Skip to content

Releases: falcosecurity/libs

0.25.4

09 Jun 09:47

Choose a tag to compare

MIN_DRIVER_API
MIN_DRIVER_SCHEMA

v0.25.4

Released on 2026-06-09

Non user-facing changes

  • perf(userspace/libpman): don't try to collect iter stats if disabled [#3018] - @ekoops
  • fix(libsinsp): don't create a string_view from a null pointer [#3017] - @gnosek

Statistics

MERGED PRS NUMBER
Not user-facing 2
Release note 0
Total 2

Release Manager @ekoops

0.25.3

08 Jun 13:03

Choose a tag to compare

MIN_DRIVER_API
MIN_DRIVER_SCHEMA

v0.25.3

Released on 2026-06-08

Major Changes

  • feat(userspace): allow to opt-out BPF iterators through configuration [#3012] - @ekoops

Bug Fixes

  • fix(userspace/libpman): account for bpf_iter_link_info support [#3012] - @ekoops
  • fix(userspace): ensure tinfo is populated if SCAP_SUCCESS is returned [#3012] - @ekoops
  • fix(userspace): ensure pointer stability in scap_linux_proc_get() [#3012] - @ekoops
  • fix(userspace/libpman): disable BPF iter support if not in root PID ns [#3012] - @ekoops
  • fix(userspace/libpman): abort socket parsing if unexpected [#3012] - @ekoops

Statistics

MERGED PRS NUMBER
Not user-facing 0
Release note 1
Total 1

Release Manager @ekoops

0.25.2

25 May 16:38

Choose a tag to compare

MIN_DRIVER_API
MIN_DRIVER_SCHEMA

v0.25.2

Released on 2026-05-25

Bug Fixes

  • fix(userspace/libsinsp): make operator modifiers semantic and implementation logic consistent [#3005] - @ekoops

Statistics

MERGED PRS NUMBER
Not user-facing 0
Release note 1
Total 1

Release Manager @ekoops

10.2.0+driver

19 May 15:54

Choose a tag to compare

API
SCHEMA

Latest Compatible Kernel

Driver Testing Matrix amd64

KERNEL CMAKE-CONFIGURE KMOD BUILD KMOD SCAP-OPEN MODERN-BPF SCAP-OPEN
amazonlinux2-5.10 🟢 🟢 🟢 🟢
amazonlinux2-5.15 🟢 🟢 🟢 🟢
amazonlinux2-5.4 🟢 🟢 🟢 🟡
amazonlinux2022-5.15 🟢 🟢 🟢 🟢
amazonlinux2023-6.1 🟢 🟢 🟢 🟢
archlinux-6.0 🟢 🟢 🟢 🟢
archlinux-6.7 🟢 🟢 🟢 🟢
centos-3.10 🟢 🟢 🟢 🟡
centos-4.18 🟢 🟢 🟢 🟢
centos-5.14 🟢 🟢 🟢 🟢
fedora-5.17 🟢 🟢 🟢 🟢
fedora-5.8 🟢 🟢 🟢 🟢
fedora-6.2 🟢 🟢 🟢 🟢
oraclelinux-3.10 🟢 🟢 🟢 🟡
oraclelinux-4.14 🟢 🟢 🟢 🟡
oraclelinux-5.15 🟢 🟢 🟢 🟢
oraclelinux-5.4 🟢 🟢 🟢 🟡
ubuntu-5.8 🟢 🟢 🟢 🟡
ubuntu-6.5 🟢 🟢 🟢 🟢

Driver Testing Matrix arm64

KERNEL CMAKE-CONFIGURE KMOD BUILD KMOD SCAP-OPEN MODERN-BPF SCAP-OPEN
amazonlinux2-5.4 🟢 🟢 🟢 🟡
amazonlinux2022-5.15 🟢 🟢 🟢 🟢
fedora-6.2 🟢 🟢 🟢 🟢
oraclelinux-4.14 🟢 🟢 🟢 🟡
oraclelinux-5.15 🟢 🟢 🟢 🟢
ubuntu-6.5 🟢 🟢 🟢 🟢

v10.2.0+driver

Released on 2026-05-19

Bug Fixes

  • fix(modern_bpf): reduce execve verifier instruction count for kernel 7.0 [#2997] - @deepskyblue86

