# Open Distro 1.13.3 not in the yum repository

**URL:** <https://forum.opensearch.org/t/open-distro-1-13-3-not-in-the-yum-repository/7985>\
**Category:** Open Source Elasticsearch and Kibana\
**Created:** [December 13, 2021, 6:06pm UTC](https://forum.opensearch.org/t/open-distro-1-13-3-not-in-the-yum-repository/7985 "2021-12-13T18:06:22Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![robcowart](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/robcowart/32/1012_2.png) [@robcowart](https://forum.opensearch.org/u/robcowart)\
**Post date:** [December 13, 2021, 6:06pm UTC](https://forum.opensearch.org/t/open-distro-1-13-3-not-in-the-yum-repository/7985/1 "2021-12-13T18:06:22Z")

</div>

Open Distro 1.13.3 was announced here… [https://opendistro.github.io/for-elasticsearch/blog/2021/12/update-to-1-13-3/](https://opendistro.github.io/for-elasticsearch/blog/2021/12/update-to-1-13-3/)

However it isn’t available in the repository.

```nohighlight
[user@centos8 ~]# sudo yum list opendistroforelasticsearch --showduplicates
Last metadata expiration check: 0:00:14 ago on Mon 13 Dec 2021 06:56:50 PM CET.
Available Packages
opendistroforelasticsearch.noarch 0.7.0-1 opendistroforelasticsearch-artifacts-repo
opendistroforelasticsearch.noarch 0.7.1-1 opendistroforelasticsearch-artifacts-repo
opendistroforelasticsearch.noarch 0.8.0-1 opendistroforelasticsearch-artifacts-repo
opendistroforelasticsearch.noarch 0.9.0-1 opendistroforelasticsearch-artifacts-repo
opendistroforelasticsearch.noarch 0.10.0-1 opendistroforelasticsearch-artifacts-repo
opendistroforelasticsearch.noarch 1.0.0-1 opendistroforelasticsearch-artifacts-repo
opendistroforelasticsearch.noarch 1.0.1-1 opendistroforelasticsearch-artifacts-repo
opendistroforelasticsearch.noarch 1.0.2-1 opendistroforelasticsearch-artifacts-repo
opendistroforelasticsearch.noarch 1.1.0-1 opendistroforelasticsearch-artifacts-repo
opendistroforelasticsearch.noarch 1.2.0-1 opendistroforelasticsearch-artifacts-repo
opendistroforelasticsearch.noarch 1.2.1-1 opendistroforelasticsearch-artifacts-repo
opendistroforelasticsearch.noarch 1.3.0-1 opendistroforelasticsearch-artifacts-repo
opendistroforelasticsearch.noarch 1.4.0-1 opendistroforelasticsearch-artifacts-repo
opendistroforelasticsearch.noarch 1.6.0-1 opendistroforelasticsearch-artifacts-repo
opendistroforelasticsearch.noarch 1.7.0-1 opendistroforelasticsearch-artifacts-repo
opendistroforelasticsearch.noarch 1.8.0-1 opendistroforelasticsearch-artifacts-repo
opendistroforelasticsearch.noarch 1.9.0-1 opendistroforelasticsearch-artifacts-repo
opendistroforelasticsearch.noarch 1.10.1-1 opendistroforelasticsearch-artifacts-repo
opendistroforelasticsearch.noarch 1.11.0-1 opendistroforelasticsearch-artifacts-repo
opendistroforelasticsearch.noarch 1.12.0-1 opendistroforelasticsearch-artifacts-repo
opendistroforelasticsearch.aarch64 1.13.0-1 opendistroforelasticsearch-artifacts-repo
opendistroforelasticsearch.x86_64 1.13.0-1 opendistroforelasticsearch-artifacts-repo
opendistroforelasticsearch.aarch64 1.13.1-1 opendistroforelasticsearch-artifacts-repo
opendistroforelasticsearch.x86_64 1.13.1-1 opendistroforelasticsearch-artifacts-repo
opendistroforelasticsearch.aarch64 1.13.2-1 opendistroforelasticsearch-artifacts-repo
opendistroforelasticsearch.x86_64 1.13.2-1 opendistroforelasticsearch-artifacts-repo

```

Will 1.13.3 be made available in the same places as previous ODFE releases?

---

<div class="post-metadata">

**Author:** ![searchymcsearchface](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/searchymcsearchface/32/868_2.png) [@searchymcsearchface](https://forum.opensearch.org/u/searchymcsearchface)\
**Post date:** [December 13, 2021, 8:54pm UTC](https://forum.opensearch.org/t/open-distro-1-13-3-not-in-the-yum-repository/7985/2 "2021-12-13T20:54:37Z")

</div>

Jules did a good job answering that one:

> [@Log4j2 vulnerability in OpenSearch](https://forum.opensearch.org/t/log4j2-vulnerability-in-opensearch/7935/15):
>
> The Open Distro deb and rpm packages are built on top of the upstream Elasticsearch deb and rpm packages, and those upstream packages are what contains the Log4j2 jars. So we’ve been looking really hard at what the options are for distributing a release that contains a fix, and there are fewer options here than there are for the .tgz and Docker builds. Right now it looks like we’d need to develop a deb & rpm packaging process more or less from scratch, and doing that in a way that retains backw…