v3.2.7

KNOWLEDGE BASE

Release Notes v3.2.7

Fluent Bit is a Fast and Lightweight Data Processor and Forwarder for Linux, BSD, Windows and macOS. We are proud to announce the availability of Fluent Bit v3.2.7.

What’s new ?

Security Updates

Previous versions of Fluent Bit in the 3.1 and 3.2 series are affected by two security vulnerabilities if you use the OpenTelemetry or Prometheus Remote Write input plugins. The identified vulnerabilities are:

• OpenTelemetry input: CVE-2024-50609
• Prometheus Remote Write input: CVE-2024-50608

We strongly advise our users to upgrade to Fluent Bit v3.2.7. If you are unable to upgrade, we recommend disabling the affected plugins.

Core

• log: added a new management signal to overcome a deadlock (PR #9986)
• zstd: add new compress/uncompressed zstd interface (PR #9986)
• http_common
  • implement zstd wrapers (PR #9986) pull/9986))
  • fix deflate string length (PR #9986)
• input_chunk: log plugin alias instead of plugin name if exists. (PR #9986)

Libraries

• ctraces: upgrade to v0.6.0 (PR #9986)
• zstd: add v1.5.6 (PR #9986)

Plugins

• Kubernetes events (Input)
  • Fix SQLite database cleanup (PR #9986)
• Splunk (Input)
  • Fix memory corruption by resetting parser after reallocation (PR #9986)
  • delete connection if memory re-allocation fails (PR #9986)
• Elasticsearch (Input)
  • Fix parser state after memory re-allocation (PR #9986)
• HTTP (Input)
  • Fix parser state after memory re-allocation (PR #9986)
  • add compression handling support for gzip and zstd (PR #9986)
• OpenTelemetry (Input)
  • Add support for OpenTelemetry JSON Traces (PR #9986)
  • Add support to handle gRPC compressed messages (PR #9986)
  • Fix parser state after memory re-allocation (PR #9986)
  • Restrict gRPC messages to 16MB max (PR #9986)
  • Security fix to handle content-length properly (CVE-2024-50609) (PR #9994)
• Prometheus remote write (Input)
  • Fix parser state after memory re-allocation (PR #9986)
  • Handle error status code when decoding metrics (PR #9986)
  • • Security fix to handle content-length properly (CVE-2024-50608) (PR #9994)
• Stackdriver (Output)
  • Add cloud_logging_base_url (#9779) (#9955) (PR #9986)
• OpenTelemetry (Output)
  • Add support for zstd compression (PR #9986)
  • Set proper content encoding for HTTP/1.x (PR #9986)
  • Autoconfigure HTTP/2 protocol when gRPC is enabled. (PR #9986)
• HTTP (Output)
  • Add support for zstd and snappy compression (PR #9984)

Join us

We want to hear about you, our community is growing, and you can be part of it!, you can contact us at:

• Github: http://github.com/fluent/fluent-bit
• Slack: http://slack.fluentd.org
• Twitter: @fluentbit