Browse Source

Update UnboundID LDAP SDK to 6.0.3 (#81568)

The new release contains fixes for leaking threads (see #80305) and
bias in round robin server sets, both of which are relevant to
Elasticsearch security.

Resolves: #80305
Tim Vernum 3 years ago
parent
commit
f01871464b

+ 1 - 1
x-pack/plugin/core/build.gradle

@@ -38,7 +38,7 @@ dependencies {
   api "commons-codec:commons-codec:${versions.commonscodec}"
 
   // security deps
-  api 'com.unboundid:unboundid-ldapsdk:6.0.2'
+  api 'com.unboundid:unboundid-ldapsdk:6.0.3'
 
   testImplementation "org.elasticsearch:mocksocket:${versions.mocksocket}"
   testImplementation "org.apache.logging.log4j:log4j-slf4j-impl:${versions.log4j}"

+ 0 - 1
x-pack/plugin/core/licenses/unboundid-ldapsdk-6.0.2.jar.sha1

@@ -1 +0,0 @@
-89d0822e04d112c36c725685a176ba928dc0fa44

+ 1 - 0
x-pack/plugin/core/licenses/unboundid-ldapsdk-6.0.3.jar.sha1

@@ -0,0 +1 @@
+e6e50ca49ba6270ea61d9bf7575b7c0dc16e2e8f

+ 1 - 1
x-pack/plugin/security/build.gradle

@@ -31,7 +31,7 @@ dependencies {
 
   testImplementation(testArtifact(project(xpackModule('core'))))
   internalClusterTestImplementation(testArtifact(project(xpackModule('core'))))
-  api 'com.unboundid:unboundid-ldapsdk:6.0.2'
+  api 'com.unboundid:unboundid-ldapsdk:6.0.3'
 
   // the following are all SAML dependencies - might as well download the whole internet
   api "org.opensaml:opensaml-core:${versions.opensaml}"