Re: [Buildroot] [PATCH] package/fluent-bit: bump to 4.2.0

[Thomas Petazzoni via buildroot <buildroot@buildroot.org>]

On Sun,  7 Dec 2025 21:17:05 +0100
Thomas Devoogdt <thomas@devoogdt.com> wrote:

> This is a major release that introduces new features,
> including one highlighted in the release notes:
> 
> "The v4.2 release introduces a powerful new Direct Routing
>  capability that allows inputs to specify routes directly to
>  outputs, bypassing the traditional routing mechanism."
> 
> But it also brings some security fixes. Not all of
> them are relevant, but some piece of lecture can be found here [1].
> 
> News:
> - https://fluentbit.io/announcements/v4.1.0/
> - https://fluentbit.io/announcements/v4.1.1/
> - https://fluentbit.io/announcements/v4.2.0/
> 
> The patch 0001-plugins-kafka-fix-cmake-cross-compile-error.patch
> can be dropped as it has been merged upstream [2].
> 
> [1] https://www.theregister.com/2025/11/24/fluent_bit_cves/
> [2] https://github.com/fluent/fluent-bit/pull/9600
> 
> Signed-off-by: Thomas Devoogdt <thomas@devoogdt.com>
> ---
>  ...ibrdkafka-only-require-a-C-compiler.patch} |  2 +-
>  ...-kafka-fix-cmake-cross-compile-error.patch | 47 -------------------
>  package/fluent-bit/fluent-bit.hash            |  2 +-
>  package/fluent-bit/fluent-bit.mk              |  2 +-
>  4 files changed, 3 insertions(+), 50 deletions(-)
>  rename package/fluent-bit/{0002-lib-librdkafka-only-require-a-C-compiler.patch => 0001-lib-librdkafka-only-require-a-C-compiler.patch} (98%)
>  delete mode 100644 package/fluent-bit/0001-plugins-kafka-fix-cmake-cross-compile-error.patch

Applied to master after listing the CVEs fixed, and updating the title
to indicate that this is a security bump.

Thomas
-- 
Thomas Petazzoni, CTO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot