Contexts for 9.5.3

elasticsearch/Dockerfile

@@ -28,7 +28,7 @@ RUN set -eux; \
     chmod 0555 /bin/tini
 
 WORKDIR /usr/share/elasticsearch
-RUN arch="$(rpm --query --queryformat='%{ARCH}' rpm)" && curl -f --retry 10 -S -L --output /tmp/elasticsearch.tar.gz https://artifacts-no-kpi.elastic.co/downloads/elasticsearch/elasticsearch-9.5.2-linux-$arch.tar.gz
+RUN arch="$(rpm --query --queryformat='%{ARCH}' rpm)" && curl -f --retry 10 -S -L --output /tmp/elasticsearch.tar.gz https://artifacts-no-kpi.elastic.co/downloads/elasticsearch/elasticsearch-9.5.3-linux-$arch.tar.gz
 RUN tar -zxf /tmp/elasticsearch.tar.gz --strip-components=1 && \
 # Configure the distribution for Docker
     sed -i -e 's/ES_DISTRIBUTION_TYPE=tar/ES_DISTRIBUTION_TYPE=docker/' bin/elasticsearch-env && \
@@ -98,30 +98,30 @@ RUN chmod g=u /etc/passwd && \
 
 EXPOSE 9200 9300
 
-LABEL org.label-schema.build-date="2026-08-18T10:07:58.745010960Z" \
+LABEL org.label-schema.build-date="2026-09-01T16:11:59.322249404Z" \
   org.label-schema.license="Elastic-License-2.0" \
   org.label-schema.name="Elasticsearch" \
   org.label-schema.schema-version="1.0" \
   org.label-schema.url="https://www.elastic.co/products/elasticsearch" \
   org.label-schema.usage="https://www.elastic.co/guide/en/elasticsearch/reference/index.html" \
-  org.label-schema.vcs-ref="b42549c72e6e040825b13e5d8ebf7ff63886b24d" \
+  org.label-schema.vcs-ref="367ec317ec5f668dd864d41be06052a567102fec" \
   org.label-schema.vcs-url="https://github.com/elastic/elasticsearch" \
   org.label-schema.vendor="Elastic" \
-  org.label-schema.version="9.5.2" \
-  org.opencontainers.image.created="2026-08-18T10:07:58.745010960Z" \
+  org.label-schema.version="9.5.3" \
+  org.opencontainers.image.created="2026-09-01T16:11:59.322249404Z" \
   org.opencontainers.image.documentation="https://www.elastic.co/guide/en/elasticsearch/reference/index.html" \
   org.opencontainers.image.licenses="Elastic-License-2.0" \
-  org.opencontainers.image.revision="b42549c72e6e040825b13e5d8ebf7ff63886b24d" \
+  org.opencontainers.image.revision="367ec317ec5f668dd864d41be06052a567102fec" \
   org.opencontainers.image.source="https://github.com/elastic/elasticsearch" \
   org.opencontainers.image.title="Elasticsearch" \
   org.opencontainers.image.url="https://www.elastic.co/products/elasticsearch" \
   org.opencontainers.image.vendor="Elastic" \
-  org.opencontainers.image.version="9.5.2"
+  org.opencontainers.image.version="9.5.3"
 
 LABEL name="Elasticsearch" \
   maintainer="infra@elastic.co" \
   vendor="Elastic" \
-  version="9.5.2" \
+  version="9.5.3" \
   release="1" \
   summary="Elasticsearch" \
   description="You know, for search."

elasticsearch/config/log4j2.properties

@@ -170,6 +170,9 @@ appender.audit_rolling.layout.pattern = {\
                 %varsNotEmpty{, "url.query":"%enc{%map{url.query}}{JSON}"}\
                 %varsNotEmpty{, "request.method":"%enc{%map{request.method}}{JSON}"}\
                 %varsNotEmpty{, "request.body":"%enc{%map{request.body}}{JSON}"}\
+                %varsNotEmpty{, "request.raw_body":"%enc{%map{request.raw_body}}{JSON}"}\
+                %varsNotEmpty{, "request.raw_body_content_type":"%enc{%map{request.raw_body_content_type}}{JSON}"}\
+                %varsNotEmpty{, "request.raw_body_content_encoding":"%enc{%map{request.raw_body_content_encoding}}{JSON}"}\
                 %varsNotEmpty{, "request.id":"%enc{%map{request.id}}{JSON}"}\
                 %varsNotEmpty{, "action":"%enc{%map{action}}{JSON}"}\
                 %varsNotEmpty{, "request.name":"%enc{%map{request.name}}{JSON}"}\
@@ -215,6 +218,9 @@ appender.audit_rolling.layout.pattern = {\
 # "url.query" the URI component after the path and before the fragment; it is percent (URL) encoded
 # "request.method" the method of the HTTP request, i.e. one of GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH, TRACE, CONNECT
 # "request.body" the content of the request body entity, JSON escaped
+# "request.raw_body" the base64-encoded content of the request body entity, emitted instead of "request.body" for bodies that cannot be represented as JSON (e.g. protobuf)
+# "request.raw_body_content_type" the "Content-Type" header of the request whose body was recorded under "request.raw_body", identifying the wire format for a decoder
+# "request.raw_body_content_encoding" the "Content-Encoding" header of the request whose body was recorded under "request.raw_body", if present. The audit log preserves the encoded bytes verbatim (they are not decompressed)
 # "request.id" a synthetic identifier for the incoming request, this is unique per incoming request, and consistent across all audit events generated by that request
 # "action" an action is the most granular operation that is authorized and this identifies it in a namespaced way (internal)
 # "request.name" if the event is in connection to a transport message this is the name of the request class, similar to how rest requests are identified by the url path (internal)

kibana/Dockerfile

@@ -17,7 +17,7 @@ RUN cd /tmp && \
   arch="$(rpm --query --queryformat='%{ARCH}' rpm)" && \
   curl -f --retry 8 -s -L \
     --output kibana.tar.gz \
-     https://artifacts.elastic.co/downloads/kibana/kibana-9.5.2-linux-${arch}.tar.gz && \
+     https://artifacts.elastic.co/downloads/kibana/kibana-9.5.3-linux-${arch}.tar.gz && \
   cd -
 
