Featured Image for Falco 0.35.1
Lorenzo Susini

Falco 0.35.1

Today we announce the release of Falco 0.35.1 ๐Ÿฆ…!

Novelties ๐Ÿ†• and Fixes

Here is a tiny patch release! It addresses some small bugs that will not bother us and our users anymore:

  • Bug fix in the plugin framework, we can now associate a thread ID also to async events so that we can access related juicy information when writing rules! We suggest updating to this version to be able to use all the new capabilities that the new Plugin API has to offer!
  • Modern BPF can now be used in least privileged mode without any trouble in COS
  • Driver loader now correctly parses the kernel version of Ubuntuโ€™s kernel flavors, and also supports Debian rt and cloud
  • Solved a rule ordering problem on our default ruleset that caused some rules to be shadowed
  • Updated falcoctl to the latest version, which fixes a corner cases that cause the tool to freeze

Thanks to everyone in the community for helping us in spotting these annoying bugs ๐Ÿ›! You make Falco successful ๐Ÿฆ…!

Thanks as always to the Falco maintainers for their support and effort during the entire release process.

Try it! ๐ŸŽ๏ธ

As usual, in case you just want to try out the stable Falco 0.35.1, you can install its packages following the process outlined in the docs:

Do you rather prefer using the container images? No problem at all! ๐Ÿณ

You can read more about running Falco with Docker in the docs.

You can also find the Falcosecurity container images on the public AWS ECR gallery:

What's next ๐Ÿ”ฎ

We are in the working to let new big things happen in Falco, stay tuned!

Let's meet ๐Ÿค

We meet every week in our community calls, if you want to know the latest and the greatest you should join us there!

If you have any questions

Thanks to all the amazing contributors!

Cheers ๐ŸŽŠ

Jason and Lorenzo