From fc99a8235873373296b8356bce59b9d82e149507 Mon Sep 17 00:00:00 2001 From: nemobis Date: Sun, 30 Oct 2022 12:57:34 +0200 Subject: [PATCH] Rephrase ElasticSearch log4j warning, fix typos (#965) Not sure whether it's still appropriate to direct people to a mitigation. --- content/en/admin/optional/elasticsearch.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/en/admin/optional/elasticsearch.md b/content/en/admin/optional/elasticsearch.md index 2cf1fb42..755e40e2 100644 --- a/content/en/admin/optional/elasticsearch.md +++ b/content/en/admin/optional/elasticsearch.md @@ -36,7 +36,7 @@ apt install elasticsearch {{< /hint >}} {{< hint style="danger" >}} -**Security warning:** Due to the recently disclosed [exploit](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44228) found in `log4j` lib used by ElasticSearch, some versions of ES may be affected by this issue(Check if your ES instance used `log4j` version between `2.0` and `2.14.1`). If affcted, please refer to [this issue](https://github.com/elastic/elasticsearch/issues/81618#issuecomment-991000240) for a temporary mitigation. +**Security warning:** ElasticSearch versions between `2.0` and `2.14.1` are affected by an [exploit](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44228) in the `log4j` library. If affected, please refer to the [temporary mitigation](https://github.com/elastic/elasticsearch/issues/81618#issuecomment-991000240) from the ElasticSearch issue tracker. {{< /hint >}} To start ElasticSearch: