# Logstash 5.0.1 released with a security patch

**URL:** <https://discuss.elastic.co/t/logstash-5-0-1-released-with-a-security-patch/66156>\
**Category:** Security Announcements\
**Created:** [November 15, 2016, 7:02pm UTC](https://discuss.elastic.co/t/logstash-5-0-1-released-with-a-security-patch/66156 "2016-11-15T19:02:53Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![suyograo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/suyograo/32/44898_2.png) [@suyograo](https://discuss.elastic.co/u/suyograo)\
**Post date:** [November 15, 2016, 7:02pm UTC](https://discuss.elastic.co/t/logstash-5-0-1-released-with-a-security-patch/66156/1 "2016-11-15T19:02:53Z")

</div>

Hi all, we would like to announce that Logstash 5.0.1 has been released with an important security patch. Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file HTTP basic auth credentials. We advise our users using Logstash and x-pack to update to this release.

ESA-2016-08 has been filed for this vulnerability. Details of the vulnerability can be found here: [https://www.elastic.co/community/security](https://www.elastic.co/community/security)

---

_[View the full topic](https://discuss.elastic.co/t/logstash-5-0-1-released-with-a-security-patch/66156)._