Logstash currently bundles openjdk 11.0.15 but is released

I was under the impression that Logstash would bundle the latest Eclipse Temurin jdk when a new version was released. this however does not sem to be the case. I find it a bit hard to figure what determines what decides when the version is updated. The newest version resolves multiple CVE's compared to the bundled version.
I seem to remember that the update to 11.0.15 was reverted and then later added again.. did that event change the update scheme?

Welcome to our community! :smiley:

I can't comment on the timing as I don't know how that's done. But take a look at Getting Started with Logstash | Logstash Reference [8.3] | Elastic as that may help your concerns.

You could also raise a feature request to get it upgraded.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.