We are releasing today a new security bug fix release for Search Guard 52. It fixes a security issue which affects only very specific setups:
- The
ldap
authentication/authorization module is in use -
enable_start_tls
is set totrue
for this module.
If you are not using such a setup, you don’t need to upgrade. Users who use such a setup should upgrade to Search Guard 52.3.
Search Guard (®) is an Elasticsearch plugin that offers encryption, authentication, and authorization.
Coded with love in Berlin, Denmark, Sweden, Italy, Ukraine and the US.
Search Guard is a trademark of floragunn GmbH, registered in the U.S. and in other countries.
Elasticsearch, Kibana, Logstash, and Beats are trademarks of Elasticsearch BV, registered in the U.S. and in other countries.