# Logstash Log4j Update
**URL:** https://discuss.elastic.co/t/logstash-log4j-update/307604
**Category:** Logstash
**Tags:** docker
**Created:** [June 20, 2022, 5:13am UTC](https://discuss.elastic.co/t/logstash-log4j-update/307604 "2022-06-20T05:13:09Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@rishabjain1012](https://discuss.elastic.co/u/rishabjain1012)
#### Post date: [June 20, 2022, 5:13am UTC](https://discuss.elastic.co/t/logstash-log4j-update/307604/1 "2022-06-20T05:13:09Z")
Hi,
We are using opensource versions of logstash docker Images.
Our security team found that these images contain log4j-core-2.17.0.jar which is found to be vulnerable.
Can someone provide us an update as of when will be newer version of image available with updated version of log4j-core-2.17.1.jar
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [June 20, 2022, 6:26am UTC](https://discuss.elastic.co/t/logstash-log4j-update/307604/2 "2022-06-20T06:26:41Z")
Welcome to our community! 😃
Vulnerable for what exactly?
---
### Author:  [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [June 20, 2022, 3:35pm UTC](https://discuss.elastic.co/t/logstash-log4j-update/307604/3 "2022-06-20T15:35:59Z")
> [@warkolm](#):
>
> Vulnerable for what exactly?
2.17.1 [fixed](https://logging.apache.org/log4j/2.x/security.html) CVE-2021-44832: Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 18, 2022, 3:36pm UTC](https://discuss.elastic.co/t/logstash-log4j-update/307604/4 "2022-07-18T15:36:18Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.