diff --git a/CHANGELOG.md b/CHANGELOG.md index aaf6d4b..5f88b8d 100755 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,11 @@ All changes to the log analytics integration will be documented in this file. +## [1.0.17] - June 2026 + +* Fluentd sidecar image bumped to 4.22: now consumes the released image `releases-docker.jfrog.io/fluentd:4.22` directly (fluentd 1.19.3 on the refreshed hardened Echo base), remediating the critical OS-package vulnerability CVE-2026-55200 in libssh2 (1.11.1-1+e1 -> 1.11.1-1+e2) carried by the 4.21 base image (JOBS-2583) +* `docker-build/Dockerfile` now builds `FROM releases-docker.jfrog.io/fluentd:4.22` + ## [1.0.16] - June 2026 * Fluentd sidecar image bumped to 4.21: now consumes the released image `releases-docker.jfrog.io/fluentd:4.21` directly (fluentd 1.19.2 on a hardened, CVE-refreshed base), remediating Critical/High CVEs in 4.19 (JOBS-2475) diff --git a/docker-build/Dockerfile b/docker-build/Dockerfile index b7299b0..bfda8e8 100644 --- a/docker-build/Dockerfile +++ b/docker-build/Dockerfile @@ -1,5 +1,5 @@ # Dockerfile for fluentd sidecar image with all the necessary plugins for our log analytic providers -FROM releases-docker.jfrog.io/fluentd:4.21 +FROM releases-docker.jfrog.io/fluentd:4.22 LABEL maintainer="Partner Engineering " ## Build time Arguments, short circuit them to ENV Variables so they are available at run time also @@ -14,7 +14,7 @@ ENV TGT_PLATFORM=$TARGET USER root ## Download Config Files -## The released image releases-docker.jfrog.io/fluentd:4.21 already ships fluentd 1.19.2, curl, and every +## The released image releases-docker.jfrog.io/fluentd:4.22 already ships fluentd 1.19.3, curl, and every ## plugin this integration needs (fluent-plugin-splunk-hec, -jfrog-siem, -jfrog-metrics, -jfrog-send-metrics, ## -concat, ...), so no fluent-gem install or apt-get step is required here. RUN if [ "$SRC_PLATFORM" = "JFRT" ] ; then curl -fsSL https://raw.githubusercontent.com/jfrog/log-analytics-splunk/master/fluent.conf.rt -o /fluentd/etc/fluent.conf; fi diff --git a/helm/artifactory-ha-values.yaml b/helm/artifactory-ha-values.yaml index 3ef09e9..c0813cc 100644 --- a/helm/artifactory-ha-values.yaml +++ b/helm/artifactory-ha-values.yaml @@ -18,7 +18,7 @@ artifactory: name: volume customSidecarContainers: | - name: "artifactory-fluentd-sidecar" - image: "releases-docker.jfrog.io/fluentd:4.21" + image: "releases-docker.jfrog.io/fluentd:4.22" imagePullPolicy: "IfNotPresent" volumeMounts: - mountPath: "{{ .Values.artifactory.persistence.mountPath }}" diff --git a/helm/artifactory-values.yaml b/helm/artifactory-values.yaml index 64c6253..5968e92 100644 --- a/helm/artifactory-values.yaml +++ b/helm/artifactory-values.yaml @@ -18,7 +18,7 @@ artifactory: name: artifactory-volume customSidecarContainers: | - name: "artifactory-fluentd-sidecar" - image: "releases-docker.jfrog.io/fluentd:4.21" + image: "releases-docker.jfrog.io/fluentd:4.22" imagePullPolicy: "IfNotPresent" volumeMounts: - mountPath: "{{ .Values.artifactory.persistence.mountPath }}" diff --git a/helm/xray-values.yaml b/helm/xray-values.yaml index ac1d0e0..f87e2df 100644 --- a/helm/xray-values.yaml +++ b/helm/xray-values.yaml @@ -19,7 +19,7 @@ common: name: data-volume customSidecarContainers: | - name: "xray-platform-fluentd-sidecar" - image: "releases-docker.jfrog.io/fluentd:4.21" + image: "releases-docker.jfrog.io/fluentd:4.22" imagePullPolicy: "IfNotPresent" volumeMounts: - mountPath: "{{ .Values.xray.persistence.mountPath }}"