Assuming what the Debian project is saying is true, that's not very nice of Elastic. The changelogs do indeed not seem to contain any vulnerability information

Assuming what the Debian project is saying is true, that's not very nice of Elastic. The changelogs do indeed not seem to contain any vulnerability information anymore. I'm curious what the "actively discourages from doing so" is about. Curious to see if other projects will follow suit.