From d8e74bd2790fb785cf4211b1105fda70c2550261 Mon Sep 17 00:00:00 2001 From: ramisettyhp Date: Tue, 30 Jun 2026 15:57:21 +0530 Subject: [PATCH] JOBS-2583 - Bump fluentd sidecar image to 4.22 (Echo 1.19.3, CVE-2026-55200) --- CHANGELOG.md | 4 ++++ helm/artifactory-values.yaml | 2 +- helm/jfrog-platform-values.yaml | 4 ++-- helm/xray-values.yaml | 2 +- 4 files changed, 8 insertions(+), 4 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 5889905..e9d4828 100755 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,10 @@ All changes to the log analytics integration will be documented in this file. +## [1.2.3] - June 2026 + +* Fluentd sidecar image bumped to 4.22 in the Helm values: now pulls the released image `releases-docker.jfrog.io/fluentd:4.22` directly (fluentd 1.19.3 on the refreshed hardened Echo base), remediating the critical OS-package vulnerability CVE-2026-55200 in libssh2 (1.11.1-1+e1 -> 1.11.1-1+e2) carried by the 4.21 base image (JOBS-2583) + ## [1.2.2] - June 2026 * Fluentd sidecar image bumped to 4.21 in the Helm values: now pulls the released image `releases-docker.jfrog.io/fluentd:4.21` directly (fluentd 1.19.2 on a hardened, CVE-refreshed base), remediating Critical/High CVEs in 4.19 (JOBS-2475) diff --git a/helm/artifactory-values.yaml b/helm/artifactory-values.yaml index cc7c854..3e9efa5 100644 --- a/helm/artifactory-values.yaml +++ b/helm/artifactory-values.yaml @@ -24,7 +24,7 @@ artifactory: name: artifactory-volume customSidecarContainers: | - name: "artifactory-fluentd-sidecar" - image: "releases-docker.jfrog.io/fluentd:4.21" + image: "releases-docker.jfrog.io/fluentd:4.22" imagePullPolicy: "IfNotPresent" volumeMounts: - mountPath: "{{ .Values.artifactory.persistence.mountPath }}" diff --git a/helm/jfrog-platform-values.yaml b/helm/jfrog-platform-values.yaml index 225594b..1bec698 100644 --- a/helm/jfrog-platform-values.yaml +++ b/helm/jfrog-platform-values.yaml @@ -25,7 +25,7 @@ artifactory: name: artifactory-volume customSidecarContainers: | - name: "artifactory-fluentd-sidecar" - image: "releases-docker.jfrog.io/fluentd:4.21" + image: "releases-docker.jfrog.io/fluentd:4.22" imagePullPolicy: "IfNotPresent" volumeMounts: - mountPath: "{{ .Values.artifactory.persistence.mountPath }}" @@ -162,7 +162,7 @@ xray: name: data-volume customSidecarContainers: | - name: "xray-platform-fluentd-sidecar" - image: "releases-docker.jfrog.io/fluentd:4.21" + image: "releases-docker.jfrog.io/fluentd:4.22" imagePullPolicy: "IfNotPresent" volumeMounts: - mountPath: "{{ .Values.xray.persistence.mountPath }}" diff --git a/helm/xray-values.yaml b/helm/xray-values.yaml index cf4a83c..26ee1c6 100644 --- a/helm/xray-values.yaml +++ b/helm/xray-values.yaml @@ -53,7 +53,7 @@ common: name: data-volume customSidecarContainers: | - name: "xray-platform-fluentd-sidecar" - image: "releases-docker.jfrog.io/fluentd:4.21" + image: "releases-docker.jfrog.io/fluentd:4.22" imagePullPolicy: "IfNotPresent" volumeMounts: - mountPath: "{{ .Values.xray.persistence.mountPath }}"