Kibana 4.5.4 and 4.1.11 Released

Today we're releasing Kibana versions 4.5.4 and 4.1.11, which include two security fixes, an increase in the maximum zoom capabilities for tile maps, and some other bug fixes.

Since these are security releases, we recommend that users upgrade as soon as possible.

You can grab the latest versions from the downloads page.

4.5.4

• Fixed an XSS vulnerability with markdown visualizations ESA-2016-03
• Fixed Kibana logging so it no longer logs cookies or authorization headers, which could include information necessary to hijack user sessions ESA-2016-04
• The tile map max zoom configuration has been increased from 7 to 10
• Search box autocomplete on Discover no longer hides the search box in Google Chrome #7801
• Kibana will no longer periodically fail with a "request already started" error if you click too quickly #5828
• Labels in split charts will no longer disappear at random while interacting with other charts #6556
• Upgrading Kibana via a package manager should no longer cause permission errors related to the build cache #6730
• Kibana no longer needs to be stopped when upgrading via a package manager #6262
• URL shortener now properly supports custom kibana indices #7006
• Empty or null IP addresses no longer render as 0.0.0.0 #7182

4.1.11

• Fixed an XSS vulnerability with markdown visualizations ESA-2016-03
• Fixed Kibana logging so it no longer logs cookies or authorization headers, which could include information necessary to hijack user sessions ESA-2016-04
• The tile map max zoom configuration has been increased from 7 to 10
• Search box autocomplete on Discover no longer hides the search box in Google Chrome #7801

Conclusion

As always, head over to our downloads page to get the latest versions. If you have any questions, please don't hesitate to reach out to us on our forum, github, or twitter.