Support for Fluent Bit 3.2.7
Users will now receive Fluent Bit version 3.2.7, which includes fixes for known vulnerabilities. For more details, refer https://fluentbit.io/announcements/.
Security
Previous versions of Fluent Bit in the 3.1 and 3.2 series are affected by two security vulnerabilities if customers use the OpenTelemetry input plugin or Prometheus Remote Write input. The identified vulnerabilities are: CVE-2024-50608, CVE-2024-50609.
By default, New Relic does not include these plugins in our distribution of the Fluent Bit packages in any of the instrumentation packages we provide. However, in order to support customers using these plugins and mitigate any potential impact, we recommend customers to upgrade to the latest available versions of these packages:
Hosts:
- Windows: Infrastructure Agent upgraded to v1.62.0 or later
- Linux: Infrastructure Agent upgraded to v1.62.0 or later
Kubernetes:
- newrelic-logging upgraded to v1.26.1
- nri-bundle upgraded to v5.0.115
Fluent Bit:
- New Relic Fluent Bit Output Docker Image upgraded to v2.3.0
Notes
To stay up to date with the most recent fixes and enhancements, subscribe to our Logs RSS feed.
Fluent Bit 3.2.7 のサポート
ユーザーはFluent Bitバージョン3.2.7を受け取ることになります。既知の脆弱性の修正が含まれます。詳細については、 https://fluentbit.io/announcements/を参照してください。
セキュリティ
Fluent Bit の以前のバージョン3.1 および 3.2シリーズでは、顧客がOpenTelemetry 入力プラグインまたはPrometheus リモート書き込み入力を使用する場合、2 つのセキュリティ脆弱性の影響を受けます。特定された脆弱性は、 CVE-2024-50608 、 CVE-2024-50609です。
デフォルトでは、 New Relicが提供するいずれのパッケージでも、 Fluent Bitパッケージの配布にこれらのプラグインは含まれません。 ただし、これらのプラグインを使用するお客様をサポートし、潜在的な影響を軽減するために、お客様にはこれらのパッケージの最新バージョンにアップグレードすることをお勧めします。
ホスト:
- Windows : インフラストラクチャエージェントが v1.62.0 以降にアップグレードされました
- Linux: インフラストラクチャエージェントが v1.62.0 以降にアップグレードされました
Kubernetes:
- newrelic-logging が v1.26.1 にアップグレードされました
- nri-bundle が v5.0.115 にアップグレードされました
Fluent Bit:
- New Relic Fluent Bit Output Docker イメージが v2.3.0 にアップグレードされました
メモ
最新の修正と機能強化の情報を常に把握するには、ログ RSS フィードを購読してください。
Support for Fluent Bit 3.2.2
Users will now receive Fluent Bit version 3.2.2, which includes fixes for known vulnerabilities. For more details, refer https://fluentbit.io/announcements/.
Changed
- Infrastructure agent recommends Fluent Bit 3.2.2 packages.
- Fluent Bit Output Plugin Docker image uses Fluent Bit 3.2.2.
- New Relic Logging Helm chart installs the new plugin image (newrelic-logging chart version 1.25.1)
Notes
To stay up to date with the most recent fixes and enhancements, subscribe to our Logs RSS feed.
Support for Fluent Bit 3.1.9
Users will now receive Fluent Bit version 3.1.9, which includes fixes for known vulnerabilities. For more details, refer https://fluentbit.io/announcements/.
Changed
- Infrastructure agent recommends Fluent Bit 3.1.9 packages.
- Fluent Bit Output Plugin Docker image uses Fluent Bit 3.1.9.
- New Relic Logging Helm chart installs the new plugin image (newrelic-logging chart version 1.24.0).
Notes
To stay up to date with the most recent fixes and enhancements, subscribe to our Logs RSS feed.
Support for Fluent Bit 3.1.2
Users will now receive Fluent Bit version 3.1.2, which includes fixes for known vulnerabilities. For more details, refer https://fluentbit.io/announcements/.
Changed
- Infrastructure agent recommends Fluent Bit 3.1.2 packages.
- Fluent Bit Output Plugin Docker image uses Fluent Bit 3.1.2.
- New Relic Logging Helm chart installs the new plugin image.
Notes
To stay up to date with the most recent fixes and enhancements, subscribe to our Logs RSS feed.