Zero-day-exploit in log4j2 which is part of elasticsearch

Any update on this?