AWS Distro for OpenTelemetry Collector v0.38.1 and v0.37.2

AWS Distro for OpenTelemetry (ADOT) Collector v0.38.1 and v0.37.2 now available. You can download the latest ADOT Collector image from the Amazon Elastic Container Registry (Amazon ECR) Public Gallery.

Notice

We are aware of a potential issue in the Go standard library prior to version 1.22.1, used by the AWS Distribution for OpenTelemetry (ADOT) Collector up to and including v0.38.0 and also v0.37.1. We have prepared two new releases of the ADOT Collector, v0.38.1 and v0.37.2 using Go 1.22.1. There are no functional changes from the previous patch versions. We recommend that customers update their ADOT Collector to at least v0.38.1 or v0.37.2 at the earliest opportunity. See https://aws-otel.github.io/docs/getting-started/collector for information on deploying the ADOT Collector.

Reference: https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg

We are aware of a potential issue in the google.golang.org/protobuf module prior to version 1.33.0, used by the AWS Distribution for OpenTelemetry (ADOT) Collector up to and including v0.38.0 and also v0.37.1. We have prepared two new releases of the ADOT Collector, v0.38.1 and v0.37.2 using google.golang.org/protobuf@v1.33.0. There are no functional changes from the previous patch versions. We recommend that customers update their ADOT Collector to at least v0.38.1 or v0.37.2 at the earliest opportunity. See https://aws-otel.github.io/docs/getting-started/collector for information on deploying the ADOT Collector.

Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-24786

Release Highlights

• Recompile with Go 1.22.1 to mitigate CVE-2024-24783, CVE-2023-45290, CVE-2023-45289, and CVE-2024-24785
• Update google.golang.org/protobuf to v1.33.0 to mitigate CVE-2024-24786

Detailed release notes are on GitHub.

Download

Detailed technical documentation is available on the ADOT developer site, and you can download the distribution from GitHub. You can also download the latest ADOT Collector image from the Amazon Elastic Container Registry (Amazon ECR) Public Gallery.

To learn more about how to use AWS Distro for OpenTelemetry (ADOT) to collect data for your observability solution, check out the hands-on AWS Observability workshop. Please file an issue if you have any questions about the distribution, features, or its components.

We also welcome you to participate in the OpenTelemetry project. The project was approved for incubation status in August 2021 by the Cloud Native Computing Foundation Technical Oversight Committee (CNCF TOC). Learn more about AWS Distro for OpenTelemetry on the AWS Open Source Blog, where we announced the distribution’s general availability for tracing in September 2021 and the distribution's general availability for metrics in May 2022.