Skip to content

Security 8.19.10 release notes #7122

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
natasha-moore-elastic merged 6 commits into from
Jan 12, 2026
Merged

Security 8.19.10 release notes #7122

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
975af36
Security 8.19.10 release notes
natasha-moore-elastic Jan 8, 2026
6828873
escapism
natasha-moore-elastic Jan 8, 2026
85e302b
Update docs/release-notes/8.19.asciidoc
natasha-moore-elastic Jan 9, 2026
001e45a
apply copy feedback
natasha-moore-elastic Jan 9, 2026
f20425f
Apply suggestions from code review
natasha-moore-elastic Jan 12, 2026
d1af64e
tweak
natasha-moore-elastic Jan 12, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion docs/release-notes.asciidoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,8 @@

This section summarizes the changes in each release.

* <<release-notes-8.19.8, {elastic-sec} version 8.19.9>>
* <<release-notes-8.19.10, {elastic-sec} version 8.19.10>>
* <<release-notes-8.19.9, {elastic-sec} version 8.19.9>>
* <<release-notes-8.19.8, {elastic-sec} version 8.19.8>>
* <<release-notes-8.19.7, {elastic-sec} version 8.19.7>>
* <<release-notes-8.19.6, {elastic-sec} version 8.19.6>>
Expand Down
30 changes: 30 additions & 0 deletions docs/release-notes/8.19.asciidoc
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,36 @@
[[release-notes-header-8.19.0]]
== 8.19

[discrete]
[[release-notes-8.19.10]]
=== 8.19.10

[discrete]
[[enhancements-8.19.10]]
==== Enhancements
* Updates MITRE ATT&CK mappings to `v18.1` ({kibana-pull}246770[#246770]).
* Adds support for multiple values in the indicator details flyout **Table** tab ({kibana-pull}236110[#236110]).
* Updates Gemini Connector configuration ({kibana-pull}245647[#245647]).
* Improves responsiveness on systems running {elastic-defend}.
* Improves the {elastic-defend} startup log to explain details about unsigned policies.
* Optimizes the {elastic-defend} kernel driver to collect file and registry access events more efficiently, improving overall system responsiveness and reducing CPU usage.

[discrete]
[[bug-fixes-8.19.10]]
==== Fixes
* Fixes an issue where the Security AI Assistant chat completion API didn't use an associated conversation's system prompt ({kibana-pull}248020[#248020]).
* Fixes an issue where the `createdBy` field in the notes filter didn't use exact matching ({kibana-pull}247351[#247351]).
* Fixes a display issue with filters on the **MITRE ATT&CK® coverage** page ({kibana-pull}246794[#246794]).
* Fixes an issue where Timeline actions appeared in the Alerts table bulk actions menu without proper privileges ({kibana-pull}246150[#246150]).
* Fixes an issue where the **Threat intelligence** section in the alert details flyout didn't display multiple values ({kibana-pull}245449[#245449]).
* Fixes an issue where {elastic-defend} upgrades and uninstallations could fail on busy systems.
* Fixes a bug where {elastic-defend} on Linux could fail to initialize with {elastic-agent}.
* For {elastic-defend} on Linux, reduces the occurrence of policy failures related to malware protection system deadlock avoidance.
* Fixes an issue in {elastic-defend} on Windows where Mark of the Web parsing incorrectly handled file origin information ending with a `\\0`.
* Reduces the occurrence of Linux {elastic-defend} policy failures due Malware protections system deadlock avoidance.
* Fixes an issue in {elastic-defend} that could result in delayed or missing malware-on-write alerts.
* Fixes a bug in {elastic-defend} on Windows that could sometimes result in `KERNEL_AUTO_BOOST_LOCK_ACQUISITION_WITH_RAISED_IRQL` or `PAGE_FAULT_IN_NONPAGED_AREA` bugchecks when [Offloaded Data Transfer (ODX)](https://learn.microsoft.com/en-us/windows-hardware/drivers/storage/offloaded-data-transfer) was used to copy files. This regression was introduced in {elastic-defend} versions 8.19.8, 9.1.8, and 9.2.2.

[discrete]
[[release-notes-8.19.9]]
=== 8.19.9
Expand Down