[RANGER-4939] Upgrade Elasticsearch version to 7.17.24

• Type: Improvement
• Status: Patch Available
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 2.5.0
• Fix Version/s: 3.0.0, 2.5.0, 2.6.0
• Component/s: audit
• Labels: security

Language

Java

• Assignee: FerArribas
• Reporter: FerArribas
• Created: 25/Sep/24 11:22
• Updated: 27/Sep/24 11:28

Description

Elasticsearch version 7.10.2 is affected by a high vulnerability CVE-2023-31418. You must upgrade to version 7.17.22 to fix this vulnerability. 

For the moment, it is not easy to upgrade to a more current version than 7.17.22 since the Elastic API is not backwards compatible and changes the implementation a lot.