mirror of
https://github.com/elastic/kibana.git
synced 2025-04-24 17:59:23 -04:00
e6c3640a57
* [DOCS] Add XPack Reporting to Kibana Guide * [DOCS] Add attributes for private vs open repo builds * [DOCS] Add index-shared.asciidoc * [DOCS] Address feedback on index-shared.asciidoc * [DOCS] Add X-Pack introduction to Kibana Guide * [DOCS] Add X-Pack installion to Kibana Guide * [DOCS] Fix duplicate security attribute in index-shared.asciidoc * [DOCS] Further fix duplicate security attribute in index-shared.asciidoc * [DOCS] Revert changes to intro and setup * [DOCS] Split index-shared.asciidoc * [DOCS] Add index-shared5.asciidoc
26 lines
982 B
Text
26 lines
982 B
Text
[[release-notes-5.0.2]]
|
|
== 5.0.2 Release Notes
|
|
|
|
Also see <<breaking-changes-5.0>>.
|
|
|
|
[float]
|
|
[[security-5.0.2]]
|
|
=== Security fixes
|
|
Kibana 5.0.0 and 5.0.1 were making requests to advanced settings and the short
|
|
URL service on behalf of the kibana server rather than the current user, which
|
|
means that being authenticated at all was sufficient to have both read and
|
|
write access to the advanced settings and short URLs. +
|
|
Kibana 5.0.2 now authenticates requests for each service on behalf of the
|
|
current user. +
|
|
{security-ref}[ESA-2016-10] ({pull}9214[#9214])
|
|
|
|
[float]
|
|
[[bug-5.0.2]]
|
|
=== Bug fixes
|
|
Core::
|
|
* Elasticsearch version checking no longer causes startup error for non-HTTP nodes {pull}9181[#9181]
|
|
* Favicons are now embedded as links rather than as data {pull}8961[#8961]
|
|
CLI::
|
|
* Spaces are now accepted in plugin URLs and paths during installation {pull}8945[#8945]
|
|
Visualize::
|
|
* Visualizations without spy panels no longer trigger errors in browser console {pull}9115[#9115]
|