Skip to content

Conversation

@Ankush-Pathak
Copy link
Member

Upstream https://github.com/falcosecurity/plugins/tree/main/plugins/container has bumped golang.org/x/crypto to 0.45 which should remediate GHSA-f6x5-jh6r-wrfv and GHSA-j5w8-q4qc-rx2x being detected in libcontainer.so in the falcon-no-driver package. A rebuild should hopefully pull the latest container plugin release and remediate the vulnerabilities

Upstream https://github.com/falcosecurity/plugins/tree/main/plugins/container
has bumped golang.org/x/crypto to 0.45 which should remediate
GHSA-f6x5-jh6r-wrfv and GHSA-j5w8-q4qc-rx2x being detected
in libcontainer.so in the falcon-no-driver package.
A rebuild should hopefully pull the latest container
plugin release and remediate the vulnerabilities

Signed-off-by: Ankush Pathak <[email protected]>
@Ankush-Pathak
Copy link
Member Author

Ankush-Pathak commented Nov 27, 2025

Build is failing with

failed to build package: unable to build guest: unable to lock image configuration: resolving apk packages: for arch "amd64": solving "protobuf-29.5-dev" constraint: resolving "protobuf-29.5-dev-29.5-r0.apk" deps:
solving "pc:absl_if_constexpr" constraint:   abseil-cpp-20250127-dev-20250127.1-r6.apk disqualified because abseil-cpp-dev-20250814.1-r1.apk already provides pc:absl_absl_check

protobuf-29.5 has build time dependency: abseil-cpp-20250127-dev
But protobuf-29.5-dev has a runtime dependency: abseil-cpp-dev, however rebuilding protobuf-29.5-dev with abseil-cpp-20250127-dev as a runtime dependency instead still doesn't help falco-no-driver build.
It still fails with

failed to build package: unable to build guest: unable to lock image configuration: resolving apk packages: for arch "amd64": solving "protobuf-29.5-dev" constraint: resolving "protobuf-29.5-dev-29.5-r1.apk" deps:
solving "abseil-cpp-20250127-dev" constraint:   abseil-cpp-20250127-dev-20250127.1-r6.apk disqualified because abseil-cpp-dev-20250814.1-r1.apk already provides pc:absl_absl_check

protobuf-29.5 builds fails when using abseil-cpp-dev instead of abseil-cpp-20250127-dev as a build and runtime dependency.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant