Merge pull request #714 from humivo/patch38and37

Update website blog and downloads for v0.38.2 and v0.37.3

Author: humivo

src/content/BlogPosts/blogPosts.yaml

@@ -6,6 +6,14 @@ description:
 path: /blog
 
 blogs:
+  - title: "AWS Distro for OpenTelemetry Collector v0.38.2 and v0.37.3 are now available"
+    author: "Huy Vo"
+    date: "24-April-2024"
+    body:
+      "AWS Distro for OpenTelemetry v0.38.2 and v0.37.3 are now available. You can download the latest AWS Distro for OpenTelemetry Collector images
+        from the Amazon Elastic Container Registry (Amazon ECR) Public Gallery."
+    link: "/docs/ReleaseBlogs/aws-distro-for-opentelemetry-collector-v0.38.2-and-v0.37.3"
+
   - title: "AWS Distro for OpenTelemetry EKS Add-on v0.94.1-eksbuild.1 is now available"
     author: "Bryan Aguilar"
     date: "20-March-2024"

src/content/Blogs/ReleaseBlogs/aws-distro-for-opentelemetry-collector-v0.38.2-and-v0.37.3.mdx

@@ -0,0 +1,63 @@
+---
+title: "AWS Distro for OpenTelemetry Collector v0.38.2 and v0.37.3"
+description: This blog post is the release announcement for ADOT Collector v0.38.2 and v0.37.3
+---
+
+import SectionSeparator from "components/MdxSectionSeparator/sectionSeparator.jsx";
+
+<SectionSeparator />
+
+[AWS Distro for OpenTelemetry (ADOT)](https://aws-otel.github.io/) Collector v0.38.2 and v0.37.3 now available.
+You can download the latest [ADOT Collector image](https://gallery.ecr.aws/aws-observability/aws-otel-collector) from the
+[Amazon Elastic Container Registry (Amazon ECR)](https://aws.amazon.com/ecr/) Public Gallery.
+
+<SectionSeparator />
+
+# Notice
+
+We are aware of a potential issue in the Go standard library prior to version 1.22.2, used by the AWS Distribution for OpenTelemetry (ADOT) Collector up to and including v0.38.1 and also v0.37.2.
+We have prepared two new releases of the ADOT Collector, v0.38.2 and v0.37.3 using Go 1.22.2. There are no functional changes from the previous patch versions. We recommend that customers update their
+ADOT Collector to at least v0.38.2 or v0.37.3 at the earliest opportunity. See https://aws-otel.github.io/docs/getting-started/collector for information on deploying the ADOT Collector.
+
+Reference: https://groups.google.com/g/golang-announce/c/YgW0sx8mN3M
+
+We are aware of a potential issue in the `golang.org/x/net` module prior to version 0.23.0, used by the AWS Distribution for OpenTelemetry (ADOT) Collector up to and including v0.38.1 and also v0.37.2.
+We have prepared two new releases of the ADOT Collector, v0.38.2 and v0.37.3 using `golang.org/x/[email protected]`. There are no functional changes from the previous patch versions. We recommend that customers update their
+ADOT Collector to at least v0.38.2 or v0.37.3 at the earliest opportunity. See https://aws-otel.github.io/docs/getting-started/collector for information on deploying the ADOT Collector.
+
+Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-45288
+
+We are aware of a potential issue in the `docker` module prior to version 25.0.5, used by the AWS Distribution for OpenTelemetry (ADOT) Collector up to and including v0.38.1 and also v0.37.2.
+We have prepared two new releases of the ADOT Collector, v0.38.2 and v0.37.3 using `[email protected]` and `[email protected]`. There are no functional changes from the previous patch versions. We recommend that customers update their
+ADOT Collector to at least v0.38.2 or v0.37.3 at the earliest opportunity. See https://aws-otel.github.io/docs/getting-started/collector for information on deploying the ADOT Collector.
+
+Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-29018
+
+**Release Highlights**
+
+- Recompile with Go 1.22.2 to mitigate CVE-2023-45288
+- Update `golang.org/x/net` to v0.24.0 to mitigate CVE-2023-45288
+- Update `docker` to v25.0.5 or v24.0.9 respectively to mitigate CVE-2024-29018
+
+Detailed release notes are on [GitHub](https://github.com/aws-observability/aws-otel-collector/releases).
+
+**Download**
+
+Detailed technical documentation is available on the [ADOT developer site](https://aws-otel.github.io/),
+and you can [download the distribution](https://aws-otel.github.io/download) from
+[GitHub](https://github.com/aws-observability/aws-otel-collector/releases/tag/v0.38.2).
+You can also download the latest [ADOT Collector image](https://gallery.ecr.aws/aws-observability/aws-otel-collector)
+from the [Amazon Elastic Container Registry (Amazon ECR)](https://aws.amazon.com/ecr/) Public Gallery.
+
+To learn more about how to use AWS Distro for OpenTelemetry (ADOT) to collect data for your observability solution,
+check out the hands-on [AWS Observability workshop](https://observability.workshop.aws/en/adot.html).
+Please file an [issue](https://github.com/aws-observability/aws-otel-community/issues) if you have any
+questions about the distribution, features, or its components.
+
+We also welcome you to participate in the [OpenTelemetry project](https://github.com/open-telemetry).
+The project was [approved for incubation](https://www.cncf.io/blog/2021/08/26/opentelemetry-becomes-a-cncf-incubating-project/) status
+in August 2021 by the Cloud Native Computing Foundation Technical Oversight Committee (CNCF TOC). Learn more about
+[AWS Distro for OpenTelemetry](https://aws.amazon.com/blogs/opensource/category/management-tools/aws-distro-for-opentelemetry/) on the
+[AWS Open Source Blog](https://aws.amazon.com/blogs/opensource/category/management-tools/aws-distro-for-opentelemetry/), where we announced
+the distribution’s [general availability for tracing](https://aws.amazon.com/blogs/opensource/aws-distro-for-opentelemetry-is-now-ga-for-tracing/) in September 2021
+and the distribution's [general availability for metrics](https://aws.amazon.com/blogs/opensource/aws-distro-for-opentelemetry-is-now-generally-available-for-metrics/) in May 2022.

src/content/Downloads/downloads.yaml

@@ -1,3 +1,15 @@
+- version: 'AWS Distro for OpenTelemetry Collector Version 0.38.2'
+  releaseDate: 'April-24-2024'
+  license: 'Apache-2.0'
+  releaseNotesLink: 'https://github.com/aws-observability/aws-otel-collector/releases/tag/v0.38.2'
+  documentationLink: 'https://github.com/aws-observability/aws-otel-collector/blob/v0.38.2/README.md'
+  downloadLink: 'https://gallery.ecr.aws/aws-observability/aws-otel-collector'
+- version: 'AWS Distro for OpenTelemetry Collector Version 0.37.3'
+  releaseDate: 'April-24-2024'
+  license: 'Apache-2.0'
+  releaseNotesLink: 'https://github.com/aws-observability/aws-otel-collector/releases/tag/v0.37.3'
+  documentationLink: 'https://github.com/aws-observability/aws-otel-collector/blob/v0.37.3/README.md'
+  downloadLink: 'https://gallery.ecr.aws/aws-observability/aws-otel-collector'
 - version: 'AWS Distro for OpenTelemetry Collector Version 0.38.1'
   releaseDate: 'March-08-2024'
   license: 'Apache-2.0'