 RUN mkdir /usr/share/kibana
@@ -103,30 +103,30 @@ RUN groupadd --gid 1000 kibana && \
       --home-dir /usr/share/kibana --no-create-home \
       kibana
 
-LABEL org.label-schema.build-date="2026-08-18T11:21:49.813Z" \
+LABEL org.label-schema.build-date="2026-09-01T14:33:18.580Z" \
   org.label-schema.license="Elastic License" \
   org.label-schema.name="Kibana" \
   org.label-schema.schema-version="1.0" \
   org.label-schema.url="https://www.elastic.co/products/kibana" \
   org.label-schema.usage="https://www.elastic.co/guide/en/kibana/reference/index.html" \
-  org.label-schema.vcs-ref="37dc1e9d6dbf80bb1cf22da5ed258d3f642d2f9c" \
+  org.label-schema.vcs-ref="2169f1de4c917fce03905cc3110f3f523e2184d2" \
   org.label-schema.vcs-url="https://github.com/elastic/kibana" \
   org.label-schema.vendor="Elastic" \
-  org.label-schema.version="9.5.2" \
-  org.opencontainers.image.created="2026-08-18T11:21:49.813Z" \
+  org.label-schema.version="9.5.3" \
+  org.opencontainers.image.created="2026-09-01T14:33:18.580Z" \
   org.opencontainers.image.documentation="https://www.elastic.co/guide/en/kibana/reference/index.html" \
   org.opencontainers.image.licenses="Elastic License" \
-  org.opencontainers.image.revision="37dc1e9d6dbf80bb1cf22da5ed258d3f642d2f9c" \
+  org.opencontainers.image.revision="2169f1de4c917fce03905cc3110f3f523e2184d2" \
   org.opencontainers.image.source="https://github.com/elastic/kibana" \
   org.opencontainers.image.title="Kibana" \
   org.opencontainers.image.url="https://www.elastic.co/products/kibana" \
   org.opencontainers.image.vendor="Elastic" \
-  org.opencontainers.image.version="9.5.2"
+  org.opencontainers.image.version="9.5.3"
 
 LABEL name="Kibana" \
   maintainer="infra@elastic.co" \
   vendor="Elastic" \
-  version="9.5.2" \
+  version="9.5.3" \
   release="1" \
   summary="Kibana" \
   description="Your window into the Elastic Stack."

logstash/Dockerfile

@@ -24,10 +24,10 @@ RUN groupadd --gid 1000 logstash && \
   --no-create-home \
   logstash && \
   arch="$(rpm --query --queryformat='%{ARCH}' rpm)" && \
-  curl --fail --location --output logstash.tar.gz https://artifacts.elastic.co/downloads/logstash/logstash-9.5.2-linux-${arch}.tar.gz && \
+  curl --fail --location --output logstash.tar.gz https://artifacts.elastic.co/downloads/logstash/logstash-9.5.3-linux-${arch}.tar.gz && \
   tar -zxf logstash.tar.gz -C /usr/share && \
   rm logstash.tar.gz && \
-  mv /usr/share/logstash-9.5.2 /usr/share/logstash && \
+  mv /usr/share/logstash-9.5.3 /usr/share/logstash && \
   chown -R logstash:root /usr/share/logstash && \
   chmod -R g=u /usr/share/logstash && \
   mkdir /licenses && \
@@ -52,20 +52,20 @@ USER 1000
 
 EXPOSE 9600 5044
 
-LABEL org.label-schema.build-date=2026-08-17T18:29:41+00:00 \
+LABEL org.label-schema.build-date=2026-09-01T07:25:38+00:00 \
   org.label-schema.license="Elastic License" \
   org.label-schema.name="logstash" \
   org.label-schema.schema-version="1.0" \
   org.label-schema.url="https://www.elastic.co/products/logstash" \
   org.label-schema.vcs-url="https://github.com/elastic/logstash" \
   org.label-schema.vendor="Elastic" \
-  org.label-schema.version="9.5.2" \
-  org.opencontainers.image.created=2026-08-17T18:29:41+00:00 \
+  org.label-schema.version="9.5.3" \
+  org.opencontainers.image.created=2026-09-01T07:25:38+00:00 \
   org.opencontainers.image.description="Logstash is a free and open server-side data processing pipeline that ingests data from a multitude of sources, transforms it, and then sends it to your favorite 'stash.'" \
   org.opencontainers.image.licenses="Elastic License" \
   org.opencontainers.image.title="logstash" \
   org.opencontainers.image.vendor="Elastic" \
-  org.opencontainers.image.version="9.5.2" \
+  org.opencontainers.image.version="9.5.3" \
   description="Logstash is a free and open server-side data processing pipeline that ingests data from a multitude of sources, transforms it, and then sends it to your favorite 'stash.'" \
   license="Elastic License" \
   maintainer="info@elastic.co" \