Package
tetra
Component
github.com/cilium/ebpf
Latest update
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Impact
The fix requires cilium/ebpf v0.22.0, but tetragon v1.7.1 code is incompatible with it: v0.22.0 removed btf.FlushKernelSpec(), which tetragon still calls, so the dependency cannot be bumped without patching tetragon source. Upstream adapted the code and bumped the dependency on main only (commit 4ea98a4d5821), after the v1.7 stable branch was cut, and has not backported it to any 1.7.x release. Waiting for the first upstream release containing the fix (expected 1.8.0).
Status
Impact
Govulncheck found vulnerable symbols in Go binary at usr/bin/tetra.
Status