Non user-facing changes

  • fix(driver): export euid, egid and loginuid from init user ns [#3000] - @ekoops

Statistics

MERGED PRS NUMBER
Not user-facing 1
Release note 1
Total 2

Release Manager @ekoops

0.25.1

20 May 08:10

Choose a tag to compare

MIN_DRIVER_API
MIN_DRIVER_SCHEMA

v0.25.1

Released on 2026-05-20

Bug Fixes

  • fix(modern_bpf): reduce execve verifier instruction count for kernel 7.0 [#2997] - @deepskyblue86

Statistics

MERGED PRS NUMBER
Not user-facing 0
Release note 1
Total 1

Release Manager @ekoops

10.1.0+driver

12 May 15:43

Choose a tag to compare

API
SCHEMA

Latest Compatible Kernel

Driver Testing Matrix amd64

KERNEL CMAKE-CONFIGURE KMOD BUILD KMOD SCAP-OPEN MODERN-BPF SCAP-OPEN
amazonlinux2-5.10 🟢 🟢 🟢 🟢
amazonlinux2-5.15 🟢 🟢 🟢 🟢
amazonlinux2-5.4 🟢 🟢 🟢 🟡
amazonlinux2022-5.15 🟢 🟢 🟢 🟢
amazonlinux2023-6.1 🟢 🟢 🟢 🟢
archlinux-6.0 🟢 🟢 🟢 🟢
archlinux-6.7 🟢 🟢 🟢 🟢
centos-3.10 🟢 🟢 🟢 🟡
centos-4.18 🟢 🟢 🟢 🟢
centos-5.14 🟢 🟢 🟢 🟢
fedora-5.17 🟢 🟢 🟢 🟢
fedora-5.8 🟢 🟢 🟢 🟢
fedora-6.2 🟢 🟢 🟢 🟢
oraclelinux-3.10 🟢 🟢 🟢 🟡
oraclelinux-4.14 🟢 🟢 🟢 🟡
oraclelinux-5.15 🟢 🟢 🟢 🟢
oraclelinux-5.4 🟢 🟢 🟢 🟡
ubuntu-5.8 🟢 🟢 🟢 🟡
ubuntu-6.5 🟢 🟢 🟢 🟢

Driver Testing Matrix arm64

KERNEL CMAKE-CONFIGURE KMOD BUILD KMOD SCAP-OPEN MODERN-BPF SCAP-OPEN
amazonlinux2-5.4 🟢 🟢 🟢 🟡
amazonlinux2022-5.15 🟢 🟢 🟢 🟢
fedora-6.2 🟢 🟢 🟢 🟢
oraclelinux-4.14 🟢 🟢 🟢 🟡
oraclelinux-5.15 🟢 🟢 🟢 🟢
ubuntu-6.5 🟢 🟢 🟢 🟢

v10.1.0+driver

Released on 2026-05-12

Major Changes

Non user-facing changes

  • fix(driver): hoist flags declaration to the top of f_sys_accept4_x [#2994] - @ekoops

Statistics

MERGED PRS NUMBER
Not user-facing 1
Release note 1
Total 2

Release Manager @ekoops

10.1.0-rc2+driver

12 May 15:40

Choose a tag to compare

10.1.0-rc2+driver Pre-release
Pre-release
fix(driver): hoist `flags` declaration to the top of `f_sys_accept4_x`

This prevents some build failures if the compilation toolchain uses
pedantic flags.

Signed-off-by: Leonardo Di Giovanna <leonardodigiovanna1@gmail.com>

0.25.0

12 May 13:17

Choose a tag to compare

MIN_DRIVER_API
MIN_DRIVER_SCHEMA

v0.25.0

Released on 2026-05-12

Breaking Changes ⚠️

  • chore(userspace)!: sinsp_evt::render_fd{,_json} are now private [#2979] - @ekoops
  • perf(userspace/libsinsp)!: change sanitize_string() API signature [#2978] - @ekoops
  • fix!: honor sanitization request for C strings [#2973] - @ekoops
  • fix(userspace)!: honor sanitization request while extracting strings [#2971] - @ekoops
  • fix!: additional invalid or non-printable UTF-8 sequences are now replaced with the U+FFFD replacement characters [#2968] - @ekoops
  • fix!: additional invalid or non-printable UTF-8 sequences are now replaced with the U+FFFD replacement characters [#2966] - @ekoops

