Elasticsearch 7.17.18 → 7.17.22

4 releases · 0 breaking changes · 2 security fixes · 2 advisories fixed

2security0breaking0deprecated0feature0fix

Is 7.17.18 affected? · What changed up to 9.5.5

Vulnerabilities fixed by this upgrade

6.5 CVE-2024-43709 An allocation of resources without limits or throttling in Elasticsearch can lead to an OutOfMemoryError exception resulting in a crash via a specially crafted query using an SQL function.
4.9 CVE-2024-23450 A flaw was discovered in Elasticsearch, where processing a document in a deeply nested pipeline on an ingest node could cause the Elasticsearch node to crash.

Breaking changes

None in the release notes.

Security changes

security Fixes CVE-2024-43709: An allocation of resources without limits or throttling in Elasticsearch can lead to an OutOfMemoryError exception resulting in a crash via a specially crafted query using an SQL function. in 7.17.21
security Fixes CVE-2024-23450: A flaw was discovered in Elasticsearch, where processing a document in a deeply nested pipeline on an ingest node could cause the Elasticsearch node to crash. in 7.17.19

Every release in between

7.17.22 Jun 13, 2024 Release notes ↗

otherDownloads: https://elastic.co/downloads/elasticsearch Release notes: https://www.elastic.co/guide/en/elasticsearch/reference/7.17/release-notes-7.17.22.html

7.17.21 May 3, 2024 Release notes ↗

securityFixes CVE-2024-43709: An allocation of resources without limits or throttling in Elasticsearch can lead to an OutOfMemoryError exception resulting in a crash via a specially crafted query using an SQL function.

otherDownloads: https://elastic.co/downloads/elasticsearch Release notes: https://www.elastic.co/guide/en/elasticsearch/reference/7.17/release-notes-7.17.21.html

7.17.20 Apr 10, 2024 Release notes ↗

otherDownloads: https://elastic.co/downloads/elasticsearch Release notes: https://www.elastic.co/guide/en/elasticsearch/reference/7.17/release-notes-7.17.20.html

7.17.19 Mar 26, 2024 Release notes ↗

securityFixes CVE-2024-23450: A flaw was discovered in Elasticsearch, where processing a document in a deeply nested pipeline on an ingest node could cause the Elasticsearch node to crash.

otherDownloads: https://elastic.co/downloads/elasticsearch Release notes: https://www.elastic.co/guide/en/elasticsearch/reference/7.17/release-notes-7.17.19.html