diff --git a/gradle/build.versions.toml b/gradle/build.versions.toml
index bf0e6873f9073..01a64982a1f60 100644
--- a/gradle/build.versions.toml
+++ b/gradle/build.versions.toml
@@ -50,5 +50,5 @@ wiremock = "com.github.tomakehurst:wiremock-jre8-standalone:2.23.2"
xmlunit-core = "org.xmlunit:xmlunit-core:2.8.2"
[plugins]
-ospackage = { id = "com.netflix.nebula.ospackage-base", version = "11.11.2" }
+ospackage = { id = "com.netflix.nebula.ospackage-base", version = "12.1.0" }
nmcp-aggregation = { id = "com.gradleup.nmcp.aggregation", version.ref="nmcp" }
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index 28a7d6981a4cb..e8be371431655 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -481,6 +481,11 @@
+
+
+
+
+
@@ -1083,9 +1088,9 @@
-
-
-
+
+
+
@@ -1533,6 +1538,11 @@
+
+
+
+
+
@@ -2205,6 +2215,11 @@
+
+
+
+
+
@@ -3228,6 +3243,11 @@
+
+
+
+
+
@@ -3641,6 +3661,11 @@
+
+
+
+
+
@@ -3666,11 +3691,21 @@
+
+
+
+
+
+
+
+
+
+
@@ -4901,6 +4936,11 @@
+
+
+
+
+
diff --git a/x-pack/plugin/ml/build.gradle b/x-pack/plugin/ml/build.gradle
index db87c27d30d21..6b08ab7e84038 100644
--- a/x-pack/plugin/ml/build.gradle
+++ b/x-pack/plugin/ml/build.gradle
@@ -51,6 +51,14 @@ esplugin.bundleSpec.from {
configurations.nativeBundle.files.collect { zipTree(it) }
}
+// this is required due to https://github.com/nebula-plugins/gradle-ospackage-plugin/issues/472
+// those lib files should not be executable in the first place
+esplugin.bundleSpec.filesMatching("platform/**/lib/*") { details ->
+ details.permissions {
+ unix(0644)
+ }
+}
+
// We don't ship the individual nativeBundle licenses - instead
// they get combined into the top level NOTICES file we ship
esplugin.bundleSpec.exclude 'platform/licenses/**'