# Announcements **URL:** https://discuss.elastic.co/c/announcements/5.md?page=8 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 9 --- ## [Kibana 8.12.1 Security Update (ESA-2024-21)](https://discuss.elastic.co/t/kibana-8-12-1-security-update-esa-2024-21/379064)
**Author:** [@rodrigo\_silva](https://discuss.elastic.co/u/rodrigo_silva)\ **Replies:** 0\ **Last updated:** [June 10, 2025, 4:48pm UTC](https://discuss.elastic.co/t/kibana-8-12-1-security-update-esa-2024-21/379064 "2025-06-10T16:48:27Z")
Kibana Improper Authorization (ESA-2024-21) Improper authorization in Kibana can lead to privilege abuse via a direct HTTP request to a Synthetic monitor endpoint. Affected Versions: Kibana versions before and includi… --- ## [Kibana 8.16.4 and 8.17.2 Security Update (ESA-2025-02)](https://discuss.elastic.co/t/kibana-8-16-4-and-8-17-2-security-update-esa-2025-02/376918)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [April 8, 2025, 3:53pm UTC](https://discuss.elastic.co/t/kibana-8-16-4-and-8-17-2-security-update-esa-2025-02/376918 "2025-04-08T15:53:15Z")
Kibana Prototype Pollution can lead to code injection (ESA-2025-02) Prototype Pollution in Kibana can lead to code injection via unrestricted file upload combined with path traversal. Affected Versions: Kibana version… --- ## [New training course - Relevant Search Masterclass (early bird ends this week)](https://discuss.elastic.co/t/new-training-course-relevant-search-masterclass-early-bird-ends-this-week/378796)
**Author:** [@softwaredoug](https://discuss.elastic.co/u/softwaredoug)\ **Replies:** 0\ **Last updated:** [June 2, 2025, 1:32pm UTC](https://discuss.elastic.co/t/new-training-course-relevant-search-masterclass-early-bird-ends-this-week/378796 "2025-06-02T13:32:59Z")
Hey all I'm Doug Turnbull. Folks might know me from such books as Relevant Search and AI Powered Search. Relevant Search the book focuses on Elasticsearch. And this training class - building on the book - will focus on … --- ## [We built simple, scalable, real-time Postgres to Elasticsearch sink](https://discuss.elastic.co/t/we-built-simple-scalable-real-time-postgres-to-elasticsearch-sink/378667)
**Author:** [@Eric\_Goldman](https://discuss.elastic.co/u/Eric_Goldman)\ **Replies:** 1\ **Last updated:** [June 1, 2025, 3:24am UTC](https://discuss.elastic.co/t/we-built-simple-scalable-real-time-postgres-to-elasticsearch-sink/378667 "2025-06-01T03:24:39Z")
Hi everyone :waving\_hand:, I’m Eric, one of the maintainers of Sequin—an open‑source Change Data Capture (CDC) engine for Postgres. We recently shipped an Elasticsearch sink and wanted to share the approach (and answer … --- ## ["I have two Filebeat configuration files](https://discuss.elastic.co/t/i-have-two-filebeat-configuration-files/378637)
**Author:** [@Thirupathi](https://discuss.elastic.co/u/Thirupathi)\ **Replies:** 2\ **Last updated:** [May 28, 2025, 1:16pm UTC](https://discuss.elastic.co/t/i-have-two-filebeat-configuration-files/378637 "2025-05-28T13:16:27Z")
I have two Filebeat configuration files — filebeat-elastic.yml (with Elasticsearch output) and filebeat-kafka.yml (with Kafka output). I need to run both configurations simultaneously as long-running services using syste… --- ## [Kibana documentation search is not working](https://discuss.elastic.co/t/kibana-documentation-search-is-not-working/377334)
