Download Latest Version 6.7.0 source code.zip (1.8 MB)
Email in envelope

Get an email when there's a new version of Logging operator

Home / 6.7.0
Name Modified Size InfoDownloads / Week
Parent folder
6.7.0 source code.tar.gz 2026-06-16 1.2 MB
0
6.7.0 source code.zip 2026-06-16 1.8 MB
0
README.md 2026-06-16 2.2 kB
0
Totals: 3 Items   3.0 MB 0

What's Changed

New or updated images

component image
operator ghcr.io/kube-logging/logging-operator:6.7.0
fluentd ghcr.io/kube-logging/logging-operator/fluentd:6.7.0-full
syslog-ng-reloader ghcr.io/kube-logging/logging-operator/syslog-ng-reloader:6.7.0
config-reloader ghcr.io/kube-logging/logging-operator/config-reloader:6.7.0
fluentd-drain-watch ghcr.io/kube-logging/logging-operator/fluentd-drain-watch:6.7.0
buffer-volume-metrics ghcr.io/kube-logging/logging-operator/node-exporter:6.7.0
eventrouter ghcr.io/kube-logging/eventrouter:1.0.0

Install with helm

:::bash
helm install logging-operator oci://ghcr.io/kube-logging/helm-charts/logging-operator --version=6.7.0

Security

CVE-2026-54680 — Fluentd configuration injection via unescaped CRD/secret values

CRD and secret-provided string values were written into the generated fluent.conf without escaping. A value containing a newline could terminate its directive and inject arbitrary Fluentd configuration (for example a <match> block with @type exec), enabling remote code execution in the aggregator. Parameter values containing newlines are now quoted and escaped, and newlines in structural fields (@type, @id, @label, @log_level, tag, directive and parameter names) are rejected at config-render time.

  • Affected: ≤ 6.5.2
  • Hardening shipped in: 6.6.0

Enhancements

Dependency and image updates

Bug fixes

Full Changelog: https://github.com/kube-logging/logging-operator/compare/6.6.0...6.7.0

Source: README.md, updated 2026-06-16