5:23pm UTC](https://discuss.elastic.co/t/kibana-8-11-2-7-17-16-security-update-esa-2023-27/349182 "2023-12-12T17:23:12Z")
Kibana Insertion of Sensitive Information into Log File (ESA-2023-27) An issue was discovered by Elastic whereby sensitive information may be recorded in Kibana logs in the event of an error or in the event where debug l… --- ## [Enterprise Search 8.11.2 / 7.17.16 Security Update (ESA-2023-31)](https://discuss.elastic.co/t/enterprise-search-8-11-2-7-17-16-security-update-esa-2023-31/349181)
**Author:** [@rodrigo\_silva](https://discuss.elastic.co/u/rodrigo_silva)\ **Replies:** 0\ **Last updated:** [December 12, 2023, 5:06pm UTC](https://discuss.elastic.co/t/enterprise-search-8-11-2-7-17-16-security-update-esa-2023-31/349181 "2023-12-12T17:06:41Z")
Enterprise Search Insertion of Sensitive Information into Log File (ESA-2023-31) An issue was discovered by Elastic whereby the Documents API of App Search logged the raw contents of indexed documents at INFO log level. … --- ## [Elasticsearch 8.11.2, 7.17.16 Security Update (ESA-2023-29)](https://discuss.elastic.co/t/elasticsearch-8-11-2-7-17-16-security-update-esa-2023-29/349179)
**Author:** [@Levine](https://discuss.elastic.co/u/Levine)\ **Replies:** 0\ **Last updated:** [December 12, 2023, 4:57pm UTC](https://discuss.elastic.co/t/elasticsearch-8-11-2-7-17-16-security-update-esa-2023-29/349179 "2023-12-12T16:57:56Z")
Elasticsearch Insertion of Sensitive Information into Log File (ESA-2023-29) An issue was discovered by Elastic whereby Watcher search input logged the search query results on DEBUG log level. This could lead to raw cont… --- ## [Take the Elasticsearch developer survey](https://discuss.elastic.co/t/take-the-elasticsearch-developer-survey/348664)
**Author:** [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)\ **Replies:** 0\ **Last updated:** [December 5, 2023, 4:28pm UTC](https://discuss.elastic.co/t/take-the-elasticsearch-developer-survey/348664 "2023-12-05T16:28:35Z")
Our developer community is a big part of why Elasticsearch is so popular. To make sure Elastic continues to be a great choice for speed, scale, and relevance, we’d like your help. This survey on your developer experienc… --- ## [Elasticsearch-hadoop 7.17.11 / 8.9.0 Security Update (ESA-2023-28)](https://discuss.elastic.co/t/elasticsearch-hadoop-7-17-11-8-9-0-security-update-esa-2023-28/348663)
**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\ **Replies:** 0\ **Last updated:** [December 5, 2023, 4:27pm UTC](https://discuss.elastic.co/t/elasticsearch-hadoop-7-17-11-8-9-0-security-update-esa-2023-28/348663 "2023-12-05T16:27:11Z")
Elasticsearch-hadoop Unsafe Deserialization (ESA-2023-28) An issue was identified that allowed the unsafe deserialization of java objects from hadoop or spark configuration properties that could have been modified by au… --- ## [Elasticsearch 7.17.14 / 8.10.3 Security Update (ESA-2023-24)](https://discuss.elastic.co/t/elasticsearch-7-17-14-8-10-3-security-update-esa-2023-24/347708)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [November 22, 2023, 9:18am UTC](https://discuss.elastic.co/t/elasticsearch-7-17-14-8-10-3-security-update-esa-2023-24/347708 "2023-11-22T09:18:16Z")
Elasticsearch Improper Handling of Exceptional Conditions (ESA-2023-24) It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when calling … --- ## [Kibana 8.11.1 Security Update (ESA-2023-25)](https://discuss.elastic.co/t/kibana-8-11-1-security-update-esa-2023-25/347149)
**Author:** [@Levine](https://discuss.elastic.co/u/Levine)\ **Replies:** 2\ **Last updated:** [November 17, 2023, 3:18am UTC](https://discuss.elastic.co/t/kibana-8-11-1-security-update-esa-2023-25/347149 "2023-11-17T03:18:11Z")
Kibana Insertion of Sensitive Information into Log File (ESA-2023-25) An issue was discovered by Elastic whereby sensitive information may be recorded in Kibana logs in the event of an error. Elastic has released Kibana … [Previous page](https://discuss.elastic.co/c/announcements/5.md?page=9) [Next page](https://discuss.elastic.co/c/announcements/5.md?page=11)