**Author:** [@alextg](https://discuss.elastic.co/u/alextg)\ **Replies:** 5\ **Last updated:** [May 25, 2025, 8:44am UTC](https://discuss.elastic.co/t/kibana-documentation-search-is-not-working/377334 "2025-05-25T08:44:08Z")
Hi, While using the Kibana documentation link from the Help button on the upper right side of the elastic page, I noticed the search functionality is not working as before, in other words it sent me to unrelated links o… --- ## [Air-gapped environments](https://discuss.elastic.co/t/air-gapped-environments/378460)
**Author:** [@Phat\_Tu\_n](https://discuss.elastic.co/u/Phat_Tu_n)\ **Replies:** 0\ **Last updated:** [May 23, 2025, 7:24am UTC](https://discuss.elastic.co/t/air-gapped-environments/378460 "2025-05-23T07:24:23Z")
Currently, I want to use the Air-gapped environments feature and host my own Elastic Package Registry on ELK because my ELK stack is deployed in an environment isolated from the internet. However, when I followed the ins… --- ## [Kibana 8.17.6, 8.18.1, or 9.0.1 Security Update (ESA-2025-07)](https://discuss.elastic.co/t/kibana-8-17-6-8-18-1-or-9-0-1-security-update-esa-2025-07/377868)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [May 6, 2025, 4:29pm UTC](https://discuss.elastic.co/t/kibana-8-17-6-8-18-1-or-9-0-1-security-update-esa-2025-07/377868 "2025-05-06T16:29:27Z")
Kibana arbitrary code execution via prototype pollution (ESA-2025-07) A Prototype pollution vulnerability in Kibana leads to arbitrary code execution via crafted HTTP requests to machine learning and reporting endpoints… --- ## [Kibana 7.17.23/8.15.0 Security Updates (ESA-2024-32, ESA-2024-33)](https://discuss.elastic.co/t/kibana-7-17-23-8-15-0-security-updates-esa-2024-32-esa-2024-33/373548)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [January 23, 2025, 5:52am UTC](https://discuss.elastic.co/t/kibana-7-17-23-8-15-0-security-updates-esa-2024-32-esa-2024-33/373548 "2025-01-23T05:52:11Z")
Kibana allocation of resources without limits or throttling leads to crash (ESA-2024-33) An allocation of resources without limits or throttling in Kibana can lead to a crash caused by a specially crafted request to /api… --- ## [Netflow plugin not showing data only DNS cache showing data other tabs are empy](https://discuss.elastic.co/t/netflow-plugin-not-showing-data-only-dns-cache-showing-data-other-tabs-are-empy/378131)
**Author:** [@JunaidAhmedKhan](https://discuss.elastic.co/u/JunaidAhmedKhan)\ **Replies:** 0\ **Last updated:** [May 14, 2025, 10:58am UTC](https://discuss.elastic.co/t/netflow-plugin-not-showing-data-only-dns-cache-showing-data-other-tabs-are-empy/378131 "2025-05-14T10:58:21Z")
Netflow plugin not showing data only DNS cache showing data other tabs are empy. --- ## [Logstash 8.15.3 Security Update (ESA-2024-38)](https://discuss.elastic.co/t/logstash-8-15-3-security-update-esa-2024-38/377707)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [May 1, 2025, 10:10am UTC](https://discuss.elastic.co/t/logstash-8-15-3-security-update-esa-2024-38/377707 "2025-05-01T10:10:01Z")
Logstash affected by CVE-2024-47561 in Apache Avro (ESA-2024-38) On October 3, 2024, CVE-2024-47561 was published, which can lead to execution of arbitrary code. The issue only affects users using the Kafka integration… --- ## [Logstash 8.17.6, 8.18.1, and 9.0.1 Security Update (ESA-2025-08)](https://discuss.elastic.co/t/logstash-8-17-6-8-18-1-and-9-0-1-security-update-esa-2025-08/377869)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [May 6, 2025, 4:33pm UTC](https://discuss.elastic.co/t/logstash-8-17-6-8-18-1-and-9-0-1-security-update-esa-2025-08/377869 "2025-05-06T16:33:44Z")
