# Announcements **URL:** https://discuss.elastic.co/c/announcements/5.md?page=19 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 20 --- ## [Elastic Stack 6.3.0 and 5.6.10 Security Update](https://discuss.elastic.co/t/elastic-stack-6-3-0-and-5-6-10-security-update/135777)
**Author:** [@Maurits\_Fennis](https://discuss.elastic.co/u/Maurits_Fennis)\ **Replies:** 0\ **Last updated:** [June 13, 2018, 6:23pm UTC](https://discuss.elastic.co/t/elastic-stack-6-3-0-and-5-6-10-security-update/135777 "2018-06-13T18:23:18Z")
Elasticsearch Information Exposure Vulnerability (ESA-2018-10) In Elasticsearch versions 6.0.0-beta1 to 6.2.4 a disclosure flaw was found in the \_snapshot API. When the access\_key and security\_key parameters are set usi… --- ## [\[ANNOUNCEMENT\] new analysis plugin released : dandelion](https://discuss.elastic.co/t/announcement-new-analysis-plugin-released-dandelion/130470)
**Author:** [@ZarHenry96](https://discuss.elastic.co/u/ZarHenry96)\ **Replies:** 0\ **Last updated:** [May 3, 2018, 2:11pm UTC](https://discuss.elastic.co/t/announcement-new-analysis-plugin-released-dandelion/130470 "2018-05-03T14:11:30Z")
Hi, I've just released an analysis plugin that integrates Dandelion entity extraction service into elasticsearch. It provides an analyzer that allows semantic searches based on the entities extracted from the input tex… --- ## [Rally 0.11.0 released](https://discuss.elastic.co/t/rally-0-11-0-released/131113)
**Author:** [@danielmitterdorfer](https://discuss.elastic.co/u/danielmitterdorfer)\ **Replies:** 0\ **Last updated:** [May 9, 2018, 7:13am UTC](https://discuss.elastic.co/t/rally-0-11-0-released/131113 "2018-05-09T07:13:43Z")
We have just released Rally 0.11.0. This release contains several improvements and bug fixes: Compatible with the upcoming Elasticsearch 6.3.0 release: After x-pack has been open-sourced, Elasticsearch 6.3.0 will be av… --- ## [Elasticsearch Rust Client: Update 05 Oct 2017](https://discuss.elastic.co/t/elasticsearch-rust-client-update-05-oct-2017/102815)
**Author:** [@KodrAus](https://discuss.elastic.co/u/KodrAus)\ **Replies:** 0\ **Last updated:** [October 5, 2017, 9:03am UTC](https://discuss.elastic.co/t/elasticsearch-rust-client-update-05-oct-2017/102815 "2017-10-05T09:03:19Z")
The GitHub repo Documentation Release notes Hi everyone! It's been a busy few months, but I've just pushed out a new release of the Elasticsearch Rust client I work on. I'm pretty excited to get this one out the door,… --- ## [Rally 0.10.1 released](https://discuss.elastic.co/t/rally-0-10-1-released/128682)
**Author:** [@danielmitterdorfer](https://discuss.elastic.co/u/danielmitterdorfer)\ **Replies:** 0\ **Last updated:** [April 19, 2018, 10:58am UTC](https://discuss.elastic.co/t/rally-0-10-1-released/128682 "2018-04-19T10:58:37Z")
We have just released Rally 0.10.1. This release contains small improvements and bug fixes (see the 0.10.1 release page for details). How to...? ... upgrade: pip3 install --upgrade esrally ... install: pip3 install es… --- ## [Elastic Stack 6.2.4 and 5.6.9 security update](https://discuss.elastic.co/t/elastic-stack-6-2-4-and-5-6-9-security-update/128422)
**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\ **Replies:** 0\ **Last updated:** [April 17, 2018, 7:18pm UTC](https://discuss.elastic.co/t/elastic-stack-6-2-4-and-5-6-9-security-update/128422 "2018-04-17T19:18:54Z")
X-Pack Machine Learning XSS vulnerability (ESA-2018-06) X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting (XSS) vulnerability. Users with manage\_ml permissions could create jobs contain… --- ## [Rally 0.10.0 released](https://discuss.elastic.co/t/rally-0-10-0-released/128165)
**Author:** [@dliappis](https://discuss.elastic.co/u/dliappis)\ **Replies:** 0\ **Last updated:** [April 16, 2018, 10:13am UTC](https://discuss.elastic.co/t/rally-0-10-0-released/128165 "2018-04-16T10:13:24Z")
We have just released Rally 0.10.0. This is a fairly big release with several bug fixes and improvements. If you are using an older version of Rally, please refer to the migration guide for more details. Highlights Gra… --- ## [Elastic Stack 6.2.3 security update](https://discuss.elastic.co/t/elastic-stack-6-2-3-security-update/124848)
