opendistro-build

Here's the issue for that. Fixed in July. https://github.com/opendistro-for-elasticsearch/opendistro-b...

You should consider opening an issue on their github [0]? AWS, from what I know, takes security seriously, and given they themselves use OpenDistro internally, this should become a top priority for them. [0] https://github.com/opendistro-for-elasticsearch/opendistro-b...

By fork they mean: a binary build straight from the unmodified elastic source code using the elastic build file that creates the OSS build bundled with a handful of plugins and components to add alternatives some of the things elastic bundles. They don't even build it themselves and it gets downloaded in binary form straight from Elastic's servers. If you don't believe me, this is the line in the code where they 'fork' in their build script: https://github.com/opendistro-for-elasticsearch/opendistro-b... It will be interesting to see if opendistro actually starts contributing to Lucene or adding value to the elastic code base or whether this 'fork' is effectively frozen in time and doomed to go nowhere due to a lack of actual development on the core product. I seriously doubt that they are going to put any effort whatsoever in that. Becau

https://opendistro.github.io/for-elasticsearch/ is one way to use ES with security without paying It's just stunningly dumb that one cannot know what version of ES corresponds to the ODFE but it seems to be a pretty modern one (7.8.0): https://github.com/opendistro-for-elasticsearch/opendistro-b... versus the 7.9.1 upstream https://github.com/elastic/elasticsearch/releases