# Is it necessary to upgrade?

**URL:** <https://discuss.elastic.co/t/is-it-necessary-to-upgrade/243668>\
**Category:** Elasticsearch\
**Created:** [August 4, 2020, 8:10am UTC](https://discuss.elastic.co/t/is-it-necessary-to-upgrade/243668 "2020-08-04T08:10:50Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Benjamin\_Gathmann](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/benjamin_gathmann/32/7561_2.png) [@Benjamin\_Gathmann](https://discuss.elastic.co/u/Benjamin_Gathmann)\
**Post date:** [August 4, 2020, 8:10am UTC](https://discuss.elastic.co/t/is-it-necessary-to-upgrade/243668/1 "2020-08-04T08:10:50Z")

</div>

We are running Elasticsearch v2.4 and are still happy with it.  
Are there any reasons to upgrade besides new features and performance improvements?  
E.g. are there any security issues with the 2.x branch? I could not find anything on this.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [August 4, 2020, 8:31am UTC](https://discuss.elastic.co/t/is-it-necessary-to-upgrade/243668/2 "2020-08-04T08:31:27Z")

</div>

There's quite a few security fixes - [https://discuss.elastic.co/c/announcements/security-announcements/31](https://discuss.elastic.co/c/announcements/security-announcements/31)

But yeah, tonnes and tonnes of features and performance. 2.X has been [EOL](https://www.elastic.co/support/eol) for a loooooooooong time.

---

<div class="post-metadata">

**Author:** ![Benjamin\_Gathmann](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/benjamin_gathmann/32/7561_2.png) [@Benjamin\_Gathmann](https://discuss.elastic.co/u/Benjamin_Gathmann)\
**Post date:** [August 4, 2020, 8:52am UTC](https://discuss.elastic.co/t/is-it-necessary-to-upgrade/243668/3 "2020-08-04T08:52:29Z")

</div>

Thanks for the link!  
It seems though that if you just use bare bone Elasticsearch without scripting or other components like Kibana, there seem to be no security issues mentioned.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [August 4, 2020, 8:53am UTC](https://discuss.elastic.co/t/is-it-necessary-to-upgrade/243668/4 "2020-08-04T08:53:31Z")

</div>

I guess that's a matter of your own organisational security guidelines and preference.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 1, 2020, 8:53am UTC](https://discuss.elastic.co/t/is-it-necessary-to-upgrade/243668/5 "2020-09-01T08:53:34Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.