Skip to content

2.19.7

Choose a tag to compare

View all tags
@github-actions github-actions released this 20 Oct 22:16
· 6142 commits to main since this release
Immutable release. Only release title and notes can be modified.
2.19.7
6dd9a04
This commit was created on GitHub.com and signed with GitHub鈥檚 verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Version 2.19.7 Release Notes

Compatible with OpenSearch and OpenSearch Dashboards version 2.19.7

Enhancements

  • Add upper bound for the hot_threads snapshots parameter with configurable monitor.jvm.hot_threads.max_snapshots cluster setting (#23144)
  • Add search.query.max_query_nesting_depth setting to limit query_string parenthesis nesting depth and prevent StackOverflowError (#22854)
  • Cap max_determinized_states in completion suggester regex and fuzzy options to prevent heap exhaustion (#22925)
  • Disable Mustache partial template resolution in search templates (#22440)
  • Reject out-of-range WLM node threshold updates at validation time (#22678)

Bug Fixes

  • Fix unbounded recursion in JSON and binary deserialization that could cause StackOverflowError (#22427)
  • Strengthen scroll_id validation to prevent OOM from crafted scroll IDs with oversized counts (#22401)
  • Validate base_path in fs repository to prevent path traversal outside configured path.repo directories (#22381)
  • Fix handling of unsupported zstd HTTP content encoding in netty4 and nio transports (#23324)

Maintenance

Assets 3
Loading