# Fix for CVE-2021-22134 in 7.10.X version

**URL:** <https://discuss.elastic.co/t/fix-for-cve-2021-22134-in-7-10-x-version/269340>\
**Category:** Elasticsearch\
**Created:** [April 6, 2021, 2:15pm UTC](https://discuss.elastic.co/t/fix-for-cve-2021-22134-in-7-10-x-version/269340 "2021-04-06T14:15:26Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ruslan\_Kovpey](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruslan_kovpey/32/86622_2.png) [@Ruslan\_Kovpey](https://discuss.elastic.co/u/Ruslan_Kovpey)\
**Post date:** [April 6, 2021, 2:15pm UTC](https://discuss.elastic.co/t/fix-for-cve-2021-22134-in-7-10-x-version/269340/1 "2021-04-06T14:15:26Z")

</div>

Hello, do exist any plans to create a security patch for CVE-2021-22134 [NVD - CVE-2021-22134](https://nvd.nist.gov/vuln/detail/CVE-2021-22134) in 7.10.x version, if yes then when?  
Thanks

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [April 6, 2021, 2:38pm UTC](https://discuss.elastic.co/t/fix-for-cve-2021-22134-in-7-10-x-version/269340/2 "2021-04-06T14:38:25Z")

</div>

It went into version 7.12 so you need to upgrade to that version. Older minor versions are no longer receiving patches.

---

<div class="post-metadata">

**Author:** ![Ruslan\_Kovpey](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruslan_kovpey/32/86622_2.png) [@Ruslan\_Kovpey](https://discuss.elastic.co/u/Ruslan_Kovpey)\
**Post date:** [April 6, 2021, 2:42pm UTC](https://discuss.elastic.co/t/fix-for-cve-2021-22134-in-7-10-x-version/269340/3 "2021-04-06T14:42:48Z")

</div>

Thanks for your response. So there no chance to have a fix in the version on a pure Apache 2.0 license?

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [April 6, 2021, 2:53pm UTC](https://discuss.elastic.co/t/fix-for-cve-2021-22134-in-7-10-x-version/269340/4 "2021-04-06T14:53:55Z")

</div>

The vulnerability applies to the security code which is not part of the oss distribution.

As the oss distribution does not come with any security you probably need to look for vulnerabilities related to what you use to secure it.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 4, 2021, 2:54pm UTC](https://discuss.elastic.co/t/fix-for-cve-2021-22134-in-7-10-x-version/269340/5 "2021-05-04T14:54:30Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.