v3.7.2 Bug Fixes and Security Updates
This release addresses multiple security vulnerabilities including CVE fixes and dependency updates, resolves a ruler panic related to validation scheme issues, and improves object storage compatibility with Object Lock buckets by attaching SHA-256 checksums on PutObject operations.
3.7.2 (2026-05-13)
Bug Fixes
- CVEs in release 3.7.x (#21771) (bb4c5d8)
- deps: update module github.com/aws/aws-sdk-go-v2/service/s3 to v1.97.3 [security] (release-3.7.x) (#21457) (7bc9450)
- Fix ruler panic related to unset validation scheme (backport release-3.7.x) (#21401) (cf65729)
- storage: attach SHA-256 checksum on PutObject for Object Lock buckets (#21849) (7df13d9)
Source: original entry ↗
More from Grafana Loki
Follow Grafana Loki to get its new changes in your feed and email digest.
operator: v0.12.0
Grafana Loki Operator v0.12.0 includes breaking changes requiring the schemas field in storage spec, new features for TLS compliance, telemetry recording, and schema expiration management, plus multiple bug fixes and security updates for critical vulnerabilities in gRPC and other dependencies.
v3.7.8
Security and dependency updates addressing multiple vulnerabilities in gRPC, containerd, and crypto libraries. Updates include grpc to v1.83.2, containerd/v2 to v2.2.8, and several golang.org/x packages.
v3.6.17 Security Updates
Security patch release addressing multiple high and medium severity vulnerabilities in dependencies including gRPC, containerd, and Go cryptographic libraries.