[UPDATE] Update Fluentbit for CVE-2024-4323 (#410)

coralogix · May 21, 2024 · 4bad5c8 · 4bad5c8
1 parent 5ea1018
commit 4bad5c8
Showing 6 changed files with 13 additions and 8 deletions.
diff --git a/logs/CHANGELOG.md b/logs/CHANGELOG.md
@@ -47,6 +47,11 @@
 
 ## Fluent-Bit
 
+## v3.0.4 / 2024-05-21
+
+* [UPGRADE] Upgrade Fluentbit version to v3.0.4 for CVE-2024-4323
+* [UPGRADE] Upgrade Fluentbit Helm chart dependency to 0.46.7 for CVE-2024-4323
+
 ### v3.0.2 / 2024-04-24
 
 * [UPGRADE] Upgrade Fluentbit version to v3.0.2

diff --git a/logs/fluent-bit/image/Dockerfile b/logs/fluent-bit/image/Dockerfile
@@ -8,10 +8,10 @@ COPY ./out_coralogix.go ./go.mod ./go.sum ./
 RUN go mod vendor && \
     go build -buildmode=c-shared -ldflags "-s -w" -mod=vendor -o out_coralogix.$TARGETARCH.so .
 
-FROM fluent/fluent-bit:3.0.2
+FROM fluent/fluent-bit:3.0.4
 ARG TARGETARCH
 MAINTAINER Coralogix Inc. <[email protected]>
-LABEL Description="Special Fluent-Bit image for Coralogix integration" Vendor="Coralogix Inc." Version="3.0.2"
+LABEL Description="Special Fluent-Bit image for Coralogix integration" Vendor="Coralogix Inc." Version="3.0.4"
 COPY --from=builder /go/src/app/plugins.conf /fluent-bit/etc/
 COPY --from=builder /go/src/app/out_coralogix.$TARGETARCH.so /fluent-bit/plugins/out_coralogix.so
 COPY ./functions.lua /fluent-bit/etc/
diff --git a/logs/fluent-bit/image/VERSION b/logs/fluent-bit/image/VERSION
@@ -1 +1 @@
-v3.0.2
+v3.0.4
diff --git a/logs/fluent-bit/k8s-helm/http/Chart.yaml b/logs/fluent-bit/k8s-helm/http/Chart.yaml
@@ -1,14 +1,14 @@
 apiVersion: v2
 name: fluent-bit-http
 description: Fluent-Bit Chart with HTTP output plugin
-version: 3.0.2
-appVersion: 3.0.2
+version: 3.0.4
+appVersion: 3.0.4
 keywords:
   - Fluent-Bit
   - HTTP output plugin
 dependencies:
   - name: fluent-bit
-    version: "0.46.2"
+    version: "0.46.7"
     repository: https://fluent.github.io/helm-charts
 sources:
   - https://github.com/fluent/fluent-bit/

diff --git a/logs/fluent-bit/k8s-helm/http/values.yaml b/logs/fluent-bit/k8s-helm/http/values.yaml
@@ -3,7 +3,7 @@ fluent-bit:
 
   image:
     repository: coralogixrepo/coralogix-fluent-bit-multiarch
-    tag: v3.0.2
+    tag: v3.0.4
 
   serviceMonitor:
     enabled: true

diff --git a/logs/fluent-bit/k8s-manifest/fluentbit-ds.yaml b/logs/fluent-bit/k8s-manifest/fluentbit-ds.yaml
@@ -21,7 +21,7 @@ spec:
       dnsPolicy: ClusterFirstWithHostNet
       containers:
         - name: fluent-bit
-          image: "coralogixrepo/coralogix-fluent-bit-multiarch:v3.0.2"
+          image: "coralogixrepo/coralogix-fluent-bit-multiarch:v3.0.4"
           imagePullPolicy: Always
           env:
             - name: HOSTNAME