oss-sec mailing list archives

Re: 5 CVE's fixed in Fluent Bit


From: Christian Brabandt <cb () 256bit org>
Date: Mon, 1 Dec 2025 21:15:40 +0100


On Mi, 26 Nov 2025, Alan Coopersmith wrote:

https://fluentbit.io/blog/2025/10/28/security-vulnerabilities-addressed-in-fluent-bit-v4.1-and-backported-to-v4.0/
provides their analysis and information about fixes in versions 4.2, 4.1.1,
and 4.0.14, which are available from https://github.com/fluent/fluent-bit .

That blog post would hugely benefit from the actual CVE numbers and not 
just CWE ids.

For the record, there is a typo in the above blog post. The backported 
fixed version is v4.0.13

Thanks,
Christian
-- 
Das wird sicher ein Spaß
                -- Star Treck, Der erste Kontakt,


Current thread: