From 7b3adb014d2016be302e279214fd28e70be91a91 Mon Sep 17 00:00:00 2001
From: Ankit Sethi <ankit.sethi@elastic.co>
Date: Wed, 19 Nov 2025 17:27:28 -0600
Subject: [PATCH] Upgrade UnboundID LDAP SDK to 7.0.3 (#138053)

---
 build-tools-internal/version.properties | 1 +
 docs/changelog/138053.yaml              | 5 +++++
 gradle/verification-metadata.xml        | 6 +++---
 x-pack/plugin/core/build.gradle         | 2 +-
 x-pack/plugin/security/build.gradle     | 2 +-
 5 files changed, 11 insertions(+), 5 deletions(-)
 create mode 100644 docs/changelog/138053.yaml

diff --git a/build-tools-internal/version.properties b/build-tools-internal/version.properties
index f95426205fe39..b55ccb9e9ebba 100644
--- a/build-tools-internal/version.properties
+++ b/build-tools-internal/version.properties
@@ -19,6 +19,7 @@ commons_lang3     = 3.9
 google_oauth_client = 1.34.1
 awsv2sdk            = 2.31.78
 reactive_streams    = 1.0.4
+ldapsdk           = 7.0.3
 
 antlr4            = 4.13.1
 # bouncy castle version for non-fips. fips jars use a different version
diff --git a/docs/changelog/138053.yaml b/docs/changelog/138053.yaml
new file mode 100644
index 0000000000000..23ba9bcacfbfb
--- /dev/null
+++ b/docs/changelog/138053.yaml
@@ -0,0 +1,5 @@
+pr: 138053
+summary: Upgrade UnboundID LDAP SDK to 7.0.3
+area: Security
+type: upgrade
+issues: []
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index 5a6877036682c..afdf13e80bcdf 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -1252,9 +1252,9 @@
             <sha256 value="6eb0f1cecc687655f8d9c167073f4c2eda4805040d03f982d4d127a141bde375" origin="Generated by Gradle"/>
          </artifact>
       </component>
-      <component group="com.unboundid" name="unboundid-ldapsdk" version="6.0.3">
-         <artifact name="unboundid-ldapsdk-6.0.3.jar">
-            <sha256 value="a635f130b482d8b02cc317632de762518d6bfedfecbd6972d1029124aaaf89d8" origin="Generated by Gradle"/>
+      <component group="com.unboundid" name="unboundid-ldapsdk" version="7.0.3">
+         <artifact name="unboundid-ldapsdk-7.0.3.jar">
+            <sha256 value="7f1b9141f2c955d3a03b3f5da2c450bd616826e921a87fc19264a3f22b35e2fb" origin="Generated by Gradle"/>
          </artifact>
       </component>
       <component group="com.vaadin.external.google" name="android-json" version="0.0.20131108.vaadin1">
diff --git a/x-pack/plugin/core/build.gradle b/x-pack/plugin/core/build.gradle
index f0d5375e24987..8edf8a5a8af4c 100644
--- a/x-pack/plugin/core/build.gradle
+++ b/x-pack/plugin/core/build.gradle
@@ -51,7 +51,7 @@ dependencies {
   testImplementation project(':modules:mapper-extras')
 
   // security deps
-  api 'com.unboundid:unboundid-ldapsdk:6.0.3'
+  api "com.unboundid:unboundid-ldapsdk:${versions.ldapsdk}"
 
   implementation project(":x-pack:plugin:core:template-resources")
 
diff --git a/x-pack/plugin/security/build.gradle b/x-pack/plugin/security/build.gradle
index c8c5e924dda18..86b6479131255 100644
--- a/x-pack/plugin/security/build.gradle
+++ b/x-pack/plugin/security/build.gradle
@@ -40,7 +40,7 @@ dependencies {
 
   testImplementation(testArtifact(project(xpackModule('core'))))
   internalClusterTestImplementation(testArtifact(project(xpackModule('core'))))
-  api 'com.unboundid:unboundid-ldapsdk:6.0.3'
+  api "com.unboundid:unboundid-ldapsdk:${versions.ldapsdk}"
 
   // the following are all SAML dependencies - might as well download the whole internet
   api "org.opensaml:opensaml-core:${versions.opensaml}"