From 3d3e95567199947abdb7e421fc13e258fdf692f2 Mon Sep 17 00:00:00 2001 From: Tim Vernum Date: Thu, 9 Dec 2021 22:43:06 +1100 Subject: [PATCH] Update UnboundID LDAP SDK to 6.0.3 (#81568) The new release contains fixes for leaking threads (see #80305) and bias in round robin server sets, both of which are relevant to Elasticsearch security. Resolves: #80305 --- x-pack/plugin/core/build.gradle | 2 +- x-pack/plugin/core/licenses/unboundid-ldapsdk-6.0.2.jar.sha1 | 1 - x-pack/plugin/core/licenses/unboundid-ldapsdk-6.0.3.jar.sha1 | 1 + x-pack/plugin/security/build.gradle | 2 +- 4 files changed, 3 insertions(+), 3 deletions(-) delete mode 100644 x-pack/plugin/core/licenses/unboundid-ldapsdk-6.0.2.jar.sha1 create mode 100644 x-pack/plugin/core/licenses/unboundid-ldapsdk-6.0.3.jar.sha1 diff --git a/x-pack/plugin/core/build.gradle b/x-pack/plugin/core/build.gradle index f70936a8664ce..8b63991a162d8 100644 --- a/x-pack/plugin/core/build.gradle +++ b/x-pack/plugin/core/build.gradle @@ -38,7 +38,7 @@ dependencies { api "commons-codec:commons-codec:${versions.commonscodec}" // security deps - api 'com.unboundid:unboundid-ldapsdk:6.0.2' + api 'com.unboundid:unboundid-ldapsdk:6.0.3' testImplementation "org.elasticsearch:mocksocket:${versions.mocksocket}" testImplementation "org.apache.logging.log4j:log4j-slf4j-impl:${versions.log4j}" diff --git a/x-pack/plugin/core/licenses/unboundid-ldapsdk-6.0.2.jar.sha1 b/x-pack/plugin/core/licenses/unboundid-ldapsdk-6.0.2.jar.sha1 deleted file mode 100644 index efb4dced0c497..0000000000000 --- a/x-pack/plugin/core/licenses/unboundid-ldapsdk-6.0.2.jar.sha1 +++ /dev/null @@ -1 +0,0 @@ -89d0822e04d112c36c725685a176ba928dc0fa44 \ No newline at end of file diff --git a/x-pack/plugin/core/licenses/unboundid-ldapsdk-6.0.3.jar.sha1 b/x-pack/plugin/core/licenses/unboundid-ldapsdk-6.0.3.jar.sha1 new file mode 100644 index 0000000000000..4ea966b7afa79 --- /dev/null +++ b/x-pack/plugin/core/licenses/unboundid-ldapsdk-6.0.3.jar.sha1 @@ -0,0 +1 @@ +e6e50ca49ba6270ea61d9bf7575b7c0dc16e2e8f \ No newline at end of file diff --git a/x-pack/plugin/security/build.gradle b/x-pack/plugin/security/build.gradle index b681149ecdf7c..080c8dbde2785 100644 --- a/x-pack/plugin/security/build.gradle +++ b/x-pack/plugin/security/build.gradle @@ -31,7 +31,7 @@ dependencies { testImplementation(testArtifact(project(xpackModule('core')))) internalClusterTestImplementation(testArtifact(project(xpackModule('core')))) - api 'com.unboundid:unboundid-ldapsdk:6.0.2' + api 'com.unboundid:unboundid-ldapsdk:6.0.3' // the following are all SAML dependencies - might as well download the whole internet api "org.opensaml:opensaml-core:${versions.opensaml}"