# Aptible: Additional CVE-2021-44228 (Log4j) Elasticsearch patching

- Impact (vendor’s label): none
- Status: resolved
- Started: 2021-12-16 13:21 UTC · Resolved: 2021-12-16 13:21 UTC · Duration: 0 min
- Updates: 1
- [Vendor status page: https://status.aptible.com/incidents/vd5gv7hv42z8](https://status.aptible.com/incidents/vd5gv7hv42z8)
- [Company: Aptible](https://rewindex.com/company/aptible.md)

## Timeline of updates

- **resolved** 2021-12-16 13:21 UTC: While we don't have any reason to believe we're vulnerable, out of an abundance of caution in response to CVE-2021-45046 \[0\], we're updating all Elasticsearch databases using version 5.6+ to ensure that the affected JndiLookup class is removed. This is in addition to setting "log4j2.formatMsgNoLookups=true", which was complete on December 11. This update will require us to restart the databases, which will result in up to 90 seconds of downtime. For Elasticsearch versions prior to 5.6, this class has already been removed, as this is the only available mitigation option. \[0\] https://nvd.nist.gov/vuln/detail/CVE-2021-45046

_From the vendor’s published history: only the final update text is available for incidents before Rewindex began polling this page._


---
Canonical: https://rewindex.com/company/aptible/incidents/vd5gv7hv42z8 · Markdown: https://rewindex.com/company/aptible/incidents/vd5gv7hv42z8.md · JSON: https://rewindex.com/api/v1/companies/aptible/incidents/vd5gv7hv42z8 · Generated 2026-10-20T00:15:28.691Z