td-agent v4.3.2

[ashie]

Release v4.3.2 - 2022/06/28

News

This release is mainly for supporting new distributions released in 2022Q2.
We choose Ruby 3.1 to bundle for such new distributions to adopt to recent
environment such as OpenSSL 3.0. For other distributions, we still use
Ruby 2.7. We'll migrate to Ruby 3 completely after Ruby 3.2 is released.

• Support new distributions
  • Red Hat Enterprise Linux 9
  • Ubuntu 22.04 LTS (Jammy Jellyfish)
• Remove nokogiri from Linux and macOS packages
  • It's not used in actual by default on such environments.
  • Fix CVE-2022-29181 - only fixed in Windows (td-agent 4.3.1.1) but not for Linux td-agent release #400
• Update yajl-ruby to v1.4.3 to address vulnerability
  • Fix Dependency [email protected] is vulnerable to GHSA-jj47-x69x-mxrm and CVE-2022-24795 #397
• Update OpenSSL to 1.1.1p (for macOS and Windows)

[drbugfinder-work]

Is nokogiri really removed from Linux and macOS packages? I cannot find a change regarding nokogiri in your commit. I still can see nokogiri as a dependency.

[ashie]

Is nokogiri really removed from Linux and macOS packages? I cannot find a change regarding nokogiri in your commit. I still can see nokogiri as a dependency.

It was a separated pull request and already merged into master branch: #389
Please note that we'll check really built package from now.

[ashie]

I confirmed that nokogiri is no longer included in built Linux packages.