[DOCS] Added 6.2.3 security release notes (elastic/x-pack-elasticsearch#4141)
Original commit: elastic/x-pack-elasticsearch@9ac74165227d631376f94bba08dfe374c54c9208
@@ -22,24 +22,30 @@ Monitoring::
This fix avoids subtle race conditions in stats reporting.
// Repo: x-pack-elasticsearch
// Pull: 4079
-////
+
Security::
-* Disregard comments in XML documents
+* Fixed handling of comments in XML documents [ESA-2018-07].
// Repo: x-pack-elasticsearch
// Pull: 4047
-* Security: IndexAuditTrail updates mappings when indexing locally
+* Fixed auditing such that when you use a local audit index, it maintains the
+mappings automatically. Maintenance is necessary, for example, when new fields
+are introduced or document types change.
// Repo: x-pack-elasticsearch
// Pull: 3944
-* Additional settings for SAML NameID policy
+* Added and changed settings for the SAML NameID policy. For example, added the
+`nameid.allow_create` setting and changed the default value for
+the SPNameQualifier setting to blank. See {xpack-ref}/saml-realm.html[SAML Authentication].
// Repo: x-pack-elasticsearch
// Pull: 3969
-* [SAML] Handle ACS URL with existing query params
+* Fixed handling of an Assertion Consumer Service (ACS) URL with existing query
+parameters. See {xpack-ref}/saml-realm.html[SAML Authentication].
// Repo: x-pack-elasticsearch
// Pull: 4060
-* Make PKI BootstrapCheck work with SecureSettings
+* Fixed the PKI realm bootstrap check such that it works with secure settings.
+For more information, see <<bootstrap-checks-xpack>>.
// Repo: x-pack-elasticsearch
// Pull: 3993
-////
+
Watcher::
* Fixed the serialization of failed hipchat messages, such that it no longer
tries to write the status field twice.
