Fluentd v1.19.4

{
  "id": "244cb28ed0574ec63c26d4a180c2c744be0d26d5349940132735b04510c8f3cb",
  "url": "https://github.com/fluent/fluentd/releases/tag/v1.19.4",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "Fluentd v1.19.4",
    "summary": "Fluentd v1.19.4 fixes incomplete path traversal checking in placeholder extraction and enforces a decompression size limit on the chunk I/O path.",
    "evidence": "Fluentd v1.19.4\n\nBug Fix #5504 buffer: enforce decompression_size_limit on the chunk IO path #5488 buffer: clamp exported buffer size metrics to non-negative values #5487 buffer: fix spurious BufferOverflowError caused by queue_size leaking when a chunk purge fails #5456 buffer: fix stage_byte_size leak on staged to unstaged chunk demotion that could eventually raise spurious BufferOverflowError in plugins implementing #format #5502 in_syslog: enforce message_length_limit on TCP/TLS transport The default value of message_length_limit is changed from 2048 to 8192 to match rsyslog's default MaxMessageSize. #5501 output: fix incomplete path traversal check in extract_placeholders",
    "products": [
      {
        "name": {
          "value": "Fluentd",
          "evidence": "Fluentd v1.19.4"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "v1.19.4",
            "evidence": "Fluentd v1.19.4"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "github-fluent-fluentd",
  "document_id": 21154,
  "published_at": "2026-09-28T05:54:15+00:00"
}