Featured Image for Introducing Falco 0.39.2
Federico Di Pierro

Introducing Falco 0.39.2

Today we announce the release of Falco 0.39.2 🦅!

Fixes

Falco's 0.39.2 is a small patch release that includes some important bugfixes for modern eBPF driver:

  • check cred field is not NULL before the access; this enables Falco back with modern eBPF driver to work on GKE
  • address verifier issues on kernel versions >=6.11.4: there was a kernel-breaking change in the tail call ebpf API merged into the 6.11.4 to fix a CVE. Adapt our code to work again on these new versions.

Thanks to everyone in the community for helping us spot these annoying bugs and improving Falco every day 🐛! You make Falco successful 🦅!

Thanks as always to the Falco maintainers for their support and effort during the entire release process.

Try it! 🏎️

As usual, in case you just want to try out the stable Falco 0.39.2, you can install its packages following the process outlined in the docs:

Prefer to use a container image? No problem at all! 🐳

You can read more about running Falco with Docker in the docs.

You can also find the Falcosecurity container images on the public AWS ECR gallery:

Let's meet 🤝

We meet every Wednesday in our community calls, if you want to know the latest and the greatest, you should join us there!

If you have any questions

Thanks to all the amazing contributors!

Enjoy 😎,

Federico