diff --git a/changelog/8.19.11.asciidoc b/changelog/8.19.11.asciidoc new file mode 100644 index 0000000000..c6e747fe51 --- /dev/null +++ b/changelog/8.19.11.asciidoc @@ -0,0 +1,31 @@ +// begin 8.19.11 relnotes + +[[release-notes-8.19.11]] +== 8.19.11 + +Review important information about the 8.19.11 release. + +[discrete] +[[security-updates-8.19.11]] +=== Security updates + + + + +* Enforce maximum limits on UploadBegin and UploadComplete request body sizes. https://github.com/elastic/fleet-server/pull/6159[#6159] + + + + + + + + + + + + + + + +// end 8.19.11 relnotes diff --git a/changelog/8.19.11.yaml b/changelog/8.19.11.yaml new file mode 100644 index 0000000000..9469631821 --- /dev/null +++ b/changelog/8.19.11.yaml @@ -0,0 +1,15 @@ +version: 8.19.11 +entries: + - kind: security + summary: Enforce maximum limits on UploadBegin and UploadComplete request body sizes. + description: "" + component: fleet-server + pr: + - https://github.com/elastic/fleet-server/pull/6159 + issue: [] + impact: "" + action: "" + timestamp: 1767789965 + file: + name: 1767789965-upload-limit.yaml + checksum: c323dada074909f7babd3670577a096154111c59 diff --git a/changelog/fragments/1767789965-upload-limit.yaml b/changelog/fragments/1767789965-upload-limit.yaml deleted file mode 100644 index 505179fa10..0000000000 --- a/changelog/fragments/1767789965-upload-limit.yaml +++ /dev/null @@ -1,32 +0,0 @@ -# Kind can be one of: -# - breaking-change: a change to previously-documented behavior -# - deprecation: functionality that is being removed in a later release -# - bug-fix: fixes a problem in a previous version -# - enhancement: extends functionality but does not break or fix existing behavior -# - feature: new functionality -# - known-issue: problems that we are aware of in a given version -# - security: impacts on the security of a product or a user’s deployment. -# - upgrade: important information for someone upgrading from a prior version -# - other: does not fit into any of the other categories -kind: security - -# Change summary; a 80ish characters long description of the change. -summary: Enforce maximum limits on UploadBegin and UploadComplete request body sizes - -# Long description; in case the summary is not enough to describe the change -# this field accommodate a description without length limits. -# NOTE: This field will be rendered only for breaking-change and known-issue kinds at the moment. -#description: - -# Affected component; usually one of "elastic-agent", "fleet-server", "filebeat", "metricbeat", "auditbeat", "all", etc. -component: fleet-server - -# PR URL; optional; the PR number that added the changeset. -# If not present is automatically filled by the tooling finding the PR where this changelog fragment has been added. -# NOTE: the tooling supports backports, so it's able to fill the original PR number instead of the backport PR number. -# Please provide it if you are adding a fragment for a different PR. -#pr: https://github.com/owner/repo/1234 - -# Issue URL; optional; the GitHub issue related to this changeset (either closes or is part of). -# If not present is automatically filled by the tooling with the issue linked to the PR number. -#issue: https://github.com/owner/repo/1234