Major Changes

  • feat(libsinsp): support list modifiers for string operators (oneof/anyof/allof) [#2984] - @therealbobo

Bug Fixes

  • fix: invalid or non-printable UTF-8 sequences are now replaced with the U+FFFD replacement characters [#2964] - @ekoops

Non user-facing changes

  • fix(userspace/libpman): avoid redefining _GNU_SOURCE [#2991] - @ekoops
  • Track and handle O_CLOEXEC fds [#2958] - @gnosek
  • ci(.github): replace /area CI with /area automation in PR template [#2988] - @ekoops
  • fix(driver/modern_bpf): consolidate capture_settings lookups to fix clang-20 regression [#2987] - @yasiribmcon
  • refactor(userspace/libsinsp): remove default_re2_deleter and ensure_unique_ptr_allocated_deleter [#2986] - @therealbobo
  • fix(plugin): Use UTF-8 paths on Windows [#2841] - @geraldcombs
  • ci(release-body): switch back to rez0n/actions-github-release [#2981] - @ekoops
  • ci: add /area drivers to both PR template and update-syscalls job [#2982] - @ekoops
  • update(driver): update syscalls tables and driver report. [#2980] - @github-actions[bot]
  • build: add generic Zig cross-compilation toolchain and refactor external project support [#2974] - @irozzo-1A
  • cleanup(libsinsp): represent filtercheck args with std::optional [#2976] - @therealbobo
  • fix(userspace/libsinsp): fix sinsp_threadinfo::get_path_for_dir_fd() [#2977] - @ekoops
  • perf: use separate storage for extract_single_{,c}string() [#2975] - @ekoops
  • feat(libsinsp): getopt transfomer [#2842] - @therealbobo
  • refactor(userspace/libsinsp/sinsp_filtercheck_*): replace RETURN_EXTRACT_* macros with methods [#2972] - @ekoops
  • fix(libsinsp): use reentrant fget*ent functions [#2967] - @gnosek
  • fix(libscap): report unsupported configure settings as SCAP_NOT_SUPPORTED [#2954] - @deepskyblue86

Statistics

MERGED PRS NUMBER
Not user-facing 17
Release note 12
Total 29

Release Manager @ekoops

0.25.0-rc2

12 May 09:15

Choose a tag to compare

0.25.0-rc2 Pre-release
Pre-release
fix(userspace/libpman): avoid redefining `_GNU_SOURCE`

Signed-off-by: Leonardo Di Giovanna <leonardodigiovanna1@gmail.com>

10.1.0-rc1+driver

11 May 16:22

Choose a tag to compare

10.1.0-rc1+driver Pre-release
Pre-release
feat: add keyctl syscall support

Co-Authored-By: Leonardo Grasso <me@leonardograsso.com>
Signed-off-by: Roberto Scolaro <roberto.scolaro21@gmail.com>

fix(driver): uniform keyctl arg5

Signed-off-by: Roberto Scolaro <roberto.scolaro21@gmail.com>

fix(driver): unify keyctl params push funcs

Signed-off-by: Roberto Scolaro <roberto.scolaro21@gmail.com>

fix(test): rename keyctl assert funcs

Signed-off-by: Roberto Scolaro <roberto.scolaro21@gmail.com>

fix(test): properly fix keyctl arg asserts

Signed-off-by: Roberto Scolaro <roberto.scolaro21@gmail.com>

cleanup(test): collapse assert_keyctl_arg funcs

Signed-off-by: Roberto Scolaro <roberto.scolaro21@gmail.com>

chore(driver): bump schema version to 4.5.0

Signed-off-by: Roberto Scolaro <roberto.scolaro21@gmail.com>

refactor(driver): simplify keyctl probes

Signed-off-by: Roberto Scolaro <roberto.scolaro21@gmail.com>

fix(driver): use appropriate printk func

Signed-off-by: Roberto Scolaro <roberto.scolaro21@gmail.com>

Signed-off-by: Roberto Scolaro <roberto.scolaro21@gmail.com>