Search Guard 6.x-24.2

Release Date: 19.03.2019

• Upgrade Guide from 5.x to 6.x
• Upgrade Guide to 6.5.x

Security Fixes

n/a

Fixes

Search Guard

• Core: “Fixed Authz cache does not work when authc is noop backend”
  • PR #647
• Core: Fix “ElasticSearch process extreme load when SG has lots of roles or role mappings”
  • Issue #635
  • PR #654
  • PR #646
  • PR #34

SSL

• SSL: “TLSv1 not possible as TLS protocol for OpenSSL”
  • Issue #650
  • PR #99
• SSL: “Key password of a key stored in a keystore can now be set separately”
  • PR #98

Auditlog

• Auditlog: “make sure when auditlog is turned off that impl methods are not called (perf wise)”
  • PR #36

DLS/FLS

• DLS/FLS: “Attach DLS/FLS/MF headers only when enterprise modules are enabled”
  • PR #652
• DLS/FLS: “LeafReader.hasDeletions() should only return statically true when DLS is enabled”
  • PR #38

sgadmin

• sgadmin: “sgadmin - no output on early ClassNotFoundException”
  • Issue #639
  • PR #648

REST API

• REST API: “REST API doesn’t accept prettified JSON containing tabs”
  • Issue #634
  • PR #33