diff --git a/gradle/build.versions.toml b/gradle/build.versions.toml
index bf0e6873f9073..01a64982a1f60 100644
--- a/gradle/build.versions.toml
+++ b/gradle/build.versions.toml
@@ -50,5 +50,5 @@ wiremock = "com.github.tomakehurst:wiremock-jre8-standalone:2.23.2"
xmlunit-core = "org.xmlunit:xmlunit-core:2.8.2"
[plugins]
-ospackage = { id = "com.netflix.nebula.ospackage-base", version = "11.11.2" }
+ospackage = { id = "com.netflix.nebula.ospackage-base", version = "12.1.0" }
nmcp-aggregation = { id = "com.gradleup.nmcp.aggregation", version.ref="nmcp" }
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index 0f614eb05e1d6..24b2bedc5eb7c 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -471,6 +471,11 @@
+
+
+
+
+
@@ -998,9 +1003,9 @@
-
-
-
+
+
+
@@ -1453,6 +1458,11 @@
+
+
+
+
+
@@ -2125,6 +2135,11 @@
+
+
+
+
+
@@ -3138,6 +3153,11 @@
+
+
+
+
+
@@ -3546,6 +3566,11 @@
+
+
+
+
+
@@ -3571,11 +3596,21 @@
+
+
+
+
+
+
+
+
+
+
@@ -4806,6 +4841,11 @@
+
+
+
+
+
diff --git a/x-pack/plugin/ml/build.gradle b/x-pack/plugin/ml/build.gradle
index ada71e33f7c8e..feb58613ceb22 100644
--- a/x-pack/plugin/ml/build.gradle
+++ b/x-pack/plugin/ml/build.gradle
@@ -46,6 +46,14 @@ esplugin.bundleSpec.from {
configurations.nativeBundle.files.collect { zipTree(it) }
}
+// this is required due to https://github.com/nebula-plugins/gradle-ospackage-plugin/issues/472
+// those lib files should not be executable in the first place
+esplugin.bundleSpec.filesMatching("platform/**/lib/*") { details ->
+ details.permissions {
+ unix(0644)
+ }
+}
+
// We don't ship the individual nativeBundle licenses - instead
// they get combined into the top level NOTICES file we ship
esplugin.bundleSpec.exclude 'platform/licenses/**'