v3.7.8
Security and dependency updates addressing multiple vulnerabilities in gRPC, containerd, and crypto libraries. Updates include grpc to v1.83.2, containerd/v2 to v2.2.8, and several golang.org/x packages.
3.7.8 (2026-09-17)
Bug Fixes
- security/HIGH/pkg/push: Update module google.golang.org/grpc to v1.83.2 [SECURITY] (release-3.7.x) (#24433) (4d5dc2b)
- security/HIGH/: Update module google.golang.org/grpc to v1.83.1 [SECURITY] (release-3.7.x) (#24328) (0a01797)
- security/HIGH/: Update module google.golang.org/grpc to v1.83.2 [SECURITY] (release-3.7.x) (#24429) (14b5da8)
- security/MEDIUM/: Update module github.com/containerd/containerd/v2 to v2.2.8 [SECURITY] (release-3.7.x) (#24460) (3e917f2)
- security/UNKNOWN/pkg/push: Update module golang.org/x/net to v0.56.0 [SECURITY] (release-3.7.x) (#23422) (41064da)
- security/UNKNOWN/pkg/push: Update module google.golang.org/grpc to v1.83.1 [SECURITY] (release-3.7.x) (#23416) (cd8e76d)
- security/UNKNOWN/: Update module golang.org/x/crypto to v0.56.0 [SECURITY] (release-3.7.x) (#24335) (47149cb)
Source: original entry ↗
More from Grafana Loki
Follow Grafana Loki to get its new changes in your feed and email digest.
operator: v0.12.0
Grafana Loki Operator v0.12.0 includes breaking changes requiring the schemas field in storage spec, new features for TLS compliance, telemetry recording, and schema expiration management, plus multiple bug fixes and security updates for critical vulnerabilities in gRPC and other dependencies.
v3.6.17 Security Updates
Security patch release addressing multiple high and medium severity vulnerabilities in dependencies including gRPC, containerd, and Go cryptographic libraries.
v3.6.16
Grafana Loki 3.6.16 includes a new flag to ignore missing chunks during log deletion with line filters, a security update to etcd client, and a storage optimization to pre-compute SHA-256 for AWS PutObject operations.