# Search Guard for Elasticsearch 6.8.21 CVE-2021-44228

**URL:** <https://forum.search-guard.com/t/search-guard-for-elasticsearch-6-8-21-cve-2021-44228/2256>\
**Category:** Search Guard\
**Created:** [December 14, 2021, 5:45am UTC](https://forum.search-guard.com/t/search-guard-for-elasticsearch-6-8-21-cve-2021-44228/2256 "2021-12-14T05:45:42Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![marcopolo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/marcopolo/32/1094_2.png) [@marcopolo](https://forum.search-guard.com/u/marcopolo)\
**Post date:** [December 14, 2021, 5:45am UTC](https://forum.search-guard.com/t/search-guard-for-elasticsearch-6-8-21-cve-2021-44228/2256/1 "2021-12-14T05:45:42Z")

</div>

Dear Search Guard Team,

regarding your annoncement

> [@Update on the Log4J2 RCE Vulnerability - CVE-2021-44228](https://forum.search-guard.com/t/update-on-the-log4j2-rce-vulnerability-cve-2021-44228/2255):
>
> You probably already have heard of the [critical Log4J2 vulnerability](https://nvd.nist.gov/vuln/detail/CVE-2021-44228) which was disclosed a couple of days ago. Search Guard solely depends on the Log4j2 component shipped by Elasticsearch. Thus, the vulnerability is only fixable by updating Elasticsearch or by applying the mitigations recommended by Elasticsearch: Independently, we are doing our own security tests to double-check the recommendations by Elasticsearch. In the meantime, we are recommending to apply the mitigation of setting the…

Could you please provide a SearchGuard 25.6 Build for Elasticsearch 6.8.21?

This version includes some log4j fixes

> **[Elasticsearch version 6.8.21 | Elasticsearch Guide \[6.8\] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/6.8/release-notes-6.8.21.html)**

---

<div class="post-metadata">

**Author:** ![system](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/system/32/1870_2.png) [@system](https://forum.search-guard.com/u/system)\
**Post date:** [January 4, 2022, 5:45am UTC](https://forum.search-guard.com/t/search-guard-for-elasticsearch-6-8-21-cve-2021-44228/2256/2 "2022-01-04T05:45:47Z")

</div>

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.