os icon indicating copy to clipboard operation
os copied to clipboard

fix(falco-no-driver): No change rebuild

Open Ankush-Pathak opened this issue 1 month ago • 1 comments

Upstream https://github.com/falcosecurity/plugins/tree/main/plugins/container has bumped golang.org/x/crypto to 0.45 which should remediate GHSA-f6x5-jh6r-wrfv and GHSA-j5w8-q4qc-rx2x being detected in libcontainer.so in the falcon-no-driver package. A rebuild should hopefully pull the latest container plugin release and remediate the vulnerabilities

Ankush-Pathak avatar Nov 26 '25 15:11 Ankush-Pathak

Build is failing with

failed to build package: unable to build guest: unable to lock image configuration: resolving apk packages: for arch "amd64": solving "protobuf-29.5-dev" constraint: resolving "protobuf-29.5-dev-29.5-r0.apk" deps:
solving "pc:absl_if_constexpr" constraint:   abseil-cpp-20250127-dev-20250127.1-r6.apk disqualified because abseil-cpp-dev-20250814.1-r1.apk already provides pc:absl_absl_check

protobuf-29.5 has build time dependency: abseil-cpp-20250127-dev But protobuf-29.5-dev has a runtime dependency: abseil-cpp-dev, however rebuilding protobuf-29.5-dev with abseil-cpp-20250127-dev as a runtime dependency instead still doesn't help falco-no-driver build. It still fails with

failed to build package: unable to build guest: unable to lock image configuration: resolving apk packages: for arch "amd64": solving "protobuf-29.5-dev" constraint: resolving "protobuf-29.5-dev-29.5-r1.apk" deps:
solving "abseil-cpp-20250127-dev" constraint:   abseil-cpp-20250127-dev-20250127.1-r6.apk disqualified because abseil-cpp-dev-20250814.1-r1.apk already provides pc:absl_absl_check

protobuf-29.5 builds fails when using abseil-cpp-dev instead of abseil-cpp-20250127-dev as a build and runtime dependency.

Ankush-Pathak avatar Nov 27 '25 13:11 Ankush-Pathak