Outdated libraries used for cloudwatch and kinesis plugins

[csatl]

Describe the question/issue

These two plugins use two separate libraries. The actual version is updated in the main branch in the corresponding repo however since there has been no release for those this image is still being built with the outdated libraries. Both of these libraries have a CVE against them however it doesn't seem to be exploitable in this case.

• /fluent-bit/cloudwatch.so github.com/sirupsen/logrus v1.9.0
• /fluent-bit/kinesis.so google.golang.org/protobuf v1.30.0

Configuration

N/A

Fluent Bit Log Output

❯ docker create amazon/aws-for-fluent-bit:2.34.3.20260407                                                             
24b5c9bb212490c504d8a4395403f4fc29cf504213b75e4fc64cd3e9af014aa3
❯ docker cp 24b5c9bb212490c504d8a4395403f4fc29cf504213b75e4fc64cd3e9af014aa3:/fluent-bit/cloudwatch.so - | tar xvf -
x cloudwatch.so
❯ go version -m cloudwatch.so | grep logrus 
	dep	github.com/sirupsen/logrus	v1.9.0	h1:trlNQbNUG3OdDrDil03MCb1H2o9nJ1x4/5LYw7byDE0=

Fluent Bit Version Info

Using either the latest image 2.34.3.20260407 or the stable image.

Cluster Details

Not relevant

Application Details

Not relevant

Steps to reproduce issue

❯ docker create amazon/aws-for-fluent-bit:2.34.3.20260407                                                             
24b5c9bb212490c504d8a4395403f4fc29cf504213b75e4fc64cd3e9af014aa3
❯ docker cp 24b5c9bb212490c504d8a4395403f4fc29cf504213b75e4fc64cd3e9af014aa3:/fluent-bit/cloudwatch.so - | tar xvf -
x cloudwatch.so
❯ go version -m cloudwatch.so | grep logrus 
	dep	github.com/sirupsen/logrus	v1.9.0	h1:trlNQbNUG3OdDrDil03MCb1H2o9nJ1x4/5LYw7byDE0=

Related Issues

aws/amazon-kinesis-streams-for-fluent-bit#335