Security Bug Fix Release: Search Guard 52.3

We are releasing today a new security bug fix release for Search Guard 52. It fixes a security issue which affects only very specific setups:

  • The ldap authentication/authorization module is in use
  • enable_start_tls is set to true for this module.

If you are not using such a setup, you don’t need to upgrade. Users who use such a setup should upgrade to Search Guard 52.3.

Search Guard (®) is an Elasticsearch plugin that offers encryption, authentication, and authorization.

Coded with love in Berlin, Denmark, Sweden, Italy, Ukraine and the US.

Search Guard is a trademark of floragunn GmbH, registered in the U.S. and in other countries.

Elasticsearch, Kibana, Logstash, and Beats are trademarks of Elasticsearch BV, registered in the U.S. and in other countries.

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.