**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\ **Replies:** 0\ **Last updated:** [March 20, 2018, 7:30pm UTC](https://discuss.elastic.co/t/elastic-stack-6-2-3-security-update/124848 "2018-03-20T19:30:16Z")
X-Pack Security SAML vulnerability (ESA-2018-07) X-Pack Security versions 6.2.0, 6.2.1, and 6.2.2 are vulnerable to a user impersonation attack via incorrect XML canonicalization and DOM traversal. An attacker might hav… --- ## [Elkwin - a free all-in-one ELK Stack Installer for Windows](https://discuss.elastic.co/t/elkwin-a-free-all-in-one-elk-stack-installer-for-windows/124005)
**Author:** [@itefix](https://discuss.elastic.co/u/itefix)\ **Replies:** 0\ **Last updated:** [March 14, 2018, 10:20pm UTC](https://discuss.elastic.co/t/elkwin-a-free-all-in-one-elk-stack-installer-for-windows/124005 "2018-03-14T22:20:12Z")
Elkwin is a free packaging of Elasticsearch, Logstash, Kibana and Oracle Java Server JRE, providing a standalone solution ready to use for searching, analyzing and visualization of almost any type of structured and unstr… --- ## [Rally 0.9.4 released](https://discuss.elastic.co/t/rally-0-9-4-released/123542)
**Author:** [@dliappis](https://discuss.elastic.co/u/dliappis)\ **Replies:** 0\ **Last updated:** [March 12, 2018, 12:16pm UTC](https://discuss.elastic.co/t/rally-0-9-4-released/123542 "2018-03-12T12:16:53Z")
We have just released Rally 0.9.4. This release contains several enhancements and bug fixes (see the 0.9.4 release page for details). How to...? ... upgrade: pip3 install --upgrade esrally ... install: pip3 install es… --- ## [We're Doubling Down on Open](https://discuss.elastic.co/t/were-doubling-down-on-open/121769)
**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Replies:** 0\ **Last updated:** [February 28, 2018, 2:45am UTC](https://discuss.elastic.co/t/were-doubling-down-on-open/121769 "2018-02-28T02:45:34Z")
:tada: We're Doubling Down on Open :tada: As we just announced at our Elastic{ON} 2018 Keynote, we're going to be opening the code for X-Pack as of our 6.3 release! For all the details head over to the announcement blo… --- ## [Elastic{ON} 2018 Keynote Live Stream](https://discuss.elastic.co/t/elastic-on-2018-keynote-live-stream/121755)
**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Replies:** 0\ **Last updated:** [February 28, 2018, 12:38am UTC](https://discuss.elastic.co/t/elastic-on-2018-keynote-live-stream/121755 "2018-02-28T00:38:54Z")
If you'd like to follow this live, you can head to - https://www.elastic.co/live/elasticon-2018-opening-keynote --- ## [Rally 0.9.3 released](https://discuss.elastic.co/t/rally-0-9-3-released/121103)
**Author:** [@danielmitterdorfer](https://discuss.elastic.co/u/danielmitterdorfer)\ **Replies:** 0\ **Last updated:** [February 22, 2018, 5:34pm UTC](https://discuss.elastic.co/t/rally-0-9-3-released/121103 "2018-02-22T17:34:41Z")
We have just released Rally 0.9.3. This release fixes a bug where Rally is hanging when benchmarking multi-node clusters that are not managed by Rally (see the 0.9.3 release page for details). How to...? ... upgrade: p… --- ## [Rally 0.9.2 released](https://discuss.elastic.co/t/rally-0-9-2-released/120583)
**Author:** [@danielmitterdorfer](https://discuss.elastic.co/u/danielmitterdorfer)\ **Replies:** 0\ **Last updated:** [February 20, 2018, 9:29am UTC](https://discuss.elastic.co/t/rally-0-9-2-released/120583 "2018-02-20T09:29:13Z")
We have just released Rally 0.9.2. This release contains several bugfixes and some minor improvements (see also the 0.9.2 release page). How to...? ... upgrade: pip3 install --upgrade esrally ... install: pip3 install… --- ## [\[ANNOUNCEMENT\] - spring-elasticsearch 6.0 released](https://discuss.elastic.co/t/announcement-spring-elasticsearch-6-0-released/119135)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [February 8, 2018, 10:32pm UTC](https://discuss.elastic.co/t/announcement-spring-elasticsearch-6-0-released/119135 "2018-02-08T22:32:27Z")
The spring-elasticsearch team is pleased to announce the spring-elasticsearch-6.0 release! Spring factories for Elasticsearch Usage Add this library to you project: \ \fr.pilato.spring\ … --- ## [\[ANNOUNCEMENT\] - TestContainers :: elasticsearch 0.1 released](https://discuss.elastic.co/t/announcement-testcontainers-elasticsearch-0-1-released/119129)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [February 8, 2018, 9:59pm UTC](https://discuss.elastic.co/t/announcement-testcontainers-elasticsearch-0-1-released/119129 "2018-02-08T21:59:09Z")
