# Update to kibana 8.17.6 needed for a CVE

**URL:** <https://forum.search-guard.com/t/update-to-kibana-8-17-6-needed-for-a-cve/4585>\
**Category:** Search Guard\
**Created:** [May 19, 2025, 9:42am UTC](https://forum.search-guard.com/t/update-to-kibana-8-17-6-needed-for-a-cve/4585 "2025-05-19T09:42:03Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![fbacchella](https://avatars.discourse-cdn.com/v4/letter/f/f14d63/32.png) [@fbacchella](https://forum.search-guard.com/u/fbacchella)\
**Post date:** [May 19, 2025, 9:42am UTC](https://forum.search-guard.com/t/update-to-kibana-8-17-6-needed-for-a-cve/4585/1 "2025-05-19T09:42:03Z")

</div>

**Elasticsearch version:**

8.17.5

**Kibana version (if relevant):**

8.17.5

**Describe the issue:**

The CVE [NVD - CVE-2025-25014](https://nvd.nist.gov/vuln/detail/CVE-2025-25014) needs an update to 8.17.6. Is that upgrade scheduled ?  
It’s not marked as available at [https://docs.search-guard.com/latest/search-guard-versions](https://docs.search-guard.com/latest/search-guard-versions).

---

<div class="post-metadata">

**Author:** ![fbacchella](https://avatars.discourse-cdn.com/v4/letter/f/f14d63/32.png) [@fbacchella](https://forum.search-guard.com/u/fbacchella)\
**Post date:** [May 20, 2025, 7:04am UTC](https://forum.search-guard.com/t/update-to-kibana-8-17-6-needed-for-a-cve/4585/2 "2025-05-20T07:04:50Z")

</div>

By browsing directly on the artifactory repository, I see a FLX 3.1.0 for 8.18.1. Is there any release notes somewhere ?

---

<div class="post-metadata">

**Author:** ![sirHusky](https://avatars.discourse-cdn.com/v4/letter/s/e9a140/32.png) [@sirHusky](https://forum.search-guard.com/u/sirHusky)\
**Post date:** [May 20, 2025, 11:17am UTC](https://forum.search-guard.com/t/update-to-kibana-8-17-6-needed-for-a-cve/4585/3 "2025-05-20T11:17:15Z")

</div>

Hi @fbacchella

We are in a process of releasing SG FLX 3.0.3 for ES 8.17.6 and Kibana 8.17.6, this should be completed very shortly.

In regards to SG FLX 3.1.0 for ES 8.18.1 which is now GA, The release notes are currently being prepared and should be available before the end of the day.

---

<div class="post-metadata">

**Author:** ![sirHusky](https://avatars.discourse-cdn.com/v4/letter/s/e9a140/32.png) [@sirHusky](https://forum.search-guard.com/u/sirHusky)\
**Post date:** [May 20, 2025, 11:55am UTC](https://forum.search-guard.com/t/update-to-kibana-8-17-6-needed-for-a-cve/4585/4 "2025-05-20T11:55:01Z")

</div>

@fbacchella The change logs for FLX 3.1.0 are now available [here](https://docs.search-guard.com/latest/changelog-searchguard-flx-3_1_0)

---

<div class="post-metadata">

**Author:** ![sirHusky](https://avatars.discourse-cdn.com/v4/letter/s/e9a140/32.png) [@sirHusky](https://forum.search-guard.com/u/sirHusky)\
**Post date:** [May 20, 2025, 7:22pm UTC](https://forum.search-guard.com/t/update-to-kibana-8-17-6-needed-for-a-cve/4585/5 "2025-05-20T19:22:56Z")

</div>

@fbacchella also FLX 3.0.3 for 8.17.6 is now available [here](https://docs.search-guard.com/latest/search-guard-versions)

---

<div class="post-metadata">

**Author:** ![system](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/system/32/1870_2.png) [@system](https://forum.search-guard.com/u/system)\
**Post date:** [June 10, 2025, 7:23pm UTC](https://forum.search-guard.com/t/update-to-kibana-8-17-6-needed-for-a-cve/4585/6 "2025-06-10T19:23:44Z")

</div>

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.