diff --git a/AWS_FOR_FLUENT_BIT_STABLE_VERSION b/AWS_FOR_FLUENT_BIT_STABLE_VERSION
index 5af31caec..74fcf3cbf 100644
--- a/AWS_FOR_FLUENT_BIT_STABLE_VERSION
+++ b/AWS_FOR_FLUENT_BIT_STABLE_VERSION
@@ -1 +1 @@
-2.21.2
\ No newline at end of file
+2.21.3
\ No newline at end of file
diff --git a/AWS_FOR_FLUENT_BIT_VERSION b/AWS_FOR_FLUENT_BIT_VERSION
index 74fcf3cbf..01c577427 100644
--- a/AWS_FOR_FLUENT_BIT_VERSION
+++ b/AWS_FOR_FLUENT_BIT_VERSION
@@ -1 +1 @@
-2.21.3
\ No newline at end of file
+2.21.4
\ No newline at end of file
diff --git a/CHANGELOG.md b/CHANGELOG.md
index c27cfc9e3..2f284b189 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,22 @@
 # Changelog
 
+### 2.21.4
+This release includes:
+* An Amazon Linux 2 Base
+* Fluent Bit [1.8.10](https://fluentbit.io/announcements/v1.8.10/)
+* Amazon CloudWatch Logs for Fluent Bit 1.6.4
+* Amazon Kinesis Streams for Fluent Bit 1.8.0
+* Amazon Kinesis Firehose for Fluent Bit 1.6.1
+
+Compared to `2.21.3` this release adds:
+* Bug - Fix handling of TCP connections on SIGTERM [fluentbit:2610](https://github.com/fluent/fluent-bit/pull/2610)
+* Bug - Auto retry invalid cloudwatch requests to resolve sequence token errors [fluentbit:4189](https://github.com/fluent/fluent-bit/pull/4189)
+
+Same as `2.21.3`, this release includes the following fixes for AWS customers that we are working on getting accepted upstream:
+* Bug - Fix return value from `tls_net_read` [fluentbit:4098](https://github.com/fluent/fluent-bit/issues/4098)
+* Bug - Downgrade `mbedtls` to 2.24.0 to fix the performance regression issue in `mbedtls` 2.26.0 [fluentbit:4110](https://github.com/fluent/fluent-bit/issues/4110)
+* Bug - Resolve IMDSv1 fallback error introduced in 2.21.0 [aws-for-fluent-bit:259](https://github.com/aws/aws-for-fluent-bit/issues/259)
+
 ### 2.21.3
 This release includes:
 * An Amazon Linux 2 Base
diff --git a/Dockerfile b/Dockerfile
index 043b03bdf..e85616545 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,7 +1,7 @@
 FROM public.ecr.aws/amazonlinux/amazonlinux:latest as builder
 
 # Fluent Bit version; update these for each release
-ENV FLB_VERSION 1.8.9
+ENV FLB_VERSION 1.8.10
 # branch to pull parsers from in github.com/fluent/fluent-bit-docker-image
 ENV FLB_DOCKER_BRANCH 1.8
 
diff --git a/README.md b/README.md
index d5f86d127..db7e309ef 100644
--- a/README.md
+++ b/README.md
@@ -54,7 +54,7 @@ Each release updates the `latest` tag and adds a tag for the version of the imag
 #### Using the stable tag
 
 A `stable` tag can be trusted that it is the latest version in which there are no high impact bugs in Fluent Bit. A release may be marked as stable if the following rules are all met:
-* It has been out for at least 2 weeks
+* It has been out for at least 2 weeks or is a CVE patch with no Fluent Bit changes
 * No bugs have been reported in Fluent Bit which we expect will have high impact for AWS customers. This means bugs in the components that are most frequently used by AWS customers, such as the AWS outputs of the tail input
 
 #### Using SSM to find available versions