The TestContainers :: elasticsearch team is pleased to announce the testcontainers-elasticsearch-0.1 release! TestContainers :: elasticsearch Dockerized Elasticsearch container for testing under Testcontainers. Usage A… --- ## [Elastic Stack 6.2.0 released](https://discuss.elastic.co/t/elastic-stack-6-2-0-released/118704)
**Author:** [@asawari](https://discuss.elastic.co/u/asawari)\ **Replies:** 0\ **Last updated:** [February 6, 2018, 7:04pm UTC](https://discuss.elastic.co/t/elastic-stack-6-2-0-released/118704 "2018-02-06T19:04:51Z")
Elastic Stack 6.2.0 released Hi all, We’ve just released version 6.2.0 of the Elastic Stack. Plus, Elastic APM is now GA. Learn more about the latest and greatest in the blog posts: Try out 6.2 toda… --- ## [\[ANNOUNCEMENT\] - Elasticsearch Beyonder 6.0 released](https://discuss.elastic.co/t/announcement-elasticsearch-beyonder-6-0-released/118410)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [February 5, 2018, 8:56am UTC](https://discuss.elastic.co/t/announcement-elasticsearch-beyonder-6-0-released/118410 "2018-02-05T08:56:35Z")
The Elasticsearch Beyonder team is pleased to announce the elasticsearch-beyonder-6.0 release! Elasticsearch Beyonder Elasticsearch beyonder provides automatic index, mapping, alias or template creation when an elastic… --- ## [\[ANNOUNCEMENT\] - spring-elasticsearch 5.0 released](https://discuss.elastic.co/t/announcement-spring-elasticsearch-5-0-released/118354)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [February 4, 2018, 5:57pm UTC](https://discuss.elastic.co/t/announcement-spring-elasticsearch-5-0-released/118354 "2018-02-04T17:57:15Z")
The spring-elasticsearch team is pleased to announce the spring-elasticsearch-5.0 release! Spring factories for Elasticsearch Usage Add this library to you project: \ \fr.pilato.spring\ \<… --- ## [Elastic Stack 6.1.3 and 5.6.7 security update](https://discuss.elastic.co/t/elastic-stack-6-1-3-and-5-6-7-security-update/117683)
**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\ **Replies:** 0\ **Last updated:** [January 30, 2018, 6:21pm UTC](https://discuss.elastic.co/t/elastic-stack-6-1-3-and-5-6-7-security-update/117683 "2018-01-30T18:21:47Z")
Kibana incomplete fix for ESA-2017-23 (ESA-2018-03) The fix in Kibana for ESA-2017-23 was incomplete. With X-Pack security enabled, Kibana versions before 6.1.3 and 5.6.7 have an open redirect vulnerability on the login… --- ## [TestContainers elasticsearch testing module 0.1-SNAPSHOT](https://discuss.elastic.co/t/testcontainers-elasticsearch-testing-module-0-1-snapshot/117373)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [January 28, 2018, 3:53pm UTC](https://discuss.elastic.co/t/testcontainers-elasticsearch-testing-module-0-1-snapshot/117373 "2018-01-28T15:53:51Z")
Heya I'm pleased to announce that I just published a preview version of the "TestContainers elasticsearch testing module" It's a Testcontainers module for elasticsearch. Note that it's based on the official Docker im… --- ## [Elasticsearch Learning to Rank 1.0 Released](https://discuss.elastic.co/t/elasticsearch-learning-to-rank-1-0-released/116869)
**Author:** [@softwaredoug](https://discuss.elastic.co/u/softwaredoug)\ **Replies:** 0\ **Last updated:** [January 24, 2018, 1:07pm UTC](https://discuss.elastic.co/t/elasticsearch-learning-to-rank-1-0-released/116869 "2018-01-24T13:07:24Z")
The final 1.0 of Elasticsearch Learning to Rank has been released! This plugin drives search an Wikipedia, the #5 site on the web, as well as Snagajob, the largest US hourly job marketplace. Thanks so much to the commun… --- ## [Rally 0.9.1 released](https://discuss.elastic.co/t/rally-0-9-1-released/116037)
**Author:** [@danielmitterdorfer](https://discuss.elastic.co/u/danielmitterdorfer)\ **Replies:** 0\ **Last updated:** [January 18, 2018, 11:52am UTC](https://discuss.elastic.co/t/rally-0-9-1-released/116037 "2018-01-18T11:52:00Z")
We have just released Rally 0.9.1. This release fixes prematures benchmark failures when JDK 9 is not installed (see also the 0.9.1 release page). How to...? ... upgrade: pip3 install --upgrade esrally ... install: pi… --- ## [Rally 0.9.0 released](https://discuss.elastic.co/t/rally-0-9-0-released/115877)
**Author:** [@danielmitterdorfer](https://discuss.elastic.co/u/danielmitterdorfer)\ **Replies:** 0\ **Last updated:** [January 17, 2018, 12:14pm UTC](https://discuss.elastic.co/t/rally-0-9-0-released/115877 "2018-01-17T12:14:33Z")
We have just released Rally 0.9.0. This release adds several improvements to the track file format and also contains a few bug fixes. If you have created your own tracks, we recommend that you upgrade and work through o… --- ## [Elastic Stack 6.1.2 and 5.6.6 security update](https://discuss.elastic.co/t/elastic-stack-6-1-2-and-5-6-6-security-update/115763)
**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\ **Replies:** 0\ **Last updated:** [January 16, 2018, 5:08pm UTC](https://discuss.elastic.co/t/elastic-stack-6-1-2-and-5-6-6-security-update/115763 "2018-01-16T17:08:35Z")
Logstash sensitive information disclosure issue (ESA-2018-01) When logging warnings regarding deprecated settings, Logstash could inadvertently log sensitive information. Affected Versions All versions before 6.1.2 an… --- ## [Elasticsearch Learning to Rank v 1.0 RC 1 released](https://discuss.elastic.co/t/elasticsearch-learning-to-rank-v-1-0-rc-1-released/102357)
**Author:** [@softwaredoug](https://discuss.elastic.co/u/softwaredoug)\ **Replies:** 2\ **Last updated:** [December 25, 2017, 4:00am UTC](https://discuss.elastic.co/t/elasticsearch-learning-to-rank-v-1-0-rc-1-released/102357 "2017-12-25T04:00:31Z")
We're getting close to fully releasing version 1.0 of the Elasticsearch Learning to Rank plugin. Today our first release candidate for 1.0 is out (for ES 5.6.2)! We need community testing and feedback to help make it bul… --- ## [Kibana 6.1.1 security update](https://discuss.elastic.co/t/kibana-6-1-1-security-update/112520)
**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\ **Replies:** 0\ **Last updated:** [December 19, 2017, 10:57pm UTC](https://discuss.elastic.co/t/kibana-6-1-1-security-update/112520 "2017-12-19T22:57:22Z")
Kibana arbitrary code execution issue (ESA-2017-24) Kibana version 6.1.0 had an arbitrary code execution vulnerability in the Math.js package which is used by math aggregations in Time Series Visual Builder. Kibana user… --- ## [Kibana 6.0.1 and 5.6.5 security update](https://discuss.elastic.co/t/kibana-6-0-1-and-5-6-5-security-update/110571)
**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\ **Replies:** 0\ **Last updated:** [December 6, 2017, 8:06pm UTC](https://discuss.elastic.co/t/kibana-6-0-1-and-5-6-5-security-update/110571 "2017-12-06T20:06:56Z")
Kibana cross site scripting issue (ESA-2017-22) Kibana versions prior to 6.0.1 and 5.6.5 had a cross-site scripting (XSS) vulnerability via URL fields that could allow an attacker to obtain sensitive information from or… --- ## [Rally 0.8.1 released](https://discuss.elastic.co/t/rally-0-8-1-released/110357)
**Author:** [@danielmitterdorfer](https://discuss.elastic.co/u/danielmitterdorfer)\ **Replies:** 0\ **Last updated:** [December 5, 2017, 1:14pm UTC](https://discuss.elastic.co/t/rally-0-8-1-released/110357 "2017-12-05T13:14:03Z")
We have just released Rally 0.8.1. This release adds the refresh API as a new operation type and fixes a couple of very minor bugs. See the list of changes on the 0.8.1 release page. How to...? ... upgrade: pip3 instal… --- ## [Rally 0.8.0 released](https://discuss.elastic.co/t/rally-0-8-0-released/108840)
**Author:** [@danielmitterdorfer](https://discuss.elastic.co/u/danielmitterdorfer)\ **Replies:** 0\ **Last updated:** [November 23, 2017, 8:37am UTC](https://discuss.elastic.co/t/rally-0-8-0-released/108840 "2017-11-23T08:37:21Z")
We have just released Rally 0.8.0. This is a fairly big release with several bug fixes and improvements. Highlights Track parameters You can now define parameters in your own tracks and use the new command line paramete… [Previous page](https://discuss.elastic.co/c/announcements/5.md?page=18) [Next page](https://discuss.elastic.co/c/announcements/5.md?page=20)