Please read this before reporting a bug:
http://wiki.archlinux.org/index.php/Reporting_Bug_Guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!

Tasklist

Task Type Bug Report Category Security Status Assigned Assigned To Levente Polyak (anthraxx) Architecture All Severity High Priority Normal Reported Version Due in Version Undecided Due Date Undecided Percent Complete Votes 0 Private No

Details Summary ======= The package elasticsearch is vulnerable to information disclosure via CVE-2021-22132. Guidance ======== Upgrading elasticsearch to version 7.10.2 fixes the issue. References ========== https://security.archlinux.org/AVG-1455 https://discuss.elastic.co/t/elasticsearch-7-10-2-security-update/261164 https://github.com/elastic/elasticsearch/pull/66365 https://github.com/elastic/elasticsearch/commit/480561dbc3fd8c2c020f9d3d3887ae6e395313e0

Comment by David Ryskalczyk (david_rysk) - Friday, 09 April 2021, 20:44 GMT