Logstash Improper Certificate Validation in TCP output (ESA-2025-08) Improper certificate validation in Logstash's TCP output could lead to a man-in-the-middle (MitM) attack in “client” mode, as hostname verification in… --- ## [Elastic Agent / Elastic Endpoint Security Security Update (ESA-2025-03)](https://discuss.elastic.co/t/elastic-agent-elastic-endpoint-security-security-update-esa-2025-03/377706)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [May 1, 2025, 10:06am UTC](https://discuss.elastic.co/t/elastic-agent-elastic-endpoint-security-security-update-esa-2025-03/377706 "2025-05-01T10:06:44Z")
Elastic Agent / Elastic Endpoint Security local API key disclosure (ESA-2025-03) Exposure of sensitive information to local unauthorized actors in Elastic Agent and Elastic Security Endpoint can lead to loss of confiden… --- ## [Kibana 7.17.24 and 8.12.0 Security Update (ESA-2024-20)](https://discuss.elastic.co/t/kibana-7-17-24-and-8-12-0-security-update-esa-2024-20/377712)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [May 1, 2025, 11:34am UTC](https://discuss.elastic.co/t/kibana-7-17-24-and-8-12-0-security-update-esa-2024-20/377712 "2025-05-01T11:34:47Z")
Kibana Unrestricted Upload of File with Dangerous Type Can Lead to XSS (ESA-2024-20) Unrestricted upload of a file with dangerous type in Kibana can lead to arbitrary JavaScript execution in a victim’s browser (XSS) via… --- ## [Elasticsearch 7.17.25 and 8.16.0 Security Update (ESA-2024-40)](https://discuss.elastic.co/t/elasticsearch-7-17-25-and-8-16-0-security-update-esa-2024-40/377709)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [May 1, 2025, 10:13am UTC](https://discuss.elastic.co/t/elasticsearch-7-17-25-and-8-16-0-security-update-esa-2024-40/377709 "2025-05-01T10:13:22Z")
Elasticsearch Uncontrolled Resource Consumption vulnerability(ESA-2024-40) Uncontrolled Resource Consumption in Elasticsearch while evaluating specifically crafted search templates with Mustache functions can lead to De… --- ## [Kibana 7.17.19 and 8.13.0 Security Update (ESA-2024-47)](https://discuss.elastic.co/t/kibana-7-17-19-and-8-13-0-security-update-esa-2024-47/377711)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [May 1, 2025, 10:15am UTC](https://discuss.elastic.co/t/kibana-7-17-19-and-8-13-0-security-update-esa-2024-47/377711 "2025-05-01T10:15:05Z")
Kibana Unrestricted Upload of File (ESA-2024-47) Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient server-side… --- ## [APM Server 8.16.1 Security Update (ESA-2024-41)](https://discuss.elastic.co/t/apm-server-8-16-1-security-update-esa-2024-41/377710)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [May 1, 2025, 10:14am UTC](https://discuss.elastic.co/t/apm-server-8-16-1-security-update-esa-2024-41/377710 "2025-05-01T10:14:04Z")
APM Server Insertion of Sensitive Information into Log File (ESA-2024-41) APM server logs could contain parts of the document body from a partially failed bulk index request. Depending on the nature of the document, thi… --- ## [Elastic Agent 7.17.25 and 8.15.4 Security Update (ESA-2024-39)](https://discuss.elastic.co/t/elastic-agent-7-17-25-and-8-15-4-security-update-esa-2024-39/377708)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [May 1, 2025, 10:11am UTC](https://discuss.elastic.co/t/elastic-agent-7-17-25-and-8-15-4-security-update-esa-2024-39/377708 "2025-05-01T10:11:54Z")
Elastic Agent Inclusion of Functionality from Untrusted Control Sphere (ESA-2024-39) Inclusion of functionality from an untrusted control sphere in Elastic Agent subprocess, osqueryd, allows local attackers to execute a… --- ## [Elasticsearch 7.17.24 and 8.15.1 Security Update (ESA-2024-37)](https://discuss.elastic.co/t/elasticsearch-7-17-24-and-8-15-1-security-update-esa-2024-37/376924)
