Elasticsearch version 8.19.24

edit
IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Elasticsearch version 8.19.24

edit

Also see Breaking changes in 8.19.

This release contains security fixes. Please see our security advisory for more details.

Bug fixes

edit
Aggregations
  • Reject non-positive size in composite aggregation #163307 (issue: #163038)
Analysis
  • Bound heap/allocation growth in analysis-phonetic #159667
Authentication
  • Fix streamed requests with secondary authentication being dispatched off the network thread #162171
Authorization
  • Apply field visibility to constant_keyword #159351
Data streams
  • Avoid quadratic failed response size when failure store redirects fail #162017 (issue: #157859)
  • Show the effective index mode and settings of the next backing index in GET _data_stream, and honor settings that a request explicitly unsets. #161250 (issue: #125685)
Distributed
  • Handle IndexShardClosedException and shutdown in ReplicationOperation::updateCheckPoints #162378 (issue: #158303)
Downsampling
  • Make downsample resume from the last indexed tsid work #162669
ES|QL
  • Bind ES|QL lookup requests to their target shard #162521
  • Cache output #161282
  • Catch REPLACE regex StackOverflowError #157957
  • Circuit-break before growing the array #160592
  • Ensure Lucene operator status is immutable #161190 (issue: #160823)
  • Fix IN pushdown on ip, version, unsigned_long, date fields #161455
  • Fix CASE with a single-value list condition, and report multivalued conditions with the standard single-value function encountered multi-value warning #157956
  • Fix InferIsNotNull #155172 (issue: #155101)
  • Fix MvPercentile precision on edge cases and unmute tests #145996 (issues: #145888, #162784, #145889, #162778, #145886, #162782, #145887, #162780)
  • Fix case-insensitive empty term query on wildcard fields #161726
  • Fix vector builder memory accounting #163376
  • Keep AsyncOperator blocked after finish #162486
  • Push down SORT _score ASC as ascending #160651 (issue: #160650)
  • Release empty percentile digest when the breaker trips #162147
Highlighting
  • Fix inference field highlighting when values come from direct assignment and copy_to #161156 (issue: #159964)
Inference
  • [Inference API] Add support for thought signature for Gemini 3.x models #160167 (issue: #159760)
Infra/Core
  • Validate LZ4 transport block decompression to its declared length #161345
Infra/Scripting
  • Validate context_setup in painless execute API #163586
Machine Learning
Mapping
  • Fix infinite loop in FallbackSyntheticSourceBlockLoader #161459
Packaging
  • Remove compromised eMudhra roots from the bundled JDK’s cacerts #162901
Reindex
  • Bound script params in reindex and update-by-query task descriptions #162131
Search
  • Bound the input in boolean and ip parse errors #163033
  • Bound the input in date parse errors #162994
  • Bound the query in query_string parse errors #162886
  • Deduplicate terms lookup fetches and apply max_terms_count during rewrite #159241
  • Fork top_hits fetch context once per aggregator #159231 (issue: #158722)
  • Improve memory usage in ConcurrentSegmentSourceProvider #162158
  • Improve memory usage in ConcurrentSegmentSourceProvider #162483
  • Release scroll contexts when index removed #161556 (issue: #161316)
  • Return 400 when an intervals query rule expands to too many terms #162833 (issue: #162297)
  • Skip the index sort range query optimization on indices with nested fields #162658
Security
  • Apply fls to constant_keyword in new and reindexed percolate queries at runtime #162302 (issue: #161396)
  • Fix deadlock in Microsoft Graph authz realm token acquisition #161254 (issue: #161197)
  • Reject node enrollment unless the HTTP leaf chains to the pinned CA and is within its validity period #160525
  • Verify API key before decoding cross-cluster info #161492
Suggesters
  • Fix _search error when the suggest_field URL parameter is set without suggest_mode #163107 (issue: #162301)
TLS
  • Fix intermittent TLS handshake failures on aarch64 caused by a JDK race (JDK-8393730) #161141 (issue: #160280)
TSDB
  • Reject rollover migrating a data stream from a non-standard index mode to TSDB #161992 (issue: #161905)
Templates
  • Respect template shard count when simulating templates #160674
Transform
  • Fix continuous transforms not deleting old checkpoints from .transform-internal-* (causing the index to grow without bound) while their node’s host has been up between about 107 and 214 days, and deleting checkpoints newer than the 10-day retention period at other times #162048 (issue: #161960)
  • Honor GetCheckpoint timeout on node transport requests and add settings.indexer_request_timeout #157746 (issue: #157745)

Enhancements

edit
Mapping
  • [8.19] Avoid allocations during type checking in put mapping request #162337
Packaging
  • Flip cloud-ess-fips default from FIPS 140-2 to FIPS 140-3 #140788
Snapshot/Restore
  • Add legacy_content_md5 S3 client setting #162197
  • Retry batch-delete items in GCS #161414 (issue: #161313)

Upgrades

edit
Infra/Core
  • Bump bundled JDK to 27.0.1.0.2 #163046
  • Bump bundled JDK to 27.0.1.0.3 #163627
  • Upgrade Jackson to 2.21.8 #163710
Security