Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

RANGER-4939: Upgrade Elasticsearch version to 7.17.24 #398

Open
wants to merge 3 commits into
base: master
Choose a base branch
from

Conversation

FerArribas14
Copy link
Contributor

What changes were proposed in this pull request?

Ranger 4939: Upgrade Elasticsearch version to 7.17.24

Elasticsearch version 7.10.2 is affected by a high vulnerability CVE-2023-31418. You must upgrade to version 7.17.22 to fix this vulnerability. 

For the moment, it is not easy to upgrade to a more current version than 7.17.22 since the Elastic API is not backwards compatible and changes the implementation a lot. 

How was this patch tested?

By running ./build_ranger_using_docker.sh and unit test ElasticSearchAccessAuditsServiceTest
ExampleDoc
DocsElastic
AuditsApacheRanger

@kumaab kumaab changed the title Ranger 4939: Upgrade Elasticsearch version to 7.17.24 RANGER-4939: Upgrade Elasticsearch version to 7.17.24 Jan 22, 2025
@kumaab
Copy link
Contributor

kumaab commented Jan 22, 2025

The patch has been reviewed here as well: https://reviews.apache.org/r/75217/

Copy link
Contributor

@mneethiraj mneethiraj left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@kumaab - can you trigger CI checks for this PR? Once checks complete successfully, this PR can be merged.

@kumaab kumaab closed this Jan 23, 2025
@kumaab kumaab reopened this Jan 23, 2025
@kumaab
Copy link
Contributor

kumaab commented Jan 24, 2025

@FerArribas14 Thank for you the patch, the checks are failing due to missing commits from master.
Can you please rebase the PR ?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants