diff --git a/src/content/docs/release-notes/fluentbit-release-notes/fluentbit-27-02-20.mdx b/src/content/docs/release-notes/fluentbit-release-notes/fluentbit-27-02-20.mdx index 93f6ca9025b..94b87504c0d 100644 --- a/src/content/docs/release-notes/fluentbit-release-notes/fluentbit-27-02-20.mdx +++ b/src/content/docs/release-notes/fluentbit-release-notes/fluentbit-27-02-20.mdx @@ -12,11 +12,23 @@ bugs: ["new management signal to overcome a deadlock", "input_chunk: log plugin Users will now receive Fluent Bit version 3.2.7, which includes fixes for known vulnerabilities. For more details, refer https://fluentbit.io/announcements/. -### Changed +### Security + +Previous versions of Fluent Bit in the [3.1 and 3.2](https://fluentbit.io/announcements/) series are affected by two security vulnerabilities if customers use the [OpenTelemetry input plugin](https://docs.fluentbit.io/manual/pipeline/inputs/opentelemetry) or [Prometheus Remote Write input](https://docs.fluentbit.io/manual/pipeline/inputs/prometheus-remote-write). The identified vulnerabilities are: [CVE-2024-50608](https://nvd.nist.gov/vuln/detail/CVE-2024-50608), [CVE-2024-50609](https://nvd.nist.gov/vuln/detail/CVE-2024-50609). + +By default, New Relic does not include these plugins in our distribution of the Fluent Bit packages in any of the instrumentation packages we provide. However, in order to support customers using these plugins and mitigate any potential impact, we recommend customers to upgrade to the latest available versions of these packages: + +### Hosts: +* Windows: Infrastructure Agent upgraded to v1.62.0 or later +* Linux: Infrastructure Agent upgraded to v1.62.0 or later + +### Kubernetes: +* newrelic-logging upgraded to v1.26.1 +* nri-bundle upgraded to v5.0.115 + +### Fluent Bit: +* New Relic Fluent Bit Output Docker Image upgraded to v2.3.0 -* Infrastructure agent recommends Fluent Bit 3.2.7 packages. -* [Fluent Bit Output Plugin Docker image](https://hub.docker.com/r/newrelic/newrelic-fluentbit-output) uses Fluent Bit 3.2.7. -* [New Relic Logging Helm chart](https://github.com/newrelic/helm-charts/tree/master/charts/newrelic-logging) installs the new plugin image (newrelic-logging chart version 1.26.0) ### Notes