# New Search Guard releases and security fixes **URL:** \ **Category:** Search Guard\ **Created:** [December 13, 2016, 7:49pm UTC](https://forum.search-guard.com/t/new-search-guard-releases-and-security-fixes/336 "2016-12-13T19:49:15Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![searchguard\_google\_group](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/searchguard_google_group/32/462_2.png) [@searchguard\_google\_group](https://forum.search-guard.com/u/searchguard_google_group)\ **Post date:** [December 13, 2016, 7:49pm UTC](https://forum.search-guard.com/t/new-search-guard-releases-and-security-fixes/336/1 "2016-12-13T19:49:15Z")
We’re happy to announce a bunch of releases today. To obtain all important security fixes, we strongly recommend to update to this latest version. Please find more details here: [GitHub - floragunncom/search-guard: Search Guard Plugin - Security for Elasticsearch](https://github.com/floragunncom/search-guard/wiki/SecurityIssues) **Search Guard Version 9:** - Add support for Elasticsearch 5.1.1 - Fix [DLS not picked up when getting documents by ID #1](https://github.com/floragunncom/search-guard-module-dlsfls/issues/1) - Fix [sgadmin timeout when updating a role with duplicated permissions #238](https://github.com/floragunncom/search-guard/issues/238) - by introducing a -ff (–fail-fast) flag which is not set by default - Fix [Missing permissions when running JWT #1](https://github.com/floragunncom/search-guard-authbackend-jwt/issues/1) - Fix composite handling (composite actions were not detected correctly) - Fix [permissions resolution for certain index/type combinations](https://github.com/floragunncom/search-guard/wiki/SecurityIssues) (by Lucas Bremgartner) - Fix [Redundant condition #248](https://github.com/floragunncom/search-guard/issues/248) - Make error messages more verbose and give recommendations what the user can try to fix it Details: [GitHub - floragunncom/search-guard: Search Guard Plugin - Security for Elasticsearch](https://github.com/floragunncom/search-guard/wiki) **Search Guard SSL Version 19:** - Add support for Elasticsearch 5.1.1 - Add support for injecting external ssl context into client - Introduce PrincipalExtractor which allows to customize x509 principal name extraction for transport layer Details: [https://github.com/floragunncom/search-guard-ssl/wiki](https://github.com/floragunncom/search-guard-ssl/wiki) **DLS/FLS module Version 5:** - Fix [DLS not picked up when getting documents by ID #1](https://github.com/floragunncom/search-guard-module-dlsfls/issues/1) [GitHub - floragunncom/search-guard-module-dlsfls: DLS/FLS Module for Search Guard 5](https://github.com/floragunncom/search-guard-module-dlsfls/wiki) **LDAP module Version 5:** - Fix rolesearch resolution of {1} placeholder - Fix [#227 Enable TLSv1](https://github.com/floragunncom/search-guard/issues/227) - Fix [#2 Suppress stacktrace if user roles could not be filled](https://github.com/floragunncom/search-guard-authbackend-ldap/issues/2) > **[Home · floragunncom/search-guard-authbackend-ldap Wiki](https://github.com/floragunncom/search-guard-authbackend-ldap/wiki)** > > \[OUTDATED\] LDAP Authentication- and Authorizationbackend for Search Guard - Home · floragunncom/search-guard-authbackend-ldap Wiki Commercial support is available here [https://floragunn.com/searchguard/searchguard-license-support/](https://floragunn.com/searchguard/searchguard-license-support/) > **···** > > * * * > > Search Guard (®) is an Elasticsearch plugin that offers encryption, authentication and authorisation. > > It builds on Search Guard SSL and provides pluggable auth/auth modules in addition. ---
**Author:** ![Gevork](https://avatars.discourse-cdn.com/v4/letter/g/96bed5/32.png) [@Gevork](https://forum.search-guard.com/u/Gevork)\ **Post date:** [December 25, 2016, 5:41pm UTC](https://forum.search-guard.com/t/new-search-guard-releases-and-security-fixes/336/2 "2016-12-25T17:41:32Z")
Can you please help me with the initial config of this plugin. After install when I want to apply config files via Sgadmin.sh says it cannot connect to 9300. When even I specify -p 9200 it fails to connect and apply configs. What to do? How to open SSL port so that sgadmin can connect. ??? > **···** > > On Tuesday, 13 December 2016 20:49:15 UTC+1, Search Guard wrote: > > > We’re happy to announce a bunch of releases today. > > > To obtain all important security fixes, we strongly recommend to update to this latest version. > > > Please find more details here: [https://github.com/floragunncom/search-guard/wiki/SecurityIssues](https://github.com/floragunncom/search-guard/wiki/SecurityIssues) > > > > > > **Search Guard Version 9:** > > > - Add support for Elasticsearch 5.1.1 > > - Fix [DLS not picked up when getting documents by ID #1](https://github.com/floragunncom/search-guard-module-dlsfls/issues/1) > > - Fix [sgadmin timeout when updating a role with duplicated permissions #238](https://github.com/floragunncom/search-guard/issues/238) > > - by introducing a -ff (–fail-fast) flag which is not set by default > > > > - Fix [Missing permissions when running JWT #1](https://github.com/floragunncom/search-guard-authbackend-jwt/issues/1) > > - Fix composite handling (composite actions were not detected correctly) > > - Fix [permissions resolution for certain index/type combinations](https://github.com/floragunncom/search-guard/wiki/SecurityIssues) (by Lucas Bremgartner) > > - Fix [Redundant condition #248](https://github.com/floragunncom/search-guard/issues/248) > > - Make error messages more verbose and give recommendations what the user can try to fix it > > Details: [https://github.com/floragunncom/search-guard/wiki](https://github.com/floragunncom/search-guard/wiki) > > > > > > > > > **Search Guard SSL Version 19:** > > > - Add support for Elasticsearch 5.1.1 > > - Add support for injecting external ssl context into client > > - Introduce PrincipalExtractor which allows to customize x509 principal name extraction for transport layer > > > Details: [https://github.com/floragunncom/search-guard-ssl/wiki](https://github.com/floragunncom/search-guard-ssl/wiki) > > > > > > > > > **DLS/FLS module Version 5:** > > > - Fix [DLS not picked up when getting documents by ID #1](https://github.com/floragunncom/search-guard-module-dlsfls/issues/1) > > [https://github.com/floragunncom/search-guard-module-dlsfls/wiki](https://github.com/floragunncom/search-guard-module-dlsfls/wiki) > > > > > > > > > **LDAP module Version 5:** > > > - Fix rolesearch resolution of {1} placeholder > > - Fix [#227 Enable TLSv1](https://github.com/floragunncom/search-guard/issues/227) > > - Fix [#2 Suppress stacktrace if user roles could not be filled](https://github.com/floragunncom/search-guard-authbackend-ldap/issues/2) > > > [https://github.com/floragunncom/search-guard-authbackend-ldap/wiki](https://github.com/floragunncom/search-guard-authbackend-ldap/wiki) > > > > > > Commercial support is available here [https://floragunn.com/searchguard/searchguard-license-support/](https://floragunn.com/searchguard/searchguard-license-support/) > > > > > > * * * > > > Search Guard (®) is an Elasticsearch plugin that offers encryption, authentication and authorisation. > > > It builds on Search Guard SSL and provides pluggable auth/auth modules in addition. ---
**Author:** ![Gevork](https://avatars.discourse-cdn.com/v4/letter/g/96bed5/32.png) [@Gevork](https://forum.search-guard.com/u/Gevork)\ **Post date:** [December 25, 2016, 6:22pm UTC](https://forum.search-guard.com/t/new-search-guard-releases-and-security-fixes/336/3 "2016-12-25T18:22:03Z")
I think I have found the problem. It was because the ip was not 127.0.0.1 > **···** > > On Sunday, 25 December 2016 18:41:33 UTC+1, Gevork wrote: > > > Can you please help me with the initial config of this plugin. After install when I want to apply config files via > > > Sgadmin.sh says it cannot connect to 9300. When even I specify -p 9200 it fails to connect and apply configs. What to do? > > > > > > How to open SSL port so that sgadmin can connect. > > > > > > ??? > > > > > > > > > > > > > > > > > > > > > On Tuesday, 13 December 2016 20:49:15 UTC+1, Search Guard wrote: > > > > > We’re happy to announce a bunch of releases today. > > > > To obtain all important security fixes, we strongly recommend to update to this latest version. > > > > Please find more details here: [https://github.com/floragunncom/search-guard/wiki/SecurityIssues](https://github.com/floragunncom/search-guard/wiki/SecurityIssues) > > > > > > > > **Search Guard Version 9:** > > > > - Add support for Elasticsearch 5.1.1 > > > - Fix [DLS not picked up when getting documents by ID #1](https://github.com/floragunncom/search-guard-module-dlsfls/issues/1) > > > - Fix [sgadmin timeout when updating a role with duplicated permissions #238](https://github.com/floragunncom/search-guard/issues/238) > > > - by introducing a -ff (–fail-fast) flag which is not set by default > > > > > > - Fix [Missing permissions when running JWT #1](https://github.com/floragunncom/search-guard-authbackend-jwt/issues/1) > > > - Fix composite handling (composite actions were not detected correctly) > > > - Fix [permissions resolution for certain index/type combinations](https://github.com/floragunncom/search-guard/wiki/SecurityIssues) (by Lucas Bremgartner) > > > - Fix [Redundant condition #248](https://github.com/floragunncom/search-guard/issues/248) > > > - Make error messages more verbose and give recommendations what the user can try to fix it > > > Details: [https://github.com/floragunncom/search-guard/wiki](https://github.com/floragunncom/search-guard/wiki) > > > > > > > > > > > > **Search Guard SSL Version 19:** > > > > - Add support for Elasticsearch 5.1.1 > > > - Add support for injecting external ssl context into client > > > - Introduce PrincipalExtractor which allows to customize x509 principal name extraction for transport layer > > > > Details: [https://github.com/floragunncom/search-guard-ssl/wiki](https://github.com/floragunncom/search-guard-ssl/wiki) > > > > > > > > > > > > **DLS/FLS module Version 5:** > > > > - Fix [DLS not picked up when getting documents by ID #1](https://github.com/floragunncom/search-guard-module-dlsfls/issues/1) > > > [https://github.com/floragunncom/search-guard-module-dlsfls/wiki](https://github.com/floragunncom/search-guard-module-dlsfls/wiki) > > > > > > > > > > > > **LDAP module Version 5:** > > > > - Fix rolesearch resolution of {1} placeholder > > > - Fix [#227 Enable TLSv1](https://github.com/floragunncom/search-guard/issues/227) > > > - Fix [#2 Suppress stacktrace if user roles could not be filled](https://github.com/floragunncom/search-guard-authbackend-ldap/issues/2) > > > > [https://github.com/floragunncom/search-guard-authbackend-ldap/wiki](https://github.com/floragunncom/search-guard-authbackend-ldap/wiki) > > > > > > > > Commercial support is available here [https://floragunn.com/searchguard/searchguard-license-support/](https://floragunn.com/searchguard/searchguard-license-support/) > > > > > > > > * * * > > > > Search Guard (®) is an Elasticsearch plugin that offers encryption, authentication and authorisation. > > > > It builds on Search Guard SSL and provides pluggable auth/auth modules in addition.