[SECURITY] Upgrade Fluent Bit to address critical vulnerability

sassoftware · Jun 12, 2024 · dad24d6 · dad24d6
1 parent 0ce2002
commit dad24d6
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,9 @@
 # SAS Viya Monitoring for Kubernetes
 
+## Unreleased
+* **Logging**
+  * [SECURITY] Upgraded to Fluent Bit 3.0.6 to address critical security vulnerability [(CVE-2024-4323)](https://fluentbit.io/blog/2024/05/21/statement-on-cve-2024-4323-and-its-fix/)
+
 ## Version 1.2.25 (14MAY2024)
 * **Metrics**
   * [CHANGE] New Grafana dashboard Perf/Analysis added

diff --git a/component_versions.env b/component_versions.env
@@ -17,8 +17,8 @@ ES_EXPORTER_FULL_IMAGE="quay.io/prometheuscommunity/elasticsearch-exporter:v1.7.
 #Fluent Bit
 FLUENTBIT_HELM_CHART_REPO=fluent
 FLUENTBIT_HELM_CHART_NAME=fluent-bit
-FLUENTBIT_HELM_CHART_VERSION=0.43.0
-FB_FULL_IMAGE="cr.fluentbit.io/fluent/fluent-bit:2.2.2"
+FLUENTBIT_HELM_CHART_VERSION=0.46.7
+FB_FULL_IMAGE="cr.fluentbit.io/fluent/fluent-bit:3.0.6"
 
 #OpenSearch
 OPENSEARCH_HELM_CHART_REPO=opensearch