InfluxData releases Telegraf 1.21.4 to address security vulnerabilities and update plugins

By Samantha Wang / Product
Feb 16, 2022

Telegraf 1.21.4 includes updates to the Docker Input Plugin, JSON v2 Parser, and the Go library to address security vulnerabilities. This new maintenance release for Telegraf is available now.

• Telegraf 1.21.4 – Release Notes

Build

• Updated to Go 1.17.7 to address three security issues in the library

Input plugin updates

• Docker Input
  • We updated the docker memory usage calculation to match the value given by the latest Docker CLI.
• ECS Input
  • The ECS Plugin now uses the current time as timestamp.
• SNMP Input
  • The plugin now ensures folders do not get loaded more than once.
• Windows Performance Counters Input
  • We added a deprecated warning and version to the plugin for PreVista support.

Output plugin updates

• AMQP Output
  • Plugin now checks for nil clients before closing.
• Azure Data Explorer Output
  • We added azureBlob controls to lower RAM usage.
• Elasticsearch Output
  • We added a scheme to the plugin to fix an error in the sniffing option.

Parser plugin updates

• JSON v2 Parser
  • We fixed the timestamp change during execution of json_v2 parser.
  • We fixed the incorrect handling of timestamp_path.
  • Plugin now allows for optional paths and handles wrong paths correctly.

Serializer plugin updates

• Prometheus Remote Write Serializer
  • We fixed an issue where the serializer was using the wrong timestamp unit.

New external plugins

• apt
  • Plugin that checks for Debian package updates. Contributed by @x70b1.
• knot
  • Plugin that collects stats from Knot DNS. Contributed by @x70b1.

Dependencies

• Updated to Go 1.17.7 to addressed three security issues in the library
• Updated all go.opentelemetry.io from 0.24.0 to 0.27.0.
• Updated github.com/signalfx/golib/v3 from 3.3.38 to 3.3.43.
• Updated github.com/aliyun/alibaba-cloud-sdk-go from 1.61.1004 to 1.61.1483.
• Updated github.com/denisenkom/go-mssqldb from 0.10.0 to 0.12.0.
• Updated github.com/gopcua/opcua from 0.2.3 to 0.3.1.
• Updated github.com/nats-io/nats-server/v2 from 2.6.5 to 2.7.2.
• Updated k8s.io/client-go from 0.22.2 to 0.23.3.
• Updated github.com/aws/aws-sdk-go-v2/service/kinesis from 1.6.0 to 1.13.0.
• Updated github.com/benbjohnson/clock from 1.1.0 to 1.3.0.
• Updated github.com/Azure/azure-kusto-go from 0.5.0 to 0.5.2.
• Updated github.com/vmware/govmomi from 0.27.2 to 0.27.3.
• Updated github.com/prometheus/client_golang from 1.11.0 to 1.12.1.
• Updated go.mongodb.org/mongo-driver from 1.7.3 to 1.8.3.
• Updated github.com/google/go-cmp from 0.5.6 to 0.5.7.
• Updated go.opentelemetry.io/collector/model from 0.39.0 to 0.43.2.
• Updated github.com/multiplay/go-ts3 from 1.0.0 to 1.0.1.
• Updated cloud.google.com/go/monitoring from 0.2.0 to 1.2.0.
• Updated github.com/vmware/govmomi from 0.26.0 to 0.27.2.

Head to our Downloads page to get the latest Telegraf release. If you find issues or have questions, please join our InfluxDB Community Slack, post them in our InfluxDB GitHub Repo or our Community site, and we will take a look.

Please fill out this form if you are interested in being included in testing bug fixes and features for plugins and systems you are using. Telegraf maintainers will tag you on pull requests to test artifacts. This will help us better address bugs that may arise after a release.