Skip to content

Commit 61f3dae

Browse files
authored
[DOCS] Add security notice for 6.8.17 (#75086)
1 parent 1d98c26 commit 61f3dae

File tree

1 file changed

+13
-0
lines changed

1 file changed

+13
-0
lines changed

docs/reference/release-notes/6.8.asciidoc

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,19 @@
33

44
Also see <<breaking-changes-6.8,Breaking changes in 6.8>>.
55

6+
[discrete]
7+
[[security-updates-6.8.17]]
8+
=== Security updates
9+
10+
* An uncontrolled recursion vulnerability that could lead to a
11+
denial of service attack was identified in the {es} Grok parser.
12+
A user with the ability to submit arbitrary queries to {es} could create
13+
a malicious Grok query that will crash the {es} node.
14+
All versions of {es} prior to 6.8.17 are affected by this flaw.
15+
You must upgrade to {es} version 6.8.17 to obtain the fix.
16+
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22144[CVE-2021-22144]
17+
18+
619
[[bug-6.8.17]]
720
[float]
821
=== Bug fixes

0 commit comments

Comments
 (0)