Update to kibana 8.17.6 needed for a CVE

Search Guard
1

Elasticsearch version:

8.17.5

Kibana version (if relevant):

8.17.5

Describe the issue:

The CVE NVD - CVE-2025-25014 needs an update to 8.17.6. Is that upgrade scheduled ?
It’s not marked as available at https://docs.search-guard.com/latest/search-guard-versions.

2

By browsing directly on the artifactory repository, I see a FLX 3.1.0 for 8.18.1. Is there any release notes somewhere ?

3

Hi @fbacchella

We are in a process of releasing SG FLX 3.0.3 for ES 8.17.6 and Kibana 8.17.6, this should be completed very shortly.

In regards to SG FLX 3.1.0 for ES 8.18.1 which is now GA, The release notes are currently being prepared and should be available before the end of the day.

4

@fbacchella The change logs for FLX 3.1.0 are now available here

5

@fbacchella also FLX 3.0.3 for 8.17.6 is now available here

1 Like