**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\ **Replies:** 0\ **Last updated:** [April 8, 2025, 4:00pm UTC](https://discuss.elastic.co/t/elasticsearch-7-17-24-and-8-15-1-security-update-esa-2024-37/376924 "2025-04-08T16:00:32Z")
Elasticsearch Uncontrolled Resource Consumption vulnerability (ESA-2024-37) An issue was discovered in Elasticsearch, where a large recursion using the Well-KnownText formatted string with nested GeometryCollection obje… --- ## [Kibana 7.17.23 and 8.15.1 Security Update (ESA-2024-36)](https://discuss.elastic.co/t/kibana-7-17-23-and-8-15-1-security-update-esa-2024-36/376923)
**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\ **Replies:** 0\ **Last updated:** [April 8, 2025, 3:59pm UTC](https://discuss.elastic.co/t/kibana-7-17-23-and-8-15-1-security-update-esa-2024-36/376923 "2025-04-08T15:59:01Z")
Kibana Uncontrolled Resource Consumption vulnerability (ESA-2024-36) An issue has been identified where a specially crafted request sent to an Observability API could cause the kibana server to crash. A successful atta… --- ## [Logstash 8.15.3, 8.16.0 Security Update (ESA-2024-48)](https://discuss.elastic.co/t/logstash-8-15-3-8-16-0-security-update-esa-2024-48/376922)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [April 8, 2025, 3:58pm UTC](https://discuss.elastic.co/t/logstash-8-15-3-8-16-0-security-update-esa-2024-48/376922 "2025-04-08T15:58:01Z")
Logstash Inefficient Regular Expression Complexity (ESA-2024-48) On October 28th, 2024, Ruby announced CVE-2024-49761 in rexml which can lead to ReDoS when parsing XML that has many digits between &# and x...; in a hex … --- ## [Elastic Defend 8.17.3 Security Update (ESA-2025-05)](https://discuss.elastic.co/t/elastic-defend-8-17-3-security-update-esa-2025-05/376921)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [April 8, 2025, 3:57pm UTC](https://discuss.elastic.co/t/elastic-defend-8-17-3-security-update-esa-2025-05/376921 "2025-04-08T15:57:00Z")
Elastic Defend Insertion of Sensitive Information into Log Files (ESA-2025-05) Improper restriction of environment variables in Elastic Defend can lead to exposure of sensitive information such as API keys and tokens vi… --- ## [Logstash 8.15.1 Security Update (ESA-2024-35)](https://discuss.elastic.co/t/logstash-8-15-1-security-update-esa-2024-35/376920)
**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\ **Replies:** 0\ **Last updated:** [April 8, 2025, 3:56pm UTC](https://discuss.elastic.co/t/logstash-8-15-1-security-update-esa-2024-35/376920 "2025-04-08T15:56:48Z")
Logstash Uncontrolled Resource Consumption vulnerability (ESA-2024-35) On August 19, 2024, Floraison announced CVE-2024-43380, which affects fugit "natural" parser. The parser turns natural language into a cron date and… --- ## [Elasticsearch 8.15.1 Security Update (ESA-2024-34)](https://discuss.elastic.co/t/elasticsearch-8-15-1-security-update-esa-2024-34/376919)
**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\ **Replies:** 0\ **Last updated:** [April 8, 2025, 3:54pm UTC](https://discuss.elastic.co/t/elasticsearch-8-15-1-security-update-esa-2024-34/376919 "2025-04-08T15:54:09Z")
Elasticsearch Uncontrolled Resource Consumption vulnerability (ESA-2024-34) A flaw was discovered in Elasticsearch, where a large recursion using the innerForbidCircularReferences function of the PatternBank class coul… --- ## [Rally 2.12.0](https://discuss.elastic.co/t/rally-2-12-0/376601)
