diff --git a/gradle/build.versions.toml b/gradle/build.versions.toml
index 56bb3225d546d..2d7cf5e423384 100644
--- a/gradle/build.versions.toml
+++ b/gradle/build.versions.toml
@@ -51,5 +51,5 @@ wiremock = "com.github.tomakehurst:wiremock-jre8-standalone:2.23.2"
xmlunit-core = "org.xmlunit:xmlunit-core:2.8.2"
[plugins]
-ospackage = { id = "com.netflix.nebula.ospackage-base", version = "11.11.2" }
+ospackage = { id = "com.netflix.nebula.ospackage-base", version = "12.1.0" }
nmcp-aggregation = { id = "com.gradleup.nmcp.aggregation", version.ref="nmcp" }
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index 4775d8a19990e..3cf844589c961 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -469,6 +469,11 @@
+
+
+
+
+
@@ -946,9 +951,9 @@
-
-
-
+
+
+
@@ -1271,6 +1276,11 @@
+
+
+
+
+
@@ -1381,6 +1391,11 @@
+
+
+
+
+
@@ -2047,6 +2062,11 @@
+
+
+
+
+
@@ -3050,6 +3070,11 @@
+
+
+
+
+
@@ -3453,6 +3478,11 @@
+
+
+
+
+
@@ -3478,11 +3508,21 @@
+
+
+
+
+
+
+
+
+
+
@@ -4698,6 +4738,11 @@
+
+
+
+
+
diff --git a/x-pack/plugin/ml/build.gradle b/x-pack/plugin/ml/build.gradle
index ada71e33f7c8e..feb58613ceb22 100644
--- a/x-pack/plugin/ml/build.gradle
+++ b/x-pack/plugin/ml/build.gradle
@@ -46,6 +46,14 @@ esplugin.bundleSpec.from {
configurations.nativeBundle.files.collect { zipTree(it) }
}
+// this is required due to https://github.com/nebula-plugins/gradle-ospackage-plugin/issues/472
+// those lib files should not be executable in the first place
+esplugin.bundleSpec.filesMatching("platform/**/lib/*") { details ->
+ details.permissions {
+ unix(0644)
+ }
+}
+
// We don't ship the individual nativeBundle licenses - instead
// they get combined into the top level NOTICES file we ship
esplugin.bundleSpec.exclude 'platform/licenses/**'