Search Guard 6.x-24.2
Release Date: 19.03.2019
Security Fixes
n/a
Fixes
Search Guard
- Core: “Fixed Authz cache does not work when authc is noop backend”
- Core: Fix “ElasticSearch process extreme load when SG has lots of roles or role mappings”
SSL
- SSL: “TLSv1 not possible as TLS protocol for OpenSSL”
- SSL: “Key password of a key stored in a keystore can now be set separately”
Auditlog
- Auditlog: “make sure when auditlog is turned off that impl methods are not called (perf wise)”
DLS/FLS
- DLS/FLS: “Attach DLS/FLS/MF headers only when enterprise modules are enabled”
- DLS/FLS: “LeafReader.hasDeletions() should only return statically true when DLS is enabled”
sgadmin
- sgadmin: “sgadmin - no output on early ClassNotFoundException”
REST API
- REST API: “REST API doesn’t accept prettified JSON containing tabs”