**Author:** [@dpifke-elastic](https://discuss.elastic.co/u/dpifke-elastic)\ **Replies:** 0\ **Last updated:** [March 31, 2025, 10:17pm UTC](https://discuss.elastic.co/t/rally-2-12-0/376601 "2025-03-31T22:17:44Z")
Rally 2.12.0 is released! Highlights #1917: Upgrade thespian to 4.0.1 #1912: Preserve pre-existing rally-metrics index templates by default #1893 (Breaking): feat: Drop support for Python 3.8 \[ES-8947\] Enhancements #1… --- ## [\[ANNOUNCEMENT\] - Elastic 9.0.0-RC1 is available](https://discuss.elastic.co/t/announcement-elastic-9-0-0-rc1-is-available/376490)
**Author:** [@David\_Brimley](https://discuss.elastic.co/u/David_Brimley)\ **Replies:** 0\ **Last updated:** [March 27, 2025, 3:51pm UTC](https://discuss.elastic.co/t/announcement-elastic-9-0-0-rc1-is-available/376490 "2025-03-27T15:51:16Z")
We're excited to announce the release candidates for Elastic Stack 9.0! :tada: We encourage developers to download, test, and provide feedback as we refine these versions. The quickest way to test it out is via start l… --- ## [Kibana 8.14.0/7.17.22 Security Update (ESA-2024-11)](https://discuss.elastic.co/t/kibana-8-14-0-7-17-22-security-update-esa-2024-11/361460)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [June 14, 2024, 4:47am UTC](https://discuss.elastic.co/t/kibana-8-14-0-7-17-22-security-update-esa-2024-11/361460 "2024-06-14T04:47:49Z")
Kibana uncontrolled resource consumption (ESA-2024-11) A high-privileged user, allowed to create custom osquery packs could affect the availability of Kibana by uploading a maliciously crafted osquery pack. Affected Ver… --- ## [\[ANNOUNCEMENT\] - Elasticsearch Beyonder 8.17 released](https://discuss.elastic.co/t/announcement-elasticsearch-beyonder-8-17-released/375555)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [March 7, 2025, 11:17am UTC](https://discuss.elastic.co/t/announcement-elasticsearch-beyonder-8-17-released/375555 "2025-03-07T11:17:23Z")
The Elasticsearch Beyonder team is pleased to announce the elasticsearch-beyonder-8.17 release! Elasticsearch Beyonder Elasticsearch beyonder provides automatic index, mapping, alias, template creation, index lifecycle … --- ## [What's new in Elastic 9.0.0-beta1](https://discuss.elastic.co/t/whats-new-in-elastic-9-0-0-beta1/374874)
**Author:** [@xeraa](https://discuss.elastic.co/u/xeraa)\ **Replies:** 0\ **Last updated:** [February 22, 2025, 3:57am UTC](https://discuss.elastic.co/t/whats-new-in-elastic-9-0-0-beta1/374874 "2025-02-22T03:57:37Z")
The first pre-release of Elasticsearch and the Elastic Stack 9.0.0 is available: 9.0.0-beta1 Give it a try, let us know what works and what doesn't, and please don't use it in production (yet :wink: ). And the easiest … --- ## [Logstash syslog input from two sources](https://discuss.elastic.co/t/logstash-syslog-input-from-two-sources/374561)
**Author:** [@WisemanIT](https://discuss.elastic.co/u/WisemanIT)\ **Replies:** 2\ **Last updated:** [February 14, 2025, 6:48pm UTC](https://discuss.elastic.co/t/logstash-syslog-input-from-two-sources/374561 "2025-02-14T18:48:08Z")
Hi All I am trying to ingest syslog from two separate sources (one firewall and one Linux based appliance) and forward to log analytics workspace in Azure. I was able to achieve this using two separate conf files each … [Previous page](https://discuss.elastic.co/c/announcements/5.md?page=7) [Next page](https://discuss.elastic.co/c/announcements/5.md?page=9)